last executing test programs:

1m56.537317828s ago: executing program 3 (id=67):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000100)={[{@treelog}, {@nodatacow}, {@skip_balance}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@max_inline={'max_inline', 0x3d, [0x67, 0x70, 0x6d]}}, {@noenospc_debug}, {@clear_cache}, {@commit}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x2d, 0x32, 0x32]}}]}, 0xff, 0x50f3, &(0x7f000000a2c0)="$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")
lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000004c0)=ANY=[], 0x35c, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101100, 0x0)
fsync(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) (fail_nth: 3)

1m53.964941901s ago: executing program 3 (id=76):
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000a00)={'broute\x00', 0x0, 0x100004, 0x52, [0x7, 0x145, 0x1, 0x0, 0x882, 0x8], 0x41, 0x0, &(0x7f0000000900)=""/89}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0xfffffffffffffe3e}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000a80)=""/216}, {&(0x7f0000000600)=""/1}], 0x0, 0x0, 0xffffffffffffff26}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) (async)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0xfffffffffffffe3e}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000a80)=""/216}, {&(0x7f0000000600)=""/1}], 0x0, 0x0, 0xffffffffffffff26}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0)
syz_usb_disconnect(r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010104ee00000000000000020000002400018014000180080001007f00000108000200ac1414000c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c00028005000100080007400000000004000e8008000840e320ece78ac9397d631d160e9ec9aec9f47f3b303e0f239c44e63e3e7cc7d840118bfd0e86a927e424bea9e1f380b2d445"], 0x70}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010104ee00000000000000020000002400018014000180080001007f00000108000200ac1414000c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c00028005000100080007400000000004000e8008000840e320ece78ac9397d631d160e9ec9aec9f47f3b303e0f239c44e63e3e7cc7d840118bfd0e86a927e424bea9e1f380b2d445"], 0x70}}, 0x0)

1m50.31173017s ago: executing program 3 (id=81):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00')
fchdir(r2)
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)={[{@largeio}, {@filestreams}, {@filestreams}, {@prjquota}]}, 0x0, 0xb94e, &(0x7f000009df00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

1m47.229526453s ago: executing program 3 (id=91):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x1c3902, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x80402, 0x0)

1m46.009392503s ago: executing program 3 (id=94):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0050890e1d2cc1bbbdf08d08fe06ff2766758d8955927fab01a7ccdecfc59b2041a9461723f1db971e775e0e358c03b00c510998283ed6f1dba0502d352e58b65a28492b0a7053e14eccd84ac5b3452602d77c0ca0"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8ffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x100000})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000d04100000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0)
bind$bt_l2cap(r2, &(0x7f00000021c0)={0x1f, 0x0, @any, 0x6}, 0xffffffaf)
listen(0xffffffffffffffff, 0x80000002)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x121142, 0x0)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, r7, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x2000c410)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f00000000c0)={{r5}, 0x3ffd, 0x0, 0x2100000})

1m45.409060133s ago: executing program 3 (id=96):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (fail_nth: 3)

1m44.911788501s ago: executing program 32 (id=96):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (fail_nth: 3)

5.865363693s ago: executing program 4 (id=378):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"94e9aa2e2d4bfdbb784e474a691b5107", 0x0, 0x0, {0x3, 0xe926}, {0x4, 0x1}, 0x5, [0x0, 0xc01, 0x80000000000004, 0x9, 0x0, 0x400000000000200, 0x7, 0x5, 0x6, 0x801, 0x8e, 0xfff, 0x0, 0x6995, 0xe2, 0x4]})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x1, 'qv\x00\x00\x00\x00'}]}}}}}}}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="08001f0005000000050011000100000008001f0008"], 0x70}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf254400000008080000", @ANYRES32=r5, @ANYBLOB="04002400080026006c0900000a0018000303030303030000"], 0x34}, 0x1, 0x0, 0x0, 0x24004801}, 0x80)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x14)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

4.953200083s ago: executing program 4 (id=383):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

4.897316378s ago: executing program 1 (id=384):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000080003050700030080"], 0x217) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xa8, 0xc8, 0x340, {0x1e0002a8, 0x7203000000000000}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
close(r1) (rerun: 64)
r4 = syz_open_dev$usbfs(&(0x7f0000000440), 0x0, 0x4c800)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000580)={0x9, 0x1}) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async, rerun: 64)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000400)="259a71a76d0910054c6588a888a2", 0x0, 0xf0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10) (async, rerun: 32)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) (async)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r10 = dup3(r9, r8, 0x0) (async)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async, rerun: 64)
splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) (rerun: 64)

