last executing test programs:

13m8.699024193s ago: executing program 0 (id=27):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x80}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x20000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x105842, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/asound/devices\x00', 0x0, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x36, 0x800000000004, @tid=r4}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x700000000000000)

13m5.998664188s ago: executing program 0 (id=31):
prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$unix(r1, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd014}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = socket(0xa, 0x3, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10048020}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20, 0x40}}], 0x2, 0x4)
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@uuid_off}]})
sendmmsg(r3, &(0x7f0000000680)=[{{&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x8, @mcast1}, 0x80, 0x0}}, {{&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0xffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x9090)

13m4.745810926s ago: executing program 0 (id=35):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xe, 0x400000000008d}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
timerfd_create(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file1\x00', 0xa18cd6, &(0x7f0000000780)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@rodir}, {@fat=@debug}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_mixed}, {@fat=@nocase}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@rodir}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}]}, 0x82, 0x2af, &(0x7f0000000840)="$eJzs3U9rI2UYAPBn0iRNVUgOnkRwQA+eyu5+gi1SYTEnJQe96OJmQZJQSCDgKsaevAue/A5+Bz+AF7+BB4+CN/cgjiQzk/+pDcZWur/fofNk3ud5/0zetlDI209eH/SeXIyeXn75SzQaSVQexsN4nkQrKlH6OgCAu+R5lsXvWe6fcqtRj4isWbyq3MD0AID/wD6//wGAu+GDDz9676zdPn8/TRsRg2/GnSTya95+9jQ+i350414048+IbC6PX3nUPo9qmpZ/DBifRCdi8PFPxeuz3yJm9fejGa31+nqRlc7EW4PJuDMdeXqtxUtJxFmW5CkPohmvRmS1KDrJL+8+ap8/SDfro1OPt9/8vpj/X904jWb8/GlcRD+ezLpY1H91P03fyb7744t8BZ2IZDLuHM/yFrKjG3lDAAAAAAAAAAAAAAAAAAAAAAB4IZymc63l83PK0wBPT7e37zwfqDjhZ7J0vs69NE3LY3zGnVrk9dV4rRrV21s5AAAAAAAAAAAAAAAAAAAA/H+MPn/We9zvd4crwY/ZNDjZkXM53FZVXbpTfqx/s+frBb0fIvavuk4QR8XU+snGEEnZdICxjvdJPtk2aFR2PcNqP/LJf7v/xN441AKvDMrd1XucxPTOxe7kxvZNsrTrym04HCVXbtrVINvy6I52VtWf1Yq+/93a6y/PguP9y09iW9N0xbX5w1ytakzfyXq5Z/vd2oG/U9YkB/uZAwAAAAAAAAAAAAAAAAAAbLf40G/8utF4eStTAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAbt/j///MgWut31oNJUTy7U7k6+Xg4Wh2xNv3SuoWlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcIf9HQAA//8HMU5f")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)

13m3.053483058s ago: executing program 0 (id=37):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r0 = socket(0x11, 0x3, 0xff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={<r1=>0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000440)=0xc)
syz_mount_image$exfat(&(0x7f0000000480), &(0x7f00000004c0)='./file1\x00', 0x2000084c, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="2c6469736304003b4884d36adf6909d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f00000005c0)="$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")
getresgid(0x0, 0x0, &(0x7f0000006880))
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000068c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000006900)='./file0\x00', &(0x7f0000006940), 0x404, &(0x7f0000006980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

13m1.228334024s ago: executing program 0 (id=42):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0xe2, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0xc0802, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x1013c1)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000480))
ppoll(&(0x7f0000000400)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

12m58.816020589s ago: executing program 0 (id=47):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001880)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x2, @in=@loopback, 0x0, 0x4}}, 0xe8)
sendto$inet(r0, &(0x7f0000001980), 0x0, 0x0, &(0x7f0000003a80)={0x2, 0x0, @loopback}, 0x10)

12m57.912907751s ago: executing program 32 (id=47):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x5)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001880)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x2, @in=@loopback, 0x0, 0x4}}, 0xe8)
sendto$inet(r0, &(0x7f0000001980), 0x0, 0x0, &(0x7f0000003a80)={0x2, 0x0, @loopback}, 0x10)

4m3.970400967s ago: executing program 1 (id=2199):
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x70000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1}, {0x0, 0xb000, 0x3, 0x0, 0x0, 0x7, 0xf9, 0x5, 0x0, 0x0, 0x6, 0x42}, {0xeeef0000, 0x6000, 0x13, 0x8, 0x0, 0x0, 0x81, 0x0, 0x4, 0xe, 0x1, 0x3}, {0x8080000, 0x0, 0x4}, {0x1, 0x1000, 0xf, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0x1ffe, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x5000, 0x9, 0x4, 0x3, 0x0, 0x0, 0x2, 0x2}, {0x1, 0x2, 0x0, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x1, 0x1ffc, [0xfffffffffffffffc, 0x20000000000000, 0x0, 0x3]})
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000)
read(r0, &(0x7f0000000300)=""/177, 0xb1)

4m3.8505193s ago: executing program 1 (id=2200):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4m3.775712217s ago: executing program 1 (id=2201):
r0 = syz_open_dev$vbi(&(0x7f0000000540), 0x3, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000007c0)={0xfff7, [0x7, 0x0, 0x1, 0x4, 0x1, 0x0, 0x9, 0x281, 0x2, 0x7f, 0x5, 0xf, 0x8, 0xf1, 0xd, 0xffff, 0xfbed, 0x0, 0x250, 0x9, 0x31, 0x7fff, 0xbb, 0x7ff, 0x7, 0x5, 0x0, 0x5, 0x8, 0x3, 0x1000, 0x3, 0x81, 0x8, 0x9, 0x4c7, 0xb, 0x202, 0x8, 0x4, 0x9, 0xe, 0x7, 0x6, 0x1001, 0x359, 0x8000, 0x100], 0x7})

4m3.667952888s ago: executing program 1 (id=2202):
socket$netlink(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x50011, &(0x7f0000000340), 0x1, 0x793, &(0x7f00000007c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0), 0x651, 0x0)
syz_mount_image$vfat(&(0x7f0000003180), &(0x7f00000031c0)='./file0\x00', 0x18000, &(0x7f0000003200)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000003240)="$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")
readv(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f00000035c0)=""/131, 0x83}, {&(0x7f0000003680)=""/131, 0x83}], 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003800)="be38", 0x2}], 0x1, &(0x7f0000003840)=ANY=[@ANYBLOB="1c00"/12, @ANYBLOB="ac1414aaac14140000000b00140000000000000000000000070000"], 0x38}, 0x0)
stat(0x0, &(0x7f0000003900))
syz_genetlink_get_family_id$wireguard(&(0x7f0000003980), 0xffffffffffffffff)
open(&(0x7f00000039c0)='./bus\x00', 0x1c1242, 0x0)

4m3.200627395s ago: executing program 1 (id=2205):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x1000004, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:07.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x400, @remote}, 0x10)

4m2.594027057s ago: executing program 1 (id=2208):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000540)='1027', 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
listen(r1, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f00000005c0)={0x2, 0x4e22, @loopback}, 0x10)

3m47.18582592s ago: executing program 33 (id=2208):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000540)='1027', 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10)
listen(r1, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f00000005c0)={0x2, 0x4e22, @loopback}, 0x10)

5.001621683s ago: executing program 4 (id=2953):
syz_emit_ethernet(0x0, 0x0, 0x0)

4.83381026s ago: executing program 4 (id=2954):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
r2 = open(0x0, 0x108842, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000001300)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001340)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000001380)=0x2)
r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000001400)='./file0\x00', 0x884c, &(0x7f0000001440)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRESOCT], 0x0, 0x3b4, &(0x7f0000000500)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000001840)={@id={0x2, 0x0, @d}})
sched_setscheduler(r3, 0x1, &(0x7f0000001880)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000001900)="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", 0xfd)
connect$unix(r5, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r5, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="010000000a0000000520000007000000c1000000", @ANYRES32=0x0, @ANYBLOB], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x23e34, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xacd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485a]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_CQ_RING(0xfffffffffffff001, 0xc00000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000002080)={0x1, 0x2, 0xff, 0x3, 0x9, "83e0796066683a53a0eaca3e01832da48bdf9c"})
syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
unshare(0x2020600)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r1, &(0x7f00000000c0)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)

3.735953341s ago: executing program 5 (id=2956):
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x2)

3.608520614s ago: executing program 2 (id=2957):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)

3.379425648s ago: executing program 2 (id=2958):
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./debug\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x4)
mount(0x0, &(0x7f0000000740)='./debug\x00', &(0x7f0000000780)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000800)='+p', 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x501, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3b9aca00, 0xb, 0x1}}}}]}, 0x40}}, 0x0)

3.176811088s ago: executing program 2 (id=2959):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0xd)

2.923507924s ago: executing program 2 (id=2960):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, 0x0)

2.657806791s ago: executing program 2 (id=2961):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0xfe, 0x6241, &(0x7f0000000500)="$eJzs3c1vHGcdB/DfvvolNLVyqEqEkJuWl1KaxEkJgQJtD3Dg0gOKuKFErltFpICSgNLKIq4sJA6c+AtASBwR4og48Af0wJUbJ05EspFAPTFo7OeJZze7Xbu2d9aez0dyZn7zzK6f8XdnXzIz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEN/9zvdWWhFx82dpwVLEp6IT0Y5YKOvliFhYXsrrdyPi2dhpjmciojcXUd5+55+nI16JiA/PRmxtr6+Wi6/ssx/f/uPff/eDM2/+7Q+9S//90/3Oq+PWe/DgV//588PDbTMAAAA0TVEURSt9zD+fPt+36+4UADAV+fW/SPLyU1//+p9v/mWW+qNWq9Vq9RTqqmK0h9UiIjaqtynfMzgcDwAnzEZ8VHcXqJH8G60bEWfq7gQw01p1d4BjsbW9vtpK+baqrwfLu+35XJCB/Ddaj6/vGDedZPgck2k9vjajE+fG9GdhSn2YJTn/9nD+N3fb+2m9485/Wsbl39+99Klxcv6d4fyHnJ782yPzb6qcf/dA+XfkDwAAAAAAMyz///9Szcd/5w6/Kfvyccd/l6fUBwAAAAAAAAA4aocd/+8x4/8BAADAzCo/q5d+c3Zv2bjvYiuX32hFPDW0PtAw6WKZxbr7AQAAAAAAAAAAAABN0t09h/dGK6IXEU8tLhZFUf5UDdcHddjbn3RN335osrqf5AEAYNeHZ/O1/L3dBa2I+Yi4kb7rr7e4uFgU8wuLxWKxMJffz/bn5ouFyufaPC2XzfX38Ya42y/KO5uv3K5q0uflSe3D91f+rn7R2UfHjkj6Y8aY5hoDB4D0AhWx5RXplCmKp8e9+YAB9v9TaCmW6n5cMfvqfpgCAAAAx68oiqKVvs77fDrm3667UwDAVOTX/+HjAoeq22PaI47m/tVqtVqtVn+iuqoY7WG1iIiN6m3K9wyG4weAE2YjPqq7C9RI/o3WjYhn6+4EMNNadXeAY7G1vb7aSvm2qq8HaXz3fC7IQP4brZ3b5duPmk4yfI7JtB5fm9GJc2P688yU+jBLcv7t4fxv7rb303rHnf+0jMu/v3PJXPPk/DvD+Q85Pfm3R+bfVDn/7oHy78gfAAAAAABmWP7//yXHf/MmAwAAAAAAAMCJs7W9vpqve83H/z8zYj3Xf55OOf/WQfNfSPPyP9Fy/u2h/L84tF6nMv/ojb39/9/b66u/v/+vT+fpfvOfyzOt9MhqpUdEK/2mVjdND7N1T9rsdfrlb+q12p1uOuen6L0dt+NOrMXlgXXb6e+x174y0F72tDfQfmWgvftE+9WB9l763oFiIbdfjNX4cdyJt3bay7a5Cds/P6G9mNCe8+94/m+knH/38c+575f5L6b21tC09OiD9hP7fXU66ve8fvuzv7x8/Jsz0WZ0Hm9bVbl9F2roz87f5Ew/fnpv7e7FB7fu37+7EmkysPRKpMkRy/n3dn7m9p7/n99tz8/71f310Qf9A+c/KzajOzb/5yvz5fa+OOW+1SHn308/Of+3Uvvo/f8k5z9+/3+phv4AAAAAAAAAAAAAAADAxymKYucS0dcj4lq6/qeuazMBgOnKr/9Fkper1Wq1Wq0+fXVVMdpr1SIi/lq9Tfme4eej7gwAmGX/i4h/1N0JaiP/Bsvf91dOX6i7M8BU3Xvv/R/eunNn7e69unsCAAAAAAAAAHxSefzP5cr4zy9ExNLQegPjv74Ry4cd/7ObZx4PMHrEA32Psdnud9qV4cafi53xuS+OG//7Qjw5/nceE7dT3Y4xehPa+xPa5ya0z49cupfWyAs9KnL+z1XGOy/zPz80/HoTxn8dHvO+CXL+FyqP5zL/LwytV82/+O3M5b+x3xU3oz2Q/6X77/7k0r333n/59ru33ll7Z+1HV1dWLl+9du369euX3r59Z+3y7r/H0+sZkPPPY187D7RZcv45c/k3S87/c6mWf7Pk/D+favk3S84/v9+Tf7Pk/PNnH/k3S87/xVTLv1ly/l9KtfybZWt7fa7M/6VUy79Z8v7/5VTLv1ly/i+nWv7NkvO/mGr5N0vO/1Kq95G/r4c/RXL++QiX/b9Zcv4rqZZ/s+T8r6Ra/s2S87+aavk3S87/lVTLv1ly/l9JtfybJed/LdXyb5ac/1dTLf9myflfT7X8myXn/7VUy79Zcv5fT7X8myXn/2qq5d8sOf9vpFr+zZLz/2aq5d8sOf9vpVr+zZLzfy3V8m+Wve//N2NmFmZ+cbR32IkZ2a6TNlP3MxMAAAAAAAAAAAAAMGwapxPXvY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO+n7gZ/bmtUOIgRCc/A1sEmOMs2TXl/jCHxcTrg1QbgmFXrBd79os+IbXLoEi2TRQImFUVIGavmgLCLWRqgqr4gWtKM2LqpdXpX1B31RUlZAaVSEKqEhtRbPVzHmexzOzszO73vF69jyfj2T/dmfOzDlz5szsftf+7gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGh295tmP18riqL+p/HX5qJ4Qf3jjRObG5e97mZvIQAAALBa/9v4+7nb0gWHl3GjpmX+9hX/8K2FhYWF4oPDXxn98sJCumKiKEY3FEXjuujqv32o1rxM8FgxXhtq+nyox+qHe1w/0uP60R7Xj/W4fkOP68d7XL9oByyysfx5TOPOtjU+3Fzu0uL2YrRx3bYOt3qstmFoKP4sp6HWuM3C6IlirjhVzBbTLcuXy9Yay3/n7vq63l7EdQ01rWtr/Qj58aePx22ohX28rWVd1+4z+tEbi4mf/PjTx//owjN3dpo9d0PL/ZXbueOe+nZ+NlxSbmut2JD2SdzOoabt3NrhORlu2c5a43b1j9u387llbufwtc1cU+3P+Xgx1Pj4e439NNL8Y720n7aGy/7r3qIoLl/b7PZlFq2rGCo2tVwydO35GS+PyPp91A+lFxcjKzpO717GcVqfM9taj9P210R8/u8OtxtZYhuan6YffWZs0fO+0uM0qj/qpV4r7cdgv18rg3IMxuPie40H/XjHY3BbePyf3r70Mdjx2OlwDKbH3XQM3tPrGBwaG25sc3oSao3bXDsGd7UsP9xYU60xn97e/RicunD63NT8Jz/12rnTx07Onpw9s2fXruk9+/YdOHBg6sTcqdnp8u/r3NuDb1MxlF4D94R9F18Dr25btvlQXfha/16H411eh5vblu3363Ck/cHV1uYFufiYLl8bD9d3+viVoWKJ11jj+dm5+tdhetxNr8ORptdhx68pHV6HI8t4HdaXObdzed+zjDT96bQNN+prweamY7D9+5H2Y7Df348MyjE4Ho6Lf9m59NeCrWF7H59c6fcjw4uOwfRww3tP/ZL0/f74gcbodFzeVb/ilrHi4vzs+fsfPXbhwvldRRhr4iVNx0r78bqp6TEVi47XoRUfr4fnXvH4XR0u3xz21fhr63+NL/lc1ZfZe3/356rx1a3z/my5dHcRRp+t9f7s9NW8vj9TluyyP+vLfHZq9d+Lp1za9P47usT7b8z9z5frS3f12PDoSPn6HU57Z7Tl/bj1qRppvHfVGut+bmp578ej4c9avx/f3uX9eEvbsv1+Px5tf3Dx/bjW66cdq9P+fI6H4+TUdPf34/oyW3av9Jgc6fp+fG+YtbD/XxOSQspFTcfOUsdtWtfIyGh4XCNxDa3H6Z6W5UdDNquv68nd13ec7ri3vK/h9OiuWavjdKJt2X4fp+n9aqnjtNbrp2/Xp/35HA/Hxe17uh+n9WWe2rv6986N8cOm986xXsfg6PBYfZtH00FYvt8vbIzH4P3F8eJscaqYaVw71jieao11TT6wvGNwLPxZ6/fKLV2OwR1ty/b7GExfx5Y69mojix98H7Q/n+PhuHjige7HYH2ZN+/v7/euO8IlaZmm713bf7621M+87mrbTTfyZ1717fzr/d1/Nltf5tSBlebM7vvpvnDJLR32U/vrd6nX1EyxNvtpS9jOZw4svZ/q21Nf5ssHl3k8HS6K4tLHH2z8vDf8+8qfXfz+t1r+3aXTv+lc+viDz9564m9Wsv0ArH/Pl2NT+bWu6V+mlvPv/wAAAMC6EHP/UJiJ/A8AAACVEXN//F/hifwPAAAAlRFz/0iYSSb5f8ubn5l7/lKRmvkLQbw+7YaHyuVix3U6fD6xcE398ge/MfvTv7i0vHUPFUXxs4d+o+PyWx6K21WaCNt59S2tly++4aVlrf/oI9eWa+6vfzXcf3w8yz0MOlVwp4ui+M5tX2ysZ+JDVxrzqYeONub7Lj/+WH2Z5w6Wn8fbP/2ScvnfD+XfwyeOtdz+6bAffhjm9Ds67494u29eec3W/R+4tr54u9o9L2w87Cc+XN5v/D05X3qsXD7u56W2/y+/8OQ368s/+qrO239pqPP2Pxnu9xth/vfLy+Wbn4P65/F2nwvbH9cXb3f/17/bcfuvfr5c/txby+WOhhnXvyN8vu2tz8w1769Ha8daHlfxtnK5uP7p7/924/p4f/H+27d//MiVlv3Rfnw89U/l/Uy1LR8vj+uJ/rxt/fX7aT4+4/qf/K2jLfu51/qvvu/pl9fvt33997UtN9x2+/bf2PQHn/tix/XF7Tn8p+daHs/h94bXcVj/Ex8Ox2O4/n+ufrFlvdHR97a+/8Tlv7r5Usvjid7+k3L9V99wsjH/feKnv3fLC2594eVX1vddUXzv/eX99Vr/yT8827L9X7tjZ+P5iNfHjn77+pcS13/+E5Nnzs5fnJtp2quN353zznJ7Noxv3FTf3tvCe2v750fOXvjI7PmJ6Ynpopio7q/Qu25fD/PZclxe6e13PhKez7t+9zubtv/jF+Ll//xwefmVd5Rft14dlvtSuHxz+fwt1Fa5/ifuvqPx+q49VX7e0mPvg63b/uPAshYMj7/9+4J4vJ976Uca+6F+XePrRnxdr3L7fzBT3s+3w35dCL+Z+Z47rq2vefn4uxGuvL98va96/4W3ufi8/nF4vt/1w/L+43bFx/uD8H3Md7e0vt/F4+Pbl4ba77/xWzwuh/eT4nJ5fVwq7u8rz93RcfPi7yEpLt/Z+Px30v3cuaKHuZT5T85PnZo7c/HRqQuz8xem5j/5qSOnz148c+FI43d5Hvlor9tfe3/a1Hh/mpndt7eY3lgUxdlieg3esG7M9tc/Wt72n3vk+Mz+6e0zsyeOXTxx4ZFzs+dPHp+fPz47M7/92IkTs5/odfu5mUO7dh/cs3/35Mm5mUMHDh7cc3By7szZ+maUG9XDvumPTZ45f6Rxk/lDew/ueuCBvdOTp8/OzB7aPz09ebHX7Rtfmybrt/71yfOzp45dmDs9Ozk/96nZQ7sO7tu3u+dvAzx97sT8xNT5i2emLs7Pnp8qH8vEhcbF9a99vW5PNc3/a/n9bLta+Yv4inffty/9fta6b3xmybsqF2n7BaLPhN9F8/cvOndgOZ/H3D8aZpJJ/gcAAIAcxNw/FmYi/wMAAEBlxNy/IcxE/gcAAIDKiLl/PMwkk/yv/6//v7z+f3m9/n9e/f9zHy97peu9/x/78/r/ebjJ/f9Vr1//X/+/ev3/5ffn1/v26//r/7PYoPX/Y+7fWBRZ5n8AAADIQcz9m8JM5H8AAACojJj7bwkzkf8BAACgMmLuf0GYSSb5P4f+/3s6LLbC/v/uXoWr6vf/1835/zcW+v/6/839//jk6P9nY8X9+w883PKp/n+g/6//r/+v/6//z6qNLnnNzer/x9x/a5hJJvkfAAAAchBz/wvDTOR/AAAAqIyY+28LM5H/AQAAoDJi7t8cZpJJ/s+h/9+J8/9Xtv/v/P/6//09/3/Txuj/rw/O/99d5/7/2C2LLtL/X2H/f1z/fz32/0f7u/2D3f/vufn6/9wQg3b+/5j7XxRmkkn+BwAAgBzE3P/iMBP5HwAAACoj5v6XhJnI/wAAAFAZMfffHmaSSf7X/9f/1//X/9f/77z+3uf/Lz/S/x8s+v/dOf9/D87/n1f/v8/bP9j9/36f/3/0Le231/+nk0Hr/8fc/9Iwk0zyPwAAAOQg5v47wkzkfwAAAKiMmPtfFmYi/wMAAEBlxNy/Jcwkk/yv/6//r/+v/6//33n9vfv/Jf3/waL/353+fw/6//r/+v/L6/93+OZX/59OevX/H3x9+T69Vv3/mPvvDDPJJP8DAABADmLuvyvMRP4HAACAyoi5//+Fmcj/AAAAUBkx928NM8kk/+v/6//r/+fV/79vTP9f/7/a9P+70//vQf9f/1//f5nn/19sJf3/Db3ujMro1f9/9337Gm+B7f3/DvmqL/3/mPtfHmaSSf4HAACAHMTc/4owE/kfAAAAKiPm/leGmcj/AAAAUBkx90+EmWSS//X/q9X//5O/euKVhf6//n+P9Ve0/x8PA/3/zOn/d6f/34P+v/6//v+a9P/Jx/X2/zvoS/8/5v67w0wyyf8AAACQg5j77wkzkf8BAACgMmLuvzfMRP4HAACAyoi5f1uYSSb5X/+/Wv3/SP9f/7/b+iva/0/0//Om/99B04tU/78H/X/9/+z7//G7X/1/+mPQ+v8x978qzCST/A8AAAA5iLl/e5iJ/A8AAACVEXP/q8NM5H8AAACojJj7d4SZZJL/9f/1//X/9f/1/zuvX/9/fdL/726l/f8x/X/9f/3/zPr/zv9Pfw1a/z/m/teEmWSS/wEAACAHMffvDDOR/wEAAKAy4v/fLP/fq/wPAAAAVRRz/2SYSSb5X/9f/z+n/n9N/1//X/+/8vT/u3P+/x70//X/9f/1/+mrQev/x9z/2jCTTPI/AAAA5CDm/vvDTOR/AAAAqIyY+6fCTOR/AAAAqIyY+6fDTDLJ//r/+v859f+d/1//X/+/+vT/u9P/70H/X/+/av3/otD/56YatP5/zP27wkwyyf8AAACQg5j7d4eZyP8AAABQGTH37wkzkf8BAACgMmLu3xtmkkn+1//X/9f/1//X/++8fv3/9alb//4ry7i9/n+g/6//r/9fjf6/8/9zkw1a/z/m/gfCTDLJ/wAAAJCDmPv3hZnI/wAAAFAZMffvDzMJ+b/T/+sGAAAA1peY+w+EmWTy7//6/xXp///m37WsW/9f/7/b+vvT/9+o/x+m/v9gqej5/9tfFtdtffb/n0+PX/9f/3+Qt1//X/+fxQat/x9z/8Ewk0zyPwAAAOQg5v7XhZnI/wAAAFAZMff//zAT+R8AAAAqI+b+14eZZJL/9f8r0v9vo/+v/99t/c7/r/9fZRXt//fN+uz/L3H+/yH9f/3/1W//WB+3X/9/Of3/Db3uhoq58f3/+NHy+v8x9x8KM8kk/wMAAEAOYu7/uTAT+R8AAAAqI+b+N4SZyP8AAABQGTH3Hw4zyST/6//r/+v/6//fmP7/G4p2g9j/rx88+v/Vov/fXaX6/87/r/8/YNuv/+/8/yw2aOf/j7n/jWEmmeR/AAAAyEHM/Q+Gmcj/AAAAUBkx978pzET+BwAAgMqIuf/NYSaZ5H/9f/1//X/9f+f/77x+/f/1Sf+/O/3/HvT/9f/1//X/6aub1//f0PH6mPvfEmaSSf4HAACAHMTc/9YwE/kfAAAAKiPm/reFmcj/AAAAUBkx9789zCST/K//r/+v/1/N/v+GLuvX/9f/rzL9/+70/3vQ/9f/1//X/6evBu38/zH3/3yYSSb5HwAAAHIQc/9DYSbyPwAAAFRGzP3vCDOR/wEAAKAyYu5/Z5hJJvlf/1//X/+/mv3/buvX/9f/rzL9/+70/3vQ/9f/1//X/6evBq3/H3P/u8JMMsn/AAAAkIOY+38hzET+BwAAgMqIuf/dYSbyPwAAAFRGzP3vCTPJJP/3p/9fK8pWq/5/M/3/6+n/L1xqvp3+v/5/0a/+f/1G+v9Z0P/vTv+/hw79/w36//r/+v/6/1y3Qev/x9z/3jCTTPI/AAAA5CDm/veFmcj/AAAAUBkx978/zET+BwAAgMqIuf/hMJNM8r/z/2fZ/08PefD6/87/r//v/P/6/6uj/9+d/n8Pzv+v/78u+/+jYX5sMn5t0v9nUAxa/z/m/kfCTDLJ/wAAAJCDmPs/EGYi/wMAAEBlxNz/i2Em8j8AAABURsz9HwwzyST/6/9n2f8f4PP/V63/P9JyfOTU/x9vej7Tcan/r/+/BvT/u9P/70H/X/9/kPv/4WjeuMTtnf+fQTRo/f+Y+z8UZpJJ/gcAAIAcxNz/S2Em8j8AAABURsz9vxxmIv8DAABAZcTc/ythJpnk/yz6/0OLF9P/1/9v3l/O/+/8/53Wr/+/Pun/d6f/34P+fz79/5H+b//NO/9/Sf+fQTRo/f+Y+381zGTJ4Pfsfy7jYQIAAAADJOb+D4eZZPLv/wAAAJCDmPuPhJnI/wAAAFAZMfcfDTPJJP9n0f/vYOn+fzyjqv6//r/+v/6//v961L/+/8tuLQr9f/1//f/K9v9vwPbr/+v/s9ig9f9j7j8WZpJJ/gcAAIAcxNz/a2Em8j8AAABURsz9x8NM5H8AAACojJj7Z8JMMsn/a93/b+r1jg5m/9/5/6+3//8z/X/9/0D/vzP9/7Xh/P/d6f/3oP+v/6//r/9PXw1a/z/m/tkwk0zyPwAAAFRY+nFwzP0nwkzkfwAAAKiMmPtPhpnI/wAAAFAZMfd/JMwkk/zv/P/6/87/fzP6/yMty+v/l/T/9f/7Qf+/O/3/HvT/9f/1//X/6atB6//H3D8XZpJJ/gcAAIAcxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3nwozyST/6//r/+fe/68VxWXn/9f/77R+/f/1Sf+/u/9j7z6a5DqrP463baVZwUtgzYqlWdkLXgBbdlSxNtHkYJmcwUSTwYDJOWeTc87Z5BxNMIaqoTw+50ij7rk90lx13/s8n8/m/KW/xbTwYOqH6luP/n8N/b/+X/+v/2dUU+v/c/dfFbd0sv8BAACgB7n77xu32P8AAADQjNz994tb7H8AAABoRu7++8ctnex//b/+v/f+f7GV9//3//Xt9/93/B3S/+v/N2Gpvz+2+q87KAo/sP+/2+VX31v/r//X/w/S/+v/9f+ca2r9f+7+B8Qtnex/AAAA6EHu/gfGLfY/AAAANCN3/4PiFvsfAAAAmpG7/+q4pZP9r//X/+v/9f/7+v+bvP+v/5837/8Pm0f/f/nu7q7+fxX9/7Q/v/5f/8+yqfX/ufsfHLd0sv8BAACgB7n7HxK32P8AAADQjNz9D41b7H8AAABoRu7+h8Utnex//b/+X/8/l/7/xIzf/4/vB/2//n8D9P/D5tH/e/9f/z/Pz6//1/+z7Pz7/wP/sT1K/5+7/+FxSyf7HwAAAHqQu/8RcYv9DwAAAM3I3f/IuMX+BwAAgGbk7n9U3NLJ/tf/6//1/3Pp/zf0/r/+X/8/czcszvwzQf+/TP+/xpr+f7HQ/w85dD+/+rc3n89/AP2//p9l59//H/gvNUr/n7v/0XHLlYvFiQv9TQIAAACTkrv/MXFLJ3/+DwAAAD3I3X9N3GL/AwAAQDNy95+OWzrZ//p//b/+X/+v/1/99fX/8+T9/2FH7//veuer7tNv/+/9/2He/x+7/7/9O6PJ/l9m3ZGp9f+5+6+NWzrZ/wAAANCD3P2PjVvsfwAAAGhG7v7HxS32PwAAADQjd//j45ZO9r/+f1r9f+YuF97/X7bv153V/+/VLvr/uff/99D/6//1/2vo/4d5/3+NvX/M7dQP9f/6f+//e/+fo5la/5+7/wlxSyf7HwAAAHqQu/+JcYv9DwAAAM3I3f+kuMX+BwAAgGbk7n9y3NLJ/tf/T6v/9/6//t/7//p//f/R6P+H6f/XaOX9/wv8rtl2P39U2/78+n/9P8um1v/n7n9K3NLJ/gcAAIAe5O5/atxi/wMAAEAzcvc/LW6x/wEAAKAZufufHrd0sv/1//r/efT/+RX0//r/i9//J/3/POn/h+n/12il/79A2+7n5/759f/6f5ZNrf/P3f+MuKWT/Q8AAAA9yN3/zLjF/gcAAIBm5O5/Vtxi/wMAAEAzcvc/O27pZP/r//X/8+j/vf+v//f+v/7/cPT/w/T/a+j/9f/6f/0/o5pa/5+7/7q4pZP9DwAAAD3I3f+cuMX+BwAAgGbk7n9u3GL/AwAAQDNy9z8vbulk/+v/V/X/t+j/9f/6f/2//n+m9P/D9P9r6P/1//p//T+jmlD/f9avOrV4ftzSyf4HAACAHuTuf0HcYv8DAABAM3L3vzBusf8BAACgGbn7r49bOtn/+v/JvP+/l/O11f/vLBYL/f+i0/5/56y/n/V9qf/X/2+A/n+Y/n8N/b/+X/+v/2dUE+r/936cu/9FcUsn+x8AAAB6kLv/xXGL/Q8AAADNyN3/krjF/gcAAIBm5O5/adzSyf7X/0+m/9/TVv/v/f9zvz966v+9/79M/78Z+v9h+v819P/6f/2//p9RTa3/z93/srjpxPEL/i0CAAAAE5O7/+VxSyd//g8AAAA9yN3/irjF/gcAAICZum7pZ3L3vzJu6WT/6//H7f9PnPVz+n/9/7nfH/p//b/+/+LT/w/T/6+h/9f/6//1/4xqav1/7v5XxS2d7H8AAADoQe7+G+IW+x8AAACakbv/1XGL/Q8AAADNyN3/mrilk/2v//f+v/5f/6//X/319f/zpP8fpv9fQ/9/YD9/mKex9f9H7v9Pnvk/9f+04Tz6/93d3Wsuev+fu/+1cUsn+x8AAAB6kLv/xrjF/gcAAIBm5O5/Xdxi/wMAAEAzcve/Pm7pZP/r/zvt//NbfV79/+nFYpL9/6X6//30/6vp/zdD/z9M/7+G/t/7/97/1/8zqqm9/5+7/w1xSyf7HwAAAHqQu/+NcYv9DwAAAM3I3f+muMX+BwAAgGbk7n9z3NLJ/tf/d9r/e//f+//6/033/7ct9P8bMYv+f+fgrz/1/v9a/b/+f0B3/f89777vh/p//T/Lptb/5+5/S9zSyf4HAACAHuTuf2vcYv8DAABAM3L3vy1usf8BAACgGbn73x43Hetk/+v/9f/6f/2//n/119/w+/8nFouF/n8Es+j/B0y9/x/n/f9z/1N+hv5f/z/nz6//1/+zbGr9f+7+d8Qtnex/AAAA6EHu/nfGLfY/AAAANCN3/7viFvsfAAAAmpG7/91xSyf7X/+v/9f/6/+b7/+vnUX/7/3/kej/h02j/z+Y/l//P+fPr//X/3N42+r/c/e/J27pZP8DAABAD3L3vzdusf8BAACgGbn73xe32P8AAADQjNz9749bOtn/+n/9//n0//k59f9t9f8nJ9f/n9r3r9fJ+//6/5Ho/4fp/9fQ/+v/9f/X6f8Z09Te/8/d/4G4pZP9DwAAAD3I3f/BuPU/3dr/AAAA0Izc/R+KW+x/AAAAaEbu/g/HLZ3sf/2//t/7//r/5t//1/93Rf8/TP+/hv5f/6//9/4/o5pa/5+7/yNxSyf7HwAAAHqQu/+jcYv9DwAAAM3I3f+xuMX+BwAAgGbk7r8pbulk/+v/9f/6f/2//v+Ov4f6/zbo/4dtpv/f0f/r/6ufvyT+U6D/1/+v+/W0aWr9f+7+j8ctnex/AAAAaM3xFT+Xu/8TcYv9DwAAAM3I3f/JuMX+BwAAgFk6tuLncvd/Km6Z5f5fVaEP0//r//X/+n/9/+qvr/+fp630//lNof/3/n/op/+/y74fze39/3P/++uyhf5f/8/Yptb/5+7/dNwyy/0PAAAArJK7/zNxi/0PAAAAzcjd/9m4xf4HAACAZuTu/1zc0sn+1//r//X/+n/9/+qvr/+fp9H6/5ML7//r//X/G34/f+6fX/+v/2fZ1Pr/3P2fj1s62f8AAADQg9z9X4hb7H8AAABoRu7+L8Yt9j8AAAA0Y2/3Z1zW4f7X/+v/9f/6f/3/6q+v/5+nrbz/r//X/+v/9+j/9f/6f841tf7/S3u/6tTiy3FLJ/sfAAAAepC7/ytxi/0PAAAAzcjd/9W4xf4HAACAZuTu/1rc0sn+1//va89P6/+n2v/v7u5eo/+/ZHGV/n9l/3/zjPv/6/X/I9P/D+u4/z92qA+g/9f/T77/P/e/Jc/Q/zNFU+v/c/d/PW7pZP8DAABAD3L3fyNusf8BAACgGbn7vxm32P8AAADQjNz934pbOtn/+v8JvP9/Sv/v/X/v/y+8/6//H4n+f1jH/f/htNj/nzr8b3/b/fxRbfvze/9f/8+yqfX/ufu/Hbd0sv8BAACgB7n7vxO32P8AAADQjNz9341b7H8AAABoRu7+78Utnex//f/m+v/b/73r5f3/ncXqz6//1//r//X/F5v+f5j+f40W+//zsO1+fu6fX/+v/2fZ1Pr/3P3fj1v2D7/j5/e7BAAAAKYkd/8P4pZO/vwfAAAAepC7/4dxi/0PAAAAzcjd/6O4pZP9r/+fwPv/Dfb/3v9f/f2h/590/3+p/r8N+v9h+v819P/6f/3/SP1/fjfr/3s3tf4/d/+P45ZO9j8AAAD0IHf/T+KWK3e29ZEAAACAkeXu/2nc4s//AQAAoBm5+2+OW87a/6va7lbo//X/+n/9v/5/9dfX/8+T/n/YYfv/k4uj9f9J/6//1//32v97/587bLj/P72u/8/d/7O4xZ//AwAAwOwcP+Dnc/f/PG6x/wEAAKAZuft/EbfY/wAAANCM3P2/jFtuuXRbH2mj9P/6f/3/mv7/1vgG1//r//X/s6D/H+b9/zX0/2P081fo/9vo/xcL/T9Ht+H+f+2Pc/f/Km7x5/8AAADQjNz9v45b7H8AAABoRu7+38Qt9j8AAAA0I3f/b+OWTva//l//f8T+fy/NbLr/9/6//j/o/+dB/z9s+/3/jYNfVv/fRP/v/f9G+n/v/zOGbfT/OwP//9z9v4tbOtn/AAAA0IPc/b+PW+x/AAAAaEbu/j/ELfY/AAAANCN3/x/jlk72/9b6//i3Wv8/+/6//ff/B/v/3YX+X/+v/58W/f+w7ff/w/T/+v85f379v/6fZdvo/wd/vPerTi3+FLd0sv8BAACgB7n7/xy32P8AAADQjNz9f4lb7H8AAABoRu7+v8Ytnex/7//r//X/3v/X/6/++vr/edL/D9P/r1Z/o/T/+n/9v/6fUU2t/8/d/7e4pZP9DwAAAD3I3f/3uMX+BwAAgGbk7r8lbrH/AQAAoBm5+/8RtzSx/4+t/Sv0/7Ps/yuP1v/r//X/+n/20/8P22b/f687rf+y3v/fev+fH0H/r//X/zOKqfX/ufv/Gbc0sf8BAACA2+Xu/1fcYv8DAABAM3L3/ztusf8BAACgGbn7b41bOtn/a/r/k/UX6v8Hef9//+fX/6/+/tD/6//1/xef/n+Y9//X0P97/1//r/9nVFPr/3P3/ydu6WT/AwAAQA9y998Wt9j/AAAA0Izc/f+NW+x/AAAAaEbu/v/FLZ3sf+//z6n/v0L/r//X/+v/9f9r6P+H6f/X0P/r//X/+n9GNbX+P3f//wMAAP//qbtNJQ==")
lsetxattr$trusted_overlay_opaque(&(0x7f000000c700)='./file0\x00', &(0x7f000000c740), 0x0, 0x0, 0x0)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000006d80)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f000000c7c0)='./file0\x00', &(0x7f000000c800), 0x0, &(0x7f000000c840)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2.587914188s ago: executing program 5 (id=2962):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2.47409433s ago: executing program 3 (id=2963):
mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0)
r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0)
ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9, 0x5, 0x1800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000})
open(&(0x7f00000069c0)='.\x00', 0x0, 0x0)
ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0)

2.374154279s ago: executing program 4 (id=2964):
openat$mixer(0xffffff9c, &(0x7f0000000040), 0x80002, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000006a00)={0x1, &(0x7f0000006a40)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

2.332749504s ago: executing program 5 (id=2965):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
syz_genetlink_get_family_id$mptcp(&(0x7f000001f840), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f000001f880)={0x0, 0x0, &(0x7f000001f8c0)={0x0}}, 0x0)
listen(r0, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f000001f940)='./debug\x00', 0x60)
mount(0x0, &(0x7f000001f980)='./debug\x00', &(0x7f000001f9c0)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000001fa00)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f000001fa40)='+p', 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000706050000000000000088356b8f000205000100d1"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4099, 0x1003}, {0x0}], 0x2}, 0x2020)

2.111806836s ago: executing program 4 (id=2966):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)

2.111571626s ago: executing program 5 (id=2967):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[@ANYBLOB='rodir,shortname=mixed,uni_xlate=1,utf8=0,shortname=win95,shortname=winnt,shortname=winnt,utf8=1,iocharset=iso8859-8,shortname=lower,\x00'], 0x1, 0x242, &(0x7f0000000800)="$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")

2.015351396s ago: executing program 3 (id=2968):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000001880)={0x1f, @any, 0x3}, 0x19)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f00000018c0)={0x1f, @any, 0x11}, 0xa)
shutdown(r0, 0x1)

1.994330868s ago: executing program 4 (id=2969):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$vga_arbiter(r0, 0x0, 0x0)

1.919543726s ago: executing program 5 (id=2970):
syz_emit_ethernet(0x3e, &(0x7f00000066c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0)

1.832034165s ago: executing program 4 (id=2971):
openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
unshare(0x22020600)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000017c0)={<r2=>0x0, 0xd3, "236afc49e8bf2fbf55123d2d372b140f7d0ad9bbba42b59346d9b5186e6654ca17531fad6dce387fd4482d0d6c68bf914727e15a0e4d5d31fb09a7025ed3cc28bbffba148ce35a0485b7924659e6c7b44f11c35583e3d2447da4ae75cb33218221083c2f197bb84acd307979a4fa9267c39e6259a25ba029c4e132b721e343d775337d49d257aa13c5f43d260671d4ef47e62d19525b864985eaa0ac54b1f23cdc80374337690a080d9cf8462038762f9079af80d60a344929b81526757e76541127abc9f5e4a964e6abade8f359895c1a7474"}, &(0x7f00000018c0)=0xdb)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001900)={r2, 0x85c2b64, 0x5, 0x101}, &(0x7f0000001940)=0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000ffd26f10cb06060006000000030109022400010000000009040001020a16d100090507000000000000090585477d98f53f3bc7706eb9d06bdc4b9bebf686664239cc37"], 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240), 0x4)
openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x1a7c66)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8)
capset(&(0x7f0000001640)={0x20080522}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
semctl$SETVAL(0x0, 0x0, 0x10, 0x0)