4.797017728s ago: executing program 4 (id=385):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x1207, &(0x7f0000001280)="$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")
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x4)
fcntl$setstatus(r2, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}}, 0x10)
io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0x2000}])
fspick(r1, &(0x7f0000000000)='./file1/../file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file1/../file0', [], 0xa, "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"}, 0x1e4)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c4aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9511e10600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d1795274d58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df83907d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400", 0xfffffffffffffe27}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r7, 0x0, 0x800)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x80, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_IF_ID={0x8}]}, 0x148}}, 0x0)

4.588992908s ago: executing program 1 (id=386):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, 0x0, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x7, 0x50000}]})
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="3e0f8da4000f01d1f3a4ee0f3066b95103000066b80078000066ba000000000f3066b9ad0b00000f320f300f0f8400388e0f20d86635080000000f22d8", 0x3d}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.193802357s ago: executing program 0 (id=389):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='.\x02\x00', 0x8, &(0x7f00000006c0)={[{@dots}, {@dots}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x40}}, {@dots}, {@fat=@quiet}, {@nodots}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@uid}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x9ae5}}]}, 0xfd, 0x1cb, &(0x7f0000000240)="$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") (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x4020440, &(0x7f0000001900), 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600700, 0x19) (async)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) (async)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
ioctl$IOC_PR_REGISTER(r4, 0x401870c8, 0x0) (async)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) (async)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=ascii,noadinicb,adinicb,longad,uid=forget,umask=00000000000000000000002,longad,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7374726963742c00edd5a22bf4eb27adbc1822e1bf1dfd03952e04d9cc720d912021521b25862e34b978bfd137dd793773dd560aa17d735a4036c393aeaecf3c955f1a7446536cdb36"], 0xfe, 0xc22, &(0x7f00000002c0)="$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") (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
bind$inet6(r5, &(0x7f0000000f40)={0xa, 0x4e23, 0x7fff, @local, 0xfffffff7}, 0x1c) (async)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x80c006, &(0x7f00000000c0)=ANY=[], 0xff, 0x2e5, &(0x7f0000000300)="$eJzs3T9rZFUUAPDzJpOZt1GZRWwUiwdaWIXd2iZRVhBTKSNoo8HNguSFhQQCG8TsVn4CS/0cfgkbv4AItoLdWkSvvH+ZmeSNDmYTUH+/6s4995x78+4wqebMp68e7N9/mMWTpz9F/mMWg63Yij+yuB2D6DyOYVzWNwcA/Bv8llL8mv5J5nDw7E8DANyE5v9/Y/WsW9d5JADgmn3w0cfvbe/s3Hu/KPJ4eRLZNIuIg6+Op018+0F8HmXsxZ2YxFlEOteM33l3514Mi8rteP3g9HhaZR588n1bf/uXiDr/uXaiJ/9u0ZjLPz2ersdGFLH9YL076iRe6t9/rVsxlx/TUbzx2tz5N2MSP3wWD6OM+/UxZvlf3i2Kt1PeFqnys0FMx/W6mdRsk1/vfQAAAAAAAAAAAAAAAAAAAAAA8P+wWRRZ076n7t9TTbX9d9bO6vhm25ynGMZif54mP+sKNf2BUtfh5zTFN11/nTtFUaRm4WhWfxivDP2IAAAAAAAAAAAAAAAAAAAAAFSOHp3s75bl3mH/IE0iloT6Bl03gO5r/atljS7NbM1mxlWd52N5wXrBaKW95rsNVGddtnijGsRwGH9d8GlqHD06WY+F0OjC4kG3aX/BW8tDVxiMZ5f7YTSD7mKuVDlduIsX32pen+zvFu2a7iHv72Z/t1fe1flu4S2x+rvuheh9i6b6hGdpIRT5+VGrp/G4OmEdGj2jJz8a9IZ+TymtVufNn5s7ameyusXGaruvt4O59MU1+eW7yJY/56UfGWtX+8QBAAAAAAAAAAAAAAAAAACWqb/ru/Ht3uFRT/DJ/Isvvr4QHVzvyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5tS//1+We4fngzwidsty3BPqBqdtck/o4mAUh0f9O49v8s8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+7PAAAA///5nkAr") (async)
lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r9, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) (async)
syz_open_procfs(0x0, &(0x7f0000000080)='net/nfsfs\x00') (async)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