1.78460537s ago: executing program 5 (id=2972):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x3a)
r2 = open(0x0, 0x108842, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000001300)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001340)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000001380)=0x2)
r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000001400)='./file0\x00', 0x884c, &(0x7f0000001440)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRESOCT], 0x0, 0x3b4, &(0x7f0000000500)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000001840)={@id={0x2, 0x0, @d}})
sched_setscheduler(r3, 0x1, &(0x7f0000001880)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000001900)="751b42fe922ab51f2a77605ccf8408e48956404b05c9cab722cb3fa0ab8b00511b1d8a738905a14810715efcbf79f8a19ddffc1906ef30fed135f34cdbafd3b1e6bc134b8156e363fa2e9b67f28e67b2623a823ccd3ffae393d17620635c95840331fb1876336beef60221daf1a2cf69ca0cd962b3a734424e8902fab831ad66d9cf4d4023c47248eea53200e58e75553b113c46fc5eb3baa5b52c0d2417ebdbb2113c4bb6316bc01fc3aaf347680f35ebfc40fd6ec9905209a11ac21bc7e11affb4565b913334c3afb6f5316f177b8b4c70a771e01980f24dfb468028bd525611c90aff839324b4ed82fab07a770c615e856fcee835748fdad13e4c83", 0xfd)
connect$unix(r5, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r5, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="010000000a0000000520000007000000c1000000", @ANYRES32=0x0, @ANYBLOB], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x23e34, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xacd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485a]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_CQ_RING(0xfffffffffffff001, 0xc00000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000002080)={0x1, 0x2, 0xff, 0x3, 0x9, "83e0796066683a53a0eaca3e01832da48bdf9c"})
syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
unshare(0x2020600)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r1, &(0x7f00000000c0)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)

527.131357ms ago: executing program 3 (id=2973):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x800}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f00000003c0)='+p', 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40)

447.850125ms ago: executing program 2 (id=2974):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x163c81, &(0x7f0000000200), 0x1, 0x265, &(0x7f0000000240)="$eJzs3T9oJFUcB/DfzO4m5g8haiMIKgQRDYTYCTaxUQhICCKCChGRNIoRYoKda2VjobVKKpsgdkZLSRNslIOrcncpcs3BXbjiwhV3xR67szmSzR7Zy252LpnPBzbzJ+/N7w3J982kmEwAhTUeETMRUYqIyYioRERyuMFL2We8ubk2tLUQUau9dztptMu2Mwf9RiKiGhFvRMRmmsTn5YjVjY92726/88oPK5WXf9v4cKivJ9m0t7vz7v6vc9//Ofv66v+Xb84lMROjR86r95I2+8pJxDNnUewJkZTzHgGdmP/mjyv13D8bERON/FcijeyH9+PywGYlXvvlUX1/unXp+X6OFei9Wq1SvwZWa0DhpBExGkk6FRHZeppOTWX38FdLw+kXS8tfTy4urXz5Wd4zFdAroxE7b/89+NdIS/5vlLL8AxdXPf/vz69fq6/vl051iMWxXg8K6It6/ic/+fbVOH3+gXNK/qG45B8uooGOWsk/FEh6dPMx819t3XGvl2MD+sr1H4qrXf4nOvvTATjnHuZ/sPnwD1AY7v+huOQfiutw/gGAYqkN5v0EMpCXvOcfAAAAAAAAAAAAAAAAAADguLWhrYWDT79q/vtzxN5bEVFuV7/UfGXBU42vw3eSerNMLYkk69aVj1/s8gBd+j3np6/Hrudb/78X8qs93lxWv4uI6XL5+O9f0vrKjNauJ3r6hO9XPu30SGfjzQ/yrX9/Pd/6s9sR/9Tnn+l2808azzWWbeaf7P+nRaXL+l95iQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC58SAAAP//pYNujg==")
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0)
quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000680)=@filename='./proc/../file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x17, &(0x7f0000000c00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000cc0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./debug/failslab/times\x00', 0x2, 0x0)
write(r1, &(0x7f0000000ac0)='10000', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/failslab/probability\x00', 0x2, 0x132)
write(r2, &(0x7f0000000b40)='5', 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)

311.012369ms ago: executing program 3 (id=2975):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000001c40))

162.517514ms ago: executing program 3 (id=2976):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
syz_genetlink_get_family_id$mptcp(&(0x7f000001f840), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f000001f880)={0x0, 0x0, &(0x7f000001f8c0)={0x0}}, 0x0)
listen(r0, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f000001f940)='./debug\x00', 0x60)
mount(0x0, &(0x7f000001f980)='./debug\x00', &(0x7f000001f9c0)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000001fa00)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f000001fa40)='+p', 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000706050000000000000088356b8f000205000100d1"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4099, 0x1003}, {0x0}], 0x2}, 0x2020)

0s ago: executing program 3 (id=2977):
mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0)
r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0)
open(&(0x7f00000069c0)='.\x00', 0x0, 0x0)
ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0)

kernel console output (not intermixed with test programs):

ight_sleep+0xe0/0xe0
[  801.690857][T14649]  ? __lock_acquire+0x7eb0/0x7eb0
[  801.695933][T14649]  should_fail_ex+0x394/0x4c0
[  801.700721][T14649]  should_failslab+0x9/0x20
[  801.705265][T14649]  slab_pre_alloc_hook+0x59/0x300
[  801.710320][T14649]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  801.716067][T14649]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  801.721813][T14649]  __kmem_cache_alloc_node+0x53/0x260
[  801.727215][T14649]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  801.733004][T14649]  __kmalloc+0xa7/0x240
[  801.737248][T14649]  tomoyo_realpath_from_path+0xe6/0x5c0
[  801.742853][T14649]  ? __kmalloc+0xe5/0x240
[  801.747250][T14649]  tomoyo_mount_permission+0x3e7/0x9d0
[  801.752755][T14649]  ? tomoyo_mount_permission+0x2b3/0x9d0
[  801.758445][T14649]  ? ____kasan_slab_free+0x126/0x1f0
[  801.763780][T14649]  ? tomoyo_get_name+0x570/0x570
[  801.768848][T14649]  ? do_syscall_64+0x55/0xb0
[  801.773493][T14649]  ? kasan_quarantine_put+0xd8/0x220
[  801.778806][T14649]  ? lockdep_hardirqs_on+0x98/0x150
[  801.784042][T14649]  security_sb_mount+0x87/0xc0
[  801.788830][T14649]  path_mount+0xbc/0xfa0
[  801.793092][T14649]  ? kmem_cache_free+0xf8/0x290
[  801.798024][T14649]  __se_sys_mount+0x2e7/0x3d0
[  801.802759][T14649]  ? __x64_sys_mount+0xc0/0xc0
[  801.807581][T14649]  ? lockdep_hardirqs_on+0x98/0x150
[  801.812844][T14649]  ? __x64_sys_mount+0x20/0xc0
[  801.817687][T14649]  do_syscall_64+0x55/0xb0
[  801.822120][T14649]  ? clear_bhb_loop+0x40/0x90
[  801.826826][T14649]  ? clear_bhb_loop+0x40/0x90
[  801.831569][T14649]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  801.837500][T14649] RIP: 0033:0x7f27e2b9f559
[  801.841952][T14649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  801.861586][T14649] RSP: 002b:00007f27e0dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  801.870019][T14649] RAX: ffffffffffffffda RBX: 00007f27e2e26090 RCX: 00007f27e2b9f559
[  801.878007][T14649] RDX: 0000200000000780 RSI: 0000200000000580 RDI: 0000000000000000
[  801.886075][T14649] RBP: 00007f27e2c36b20 R08: 0000000000000000 R09: 0000000000000000
[  801.894056][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  801.902056][T14649] R13: 00007f27e2e26128 R14: 00007f27e2e26090 R15: 00007ffda4cb79e8
[  801.910059][T14649]  </TASK>
[  801.958345][T14649] ERROR: Out of memory at tomoyo_realpath_from_path.
[  802.130325][T14649] FAULT_INJECTION: forcing a failure.
[  802.130325][T14649] name failslab, interval 1, probability 5, space 0, times 9999
[  802.144708][T14649] CPU: 0 PID: 14649 Comm: syz.5.2701 Not tainted syzkaller #0
[  802.152292][T14649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  802.162430][T14649] Call Trace:
[  802.165750][T14649]  <TASK>
[  802.168732][T14649]  dump_stack_lvl+0x18c/0x250
[  802.173479][T14649]  ? show_regs_print_info+0x20/0x20
[  802.178775][T14649]  ? load_image+0x420/0x420
[  802.183344][T14649]  ? __might_sleep+0xe0/0xe0
[  802.187997][T14649]  ? __lock_acquire+0x7eb0/0x7eb0
[  802.193081][T14649]  should_fail_ex+0x394/0x4c0
[  802.197827][T14649]  should_failslab+0x9/0x20
[  802.202378][T14649]  slab_pre_alloc_hook+0x59/0x300
[  802.207450][T14649]  ? __se_sys_memfd_create+0x25a/0x660
[  802.212956][T14649]  ? __se_sys_memfd_create+0x25a/0x660
[  802.218471][T14649]  __kmem_cache_alloc_node+0x53/0x260
[  802.223911][T14649]  ? __se_sys_memfd_create+0x25a/0x660
[  802.229422][T14649]  __kmalloc+0xa7/0x240
[  802.233647][T14649]  __se_sys_memfd_create+0x25a/0x660
[  802.238990][T14649]  do_syscall_64+0x55/0xb0
[  802.243466][T14649]  ? clear_bhb_loop+0x40/0x90
[  802.248205][T14649]  ? clear_bhb_loop+0x40/0x90
[  802.252952][T14649]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  802.258890][T14649] RIP: 0033:0x7f27e2b9f559
[  802.263356][T14649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  802.283004][T14649] RSP: 002b:00007f27e0dd4e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  802.291459][T14649] RAX: ffffffffffffffda RBX: 00000000000001e6 RCX: 00007f27e2b9f559
[  802.299465][T14649] RDX: 00007f27e0dd4ee0 RSI: 0000000000000000 RDI: 00007f27e2c36d00
[  802.307483][T14649] RBP: 0000200000001080 R08: 00000000ffffffff R09: 0000000000000000
[  802.315506][T14649] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000006c0
[  802.323520][T14649] R13: 00007f27e0dd4ee0 R14: 00007f27e0dd4ea0 R15: 0000200000000e00
[  802.331579][T14649]  </TASK>
[  802.637175][ T5801] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  802.840784][ T5801] usb 5-1: Using ep0 maxpacket: 16
[  802.848870][ T5801] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  802.858158][ T5801] usb 5-1: config 0 has no interface number 0
[  802.864433][ T5801] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  802.898656][ T5801] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  802.937241][ T5801] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  802.967129][ T5801] usb 5-1: config 0 interface 1 has no altsetting 0
[  802.991288][ T5801] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  803.013818][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.074355][ T5801] usb 5-1: config 0 descriptor??
[  803.121722][ T5801] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count
[  803.511650][T10575] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  803.612950][ T5801] usbhid 5-1:0.1: can't add hid device: -71
[  803.619246][ T5801] usbhid: probe of 5-1:0.1 failed with error -71
[  803.638722][ T5801] usb 5-1: USB disconnect, device number 44
[  803.808227][T10575] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  803.823915][T10575] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  803.842046][T10575] usb 6-1: config 0 interface 0 has no altsetting 0
[  803.857912][T10575] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  803.877190][T10575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.928110][T10575] usb 6-1: config 0 descriptor??
[  803.933986][T14667] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  804.352921][T10575] belkin 0003:1020:0006.0017: ignoring exceeding usage max
[  804.384751][T10575] belkin 0003:1020:0006.0017: No inputs registered, leaving
[  804.417481][T10575] belkin 0003:1020:0006.0017: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.5-1/input0
[  804.437280][ T6239] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  804.541655][T14612] Set syz1 is full, maxelem 65536 reached
[  804.573410][T10575] usb 6-1: USB disconnect, device number 15
[  804.608866][ T6239] usb 5-1: device descriptor read/64, error -71
[  805.071477][ T6239] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  805.237338][ T6239] usb 5-1: device descriptor read/64, error -71
[  805.357467][ T6239] usb usb5-port1: attempt power cycle
[  805.557311][T10575] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  805.797275][ T6239] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  805.837363][T10575] usb 6-1: Using ep0 maxpacket: 32
[  805.839327][ T6239] usb 5-1: device descriptor read/8, error -71
[  805.850708][T10575] usb 6-1: too many configurations: 34, using maximum allowed: 8
[  805.876397][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  805.887521][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  805.896451][T10575] usb 6-1: config 0 has no interface number 0
[  805.902724][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  805.914500][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  805.924756][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  805.934518][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  805.943767][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  805.953175][T10575] usb 6-1: config 0 has no interface number 0
[  805.959763][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  805.971393][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  805.982943][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  805.995375][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  806.009498][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.021119][T10575] usb 6-1: config 0 has no interface number 0
[  806.030016][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  806.045450][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  806.068562][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  806.081367][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  806.089952][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.116547][T10575] usb 6-1: config 0 has no interface number 0
[  806.123176][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  806.135334][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  806.145736][    T8] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  806.151008][ T6239] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  806.156833][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  806.169868][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  806.179134][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.191005][T10575] usb 6-1: config 0 has no interface number 0
[  806.197534][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  806.212616][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  806.220713][ T6239] usb 5-1: device descriptor read/8, error -71
[  806.223956][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  806.246818][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  806.255921][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.269706][T10575] usb 6-1: config 0 has no interface number 0
[  806.275893][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  806.292361][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  806.303131][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  806.316650][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  806.333415][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.345474][T10575] usb 6-1: config 0 has no interface number 0
[  806.357250][    T8] usb 3-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  806.358147][ T6239] usb usb5-port1: unable to enumerate USB device
[  806.366353][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.371449][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  806.396761][    T8] usb-storage 3-1:1.0: USB Mass Storage device detected
[  806.429101][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  806.454096][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  806.466073][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  806.481203][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  806.492206][T10575] usb 6-1: config 0 has no interface number 0
[  806.503182][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  806.516747][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  806.550956][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  806.566841][T10575] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  806.576653][T10575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.598070][T10575] usb 6-1: config 0 descriptor??
[  806.824431][    T8] scsi host1: usb-storage 3-1:1.0
[  807.036852][    T8] usb 3-1: USB disconnect, device number 105
[  807.053054][T10575] usbhid 6-1:0.16: can't add hid device: -71
[  807.064005][T10575] usbhid: probe of 6-1:0.16 failed with error -71
[  807.092180][T10575] usb 6-1: USB disconnect, device number 16
[  807.667346][ T5868] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  807.877381][ T5868] usb 5-1: Using ep0 maxpacket: 32
[  807.894320][ T5868] usb 5-1: config index 0 descriptor too short (expected 19, got 18)
[  807.919896][ T5868] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  807.935214][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.944010][ T5868] usb 5-1: Product: syz
[  807.953316][ T5868] usb 5-1: Manufacturer: syz
[  807.958453][ T5868] usb 5-1: SerialNumber: syz
[  807.965839][ T5868] usb 5-1: config 0 descriptor??
[  807.992295][ T5868] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  808.011130][ T5868] dvb-usb: bulk message failed: -22 (2/0)
[  808.022964][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  808.053041][ T5868] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  808.062988][ T5868] usb 5-1: media controller created
[  808.102896][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  808.149129][ T5868] usb 5-1: selecting invalid altsetting 7
[  808.154963][ T5868] cxusb: set interface failed
[  808.166003][ T5868] dvb-usb: bulk message failed: -22 (1/0)
[  808.197733][T14718] cxusb: i2c wr: len=80 is too big!
[  808.197733][T14718] 
[  808.257305][T14718] FAULT_INJECTION: forcing a failure.
[  808.257305][T14718] name failslab, interval 1, probability 5, space 0, times 9998
[  808.302319][ T5868] DVB: Unable to find symbol lgdt330x_attach()
[  808.308733][T14718] CPU: 1 PID: 14718 Comm: syz.4.2717 Not tainted syzkaller #0
[  808.316263][T14718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  808.326374][T14718] Call Trace:
[  808.329719][T14718]  <TASK>
[  808.332706][T14718]  dump_stack_lvl+0x18c/0x250
[  808.337480][T14718]  ? show_regs_print_info+0x20/0x20
[  808.342788][T14718]  ? load_image+0x420/0x420
[  808.347359][T14718]  ? __might_sleep+0xe0/0xe0
[  808.352017][T14718]  ? __lock_acquire+0x7eb0/0x7eb0
[  808.357111][T14718]  should_fail_ex+0x394/0x4c0
[  808.361859][T14718]  should_failslab+0x9/0x20
[  808.366436][T14718]  slab_pre_alloc_hook+0x59/0x300
[  808.371530][T14718]  ? snd_pcm_open+0x3f0/0x600
[  808.376273][T14718]  __kmem_cache_alloc_node+0x53/0x260
[  808.381717][T14718]  ? snd_pcm_open+0x3f0/0x600
[  808.386475][T14718]  kmalloc_trace+0x2a/0xe0
[  808.390982][T14718]  snd_pcm_open+0x3f0/0x600
[  808.395560][T14718]  ? snd_pcm_mmap_control_fault+0x270/0x270
[  808.401524][T14718]  ? do_task_dead+0xd0/0xd0
[  808.406162][T14718]  snd_pcm_playback_open+0x6f/0xd0
[  808.411373][T14718]  chrdev_open+0x58c/0x600
[  808.415849][T14718]  ? cd_forget+0x160/0x160
[  808.420330][T14718]  ? fsnotify_perm+0x3ed/0x5e0
[  808.425151][T14718]  do_dentry_open+0x880/0x14b0
[  808.429978][T14718]  ? cd_forget+0x160/0x160
[  808.434457][T14718]  path_openat+0x284f/0x3270
[  808.439131][T14718]  ? do_sys_openat2+0xda/0x1d0
[  808.443955][T14718]  ? __x64_sys_openat+0x139/0x160
[  808.449039][T14718]  ? verify_lock_unused+0x140/0x140
[  808.454324][T14718]  ? do_filp_open+0x430/0x430
[  808.459076][T14718]  do_filp_open+0x1f2/0x430
[  808.463658][T14718]  ? vfs_tmpfile+0x620/0x620
[  808.468325][T14718]  ? _raw_spin_unlock+0x28/0x40
[  808.473226][T14718]  ? alloc_fd+0x590/0x640
[  808.477622][T14718]  do_sys_openat2+0x134/0x1d0
[  808.482365][T14718]  ? do_sys_open+0xe0/0xe0
[  808.486941][T14718]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  808.492992][T14718]  ? lock_chain_count+0x20/0x20
[  808.497923][T14718]  __x64_sys_openat+0x139/0x160
[  808.502884][T14718]  do_syscall_64+0x55/0xb0
[  808.507456][T14718]  ? clear_bhb_loop+0x40/0x90
[  808.512257][T14718]  ? clear_bhb_loop+0x40/0x90
[  808.517003][T14718]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  808.522972][T14718] RIP: 0033:0x7f711dd5fd8e
[  808.527441][T14718] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  808.547112][T14718] RSP: 002b:00007f711ec56b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  808.555633][T14718] RAX: ffffffffffffffda RBX: 00007f711ec576c0 RCX: 00007f711dd5fd8e
[  808.563673][T14718] RDX: 0000000000000002 RSI: 00007f711ec56c00 RDI: ffffffffffffff9c
[  808.571740][T14718] RBP: 00007f711ec56c00 R08: 0000000000000000 R09: 0000000000000000
[  808.579772][T14718] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  808.587807][T14718] R13: 00007f711e026038 R14: 00007f711e025fa0 R15: 00007ffd151d5b48
[  808.595856][T14718]  </TASK>
[  808.602949][ T5868] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  808.747196][ T5868] rc_core: IR keymap rc-dvico-portable not found
[  808.753800][ T5868] Registered IR keymap rc-empty
[  808.760713][ T5868] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  808.779593][ T5868] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input67
[  808.803953][ T5868] dvb-usb: schedule remote query interval to 100 msecs.
[  808.812970][ T5868] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  809.019167][ T5801] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  809.090592][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  809.126916][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  809.415243][ T5801] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  809.592994][T10575] usb 5-1: USB disconnect, device number 49
[  809.621813][ T5801] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  809.671654][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.709992][ T5801] usb 6-1: Product: syz
[  809.731492][ T5801] usb 6-1: Manufacturer: syz
[  809.736198][ T5801] usb 6-1: SerialNumber: syz
[  809.809186][ T5801] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  809.821930][T10575] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  810.327420][T10575] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  810.522857][T10575] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  810.539576][T10575] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  810.561931][T10575] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  810.579042][T10575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.807619][T10575] usb 5-1: usb_control_msg returned -32
[  810.823666][T10575] usbtmc 5-1:16.0: can't read capabilities
[  810.907565][ T5801] gspca_mr97310a: reg read [21] error -110
[  810.924727][ T5801] mr97310a: probe of 6-1:1.0 failed with error -110
[  811.128459][    T8] usb 3-1: new full-speed USB device number 106 using dummy_hcd
[  811.164686][T14751] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90
[  811.287235][    T8] usb 3-1: device descriptor read/64, error -71
[  811.377375][ T5868] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  811.569666][ T5868] usb 4-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  811.583552][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.587408][    T8] usb 3-1: new full-speed USB device number 107 using dummy_hcd
[  811.609965][ T5868] usb-storage 4-1:1.0: USB Mass Storage device detected
[  811.747530][    T8] usb 3-1: device descriptor read/64, error -71
[  811.869368][    T8] usb usb3-port1: attempt power cycle
[  812.019311][ T5868] scsi host1: usb-storage 4-1:1.0
[  812.221065][ T5868] usb 4-1: USB disconnect, device number 38
[  812.289967][    T8] usb 3-1: new full-speed USB device number 108 using dummy_hcd
[  812.339090][    T8] usb 3-1: device descriptor read/8, error -71
[  812.351578][T10575] usb 6-1: USB disconnect, device number 17
[  812.609366][    T8] usb 3-1: new full-speed USB device number 109 using dummy_hcd
[  812.648749][    T8] usb 3-1: device descriptor read/8, error -71
[  812.767876][T10575] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  812.783671][    T8] usb usb3-port1: unable to enumerate USB device
[  812.967465][T10575] usb 6-1: Using ep0 maxpacket: 32
[  812.979896][    T8] usb 5-1: USB disconnect, device number 50
[  812.990561][T10575] usb 6-1: too many configurations: 34, using maximum allowed: 8
[  813.015845][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  813.024727][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  813.033754][T10575] usb 6-1: config 0 has no interface number 0
[  813.050852][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.073289][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.083976][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  813.108648][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  813.117266][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  813.126189][T10575] usb 6-1: config 0 has no interface number 0
[  813.132785][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.144715][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.155147][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  813.164392][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  813.173060][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  813.182438][T10575] usb 6-1: config 0 has no interface number 0
[  813.189394][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.201737][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.222242][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  813.243191][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  813.261622][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  813.280932][T10575] usb 6-1: config 0 has no interface number 0
[  813.301253][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.327566][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.345242][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  813.354050][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  813.362377][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  813.373839][T10575] usb 6-1: config 0 has no interface number 0
[  813.380307][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.392129][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.402465][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  813.414324][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  813.429827][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  813.442367][T10575] usb 6-1: config 0 has no interface number 0
[  813.449278][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.460790][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.471807][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  813.480468][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  813.490025][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  813.499154][T10575] usb 6-1: config 0 has no interface number 0
[  813.505651][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.518693][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.530215][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  813.539020][T10575] usb 6-1: config 0 has an invalid interface number: 16 but max is 8
[  813.547556][T10575] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  813.556465][T10575] usb 6-1: config 0 has no interface number 0
[  813.562822][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  813.574142][T10575] usb 6-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.584468][T10575] usb 6-1: config 0 interface 16 has no altsetting 0
[  813.592879][T10575] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  813.602163][T10575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.622108][T10575] usb 6-1: config 0 descriptor??
[  814.063506][T10575] usbhid 6-1:0.16: can't add hid device: -71
[  814.080862][T10575] usbhid: probe of 6-1:0.16 failed with error -71
[  814.137517][T10575] usb 6-1: USB disconnect, device number 18
[  816.505914][T14793] fuse: Bad value for 'fd'
[  816.637233][T10575] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  816.787309][   T23] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  816.833949][T10575] usb 6-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00
[  816.845200][T10575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.866339][T10575] usb-storage 6-1:1.0: USB Mass Storage device detected
[  816.992008][   T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  817.001932][   T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  817.015938][   T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  817.025444][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.027537][ T5801] usb 3-1: new full-speed USB device number 110 using dummy_hcd
[  817.246795][   T23] usb 5-1: usb_control_msg returned -32
[  817.252807][   T23] usbtmc 5-1:16.0: can't read capabilities
[  817.265593][ T5801] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.288247][ T5801] usb 3-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  817.302067][T10575] scsi host1: usb-storage 6-1:1.0
[  817.328563][ T5801] usb 3-1: config 0 interface 0 has no altsetting 0
[  817.347901][ T5801] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06
[  817.361908][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  817.370254][ T5801] usb 3-1: SerialNumber: syz
[  817.383558][ T5801] usb 3-1: config 0 descriptor??
[  817.488503][   T23] usb 6-1: USB disconnect, device number 19
[  817.609485][T14802] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90
[  818.319795][T10575] usb 3-1: USB disconnect, device number 110
[  819.562961][ T5801] usb 5-1: USB disconnect, device number 51
[  819.598187][T10575] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  820.754028][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2753'.
[  820.925893][T14837] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2755'.
[  821.097610][   T23] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  821.312231][   T23] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  821.351861][   T23] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  821.406019][   T23] usb 6-1: config 0 interface 0 has no altsetting 0
[  821.436568][   T23] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  821.480179][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.589703][   T23] usb 6-1: config 0 descriptor??
[  821.619301][T14835] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  822.072119][T10575] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  822.093371][   T23] belkin 0003:1020:0006.0018: ignoring exceeding usage max
[  822.161808][   T23] belkin 0003:1020:0006.0018: No inputs registered, leaving
[  822.212070][   T23] belkin 0003:1020:0006.0018: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.5-1/input0
[  822.341031][   T23] usb 6-1: USB disconnect, device number 20
[  822.381723][T10575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.407694][T10575] usb 4-1: Product: syz
[  822.411951][T10575] usb 4-1: Manufacturer: syz
[  822.440061][T10575] usb 4-1: SerialNumber: syz
[  822.454695][T10575] usb 4-1: config 0 descriptor??
[  822.475598][T10575] usb 4-1: can't set config #0, error -71
[  822.584474][T10575] usb 4-1: USB disconnect, device number 39
[  822.644481][T14850] fido_id[14850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  822.924609][T11818] usb 3-1: new full-speed USB device number 111 using dummy_hcd
[  823.159489][T11818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  823.197115][T11818] usb 3-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  823.226857][T11818] usb 3-1: config 0 interface 0 has no altsetting 0
[  823.325922][T11818] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06
[  823.338713][T11818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  823.358861][T11818] usb 3-1: SerialNumber: syz
[  823.506614][T11818] usb 3-1: config 0 descriptor??
[  825.041464][T11818] usb 3-1: USB disconnect, device number 111
[  827.675235][T11818] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  827.983075][T11818] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  827.996316][T11818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.028740][T11818] usb 6-1: Product: syz
[  828.032997][T11818] usb 6-1: Manufacturer: syz
[  828.087128][T11818] usb 6-1: SerialNumber: syz
[  828.172897][T11818] usb 6-1: config 0 descriptor??
[  828.447234][T11818] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  828.893916][ T2957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  828.972920][T12277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  828.991769][T12277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  829.000609][T12277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  829.017365][T12277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  829.027170][T12277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  829.042243][T12277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  829.205770][ T2957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.351928][ T2957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.416685][T14923] rxe_eth0 speed is unknown, defaulting to 1000
[  829.574604][ T2957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.937994][T11818] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  829.984811][T11818] usb 6-1: USB disconnect, device number 21
[  830.017490][ T2957] tipc: Disabling bearer <udp:syz0>
[  830.055661][ T2957] tipc: Left network mode
[  830.703340][T14923] chnl_net:caif_netlink_parms(): no params data found
[  831.089324][T12277] Bluetooth: hci2: command tx timeout
[  832.234635][T14962] md/raid:md3: device ram7 operational as raid disk 0
[  832.271829][T14962] md: pers->run() failed ...
[  832.345997][T14923] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.423925][T14923] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.454350][T14923] bridge_slave_0: entered allmulticast mode
[  832.490595][T14923] bridge_slave_0: entered promiscuous mode
[  832.531989][T14923] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.563079][T14923] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.603649][T14923] bridge_slave_1: entered allmulticast mode
[  832.683266][T14923] bridge_slave_1: entered promiscuous mode
[  833.051911][T14923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  833.116908][T14923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  833.173060][T12277] Bluetooth: hci2: command tx timeout
[  833.423643][T14923] team0: Port device team_slave_0 added
[  833.504607][T14923] team0: Port device team_slave_1 added
[  833.537125][ T5898] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  833.717232][ T5898] usb 4-1: Using ep0 maxpacket: 8
[  833.729680][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  833.765400][ T5898] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  833.779576][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.785705][T14923] batman_adv: batadv0: Adding interface: batadv_slave_0
[  833.804269][T14923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  833.836445][T14923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  833.845413][ T5898] usb 4-1: config 0 descriptor??
[  833.877434][ T5898] iowarrior 4-1:0.0: no interrupt-in endpoint found
[  833.898026][T14923] batman_adv: batadv0: Adding interface: batadv_slave_1
[  833.905113][T14923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  833.937393][T14923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  834.234545][T14923] hsr_slave_0: entered promiscuous mode
[  834.268234][T14923] hsr_slave_1: entered promiscuous mode
[  834.281272][T14923] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  834.299553][T14923] Cannot create hsr debugfs directory
[  834.545982][ T2957] hsr_slave_0: left promiscuous mode
[  834.569225][ T2957] hsr_slave_1: left promiscuous mode
[  834.583390][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  834.597853][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_0
[  834.623567][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  834.644632][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_1
[  834.661518][ T2957] bridge_slave_1: left allmulticast mode
[  834.667629][ T5925] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  834.693374][ T2957] bridge_slave_1: left promiscuous mode
[  834.712362][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state
[  834.724339][T14843] Set syz1 is full, maxelem 65536 reached
[  834.731317][ T2957] bridge_slave_0: left allmulticast mode
[  834.743776][ T2957] bridge_slave_0: left promiscuous mode
[  834.750106][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state
[  834.825528][ T2957] veth1_macvtap: left promiscuous mode
[  834.834206][ T2957] veth0_macvtap: left promiscuous mode
[  834.844862][ T2957] veth1_vlan: left promiscuous mode
[  834.857617][ T2957] veth0_vlan: left promiscuous mode
[  834.880910][ T5925] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  834.913547][ T5925] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid maxpacket 39037, setting to 64
[  834.929630][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0
[  834.938407][ T5925] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06
[  834.961379][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  834.980418][ T5925] usb 6-1: SerialNumber: syz
[  834.994012][ T5925] usb 6-1: config 0 descriptor??
[  835.005378][T14994] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  835.234003][T14994] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  835.257981][T12277] Bluetooth: hci2: command tx timeout
[  835.269897][ T5925] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input69
[  836.030002][ T5925] usb 6-1: USB disconnect, device number 22
[  836.173671][ T2957] team0 (unregistering): Port device team_slave_1 removed
[  836.251397][ T2957] team0 (unregistering): Port device team_slave_0 removed
[  836.308039][ T5925] usb 4-1: USB disconnect, device number 40
[  836.471410][ T2957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  836.627793][ T2957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  838.351065][T12277] Bluetooth: hci2: command tx timeout
[  841.838261][T15033] FAULT_INJECTION: forcing a failure.
[  841.838261][T15033] name failslab, interval 1, probability 5, space 0, times 10000
[  841.864683][T15033] CPU: 1 PID: 15033 Comm: syz.5.2788 Not tainted syzkaller #0
[  841.872246][T15033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  841.882352][T15033] Call Trace:
[  841.885668][T15033]  <TASK>
[  841.888630][T15033]  dump_stack_lvl+0x18c/0x250
[  841.893378][T15033]  ? show_regs_print_info+0x20/0x20
[  841.898619][T15033]  ? load_image+0x420/0x420
[  841.903165][T15033]  ? __lock_acquire+0x7eb0/0x7eb0
[  841.908233][T15033]  should_fail_ex+0x394/0x4c0
[  841.912959][T15033]  should_failslab+0x9/0x20
[  841.917496][T15033]  slab_pre_alloc_hook+0x59/0x300
[  841.922596][T15033]  kmem_cache_alloc+0x5a/0x2d0
[  841.927387][T15033]  ? security_inode_alloc+0x34/0x110
[  841.932739][T15033]  security_inode_alloc+0x34/0x110
[  841.937894][T15033]  inode_init_always+0x914/0xc90
[  841.942869][T15033]  new_inode_pseudo+0x95/0x1d0
[  841.947670][T15033]  new_inode+0x22/0x1d0
[  841.951870][T15033]  shmem_get_inode+0x34d/0xcd0
[  841.956683][T15033]  shmem_mknod+0x5f/0x1c0
[  841.961050][T15033]  shmem_mkdir+0x33/0x60
[  841.965359][T15033]  vfs_mkdir+0x2a5/0x470
[  841.969646][T15033]  do_mkdirat+0x1dc/0x450
[  841.974043][T15033]  ? vfs_mkdir+0x470/0x470
[  841.978515][T15033]  __x64_sys_mkdirat+0x89/0xa0
[  841.983322][T15033]  do_syscall_64+0x55/0xb0
[  841.987777][T15033]  ? clear_bhb_loop+0x40/0x90
[  841.992498][T15033]  ? clear_bhb_loop+0x40/0x90
[  841.997212][T15033]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  842.003143][T15033] RIP: 0033:0x7f27e2b9f559
[  842.007616][T15033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  842.027271][T15033] RSP: 002b:00007f27e0dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  842.035738][T15033] RAX: ffffffffffffffda RBX: 00007f27e2e26090 RCX: 00007f27e2b9f559
[  842.043755][T15033] RDX: 00000000000001ff RSI: 0000200000000080 RDI: ffffffffffffff9c
[  842.051761][T15033] RBP: 00007f27e2c36b20 R08: 0000000000000000 R09: 0000000000000000
[  842.059771][T15033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  842.067780][T15033] R13: 00007f27e2e26128 R14: 00007f27e2e26090 R15: 00007ffda4cb79e8
[  842.075808][T15033]  </TASK>
[  842.203359][T15033] FAULT_INJECTION: forcing a failure.
[  842.203359][T15033] name failslab, interval 1, probability 5, space 0, times 9999
[  842.203560][T15033] CPU: 0 PID: 15033 Comm: syz.5.2788 Not tainted syzkaller #0
[  842.203585][T15033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  842.203600][T15033] Call Trace:
[  842.203610][T15033]  <TASK>
[  842.203622][T15033]  dump_stack_lvl+0x18c/0x250
[  842.203664][T15033]  ? show_regs_print_info+0x20/0x20
[  842.203696][T15033]  ? load_image+0x420/0x420
[  842.203725][T15033]  ? __might_sleep+0xe0/0xe0
[  842.203767][T15033]  ? __lock_acquire+0x7eb0/0x7eb0
[  842.203805][T15033]  should_fail_ex+0x394/0x4c0
[  842.203840][T15033]  should_failslab+0x9/0x20
[  842.203861][T15033]  slab_pre_alloc_hook+0x59/0x300
[  842.203887][T15033]  ? drm_atomic_helper_connector_duplicate_state+0x7d/0x190
[  842.203922][T15033]  __kmem_cache_alloc_node+0x53/0x260
[  842.203949][T15033]  ? drm_atomic_helper_connector_duplicate_state+0x7d/0x190
[  842.203980][T15033]  kmalloc_trace+0x2a/0xe0
[  842.204018][T15033]  drm_atomic_helper_connector_duplicate_state+0x7d/0x190
[  842.204053][T15033]  drm_atomic_get_connector_state+0x374/0x720
[  842.204085][T15033]  drm_atomic_add_affected_connectors+0x2d7/0x420
[  842.204116][T15033]  ? drm_atomic_add_encoder_bridges+0x1d0/0x1d0
[  842.204148][T15033]  ? modeset_lock+0x362/0x620
[  842.204179][T15033]  __drm_atomic_helper_set_config+0x676/0xed0
[  842.204206][T15033]  ? __drm_atomic_helper_plane_duplicate_state+0x4b/0xf0
[  842.204240][T15033]  ? __drm_atomic_helper_plane_duplicate_state+0x85/0xf0
[  842.204269][T15033]  ? __drm_atomic_helper_disable_plane+0x60/0x60
[  842.204298][T15033]  ? drm_client_rotation+0x446/0x570
[  842.204338][T15033]  drm_client_modeset_commit_atomic+0x49d/0x7b0
[  842.204386][T15033]  ? drm_client_modeset_check+0x180/0x180
[  842.204439][T15033]  ? mutex_unlock+0x10/0x10
[  842.204473][T15033]  ? mark_lock+0x94/0x320
[  842.204509][T15033]  drm_client_modeset_commit_locked+0xcb/0x4c0
[  842.204548][T15033]  drm_fb_helper_pan_display+0x3e9/0xbd0
[  842.204587][T15033]  ? drm_fb_helper_set_par+0x100/0x100
[  842.204616][T15033]  fb_pan_display+0x398/0x680
[  842.204659][T15033]  bit_update_start+0x4d/0x1e0
[  842.204692][T15033]  fbcon_switch+0x14b3/0x1f80
[  842.204735][T15033]  ? fbcon_scroll+0x760/0x760
[  842.204796][T15033]  ? fbcon_cursor+0x430/0x640
[  842.204827][T15033]  ? is_console_locked+0x9/0x20
[  842.204854][T15033]  ? set_origin+0x348/0x480
[  842.204881][T15033]  redraw_screen+0x585/0x1000
[  842.204946][T15033]  ? _raw_spin_unlock+0x40/0x40
[  842.204976][T15033]  ? asm_sysvec_call_function_single+0x1a/0x20
[  842.205010][T15033]  ? clear_buffer_attributes+0x320/0x320
[  842.205042][T15033]  ? tty_do_resize+0xe1/0x120
[  842.205071][T15033]  vc_do_resize+0x1256/0x17f0
[  842.205126][T15033]  ? lockdep_hardirqs_on+0x98/0x150
[  842.205161][T15033]  ? vc_resize+0x50/0x50
[  842.205204][T15033]  fbcon_do_set_font+0xb5c/0x1ae0
[  842.205260][T15033]  ? fbcon_blank+0xb40/0xb40
[  842.205286][T15033]  con_font_op+0xc3c/0xf60
[  842.205323][T15033]  ? reset_palette+0xdd0/0xdd0
[  842.205360][T15033]  ? __might_fault+0xaa/0x120
[  842.205387][T15033]  ? __lock_acquire+0x7eb0/0x7eb0
[  842.205416][T15033]  ? apparmor_capable+0x137/0x1a0
[  842.205448][T15033]  ? __might_fault+0xaa/0x120
[  842.205472][T15033]  ? __might_fault+0xc6/0x120
[  842.205494][T15033]  ? __might_fault+0xaa/0x120
[  842.205528][T15033]  vt_ioctl+0x1a21/0x1f20
[  842.205564][T15033]  ? __vt_event_wait+0x260/0x260
[  842.205609][T15033]  ? __fget_files+0x28/0x460
[  842.205647][T15033]  ? tty_jobctrl_ioctl+0x378/0xba0
[  842.205676][T15033]  tty_ioctl+0x91e/0xdc0
[  842.205702][T15033]  ? tty_get_icount+0xb0/0xb0
[  842.205728][T15033]  __se_sys_ioctl+0xfd/0x170
[  842.205775][T15033]  do_syscall_64+0x55/0xb0
[  842.205803][T15033]  ? clear_bhb_loop+0x40/0x90
[  842.205832][T15033]  ? clear_bhb_loop+0x40/0x90
[  842.205865][T15033]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  842.205894][T15033] RIP: 0033:0x7f27e2b9f559
[  842.205916][T15033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  842.205936][T15033] RSP: 002b:00007f27e0dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  842.205963][T15033] RAX: ffffffffffffffda RBX: 00007f27e2e26090 RCX: 00007f27e2b9f559
[  842.205980][T15033] RDX: 0000200000000880 RSI: 0000000000004b72 RDI: 0000000000000009
[  842.205996][T15033] RBP: 00007f27e2c36b20 R08: 0000000000000000 R09: 0000000000000000
[  842.206011][T15033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  842.206025][T15033] R13: 00007f27e2e26128 R14: 00007f27e2e26090 R15: 00007ffda4cb79e8
[  842.206063][T15033]  </TASK>
[  842.322948][ T2957] bond0 (unregistering): Released all slaves
[  843.328458][ T5925] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  843.548260][ T5925] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  843.574889][ T5925] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid maxpacket 39037, setting to 64
[  843.613102][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0
[  843.635003][ T5925] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06
[  843.646111][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  843.677304][ T5925] usb 6-1: SerialNumber: syz
[  843.691216][ T5925] usb 6-1: config 0 descriptor??
[  843.715770][T15038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  843.943451][T15038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  843.988330][ T5925] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input70
[  844.376805][T15057] FAULT_INJECTION: forcing a failure.
[  844.376805][T15057] name failslab, interval 1, probability 5, space 0, times 10000
[  844.376949][T15057] CPU: 1 PID: 15057 Comm: syz.4.2793 Not tainted syzkaller #0
[  844.376973][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  844.376993][T15057] Call Trace:
[  844.377003][T15057]  <TASK>
[  844.377014][T15057]  dump_stack_lvl+0x18c/0x250
[  844.377053][T15057]  ? show_regs_print_info+0x20/0x20
[  844.377084][T15057]  ? load_image+0x420/0x420
[  844.377111][T15057]  ? __might_sleep+0xe0/0xe0
[  844.377143][T15057]  ? __lock_acquire+0x7eb0/0x7eb0
[  844.377178][T15057]  should_fail_ex+0x394/0x4c0
[  844.377212][T15057]  should_failslab+0x9/0x20
[  844.377233][T15057]  slab_pre_alloc_hook+0x59/0x300
[  844.377260][T15057]  ? drm_atomic_state_init+0x106/0x310
[  844.377287][T15057]  ? drm_atomic_state_init+0x106/0x310
[  844.377311][T15057]  __kmem_cache_alloc_node+0x53/0x260
[  844.377341][T15057]  ? drm_atomic_state_init+0x106/0x310
[  844.377365][T15057]  __kmalloc+0xa7/0x240
[  844.377402][T15057]  drm_atomic_state_init+0x106/0x310
[  844.377432][T15057]  drm_atomic_state_alloc+0xbb/0x100
[  844.377460][T15057]  drm_client_modeset_commit_atomic+0x119/0x7b0
[  844.377503][T15057]  ? trace_contention_end+0x39/0xe0
[  844.377528][T15057]  ? __mutex_lock+0x30d/0xc80
[  844.377563][T15057]  ? drm_client_modeset_check+0x180/0x180
[  844.377615][T15057]  ? mutex_unlock+0x10/0x10
[  844.377661][T15057]  ? mark_lock+0x94/0x320
[  844.377697][T15057]  drm_client_modeset_commit_locked+0xcb/0x4c0
[  844.377737][T15057]  drm_fb_helper_pan_display+0x3e9/0xbd0
[  844.377776][T15057]  ? drm_fb_helper_set_par+0x100/0x100
[  844.377807][T15057]  fb_pan_display+0x398/0x680
[  844.377850][T15057]  bit_update_start+0x4d/0x1e0
[  844.377883][T15057]  fbcon_switch+0x14b3/0x1f80
[  844.377926][T15057]  ? fbcon_scroll+0x760/0x760
[  844.377974][T15057]  ? fbcon_cursor+0x430/0x640
[  844.378005][T15057]  ? is_console_locked+0x9/0x20
[  844.378032][T15057]  ? set_origin+0x348/0x480
[  844.378060][T15057]  redraw_screen+0x585/0x1000
[  844.378086][T15057]  ? bit_clear_margins+0x328/0x550
[  844.378120][T15057]  ? bit_putcs+0x1be0/0x1be0
[  844.378148][T15057]  ? clear_buffer_attributes+0x320/0x320
[  844.378175][T15057]  ? do_raw_spin_unlock+0x121/0x230
[  844.378209][T15057]  ? is_console_locked+0x9/0x20
[  844.378236][T15057]  ? fbcon_clear_margins+0x215/0x350
[  844.378267][T15057]  fbcon_do_set_font+0x940/0x1ae0
[  844.378306][T15057]  ? fbcon_set_font+0xc55/0xf90
[  844.378355][T15057]  ? fbcon_blank+0xb40/0xb40
[  844.378383][T15057]  con_font_op+0xc3c/0xf60
[  844.378423][T15057]  ? reset_palette+0xdd0/0xdd0
[  844.378461][T15057]  ? __might_fault+0xaa/0x120
[  844.378489][T15057]  ? __lock_acquire+0x7eb0/0x7eb0
[  844.378518][T15057]  ? apparmor_capable+0x137/0x1a0
[  844.378551][T15057]  ? __might_fault+0xaa/0x120
[  844.378576][T15057]  ? __might_fault+0xc6/0x120
[  844.378599][T15057]  ? __might_fault+0xaa/0x120
[  844.378641][T15057]  vt_ioctl+0x1a21/0x1f20
[  844.378681][T15057]  ? __vt_event_wait+0x260/0x260
[  844.378724][T15057]  ? __fget_files+0x28/0x460
[  844.378764][T15057]  ? tty_jobctrl_ioctl+0x378/0xba0
[  844.378793][T15057]  tty_ioctl+0x91e/0xdc0
[  844.378819][T15057]  ? tty_get_icount+0xb0/0xb0
[  844.378844][T15057]  __se_sys_ioctl+0xfd/0x170
[  844.378881][T15057]  do_syscall_64+0x55/0xb0
[  844.378909][T15057]  ? clear_bhb_loop+0x40/0x90
[  844.378940][T15057]  ? clear_bhb_loop+0x40/0x90
[  844.378974][T15057]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  844.379004][T15057] RIP: 0033:0x7f711dd9f559
[  844.379027][T15057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  844.379048][T15057] RSP: 002b:00007f711ec36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  844.379075][T15057] RAX: ffffffffffffffda RBX: 00007f711e026090 RCX: 00007f711dd9f559
[  844.379093][T15057] RDX: 0000200000000880 RSI: 0000000000004b72 RDI: 0000000000000008
[  844.379109][T15057] RBP: 00007f711de36b20 R08: 0000000000000000 R09: 0000000000000000
[  844.379124][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  844.379140][T15057] R13: 00007f711e026128 R14: 00007f711e026090 R15: 00007ffd151d5b48
[  844.379179][T15057]  </TASK>
[  845.151591][ T5925] usb 6-1: USB disconnect, device number 23
[  845.533039][T14923] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  845.596724][T14923] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  845.640541][T14923] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  845.685809][T14923] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  845.991936][T14923] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.059210][T14923] 8021q: adding VLAN 0 to HW filter on device team0
[  846.126679][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.134069][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.230528][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.237870][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  848.537146][    C1] net_ratelimit: 24 callbacks suppressed
[  849.695055][T15100] syzkaller1: entered promiscuous mode
[  849.723986][T15100] syzkaller1: entered allmulticast mode
[  849.852641][T14923] 8021q: adding VLAN 0 to HW filter on device batadv0
[  850.290260][T14923] veth0_vlan: entered promiscuous mode
[  850.320397][T14923] veth1_vlan: entered promiscuous mode
[  850.357501][ T5868] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  850.430840][T14923] veth0_macvtap: entered promiscuous mode
[  850.461451][T14923] veth1_macvtap: entered promiscuous mode
[  850.500866][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  850.523930][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  850.534479][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  850.553583][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  850.565904][T14923] batman_adv: batadv0: Interface activated: batadv_slave_0
[  850.577105][ T5868] usb 5-1: Using ep0 maxpacket: 32
[  850.585213][ T5868] usb 5-1: config index 0 descriptor too short (expected 19, got 18)
[  850.601045][ T5868] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  850.612945][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  850.622840][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.639093][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  850.653237][T14923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  850.666128][T14923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  850.670618][ T5868] usb 5-1: Product: syz
[  850.681927][T14923] batman_adv: batadv0: Interface activated: batadv_slave_1
[  850.705499][ T5868] usb 5-1: Manufacturer: syz
[  850.714175][T14923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  850.717481][ T5868] usb 5-1: SerialNumber: syz
[  850.724051][ T5801] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  850.741164][T14923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  850.752930][T14923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  850.772237][ T5868] usb 5-1: config 0 descriptor??
[  850.784310][T14923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  850.797755][ T5868] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  850.815753][ T5868] dvb-usb: bulk message failed: -22 (2/0)
[  850.839675][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  850.853092][ T5868] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  850.862429][ T5868] usb 5-1: media controller created
[  850.930122][ T5801] usb 4-1: Using ep0 maxpacket: 16
[  850.948469][ T5801] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  850.978627][ T5801] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  851.015847][T15108] cxusb: i2c wr: len=80 is too big!
[  851.015847][T15108] 
[  851.027214][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.047190][ T5801] usb 4-1: Product: syz
[  851.051594][ T5801] usb 4-1: Manufacturer: syz
[  851.051615][ T5801] usb 4-1: SerialNumber: syz
[  851.113145][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  851.122134][T15108] FAULT_INJECTION: forcing a failure.
[  851.122134][T15108] name failslab, interval 1, probability 5, space 0, times 10000
[  851.170168][T15108] CPU: 1 PID: 15108 Comm: syz.4.2800 Not tainted syzkaller #0
[  851.177712][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  851.177732][T15108] Call Trace:
[  851.177743][T15108]  <TASK>
[  851.177753][T15108]  dump_stack_lvl+0x18c/0x250
[  851.177792][T15108]  ? show_regs_print_info+0x20/0x20
[  851.177821][T15108]  ? load_image+0x420/0x420
[  851.177849][T15108]  ? __might_sleep+0xe0/0xe0
[  851.177879][T15108]  ? __lock_acquire+0x7eb0/0x7eb0
[  851.177912][T15108]  should_fail_ex+0x394/0x4c0
[  851.177946][T15108]  should_failslab+0x9/0x20
[  851.177965][T15108]  slab_pre_alloc_hook+0x59/0x300
[  851.177991][T15108]  ? loopback_open+0x27a/0xa50
[  851.178016][T15108]  __kmem_cache_alloc_node+0x53/0x260
[  851.178043][T15108]  ? loopback_open+0x27a/0xa50
[  851.178065][T15108]  kmalloc_trace+0x2a/0xe0
[  851.178101][T15108]  loopback_open+0x27a/0xa50
[  851.178136][T15108]  snd_pcm_open_substream+0x1023/0x2540
[  851.199221][T15108]  ? snd_pcm_drop+0x250/0x250
[  851.199281][T15108]  snd_pcm_open+0x1d3/0x600
[  851.199322][T15108]  ? snd_pcm_mmap_control_fault+0x270/0x270
[  851.199349][T15108]  ? do_task_dead+0xd0/0xd0
[  851.199388][T15108]  snd_pcm_playback_open+0x6f/0xd0
[  851.199427][T15108]  chrdev_open+0x58c/0x600
[  851.199460][T15108]  ? cd_forget+0x160/0x160
[  851.199494][T15108]  ? fsnotify_perm+0x3ed/0x5e0
[  851.199529][T15108]  do_dentry_open+0x880/0x14b0
[  851.199565][T15108]  ? cd_forget+0x160/0x160
[  851.199600][T15108]  path_openat+0x284f/0x3270
[  851.199651][T15108]  ? do_sys_openat2+0xda/0x1d0
[  851.199681][T15108]  ? __x64_sys_openat+0x139/0x160
[  851.199715][T15108]  ? verify_lock_unused+0x140/0x140
[  851.199744][T15108]  ? do_filp_open+0x430/0x430
[  851.199792][T15108]  do_filp_open+0x1f2/0x430
[  851.199824][T15108]  ? vfs_tmpfile+0x620/0x620
[  851.199878][T15108]  ? _raw_spin_unlock+0x28/0x40
[  851.199903][T15108]  ? alloc_fd+0x590/0x640
[  851.199946][T15108]  do_sys_openat2+0x134/0x1d0
[  851.199990][T15108]  ? do_sys_open+0xe0/0xe0
[  851.200022][T15108]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  851.200054][T15108]  ? lock_chain_count+0x20/0x20
[  851.200088][T15108]  __x64_sys_openat+0x139/0x160
[  851.200126][T15108]  do_syscall_64+0x55/0xb0
[  851.200154][T15108]  ? clear_bhb_loop+0x40/0x90
[  851.200186][T15108]  ? clear_bhb_loop+0x40/0x90
[  851.200221][T15108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  851.398677][T15108] RIP: 0033:0x7f711dd5fd8e
[  851.403129][T15108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  851.422762][T15108] RSP: 002b:00007f711ec56b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  851.431221][T15108] RAX: ffffffffffffffda RBX: 00007f711ec576c0 RCX: 00007f711dd5fd8e
[  851.439221][T15108] RDX: 0000000000000002 RSI: 00007f711ec56c00 RDI: ffffffffffffff9c
[  851.447223][T15108] RBP: 00007f711ec56c00 R08: 0000000000000000 R09: 0000000000000000
[  851.455222][T15108] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  851.463267][T15108] R13: 00007f711e026038 R14: 00007f711e025fa0 R15: 00007ffd151d5b48
[  851.471311][T15108]  </TASK>
[  851.487445][ T5801] usb 4-1: config 0 descriptor??
[  851.526683][ T5868] usb 5-1: selecting invalid altsetting 7
[  851.532865][ T5868] cxusb: set interface failed
[  851.548109][ T5868] dvb-usb: bulk message failed: -22 (1/0)
[  851.648924][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  851.656805][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  851.665305][ T5868] DVB: Unable to find symbol lgdt330x_attach()
[  851.698128][ T5868] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  851.854955][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  851.884387][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  851.907935][ T5868] rc_core: IR keymap rc-dvico-portable not found
[  851.914368][ T5868] Registered IR keymap rc-empty
[  851.935723][ T5868] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  851.988248][ T5868] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input71
[  852.034021][ T5868] dvb-usb: schedule remote query interval to 100 msecs.
[  852.060732][ T5868] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  852.168728][ T5868] dvb-usb: bulk message failed: -22 (1/0)
[  852.237341][T10575] usb 5-1: USB disconnect, device number 52
[  852.450253][T15139] dvb-usb: bulk message failed: -22 (3/0)
[  853.567078][    C0] net_ratelimit: 58 callbacks suppressed
[  853.634299][T10586] usb 4-1: USB disconnect, device number 41
[  853.642981][T10575] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  854.767766][T15154] loop2: detected capacity change from 0 to 512
[  856.223741][T15185] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2817'.
[  856.448079][   T23] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  856.517184][T10586] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  856.677368][   T23] usb 6-1: Using ep0 maxpacket: 16
[  856.697631][   T23] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  856.724946][ T5868] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  856.733048][   T23] usb 6-1: config 0 has no interface number 0
[  856.762148][   T23] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  856.792964][   T23] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  856.820783][   T23] usb 6-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  856.871783][   T23] usb 6-1: config 0 interface 1 has no altsetting 0
[  856.887188][   T23] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  856.914012][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.950718][ T5868] usb 5-1: Using ep0 maxpacket: 16
[  856.963475][ T5868] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  856.995194][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.005338][   T23] usb 6-1: config 0 descriptor??
[  857.048150][ T5868] usb 5-1: Product: syz
[  857.055745][   T23] usbhid 6-1:0.1: fixing wrong optional hid class descriptors count
[  857.078455][ T5868] usb 5-1: Manufacturer: syz
[  857.083145][ T5868] usb 5-1: SerialNumber: syz
[  857.144515][ T5868] usb 5-1: config 0 descriptor??
[  857.307101][T10586] usb 4-1: Using ep0 maxpacket: 32
[  857.321439][T10586] usb 4-1: config index 0 descriptor too short (expected 19, got 18)
[  857.341735][T10586] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  857.360282][T10586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.374179][T10586] usb 4-1: Product: syz
[  857.378879][T10586] usb 4-1: Manufacturer: syz
[  857.384129][T10586] usb 4-1: SerialNumber: syz
[  857.409638][T10586] usb 4-1: config 0 descriptor??
[  857.431329][T10586] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  857.457441][T10586] dvb-usb: bulk message failed: -22 (2/0)
[  857.482770][T10586] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  857.500386][   T23] elan 0003:04F3:074D.0019: unknown main item tag 0x0
[  857.515779][   T23] elan 0003:04F3:074D.0019: unknown main item tag 0x0
[  857.523761][T10586] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  857.526486][   T23] elan 0003:04F3:074D.0019: unknown main item tag 0x0
[  857.547508][T10586] usb 4-1: media controller created
[  857.572063][   T23] elan 0003:04F3:074D.0019: unknown main item tag 0x0
[  857.596591][   T23] elan 0003:04F3:074D.0019: unknown main item tag 0x0
[  857.596623][   T23] elan 0003:04F3:074D.0019: unknown main item tag 0x0
[  857.619480][T15168] cxusb: i2c wr: len=80 is too big!
[  857.619480][T15168] 
[  857.633369][ T5868] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  857.654291][   T23] elan 0003:04F3:074D.0019: unbalanced collection at end of report description
[  857.684147][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  857.702382][   T23] elan 0003:04F3:074D.0019: Hid Parse failed
[  857.711392][   T23] elan: probe of 0003:04F3:074D.0019 failed with error -22
[  857.787113][T15168] FAULT_INJECTION: forcing a failure.
[  857.787113][T15168] name failslab, interval 1, probability 5, space 0, times 9999
[  857.806913][   T23] usb 6-1: USB disconnect, device number 24
[  857.865629][T15168] CPU: 1 PID: 15168 Comm: syz.3.2813 Not tainted syzkaller #0
[  857.873175][T15168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  857.883280][T15168] Call Trace:
[  857.886604][T15168]  <TASK>
[  857.889627][T15168]  dump_stack_lvl+0x18c/0x250
[  857.894373][T15168]  ? show_regs_print_info+0x20/0x20
[  857.899645][T15168]  ? load_image+0x420/0x420
[  857.904221][T15168]  ? __might_sleep+0xe0/0xe0
[  857.908901][T15168]  ? __lock_acquire+0x7eb0/0x7eb0
[  857.914014][T15168]  should_fail_ex+0x394/0x4c0
[  857.918765][T15168]  should_failslab+0x9/0x20
[  857.923324][T15168]  slab_pre_alloc_hook+0x59/0x300
[  857.928403][T15168]  ? snd_pcm_hw_rule_add+0x18c/0x7f0
[  857.933745][T15168]  ? snd_pcm_hw_rule_add+0x18c/0x7f0
[  857.939088][T15168]  __kmem_cache_alloc_node+0x53/0x260
[  857.944517][T15168]  ? snd_pcm_hw_rule_add+0x18c/0x7f0
[  857.949869][T15168]  __kmalloc_node_track_caller+0xa4/0x230
[  857.955684][T15168]  krealloc+0x86/0x120
[  857.959818][T15168]  snd_pcm_hw_rule_add+0x18c/0x7f0
[  857.964996][T15168]  ? snd_pcm_hw_rule_mulkdiv+0x2b0/0x2b0
[  857.970671][T15168]  ? snd_pcm_post_pause+0x290/0x290
[  857.970707][T15168]  ? __raw_spin_lock_init+0x45/0x100
[  857.970741][T15168]  ? snd_interval_ranges+0x300/0x300
[  857.981292][T15168]  ? snd_pcm_attach_substream+0x841/0xad0
[  857.981336][T15168]  snd_pcm_open_substream+0xef7/0x2540
[  857.981384][T15168]  ? snd_pcm_drop+0x250/0x250
[  857.992421][T15168]  snd_pcm_open+0x1d3/0x600
[  857.992460][T15168]  ? snd_pcm_mmap_control_fault+0x270/0x270
[  858.002628][T15168]  ? do_task_dead+0xd0/0xd0
[  858.013060][T15168]  snd_pcm_playback_open+0x6f/0xd0
[  858.013101][T15168]  chrdev_open+0x58c/0x600
[  858.022783][T15168]  ? cd_forget+0x160/0x160
[  858.031643][T15168]  ? fsnotify_perm+0x3ed/0x5e0
[  858.031682][T15168]  do_dentry_open+0x880/0x14b0
[  858.041233][T15168]  ? cd_forget+0x160/0x160
[  858.041272][T15168]  path_openat+0x284f/0x3270
[  858.050452][T15168]  ? do_sys_openat2+0xda/0x1d0
[  858.055302][T15168]  ? __x64_sys_openat+0x139/0x160
[  858.060378][T15168]  ? verify_lock_unused+0x140/0x140
[  858.060419][T15168]  ? do_filp_open+0x430/0x430
[  858.060466][T15168]  do_filp_open+0x1f2/0x430
[  858.060516][T15168]  ? vfs_tmpfile+0x620/0x620
[  858.070448][T15168]  ? _raw_spin_unlock+0x28/0x40
[  858.070481][T15168]  ? alloc_fd+0x590/0x640
[  858.070522][T15168]  do_sys_openat2+0x134/0x1d0
[  858.070557][T15168]  ? do_sys_open+0xe0/0xe0
[  858.070588][T15168]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  858.070619][T15168]  ? lock_chain_count+0x20/0x20
[  858.070649][T15168]  __x64_sys_openat+0x139/0x160
[  858.070684][T15168]  do_syscall_64+0x55/0xb0
[  858.070709][T15168]  ? clear_bhb_loop+0x40/0x90
[  858.080570][T15168]  ? clear_bhb_loop+0x40/0x90
[  858.080612][T15168]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  858.080642][T15168] RIP: 0033:0x7f7e9cf5fd8e
[  858.080662][T15168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  858.080684][T15168] RSP: 002b:00007f7e9df1bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  858.080721][T15168] RAX: ffffffffffffffda RBX: 00007f7e9df1c6c0 RCX: 00007f7e9cf5fd8e
[  858.080740][T15168] RDX: 0000000000000002 RSI: 00007f7e9df1bc00 RDI: ffffffffffffff9c
[  858.080757][T15168] RBP: 00007f7e9df1bc00 R08: 0000000000000000 R09: 0000000000000000
[  858.080773][T15168] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  858.080789][T15168] R13: 00007f7e9d226038 R14: 00007f7e9d225fa0 R15: 00007ffc80307898
[  858.080823][T15168]  </TASK>
[  858.248766][T10586] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  858.423978][T10586] usb 4-1: selecting invalid altsetting 7
[  858.424007][ T5868] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  858.430011][T10586] cxusb: set interface failed
[  858.430029][T10586] dvb-usb: bulk message failed: -22 (1/0)
[  858.450158][ T5868] usb 5-1: media controller created
[  858.525084][T10586] DVB: Unable to find symbol lgdt330x_attach()
[  858.536926][T10586] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  858.607078][    C0] net_ratelimit: 46 callbacks suppressed
[  858.648109][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  858.707753][T10586] rc_core: IR keymap rc-dvico-portable not found
[  858.724499][T10586] Registered IR keymap rc-empty
[  858.745202][T10586] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  858.795880][T10586] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input72
[  858.809299][ T5868] zl10353_read_register: readreg error (reg=127, ret==0)
[  858.830137][ T5868] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  858.838786][T10586] dvb-usb: schedule remote query interval to 100 msecs.
[  858.845801][T10586] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  858.855008][ T5868] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  858.909198][ T5868] usb 5-1: USB disconnect, device number 53
[  858.947257][T10575] dvb-usb: bulk message failed: -22 (1/0)
[  858.988945][T10586] usb 4-1: USB disconnect, device number 42
[  859.304170][ T5868] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  859.384837][T10586] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  859.521404][T15224] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2826'.
[  862.507373][ T5868] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  862.537110][T10586] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  862.637159][T11818] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  862.727407][ T5868] usb 5-1: Using ep0 maxpacket: 16
[  862.740770][ T5868] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  862.757613][ T5868] usb 5-1: config 0 has no interface number 0
[  862.780458][ T5868] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  862.814965][ T5868] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  862.845599][ T5868] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  862.867143][T11818] usb 6-1: Using ep0 maxpacket: 16
[  862.889783][T11818] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  862.908659][ T5868] usb 5-1: config 0 interface 1 has no altsetting 0
[  862.921165][T11818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.945038][ T5868] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  862.957597][T11818] usb 6-1: Product: syz
[  862.961842][T11818] usb 6-1: Manufacturer: syz
[  862.991901][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.000510][T11818] usb 6-1: SerialNumber: syz
[  863.016580][ T5868] usb 5-1: config 0 descriptor??
[  863.026188][T11818] usb 6-1: config 0 descriptor??
[  863.073516][ T5868] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count
[  863.507344][T11818] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  863.525620][ T5868] elan 0003:04F3:074D.001A: unknown main item tag 0x0
[  863.546262][T11818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  863.560276][ T5868] elan 0003:04F3:074D.001A: unknown main item tag 0x0
[  863.573789][ T5868] elan 0003:04F3:074D.001A: unknown main item tag 0x0
[  863.590837][T11818] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  863.602310][ T5868] elan 0003:04F3:074D.001A: unknown main item tag 0x0
[  863.613437][T11818] usb 6-1: media controller created
[  863.621356][ T5868] elan 0003:04F3:074D.001A: unknown main item tag 0x0
[  863.645042][ T5868] elan 0003:04F3:074D.001A: unknown main item tag 0x0
[  863.677024][ T5868] elan 0003:04F3:074D.001A: unbalanced collection at end of report description
[  863.741521][ T5868] elan 0003:04F3:074D.001A: Hid Parse failed
[  863.773271][ T5868] elan: probe of 0003:04F3:074D.001A failed with error -22
[  863.843644][ T5868] usb 5-1: USB disconnect, device number 54
[  863.888935][    C1] net_ratelimit: 29 callbacks suppressed
[  863.930295][T11818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  864.078271][T11818] zl10353_read_register: readreg error (reg=127, ret==0)
[  864.091456][T11818] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  864.111786][T11818] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  864.137979][T11818] usb 6-1: USB disconnect, device number 25
[  864.403213][T11818] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  864.497796][T15252] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2837'.
[  864.608780][T15255] ubi31: attaching mtd0
[  864.648071][T15255] ubi31: scanning is finished
[  864.662265][T15255] ubi31 error: ubi_read_volume_table: the layout volume was not found
[  864.710708][T15258] md: could not open device unknown-block(1,8).
[  864.731100][T15258] md: could not open device unknown-block(1,9).
[  864.786234][T15255] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  866.238197][T15273] comedi comedi3: dt2815: I/O port conflict (0x6,2)
[  866.326346][T15277] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2848'.
[  866.547350][T15281] netlink: 'syz.5.2850': attribute type 11 has an invalid length.
[  866.557256][   T23] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  866.767232][   T23] usb 4-1: Using ep0 maxpacket: 16
[  866.776855][   T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  866.790047][   T23] usb 4-1: config 0 has no interface number 0
[  866.796399][   T23] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  866.813830][   T23] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  866.824492][   T23] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  866.842622][   T23] usb 4-1: config 0 interface 1 has no altsetting 0
[  866.850185][   T23] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  866.861729][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.891820][   T23] usb 4-1: config 0 descriptor??
[  866.936378][   T23] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count
[  867.331232][   T23] elan 0003:04F3:074D.001B: unknown main item tag 0x0
[  867.348252][   T23] elan 0003:04F3:074D.001B: unknown main item tag 0x0
[  867.365706][   T23] elan 0003:04F3:074D.001B: unbalanced collection at end of report description
[  867.382201][   T23] elan 0003:04F3:074D.001B: Hid Parse failed
[  867.390382][   T23] elan: probe of 0003:04F3:074D.001B failed with error -22
[  867.458534][T15279] FAULT_INJECTION: forcing a failure.
[  867.458534][T15279] name fail_futex, interval 1, probability 0, space 0, times 0
[  867.472767][T15279] CPU: 0 PID: 15279 Comm: syz.4.2849 Not tainted syzkaller #0
[  867.473759][T15286] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2852'.
[  867.480273][T15279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  867.480290][T15279] Call Trace:
[  867.480299][T15279]  <TASK>
[  867.480309][T15279]  dump_stack_lvl+0x18c/0x250
[  867.480345][T15279]  ? show_regs_print_info+0x20/0x20
[  867.480373][T15279]  ? load_image+0x420/0x420
[  867.480397][T15279]  ? __lock_acquire+0x1431/0x7eb0
[  867.480433][T15279]  should_fail_ex+0x394/0x4c0
[  867.529966][T15279]  get_futex_key+0x16f/0x1030
[  867.534693][T15279]  ? futex_setup_timer+0xc0/0xc0
[  867.539666][T15279]  futex_wake+0x127/0x4f0
[  867.544034][T15279]  ? futex_wake_mark+0x150/0x150
[  867.549029][T15279]  do_futex+0x35d/0x3e0
[  867.553213][T15279]  ? __might_fault+0xaa/0x120
[  867.557940][T15279]  ? __ia32_sys_get_robust_list+0x110/0x110
[  867.563887][T15279]  ? __might_fault+0xc6/0x120
[  867.568617][T15279]  mm_release+0x184/0x3a0
[  867.572998][T15279]  ? exit_mm_release+0x30/0x30
[  867.577795][T15279]  ? lockdep_hardirqs_on+0x98/0x150
[  867.583063][T15279]  exit_mm+0xa4/0x340
[  867.587081][T15279]  ? sysctl_delayacct+0x220/0x220
[  867.592146][T15279]  ? do_exit+0x2530/0x2530
[  867.596622][T15279]  ? tty_audit_exit+0x14d/0x1f0
[  867.601520][T15279]  do_exit+0x909/0x2530
[  867.605720][T15279]  ? put_task_struct+0xc0/0xc0
[  867.610526][T15279]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  867.616534][T15279]  ? get_signal+0x100e/0x1390
[  867.621234][T15279]  ? lock_chain_count+0x20/0x20
[  867.626159][T15279]  ? _raw_spin_lock_irq+0xbb/0xf0
[  867.631228][T15279]  do_group_exit+0x22d/0x2f0
[  867.635860][T15279]  ? lockdep_hardirqs_on+0x98/0x150
[  867.641096][T15279]  get_signal+0x12a6/0x1390
[  867.645641][T15279]  arch_do_signal_or_restart+0xc2/0x7b0
[  867.651225][T15279]  ? __ia32_sys_get_robust_list+0x110/0x110
[  867.657150][T15279]  ? get_sigframe_size+0x20/0x20
[  867.662144][T15279]  ? exit_to_user_mode_loop+0x3b/0x110
[  867.667646][T15279]  exit_to_user_mode_loop+0x70/0x110
[  867.672969][T15279]  exit_to_user_mode_prepare+0xee/0x180
[  867.678563][T15279]  syscall_exit_to_user_mode+0x1a/0x50
[  867.684057][T15279]  do_syscall_64+0x61/0xb0
[  867.688509][T15279]  ? clear_bhb_loop+0x40/0x90
[  867.693218][T15279]  ? clear_bhb_loop+0x40/0x90
[  867.697949][T15279]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  867.703881][T15279] RIP: 0033:0x7f711dd9f559
[  867.708329][T15279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.727967][T15279] RSP: 002b:00007f711ec570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  867.736430][T15279] RAX: fffffffffffffe00 RBX: 00007f711e025fa8 RCX: 00007f711dd9f559
[  867.744432][T15279] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f711e025fa8
[  867.752427][T15279] RBP: 00007f711e025fa0 R08: 0000000000000000 R09: 0000000000000000
[  867.760534][T15279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  867.768530][T15279] R13: 00007f711e026038 R14: 00007ffd151d5a60 R15: 00007ffd151d5b48
[  867.776542][T15279]  </TASK>
[  867.847383][T10586] usb 4-1: USB disconnect, device number 44
[  868.109558][T15294] loop2: detected capacity change from 0 to 128
[  868.317180][ T5898] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  868.504253][ T5898] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  868.522168][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.532254][ T5898] usb 6-1: Product: syz
[  868.536606][ T5898] usb 6-1: Manufacturer: syz
[  868.548113][ T5898] usb 6-1: SerialNumber: syz
[  868.589010][ T5898] usb 6-1: config 0 descriptor??
[  869.960373][T15303] loop2: detected capacity change from 0 to 32768
[  870.099403][T15303] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  870.137074][    C1] net_ratelimit: 42 callbacks suppressed
[  870.305323][T15314] bridge_slave_1: left allmulticast mode
[  870.325807][T15303] XFS (loop2): Ending clean mount
[  870.356504][T15314] bridge_slave_1: left promiscuous mode
[  870.373146][T15303] XFS (loop2): Quotacheck needed: Please wait.
[  870.401813][T15314] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.497231][T15314] bridge_slave_0: left allmulticast mode
[  870.519389][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  870.525777][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  870.537343][ T5898] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  870.546716][T15303] XFS (loop2): Quotacheck: Done.
[  870.625791][T14923] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  870.660809][T15314] bridge_slave_0: left promiscuous mode
[  870.682206][T15314] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.962923][ T5898] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32
[  871.322745][T15324] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2864'.
[  872.160246][T15334] FAULT_INJECTION: forcing a failure.
[  872.160246][T15334] name failslab, interval 1, probability 5, space 0, times 10000
[  872.173927][T15334] CPU: 0 PID: 15334 Comm: syz.2.2868 Not tainted syzkaller #0
[  872.181454][T15334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  872.191569][T15334] Call Trace:
[  872.194901][T15334]  <TASK>
[  872.197908][T15334]  dump_stack_lvl+0x18c/0x250
[  872.202632][T15334]  ? show_regs_print_info+0x20/0x20
[  872.207872][T15334]  ? load_image+0x420/0x420
[  872.212416][T15334]  ? __might_sleep+0xe0/0xe0
[  872.217044][T15334]  ? __lock_acquire+0x7eb0/0x7eb0
[  872.222121][T15334]  ? __mutex_lock+0x30d/0xc80
[  872.226851][T15334]  should_fail_ex+0x394/0x4c0
[  872.231569][T15334]  should_failslab+0x9/0x20
[  872.236103][T15334]  slab_pre_alloc_hook+0x59/0x300
[  872.241184][T15334]  ? __asan_memset+0x22/0x40
[  872.245841][T15334]  ? loopback_open+0x127/0xa50
[  872.250645][T15334]  __kmem_cache_alloc_node+0x53/0x260
[  872.256061][T15334]  ? loopback_open+0x127/0xa50
[  872.260862][T15334]  kmalloc_trace+0x2a/0xe0
[  872.265326][T15334]  loopback_open+0x127/0xa50
[  872.269948][T15334]  ? snd_pcm_attach_substream+0x841/0xad0
[  872.275712][T15334]  snd_pcm_open_substream+0x1023/0x2540
[  872.281306][T15334]  ? snd_pcm_drop+0x250/0x250
[  872.286073][T15334]  snd_pcm_open+0x1d3/0x600
[  872.290655][T15334]  ? snd_pcm_mmap_control_fault+0x270/0x270
[  872.296593][T15334]  ? do_task_dead+0xd0/0xd0
[  872.301147][T15334]  snd_pcm_playback_open+0x6f/0xd0
[  872.306320][T15334]  chrdev_open+0x58c/0x600
[  872.310796][T15334]  ? cd_forget+0x160/0x160
[  872.315261][T15334]  ? fsnotify_perm+0x3ed/0x5e0
[  872.320068][T15334]  do_dentry_open+0x880/0x14b0
[  872.324894][T15334]  ? cd_forget+0x160/0x160
[  872.329358][T15334]  path_openat+0x284f/0x3270
[  872.334047][T15334]  ? do_sys_openat2+0xda/0x1d0
[  872.338942][T15334]  ? __x64_sys_openat+0x139/0x160
[  872.344009][T15334]  ? verify_lock_unused+0x140/0x140
[  872.349245][T15334]  ? do_filp_open+0x430/0x430
[  872.353972][T15334]  do_filp_open+0x1f2/0x430
[  872.358516][T15334]  ? vfs_tmpfile+0x620/0x620
[  872.363158][T15334]  ? _raw_spin_unlock+0x28/0x40
[  872.368047][T15334]  ? alloc_fd+0x590/0x640
[  872.372438][T15334]  do_sys_openat2+0x134/0x1d0
[  872.377174][T15334]  ? do_sys_open+0xe0/0xe0
[  872.381621][T15334]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  872.387645][T15334]  ? lock_chain_count+0x20/0x20
[  872.392557][T15334]  __x64_sys_openat+0x139/0x160
[  872.397463][T15334]  do_syscall_64+0x55/0xb0
[  872.401928][T15334]  ? clear_bhb_loop+0x40/0x90
[  872.406642][T15334]  ? clear_bhb_loop+0x40/0x90
[  872.411364][T15334]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  872.417302][T15334] RIP: 0033:0x7fb2d7f5fd8e
[  872.421760][T15334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  872.441406][T15334] RSP: 002b:00007fb2d8ebab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  872.449858][T15334] RAX: ffffffffffffffda RBX: 00007fb2d8ebb6c0 RCX: 00007fb2d7f5fd8e
[  872.457883][T15334] RDX: 0000000000000002 RSI: 00007fb2d8ebac00 RDI: ffffffffffffff9c
[  872.465883][T15334] RBP: 00007fb2d8ebac00 R08: 0000000000000000 R09: 0000000000000000
[  872.473882][T15334] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  872.481886][T15334] R13: 00007fb2d8226038 R14: 00007fb2d8225fa0 R15: 00007ffcd8aba278
[  872.489946][T15334]  </TASK>
[  872.559687][ T5868] usb 6-1: USB disconnect, device number 26
[  872.669134][T15338] Bluetooth: ISO socket layer initialized
[  872.796847][T15343] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2873'.
[  872.871750][T15344] FAULT_INJECTION: forcing a failure.
[  872.871750][T15344] name failslab, interval 1, probability 5, space 0, times 100
[  872.891858][T15344] CPU: 1 PID: 15344 Comm: syz.5.2872 Not tainted syzkaller #0
[  872.899419][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  872.909537][T15344] Call Trace:
[  872.912845][T15344]  <TASK>
[  872.915870][T15344]  dump_stack_lvl+0x18c/0x250
[  872.920608][T15344]  ? show_regs_print_info+0x20/0x20
[  872.920639][T15344]  ? load_image+0x420/0x420
[  872.920667][T15344]  ? __might_sleep+0xe0/0xe0
[  872.920698][T15344]  ? __lock_acquire+0x7eb0/0x7eb0
[  872.930961][T15344]  ? mark_lock+0x94/0x320
[  872.940598][T15344]  should_fail_ex+0x394/0x4c0
[  872.949654][T15344]  should_failslab+0x9/0x20
[  872.949681][T15344]  slab_pre_alloc_hook+0x59/0x300
[  872.949712][T15344]  kmem_cache_alloc+0x5a/0x2d0
[  872.959250][T15344]  ? mas_alloc_nodes+0x2f8/0x8c0
[  872.959288][T15344]  mas_alloc_nodes+0x2f8/0x8c0
[  872.959335][T15344]  mas_preallocate+0xa1f/0x1170
[  872.969040][T15344]  ? lockdep_softirqs_off+0x440/0x440
[  872.969074][T15344]  ? mas_destroy+0x20a0/0x20a0
[  872.978753][T15344]  ? vma_iter_config+0xe6/0x270
[  872.978792][T15344]  __split_vma+0x2dd/0xc20
[  872.988968][T15344]  ? mmap_write_unlock+0x160/0x160
[  872.998265][T15344]  ? __lock_acquire+0x135d/0x7eb0
[  873.008463][T15344]  do_vmi_align_munmap+0x310/0x16a0
[  873.008515][T15344]  ? verify_lock_unused+0x140/0x140
[  873.008550][T15344]  ? do_vmi_munmap+0x2d0/0x2d0
[  873.019025][T15344]  ? mtree_range_walk+0x68c/0x7b0
[  873.019077][T15344]  ? mas_find_setup+0x47f/0x590
[  873.029060][T15344]  do_vmi_munmap+0x252/0x2d0
[  873.029104][T15344]  do_munmap+0xe6/0x140
[  873.038608][T15344]  ? do_vmi_align_munmap+0x16a0/0x16a0
[  873.038643][T15344]  ? mtree_load+0x7a4/0x840
[  873.048296][T15344]  ? mtree_load+0x109/0x840
[  873.048328][T15344]  ? mas_alloc_nodes+0x8c0/0x8c0
[  873.048352][T15344]  ? down_write_killable+0x181/0x230
[  873.048390][T15344]  mremap_to+0x310/0x5d0
[  873.057434][T15344]  __se_sys_mremap+0x6a8/0x11a0
[  873.057482][T15344]  ? __x64_sys_mremap+0xc0/0xc0
[  873.067747][T15344]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  873.067786][T15344]  ? lock_chain_count+0x20/0x20
[  873.076897][T15344]  ? lockdep_hardirqs_on+0x98/0x150
[  873.087744][T15344]  ? __x64_sys_mremap+0x20/0xc0
[  873.097849][T15344]  do_syscall_64+0x55/0xb0
[  873.097886][T15344]  ? clear_bhb_loop+0x40/0x90
[  873.107357][T15344]  ? clear_bhb_loop+0x40/0x90
[  873.107399][T15344]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  873.107432][T15344] RIP: 0033:0x7f27e2b9f559
[  873.116832][T15344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.127176][T15344] RSP: 002b:00007f27e0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  873.127211][T15344] RAX: ffffffffffffffda RBX: 00007f27e2e25fa0 RCX: 00007f27e2b9f559
[  873.127229][T15344] RDX: 0000000000600000 RSI: 0000000000003000 RDI: 0000200000064000
[  873.127245][T15344] RBP: 00007f27e2c36b20 R08: 0000200000a00000 R09: 0000000000000000
[  873.155295][T15344] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  873.171270][T15344] R13: 00007f27e2e26038 R14: 00007f27e2e25fa0 R15: 00007ffda4cb79e8
[  873.171309][T15344]  </TASK>
[  873.334049][T15344] FAULT_INJECTION: forcing a failure.
[  873.334049][T15344] name failslab, interval 1, probability 5, space 0, times 99
[  873.347204][T15344] CPU: 1 PID: 15344 Comm: syz.5.2872 Not tainted syzkaller #0
[  873.354739][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  873.364857][T15344] Call Trace:
[  873.368202][T15344]  <TASK>
[  873.371170][T15344]  dump_stack_lvl+0x18c/0x250
[  873.375899][T15344]  ? show_regs_print_info+0x20/0x20
[  873.381138][T15344]  ? load_image+0x420/0x420
[  873.385680][T15344]  ? __lock_acquire+0x7eb0/0x7eb0
[  873.390743][T15344]  ? kasan_set_track+0x5f/0x70
[  873.395545][T15344]  ? __kasan_kmalloc+0x8f/0xa0
[  873.400357][T15344]  ? __kmalloc+0xb7/0x240
[  873.404739][T15344]  ? __se_sys_memfd_create+0x25a/0x660
[  873.410284][T15344]  should_fail_ex+0x394/0x4c0
[  873.415018][T15344]  should_failslab+0x9/0x20
[  873.419582][T15344]  slab_pre_alloc_hook+0x59/0x300
[  873.424654][T15344]  kmem_cache_alloc_lru+0x4d/0x2c0
[  873.429795][T15344]  ? shmem_alloc_inode+0x28/0x40
[  873.434775][T15344]  shmem_alloc_inode+0x28/0x40
[  873.439571][T15344]  ? shmem_match+0x160/0x160
[  873.444187][T15344]  new_inode_pseudo+0x63/0x1d0
[  873.448998][T15344]  new_inode+0x22/0x1d0
[  873.453205][T15344]  ? asm_sysvec_call_function_single+0x1a/0x20
[  873.459406][T15344]  shmem_get_inode+0x34d/0xcd0
[  873.464220][T15344]  __shmem_file_setup+0x167/0x2c0
[  873.469281][T15344]  __se_sys_memfd_create+0x357/0x660
[  873.474607][T15344]  do_syscall_64+0x55/0xb0
[  873.479067][T15344]  ? clear_bhb_loop+0x40/0x90
[  873.483785][T15344]  ? clear_bhb_loop+0x40/0x90
[  873.488507][T15344]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  873.494441][T15344] RIP: 0033:0x7f27e2b9f559
[  873.498895][T15344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.518555][T15344] RSP: 002b:00007f27e0df5e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  873.527006][T15344] RAX: ffffffffffffffda RBX: 0000000000009606 RCX: 00007f27e2b9f559
[  873.535016][T15344] RDX: 00007f27e0df5ee0 RSI: 0000000000000000 RDI: 00007f27e2c36d00
[  873.543013][T15344] RBP: 0000200000008400 R08: 00000000ffffffff R09: 0000000000000000
[  873.550999][T15344] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000f80
[  873.558994][T15344] R13: 00007f27e0df5ee0 R14: 00007f27e0df5ea0 R15: 0000200000000fc0
[  873.559034][T15344]  </TASK>
[  873.619949][T12277] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  873.687640][T15344] FAULT_INJECTION: forcing a failure.
[  873.687640][T15344] name failslab, interval 1, probability 5, space 0, times 98
[  873.701871][T15344] CPU: 1 PID: 15344 Comm: syz.5.2872 Not tainted syzkaller #0
[  873.709394][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  873.719491][T15344] Call Trace:
[  873.722801][T15344]  <TASK>
[  873.725774][T15344]  dump_stack_lvl+0x18c/0x250
[  873.730510][T15344]  ? show_regs_print_info+0x20/0x20
[  873.735751][T15344]  ? load_image+0x420/0x420
[  873.740290][T15344]  ? __might_sleep+0xe0/0xe0
[  873.744949][T15344]  ? __lock_acquire+0x7eb0/0x7eb0
[  873.750144][T15344]  should_fail_ex+0x394/0x4c0
[  873.754862][T15344]  should_failslab+0x9/0x20
[  873.759399][T15344]  slab_pre_alloc_hook+0x59/0x300
[  873.764463][T15344]  ? prepend_path+0x8a7/0x950
[  873.769195][T15344]  ? tomoyo_encode+0x2ad/0x570
[  873.773999][T15344]  ? tomoyo_encode+0x2ad/0x570
[  873.778809][T15344]  __kmem_cache_alloc_node+0x53/0x260
[  873.784234][T15344]  ? tomoyo_encode+0x2ad/0x570
[  873.789040][T15344]  __kmalloc+0xa7/0x240
[  873.793244][T15344]  tomoyo_encode+0x2ad/0x570
[  873.797878][T15344]  tomoyo_realpath_from_path+0x57c/0x5c0
[  873.803553][T15344]  ? tomoyo_domain+0xd6/0x120
[  873.808289][T15344]  tomoyo_path_number_perm+0x248/0x5e0
[  873.813791][T15344]  ? tomoyo_path_number_perm+0x217/0x5e0
[  873.819464][T15344]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  873.824965][T15344]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  873.831035][T15344]  ? d_alloc_parallel+0x356/0x1590
[  873.836181][T15344]  ? __lock_acquire+0x7eb0/0x7eb0
[  873.841236][T15344]  ? hook_path_mknod+0x157/0x540
[  873.846221][T15344]  tomoyo_path_mknod+0x14b/0x1a0
[  873.851200][T15344]  ? hook_path_mkdir+0x20/0x20
[  873.856000][T15344]  ? tomoyo_path_symlink+0xf0/0xf0
[  873.861156][T15344]  security_path_mknod+0xf0/0x150
[  873.866220][T15344]  path_openat+0xb72/0x3270
[  873.870777][T15344]  ? do_sys_openat2+0xda/0x1d0
[  873.875590][T15344]  ? do_filp_open+0x430/0x430
[  873.880313][T15344]  do_filp_open+0x1f2/0x430
[  873.884851][T15344]  ? vfs_tmpfile+0x620/0x620
[  873.889498][T15344]  ? _raw_spin_unlock+0x28/0x40
[  873.894394][T15344]  ? alloc_fd+0x590/0x640
[  873.898788][T15344]  do_sys_openat2+0x134/0x1d0
[  873.903506][T15344]  ? do_sys_open+0xe0/0xe0
[  873.907961][T15344]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  873.913979][T15344]  ? lock_chain_count+0x20/0x20
[  873.918910][T15344]  __x64_sys_openat+0x139/0x160
[  873.923809][T15344]  do_syscall_64+0x55/0xb0
[  873.928251][T15344]  ? clear_bhb_loop+0x40/0x90
[  873.932957][T15344]  ? clear_bhb_loop+0x40/0x90
[  873.937691][T15344]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  873.943625][T15344] RIP: 0033:0x7f27e2b9f559
[  873.948101][T15344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.967774][T15344] RSP: 002b:00007f27e0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  873.976288][T15344] RAX: ffffffffffffffda RBX: 00007f27e2e25fa0 RCX: 00007f27e2b9f559
[  873.984308][T15344] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c
[  873.992322][T15344] RBP: 00007f27e2c36b20 R08: 0000000000000000 R09: 0000000000000000
[  874.000329][T15344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  874.008342][T15344] R13: 00007f27e2e26038 R14: 00007f27e2e25fa0 R15: 00007ffda4cb79e8
[  874.016366][T15344]  </TASK>
[  874.026819][T15344] ERROR: Out of memory at tomoyo_realpath_from_path.
[  874.430234][ T5868] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  874.457263][ T5925] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  874.545507][T15358] loop2: detected capacity change from 0 to 128
[  874.620225][ T5868] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  874.642498][ T5925] usb 6-1: Using ep0 maxpacket: 16
[  874.653095][ T5868] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid maxpacket 39037, setting to 64
[  874.669539][ T5868] usb 4-1: config 0 interface 0 has no altsetting 0
[  874.681811][ T5868] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06
[  874.692100][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  874.701546][ T5925] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  874.710968][ T5868] usb 4-1: SerialNumber: syz
[  874.721814][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.731826][ T5868] usb 4-1: config 0 descriptor??
[  874.749832][ T5925] usb 6-1: Product: syz
[  874.754809][T15354] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  874.772162][ T5925] usb 6-1: Manufacturer: syz
[  874.781523][ T5925] usb 6-1: SerialNumber: syz
[  874.794901][ T5925] usb 6-1: config 0 descriptor??
[  874.974094][T15354] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  874.994874][ T5868] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input73
[  875.227244][ T5925] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  875.314682][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  875.327046][    C0] net_ratelimit: 40 callbacks suppressed
[  875.358159][ T5925] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  875.366180][ T5925] usb 6-1: media controller created
[  875.533595][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  875.646145][ T5925] zl10353_read_register: readreg error (reg=127, ret==0)
[  875.666715][T15369] block device autoloading is deprecated and will be removed.
[  875.674810][ T5925] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  875.699339][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  875.714521][T15369] md: invalid raid superblock magic on ram4
[  875.735650][ T5925] usb 6-1: USB disconnect, device number 27
[  875.780267][T15369] md: ram4 does not have a valid v0.0 superblock, not importing!
[  875.818208][T15369] md: md_import_device returned -22
[  875.852070][T10586] usb 4-1: USB disconnect, device number 45
[  876.008416][T15374] syzkaller1: entered promiscuous mode
[  876.029361][T15374] syzkaller1: entered allmulticast mode
[  876.118291][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  876.417154][T10586] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  876.641288][T10586] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  876.673180][T10586] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  876.706251][T10586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.617180][ T5925] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  878.673556][T10586] lg-g15 0003:046D:C222.001C: unknown main item tag 0x0
[  878.838773][ T5925] usb 3-1: Using ep0 maxpacket: 16
[  878.882600][ T5925] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  878.923975][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.966575][ T5925] usb 3-1: Product: syz
[  878.988238][ T5925] usb 3-1: Manufacturer: syz
[  879.026076][ T5925] usb 3-1: SerialNumber: syz
[  879.134100][T10586] lg-g15 0003:046D:C222.001C: unbalanced collection at end of report description
[  879.145813][T10586] lg-g15: probe of 0003:046D:C222.001C failed with error -22
[  879.166422][ T5925] usb 3-1: config 0 descriptor??
[  879.172956][T10586] usb 4-1: USB disconnect, device number 46
[  879.301021][T15417] syzkaller1: entered promiscuous mode
[  879.306574][T15417] syzkaller1: entered allmulticast mode
[  879.632183][ T5925] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  879.668948][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  879.689934][ T5925] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  879.703833][ T5925] usb 3-1: media controller created
[  879.774962][T15431] md: invalid raid superblock magic on ram10
[  879.786498][T15431] md: ram10 does not have a valid v0.90 superblock, not importing!
[  879.816845][T15435] md: invalid raid superblock magic on ram11
[  879.832370][T15435] md: ram11 does not have a valid v0.90 superblock, not importing!
[  879.932499][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  880.058182][T15439] md: array md5 already initialised!
[  880.139180][ T5925] zl10353_read_register: readreg error (reg=127, ret==0)
[  880.158144][ T5925] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  880.182838][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  880.230761][ T5925] usb 3-1: USB disconnect, device number 112
[  880.368307][    C1] net_ratelimit: 38 callbacks suppressed
[  880.567852][T15445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  880.591060][ T5925] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  880.639811][T15451] loop2: detected capacity change from 0 to 512
[  882.064716][T15460] syzkaller1: entered promiscuous mode
[  882.083179][T15460] syzkaller1: entered allmulticast mode
[  882.657938][T10420] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  882.955750][T15472] md: could not open device unknown-block(1,7).
[  883.112395][ T5801] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  883.220661][T10420] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  883.243024][T10420] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  883.290985][T10420] usb 6-1: config 0 interface 0 has no altsetting 0
[  883.307399][ T5801] usb 5-1: Using ep0 maxpacket: 32
[  883.328831][T10420] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  883.339832][ T5801] usb 5-1: too many configurations: 34, using maximum allowed: 8
[  883.367961][T10420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.388967][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  883.408285][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  883.418825][T10420] usb 6-1: config 0 descriptor??
[  883.428678][T15453] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  883.451485][ T5801] usb 5-1: config 0 has no interface number 0
[  883.478172][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  883.490776][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  883.501657][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  883.511050][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  883.521967][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  883.532788][ T5801] usb 5-1: config 0 has no interface number 0
[  883.547206][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  883.568444][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  883.587098][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  883.602050][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  883.613248][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  883.627346][ T5801] usb 5-1: config 0 has no interface number 0
[  883.644011][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  883.678495][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  883.698619][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  883.709173][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  883.717684][ T5898] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  883.744227][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  883.754517][ T5801] usb 5-1: config 0 has no interface number 0
[  883.761402][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  883.773590][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  883.784910][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  883.802245][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  883.837925][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  883.867102][ T5801] usb 5-1: config 0 has no interface number 0
[  883.888638][T10420] belkin 0003:1020:0006.001D: ignoring exceeding usage max
[  883.897719][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  883.913881][ T5898] usb 4-1: Using ep0 maxpacket: 16
[  883.946857][ T5898] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  883.961077][T10420] belkin 0003:1020:0006.001D: No inputs registered, leaving
[  883.977087][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  883.990562][ T5898] usb 4-1: config 0 has no interface number 0
[  883.996814][ T5898] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  884.018876][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  884.036792][T10420] belkin 0003:1020:0006.001D: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.5-1/input0
[  884.052512][ T5801] usb 5-1: unable to read config index 5 descriptor/start: -71
[  884.061669][ T5898] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  884.096379][ T5801] usb 5-1: can't read configurations, error -71
[  884.118813][T10420] usb 6-1: USB disconnect, device number 28
[  884.124951][ T5898] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  884.164414][ T5898] usb 4-1: config 0 interface 1 has no altsetting 0
[  884.188077][ T5898] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  884.234941][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.263147][ T5898] usb 4-1: config 0 descriptor??
[  884.291195][ T5898] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count
[  884.302123][T15499] FAULT_INJECTION: forcing a failure.
[  884.302123][T15499] name failslab, interval 1, probability 5, space 0, times 10000
[  884.356756][T15497] fido_id[15497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  884.373670][T15499] CPU: 1 PID: 15499 Comm: syz.4.2921 Not tainted syzkaller #0
[  884.381304][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  884.391413][T15499] Call Trace:
[  884.394737][T15499]  <TASK>
[  884.397706][T15499]  dump_stack_lvl+0x18c/0x250
[  884.402447][T15499]  ? show_regs_print_info+0x20/0x20
[  884.407715][T15499]  ? load_image+0x420/0x420
[  884.412276][T15499]  ? __might_sleep+0xe0/0xe0
[  884.416932][T15499]  ? __lock_acquire+0x7eb0/0x7eb0
[  884.422023][T15499]  should_fail_ex+0x394/0x4c0
[  884.426959][T15499]  should_failslab+0x9/0x20
[  884.431557][T15499]  slab_pre_alloc_hook+0x59/0x300
[  884.436643][T15499]  ? __lock_acquire+0x1431/0x7eb0
[  884.441723][T15499]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  884.447538][T15499]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  884.454074][T15499]  __kmem_cache_alloc_node+0x53/0x260
[  884.459514][T15499]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  884.459549][T15499]  __kmalloc+0xa7/0x240
[  884.459599][T15499]  tomoyo_realpath_from_path+0xe6/0x5c0
[  884.465869][T15499]  tomoyo_check_open_permission+0x224/0x460
[  884.465905][T15499]  ? tomoyo_check_open_permission+0x1cf/0x460
[  884.465932][T15499]  ? tomoyo_check_path_number_acl+0x280/0x280
[  884.482346][T15499]  ? step_into+0x41a/0xee0
[  884.495030][T15499]  ? lockdep_hardirqs_on+0x98/0x150
[  884.505193][T15499]  ? __asan_memset+0x22/0x40
[  884.505277][T15499]  ? __rwlock_init+0x150/0x150
[  884.514620][T15499]  ? tomoyo_file_open+0xed/0x180
[  884.514662][T15499]  security_file_open+0x62/0xa0
[  884.524473][T15499]  do_dentry_open+0x32b/0x14b0
[  884.524525][T15499]  ? __asan_memcpy+0x40/0x70
[  884.533967][T15499]  path_openat+0x284f/0x3270
[  884.538652][T15499]  ? do_sys_openat2+0xda/0x1d0
[  884.543481][T15499]  ? __x64_sys_openat+0x139/0x160
[  884.548571][T15499]  ? verify_lock_unused+0x140/0x140
[  884.553835][T15499]  ? do_filp_open+0x430/0x430
[  884.553911][T15499]  do_filp_open+0x1f2/0x430
[  884.553943][T15499]  ? vfs_tmpfile+0x620/0x620
[  884.553993][T15499]  ? _raw_spin_unlock+0x28/0x40
[  884.554016][T15499]  ? alloc_fd+0x590/0x640
[  884.577615][T15499]  do_sys_openat2+0x134/0x1d0
[  884.582347][T15499]  ? do_sys_open+0xe0/0xe0
[  884.586816][T15499]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  884.592875][T15499]  ? lock_chain_count+0x20/0x20
[  884.597788][T15499]  __x64_sys_openat+0x139/0x160
[  884.602689][T15499]  do_syscall_64+0x55/0xb0
[  884.607146][T15499]  ? clear_bhb_loop+0x40/0x90
[  884.611864][T15499]  ? clear_bhb_loop+0x40/0x90
[  884.616589][T15499]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  884.622533][T15499] RIP: 0033:0x7f711dd5fd8e
[  884.626984][T15499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  884.646626][T15499] RSP: 002b:00007f711ec35b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  884.655084][T15499] RAX: ffffffffffffffda RBX: 00007f711ec366c0 RCX: 00007f711dd5fd8e
[  884.663088][T15499] RDX: 0000000000000002 RSI: 00007f711ec35c00 RDI: ffffffffffffff9c
[  884.671097][T15499] RBP: 00007f711de36b20 R08: 0000000000000000 R09: 0000000000000000
[  884.679085][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  884.687084][T15499] R13: 00007f711e026128 R14: 00007f711e026090 R15: 00007ffd151d5b48
[  884.695104][T15499]  </TASK>
[  884.804447][T15499] ERROR: Out of memory at tomoyo_realpath_from_path.
[  884.853637][T15499] FAULT_INJECTION: forcing a failure.
[  884.853637][T15499] name failslab, interval 1, probability 5, space 0, times 9999
[  884.868513][T15499] CPU: 1 PID: 15499 Comm: syz.4.2921 Not tainted syzkaller #0
[  884.876048][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  884.886167][T15499] Call Trace:
[  884.889499][T15499]  <TASK>
[  884.892493][T15499]  dump_stack_lvl+0x18c/0x250
[  884.897245][T15499]  ? show_regs_print_info+0x20/0x20
[  884.902510][T15499]  ? load_image+0x420/0x420
[  884.907204][T15499]  ? __lock_acquire+0x7eb0/0x7eb0
[  884.912341][T15499]  should_fail_ex+0x394/0x4c0
[  884.917098][T15499]  should_failslab+0x9/0x20
[  884.921659][T15499]  slab_pre_alloc_hook+0x59/0x300
[  884.926770][T15499]  kmem_cache_alloc_node+0x5e/0x320
[  884.932027][T15499]  ? alloc_vmap_area+0x6f7/0x1e50
[  884.937119][T15499]  alloc_vmap_area+0x6f7/0x1e50
[  884.942075][T15499]  ? vm_map_ram+0xcf0/0xcf0
[  884.946659][T15499]  ? rcu_is_watching+0x15/0xb0
[  884.951507][T15499]  __get_vm_area_node+0x162/0x370
[  884.956611][T15499]  __vmalloc_node_range+0x36f/0x1320
[  884.961967][T15499]  ? n_tty_open+0x1d/0x150
[  884.966453][T15499]  ? lockdep_hardirqs_on+0x98/0x150
[  884.971744][T15499]  ? free_vm_area+0x50/0x50
[  884.976317][T15499]  ? __might_sleep+0xe0/0xe0
[  884.980967][T15499]  ? n_tty_open+0x1d/0x150
[  884.985423][T15499]  vzalloc+0x79/0x90
[  884.989365][T15499]  ? n_tty_open+0x1d/0x150
[  884.993849][T15499]  n_tty_open+0x1d/0x150
[  884.998138][T15499]  tty_ldisc_setup+0xbd/0x240
[  885.002868][T15499]  tty_init_dev+0x275/0x4c0
[  885.007443][T15499]  tty_open+0x7dd/0xcc0
[  885.007528][T15499]  ? __lock_acquire+0x7eb0/0x7eb0
[  885.007564][T15499]  ? tty_compat_ioctl+0x8b0/0x8b0
[  885.022443][T15499]  ? __asan_memset+0x22/0x40
[  885.027108][T15499]  ? do_raw_spin_unlock+0x121/0x230
[  885.032393][T15499]  chrdev_open+0x58c/0x600
[  885.036886][T15499]  ? cd_forget+0x160/0x160
[  885.041400][T15499]  ? fsnotify_perm+0x3ed/0x5e0
[  885.046233][T15499]  do_dentry_open+0x880/0x14b0
[  885.051077][T15499]  ? cd_forget+0x160/0x160
[  885.055569][T15499]  path_openat+0x284f/0x3270
[  885.060251][T15499]  ? do_sys_openat2+0xda/0x1d0
[  885.065094][T15499]  ? __x64_sys_openat+0x139/0x160
[  885.070186][T15499]  ? verify_lock_unused+0x140/0x140
[  885.075442][T15499]  ? do_filp_open+0x430/0x430
[  885.080245][T15499]  do_filp_open+0x1f2/0x430
[  885.084821][T15499]  ? vfs_tmpfile+0x620/0x620
[  885.089523][T15499]  ? _raw_spin_unlock+0x28/0x40
[  885.094435][T15499]  ? alloc_fd+0x590/0x640
[  885.098842][T15499]  do_sys_openat2+0x134/0x1d0
[  885.103590][T15499]  ? do_sys_open+0xe0/0xe0
[  885.108074][T15499]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  885.114132][T15499]  ? lock_chain_count+0x20/0x20
[  885.119056][T15499]  __x64_sys_openat+0x139/0x160
[  885.123985][T15499]  do_syscall_64+0x55/0xb0
[  885.128495][T15499]  ? clear_bhb_loop+0x40/0x90
[  885.133234][T15499]  ? clear_bhb_loop+0x40/0x90
[  885.137982][T15499]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  885.143958][T15499] RIP: 0033:0x7f711dd5fd8e
[  885.148431][T15499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  885.168111][T15499] RSP: 002b:00007f711ec35b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  885.176635][T15499] RAX: ffffffffffffffda RBX: 00007f711ec366c0 RCX: 00007f711dd5fd8e
[  885.184676][T15499] RDX: 0000000000000002 RSI: 00007f711ec35c00 RDI: ffffffffffffff9c
[  885.192705][T15499] RBP: 00007f711de36b20 R08: 0000000000000000 R09: 0000000000000000
[  885.200736][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  885.208761][T15499] R13: 00007f711e026128 R14: 00007f711e026090 R15: 00007ffd151d5b48
[  885.216819][T15499]  </TASK>
[  885.229522][ T5898] elan 0003:04F3:074D.001E: unknown main item tag 0x0
[  885.236417][ T5898] elan 0003:04F3:074D.001E: unbalanced collection at end of report description
[  885.297958][ T5898] elan 0003:04F3:074D.001E: Hid Parse failed
[  885.304133][ T5898] elan: probe of 0003:04F3:074D.001E failed with error -22
[  885.435547][ T5925] usb 4-1: USB disconnect, device number 47
[  885.702633][T15517] md: array md5 already initialised!
[  885.727321][    C1] net_ratelimit: 27 callbacks suppressed
[  885.863065][T15517] md/raid:md5: device ram10 operational as raid disk 0
[  886.024348][T15517] md/raid:md5: not enough operational devices (2/3 failed)
[  886.354608][T15517] md/raid:md5: failed to run raid set.
[  886.381801][T15517] md: pers->run() failed ...
[  886.487161][ T5801] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  886.513572][T15538] FAULT_INJECTION: forcing a failure.
[  886.513572][T15538] name failslab, interval 1, probability 5, space 0, times 10000
[  886.551229][T15538] CPU: 1 PID: 15538 Comm: syz.3.2932 Not tainted syzkaller #0
[  886.558800][T15538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  886.568910][T15538] Call Trace:
[  886.572235][T15538]  <TASK>
[  886.575245][T15538]  dump_stack_lvl+0x18c/0x250
[  886.579987][T15538]  ? show_regs_print_info+0x20/0x20
[  886.585247][T15538]  ? load_image+0x420/0x420
[  886.589812][T15538]  ? __might_sleep+0xe0/0xe0
[  886.594463][T15538]  ? __lock_acquire+0x7eb0/0x7eb0
[  886.599541][T15538]  ? verify_lock_unused+0x140/0x140
[  886.604803][T15538]  should_fail_ex+0x394/0x4c0
[  886.609549][T15538]  should_failslab+0x9/0x20
[  886.614120][T15538]  slab_pre_alloc_hook+0x59/0x300
[  886.619177][T15538]  ? tomoyo_check_open_permission+0x31c/0x460
[  886.625283][T15538]  ? tty_open+0x113/0xcc0
[  886.625314][T15538]  __kmem_cache_alloc_node+0x53/0x260
[  886.625340][T15538]  ? tty_open+0x113/0xcc0
[  886.625366][T15538]  kmalloc_trace+0x2a/0xe0
[  886.625400][T15538]  tty_open+0x113/0xcc0
[  886.625449][T15538]  ? __lock_acquire+0x7eb0/0x7eb0
[  886.625478][T15538]  ? kobject_get_unless_zero+0x163/0x1f0
[  886.625502][T15538]  ? tty_compat_ioctl+0x8b0/0x8b0
[  886.625526][T15538]  ? __asan_memset+0x22/0x40
[  886.625560][T15538]  ? do_raw_spin_unlock+0x121/0x230
[  886.625595][T15538]  chrdev_open+0x58c/0x600
[  886.625625][T15538]  ? cd_forget+0x160/0x160
[  886.625653][T15538]  ? fsnotify_perm+0x3ed/0x5e0
[  886.625680][T15538]  do_dentry_open+0x880/0x14b0
[  886.625722][T15538]  ? cd_forget+0x160/0x160
[  886.659139][T15538]  path_openat+0x284f/0x3270
[  886.669389][T15538]  ? do_sys_openat2+0xda/0x1d0
[  886.678968][T15538]  ? __x64_sys_openat+0x139/0x160
[  886.688259][T15538]  ? verify_lock_unused+0x140/0x140
[  886.697450][T15538]  ? do_filp_open+0x430/0x430
[  886.706877][T15538]  do_filp_open+0x1f2/0x430
[  886.717131][T15538]  ? vfs_tmpfile+0x620/0x620
[  886.717185][T15538]  ? _raw_spin_unlock+0x28/0x40
[  886.717213][T15538]  ? alloc_fd+0x590/0x640
[  886.726430][T15538]  do_sys_openat2+0x134/0x1d0
[  886.735910][T15538]  ? do_sys_open+0xe0/0xe0
[  886.744948][T15538]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  886.755446][T15538]  ? lock_chain_count+0x20/0x20
[  886.755486][T15538]  __x64_sys_openat+0x139/0x160
[  886.765240][T15538]  do_syscall_64+0x55/0xb0
[  886.765275][T15538]  ? clear_bhb_loop+0x40/0x90
[  886.774417][T15538]  ? clear_bhb_loop+0x40/0x90
[  886.774458][T15538]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  886.785045][T15538] RIP: 0033:0x7f7e9cf5fd8e
[  886.785072][T15538] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  886.809111][T15538] RSP: 002b:00007f7e9defab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  886.809151][T15538] RAX: ffffffffffffffda RBX: 00007f7e9defb6c0 RCX: 00007f7e9cf5fd8e
[  886.809168][T15538] RDX: 0000000000000002 RSI: 00007f7e9defac00 RDI: ffffffffffffff9c
[  886.809184][T15538] RBP: 00007f7e9d036b20 R08: 0000000000000000 R09: 0000000000000000
[  886.809199][T15538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  886.809214][T15538] R13: 00007f7e9d226128 R14: 00007f7e9d226090 R15: 00007ffc80307898
[  886.826183][T15538]  </TASK>
[  887.007454][ T5801] usb 5-1: Using ep0 maxpacket: 32
[  887.014977][ T5801] usb 5-1: too many configurations: 34, using maximum allowed: 8
[  887.046148][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  887.070797][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  887.114994][ T5801] usb 5-1: config 0 has no interface number 0
[  887.145308][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  887.213427][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  887.258487][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  887.281576][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  887.297898][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  887.335864][ T5801] usb 5-1: config 0 has no interface number 0
[  887.370979][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  887.422664][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  887.461022][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  887.489597][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  887.507435][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  887.516390][ T5801] usb 5-1: config 0 has no interface number 0
[  887.579145][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  887.607270][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  887.627111][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  887.635698][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  887.654822][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  887.663932][ T5801] usb 5-1: config 0 has no interface number 0
[  887.671157][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  887.683895][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  887.696301][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  887.709282][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  887.719700][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  887.737039][ T5801] usb 5-1: config 0 has no interface number 0
[  887.754180][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  887.783745][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  887.804231][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  887.833090][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  887.847079][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  887.875871][ T5801] usb 5-1: config 0 has no interface number 0
[  887.877594][ T5868] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  887.889750][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  887.933492][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  887.947161][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  887.958902][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  887.987155][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  888.006524][ T5801] usb 5-1: config 0 has no interface number 0
[  888.027202][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  888.045045][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  888.076175][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  888.119781][ T5801] usb 5-1: config 0 has an invalid interface number: 16 but max is 8
[  888.138801][ T5801] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  888.187158][ T5801] usb 5-1: config 0 has no interface number 0
[  888.203831][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  888.252168][ T5801] usb 5-1: config 0 interface 16 altsetting 236 endpoint 0x81 has invalid wMaxPacketSize 0
[  888.296886][ T5801] usb 5-1: config 0 interface 16 has no altsetting 0
[  888.310337][ T5801] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  888.358134][ T5868] usb 3-1: Using ep0 maxpacket: 16
[  888.945931][ T5868] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  888.989700][ T5868] usb 3-1: config 0 has no interface number 0
[  889.028873][ T5868] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  889.072873][ T5868] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  889.117128][ T5868] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  889.185266][ T5868] usb 3-1: config 0 interface 1 has no altsetting 0
[  889.229105][ T5868] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  889.281004][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.353437][ T5868] usb 3-1: config 0 descriptor??
[  889.390603][ T5868] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count
[  889.855149][ T5868] elan 0003:04F3:074D.001F: unknown main item tag 0x0
[  889.884413][ T5868] elan 0003:04F3:074D.001F: unbalanced collection at end of report description
[  889.929230][ T5868] elan 0003:04F3:074D.001F: Hid Parse failed
[  889.963230][ T5868] elan: probe of 0003:04F3:074D.001F failed with error -22
[  890.030387][T15580] md: couldn't update array info. -22
[  890.084294][ T5868] usb 3-1: USB disconnect, device number 113
[  890.098676][T15580] md: could not open device unknown-block(1,8).
[  890.148361][T15580] md: md_import_device returned -16
[  890.259314][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.271997][ T5801] usb 5-1: config 0 descriptor??
[  890.278123][ T5801] usb 5-1: can't set config #0, error -71
[  890.440531][ T5801] usb 5-1: USB disconnect, device number 57
[  890.927676][    C0] net_ratelimit: 41 callbacks suppressed
[  890.976607][T12277] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  891.017726][T15599] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  891.100136][T15599] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  891.134450][T15599] FAULT_INJECTION: forcing a failure.
[  891.134450][T15599] name failslab, interval 1, probability 5, space 0, times 9999
[  891.154760][T15599] CPU: 1 PID: 15599 Comm: syz.4.2952 Not tainted syzkaller #0
[  891.162294][T15599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  891.162311][T15599] Call Trace:
[  891.172399][T15599]  <TASK>
[  891.172411][T15599]  dump_stack_lvl+0x18c/0x250
[  891.172450][T15599]  ? show_regs_print_info+0x20/0x20
[  891.178750][T15599]  ? load_image+0x420/0x420
[  891.178784][T15599]  ? __might_sleep+0xe0/0xe0
[  891.178815][T15599]  ? __lock_acquire+0x7eb0/0x7eb0
[  891.188726][T15599]  should_fail_ex+0x394/0x4c0
[  891.188768][T15599]  should_failslab+0x9/0x20
[  891.188790][T15599]  slab_pre_alloc_hook+0x59/0x300
[  891.197924][T15599]  ? __lock_acquire+0x7eb0/0x7eb0
[  891.197958][T15599]  ? security_sk_alloc+0x4b/0x130
[  891.207717][T15599]  ? security_sk_alloc+0x4b/0x130
[  891.207753][T15599]  __kmem_cache_alloc_node+0x53/0x260
[  891.207782][T15599]  ? security_sk_alloc+0x4b/0x130
[  891.217403][T15599]  __kmalloc+0xa7/0x240
[  891.227500][T15599]  security_sk_alloc+0x4b/0x130
[  891.227541][T15599]  sk_prot_alloc+0x101/0x210
[  891.237965][T15599]  sk_alloc+0x3a/0x350
[  891.247193][T15599]  unix_create1+0xb0/0x780
[  891.247229][T15599]  unix_create+0x14a/0x1f0
[  891.256715][T15599]  __sock_create+0x49e/0x940
[  891.265241][T15599]  __sys_socketpair+0x1c1/0x550
[  891.279405][T15599]  __x64_sys_socketpair+0x9b/0xb0
[  891.284503][T15599]  do_syscall_64+0x55/0xb0
[  891.288975][T15599]  ? clear_bhb_loop+0x40/0x90
[  891.293740][T15599]  ? clear_bhb_loop+0x40/0x90
[  891.298490][T15599]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  891.304447][T15599] RIP: 0033:0x7f711dd9f559
[  891.308917][T15599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  891.328586][T15599] RSP: 002b:00007f711ec57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  891.337064][T15599] RAX: ffffffffffffffda RBX: 00007f711e025fa0 RCX: 00007f711dd9f559
[  891.345099][T15599] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001
[  891.353165][T15599] RBP: 00007f711de36b20 R08: 0000000000000000 R09: 0000000000000000
[  891.361201][T15599] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  891.369207][T15599] R13: 00007f711e026038 R14: 00007f711e025fa0 R15: 00007ffd151d5b48
[  891.369265][T15599]  </TASK>
[  894.082740][ T5801] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  894.184856][T15627] md: array md3 already has disks!
[  894.208104][T15627] md: could not open device unknown-block(1,6).
[  894.217342][T15627] md: error, md_import_device() returned -16
[  894.372319][T15627] md/raid:md3: device ram7 operational as raid disk 0
[  894.397359][T15627] md: pers->run() failed ...
[  894.769164][T15623] loop2: detected capacity change from 0 to 32768
[  895.041275][T10586] usb 5-1: new full-speed USB device number 58 using dummy_hcd
[  895.079591][T15623] JFS: metapage_get_blocks failed
[  895.089384][T15623] ERROR: (device loop2): release_metapage: metapage_write_one() failed
[  895.089384][T15623] 
[  895.103546][T15623] ERROR: (device loop2): remounting filesystem as read-only
[  895.805536][  T116] blkno = 5002c, nblocks = 1
[  895.843380][  T116] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  895.843380][  T116] 
[  896.050752][    C1] net_ratelimit: 33 callbacks suppressed
[  896.077524][T14923] non-latin1 character 0x2e66 found in JFS file name
[  896.103136][T14923] mount with iocharset=utf8 to access
[  896.514393][T15654] BUG: Bad page state in process syz.5.2972  pfn:7720f
[  896.522520][T15654] page:ffffea0001dc83c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x24 pfn:0x7720f
[  896.532886][T15654] flags: 0xfff0000000821c(referenced|uptodate|dirty|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  896.544043][T15654] page_type: 0xffffffff()
[  896.548517][T15654] raw: 00fff0000000821c ffffea00013cedc8 ffffea0001a9ae88 0000000000000000
[  896.557223][T15654] raw: 0000000000000024 ffff88805f2902e8 00000000ffffffff 0000000000000000
[  896.565862][T15654] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  896.573570][T15654] page_owner tracks the page as allocated
[  896.580658][T15654] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 15623, tgid 15622 (syz.2.2961), ts 895036403583, free_ts 895035577603
[  896.599172][T15654]  post_alloc_hook+0x1c1/0x200
[  896.604012][T15654]  get_page_from_freelist+0x2181/0x22a0
[  896.609705][T15654]  __alloc_pages+0x1f0/0x460
[  896.614447][T15654]  folio_alloc+0x1e/0x30
[  896.619296][T15654]  filemap_alloc_folio+0xdf/0x490
[  896.624405][T15654]  do_read_cache_folio+0x381/0x7f0
[  896.629671][T15654]  do_read_cache_page+0x32/0x260
[  896.634684][T15654]  __get_metapage+0x31d/0xfa0
[  896.639526][T15654]  diRead+0x6ec/0xbb0
[  896.643581][T15654]  jfs_iget+0x90/0x440
[  896.647797][T15654]  jfs_lookup+0x221/0x420
[  896.652248][T15654]  __lookup_slow+0x2a1/0x400
[  896.656897][T15654]  lookup_slow+0x53/0x70
[  896.661279][T15654]  walk_component+0x2ad/0x3e0
[  896.666043][T15654]  path_lookupat+0x148/0x420
[  896.670751][T15654]  filename_lookup+0x22d/0x580
[  896.675617][T15654] page last free stack trace:
[  896.680601][T15654]  free_unref_page_prepare+0x7d7/0x8f0
[  896.686117][T15654]  free_unref_page+0x32/0x2e0
[  896.690918][T15654]  tlb_finish_mmu+0x13e/0x220
[  896.695718][T15654]  unmap_region+0x311/0x370
[  896.700403][T15654]  do_vmi_align_munmap+0x1057/0x16a0
[  896.705759][T15654]  do_vmi_munmap+0x252/0x2d0
[  896.710492][T15654]  __vm_munmap+0x19e/0x3c0
[  896.714992][T15654]  __x64_sys_munmap+0x60/0x70
[  896.719844][T15654]  do_syscall_64+0x55/0xb0
[  896.724325][T15654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  896.730396][T15654] Modules linked in:
[  896.734353][T15654] CPU: 0 PID: 15654 Comm: syz.5.2972 Not tainted syzkaller #0
[  896.741876][T15654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  896.751971][T15654] Call Trace:
[  896.755283][T15654]  <TASK>
[  896.758253][T15654]  dump_stack_lvl+0x18c/0x250
[  896.763015][T15654]  ? show_regs_print_info+0x20/0x20
[  896.768294][T15654]  ? swiotlb_print_info+0x70/0x70
[  896.773397][T15654]  bad_page+0x14b/0x170
[  896.777611][T15654]  free_unref_page_prepare+0x884/0x8f0
[  896.783106][T15654]  free_unref_page_list+0xbe/0x860
[  896.788250][T15654]  ? __folio_memcg+0x63/0x170
[  896.792988][T15654]  ? folio_memcg+0x127/0x4a0
[  896.797622][T15654]  release_pages+0x208a/0x2300
[  896.802432][T15654]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  896.808363][T15654]  ? lru_cache_disable+0x30/0x30
[  896.813338][T15654]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  896.819266][T15654]  ? _raw_spin_unlock+0x40/0x40
[  896.824166][T15654]  folio_batch_move_lru+0x571/0x660
[  896.829410][T15654]  ? __mod_lruvec_page_state+0xa5/0x410
[  896.834995][T15654]  ? folio_add_lru+0xce0/0xce0
[  896.839806][T15654]  ? lru_add_drain_cpu+0x880/0x880
[  896.844956][T15654]  ? __mod_lruvec_page_state+0xa5/0x410
[  896.850536][T15654]  ? folio_batch_add_and_move+0x9a/0x2c0
[  896.856204][T15654]  ? folio_add_lru+0xce0/0xce0
[  896.861016][T15654]  ? folio_add_lru+0x323/0xce0
[  896.865834][T15654]  folio_add_lru+0x41c/0xce0
[  896.870471][T15654]  do_wp_page+0x1d29/0x34d0
[  896.875018][T15654]  ? do_wp_page+0x150e/0x34d0
[  896.879742][T15654]  ? folio_put+0xd0/0xd0
[  896.884283][T15654]  ? do_raw_spin_lock+0x11f/0x2b0
[  896.889354][T15654]  ? __rwlock_init+0x150/0x150
[  896.894192][T15654]  handle_mm_fault+0x1300/0x4a40
[  896.899176][T15654]  ? handle_mm_fault+0xe6/0x4a40
[  896.904162][T15654]  ? numa_migrate_prep+0x350/0x350
[  896.909343][T15654]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  896.914664][T15654]  do_user_addr_fault+0x736/0x12d0
[  896.919834][T15654]  exc_page_fault+0x64/0x100
[  896.924489][T15654]  asm_exc_page_fault+0x26/0x30
[  896.929382][T15654] RIP: 0010:__put_user_nocheck_4+0x7/0x10
[  896.935156][T15654] Code: 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09
[  896.954810][T15654] RSP: 0018:ffffc9000de6f8d8 EFLAGS: 00050202
[  896.960924][T15654] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000b40030
[  896.969104][T15654] RDX: ffff88807e598000 RSI: 0000000000000002 RDI: 00000000ffffffff
[  896.977127][T15654] RBP: ffffc9000de6fa70 R08: ffffc9000de6f6a7 R09: 1ffff92001bcded4
[  896.985124][T15654] R10: dffffc0000000000 R11: fffff52001bcded5 R12: 0000000000000002
[  896.993125][T15654] R13: 0000000000000000 R14: 000000000002cf95 R15: 0000200000b40000
[  897.001155][T15654]  ____sys_recvmsg+0x3a9/0x5d0
[  897.005964][T15654]  ? __sys_recvmsg_sock+0x50/0x50
[  897.011036][T15654]  ? import_iovec+0x73/0xa0
[  897.015582][T15654]  ___sys_recvmsg+0x214/0x590
[  897.020324][T15654]  ? __sys_recvmsg+0x2a0/0x2a0
[  897.025143][T15654]  ? __lock_acquire+0x7eb0/0x7eb0
[  897.030202][T15654]  ? __might_fault+0x22/0x120
[  897.034918][T15654]  ? __might_fault+0xc6/0x120
[  897.039624][T15654]  ? __might_fault+0xaa/0x120
[  897.044339][T15654]  do_recvmmsg+0x377/0x810
[  897.048813][T15654]  ? __sys_recvmmsg+0x290/0x290
[  897.053710][T15654]  ? __ia32_sys_get_robust_list+0x110/0x110
[  897.059638][T15654]  ? rcu_read_lock_sched_held+0x8a/0x110
[  897.065354][T15654]  __x64_sys_recvmmsg+0x199/0x250
[  897.070426][T15654]  ? do_recvmmsg+0x810/0x810
[  897.075055][T15654]  ? lockdep_hardirqs_on+0x98/0x150
[  897.080305][T15654]  do_syscall_64+0x55/0xb0
[  897.084786][T15654]  ? clear_bhb_loop+0x40/0x90
[  897.089508][T15654]  ? clear_bhb_loop+0x40/0x90
[  897.094224][T15654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  897.100155][T15654] RIP: 0033:0x7f27e2b9f559
[  897.104605][T15654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  897.124266][T15654] RSP: 002b:00007f27e0dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  897.133258][T15654] RAX: ffffffffffffffda RBX: 00007f27e2e26090 RCX: 00007f27e2b9f559
[  897.141268][T15654] RDX: 0000000004000087 RSI: 0000200000001ac0 RDI: 0000000000000005
[  897.149278][T15654] RBP: 00007f27e2c36b20 R08: 0000000000000000 R09: 0000000000000000
[  897.157287][T15654] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  897.165295][T15654] R13: 00007f27e2e26128 R14: 00007f27e2e26090 R15: 00007ffda4cb79e8
[  897.173332][T15654]  </TASK>
[  897.176830][T15654] Disabling lock debugging due to kernel taint
[  897.284872][T15666] md: could not open device unknown-block(1,6).
[  897.296816][T15666] md: error, md_import_device() returned -16
[  897.369973][T15666] md/raid:md3: device ram7 operational as raid disk 0
[  897.379672][T15666] md: pers->run() failed ...
[  897.599257][T10586] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  897.615660][T10586] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid maxpacket 39037, setting to 64
[  897.636291][T10586] usb 5-1: config 0 interface 0 has no altsetting 0
[  897.644553][T10586] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06
[  897.653803][T10586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  897.662005][T10586] usb 5-1: SerialNumber: syz
[  897.673881][T10586] usb 5-1: config 0 descriptor??
[  897.679919][T15650] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  897.707196][T10586] usb 5-1: Can not set alternate setting to 1, error: -71
[  897.714527][T10586] synaptics_usb: probe of 5-1:0.0 failed with error -71
[  897.726522][T10586] usb 5-1: USB disconnect, device number 58
[  897.798526][ T3546] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.867046][ T3546] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.904493][ T3546] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.965242][ T3546] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.112034][ T3546] hsr_slave_0: left promiscuous mode
[  899.120638][ T3546] hsr_slave_1: left promiscuous mode
[  899.129492][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  899.140126][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_0
[  899.148820][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  899.156266][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_1
[  899.166090][ T3546] bridge_slave_1: left allmulticast mode
[  899.172263][ T3546] bridge_slave_1: left promiscuous mode
[  899.178624][ T3546] bridge0: port 2(bridge_slave_1) entered disabled state
[  899.191642][ T3546] bridge_slave_0: left allmulticast mode
[  899.197895][ T3546] bridge_slave_0: left promiscuous mode
[  899.203730][ T3546] bridge0: port 1(bridge_slave_0) entered disabled state
[  899.226209][ T3546] veth1_macvtap: left promiscuous mode
[  899.233574][ T3546] veth0_macvtap: left promiscuous mode
[  899.241871][ T3546] veth1_vlan: left promiscuous mode
[  899.247959][ T3546] veth0_vlan: left promiscuous mode
[  899.740730][ T3546] team0 (unregistering): Port device team_slave_1 removed
[  899.797081][ T3546] team0 (unregistering): Port device team_slave_0 removed
[  899.851639][ T3546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  899.911652][ T3546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  900.120034][ T3546] bond0 (unregistering): Released all slaves
[  901.168514][    C1] net_ratelimit: 41 callbacks suppressed