2.715060713s ago: executing program 2 (id=390):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9f01010018000000000000000c000000f80600000000000002000200000000f7030000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28)

2.447198319s ago: executing program 0 (id=391):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x11, 0xa, 0x0)
bind$rds(r0, 0x0, 0x0)

2.381209945s ago: executing program 1 (id=392):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x30, 0x24, 0x9, {0x9, 0x22, "aed5c0440a28e2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.205360933s ago: executing program 4 (id=393):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100)
close(r0)
r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, r1, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000efffffff040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = dup(r2)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000002480)=0x3)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x1202400, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_L}, {@privport}], [{@smackfshat={'smackfshat', 0x3d, '\x1f+'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wfdno'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = syz_open_procfs(0x0, &(0x7f0000000540)='auxv\x00')
preadv(r6, &(0x7f00000001c0)=[{0x0, 0x25}, {&(0x7f0000000080)=""/37, 0x25}], 0x2, 0x13, 0x5)
umount2(&(0x7f0000000280)='.\x00', 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0x10, 0x2}, {0x1, 0x3}}}, 0x24}}, 0x0)
r9 = socket(0xc8d81b4c53530846, 0x800, 0x10)
bind$rds(r9, 0x0, 0x0)

2.156417558s ago: executing program 0 (id=394):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8)
r1 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000009c0), 0x4)

2.061357967s ago: executing program 0 (id=395):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'rose0\x00', @ifru_mtu=0xd})
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r2 = fanotify_init(0x200, 0x0)
r3 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r4 = dup(r3)
fanotify_mark(r2, 0x1, 0x48000047, r4, 0x0)

1.773179895s ago: executing program 0 (id=396):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00003f0000003f00a7ea3163fdfa964eccac45d3456808f123e0a5222c8d954f8999b06ca46207f2b7bd7d2944fafc2276cc6b8f9629dc50a7c446a710ac55fbda3e39fcbe"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000198, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000800"/15, @ANYBLOB="0000000000000000b708"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9}, 0x94)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
syz_open_dev$loop(0x0, 0x75f, 0x4a7c0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

1.587259964s ago: executing program 2 (id=397):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
write$6lowpan_enable(r0, 0x0, 0x0)

1.514905961s ago: executing program 2 (id=398):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000004000000040000000a"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={r0, &(0x7f0000000700), 0x0}, 0x20)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r3, &(0x7f0000000280)={0x48, 0x0, 0x0, [{0x1, 0x2, 0x4, 0x5, '{@!\''}, {0x1, 0x7, 0x0, 0xffff}]}, 0x48)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x159c}}, 0x0)

1.269210105s ago: executing program 2 (id=399):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd107}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

1.207838811s ago: executing program 2 (id=400):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0x80000, 0x0, <r1=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f00000003c0), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000380)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@empty, @in=@loopback, 0x4e21, 0x7, 0x4e20, 0x8aa, 0xa, 0x20, 0x20, 0x62, r2, r3}, {0x2, 0x1, 0x4, 0x7, 0x2, 0x8000, 0x5, 0x9}, {0x10000, 0x3, 0x81, 0x4}, 0x9c93, 0x6e6bb2, 0x2, 0x1, 0x1, 0x1}, {{@in6=@empty, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x3502, 0x3, 0x0, 0x5, 0x5b, 0xffffffff, 0x8}}, 0xe8)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000005c0)={0xab, {{0xa, 0x0, 0x75, @mcast1}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.075835564s ago: executing program 4 (id=401):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@jqfmt_vfsold}, {}, {@data_err_ignore}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x579, &(0x7f00000003c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYBLOB="00fb3e040b4296a01622bd69168e4563bd1f330aa80f9e985b304045082f85c01ae9238da3e1eecfa2fa969aeddac1"], 0x3e, 0x2)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x64e, &(0x7f0000000300)="$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")
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = geteuid()
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="080100001a0002002dbd7000bfdbdf25fe880000000000000000000000000101000000000000000000000000000000004e2105224e2400e00a0010812b000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fc010000000000000000000000000001000004d43c000000fe880000000000000000000000000001018000000000000046080000000000000100000000000000080000000000000001000000000000000700000000000000000000000000000003000000000000007e000000000000000500000000000000a6040000000000000600000000000000000060007f0000000100000027bd7000033500000e000400e40000000000000010000a002cbd70002dbd70000400000005001900ff000000"], 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x40004)

876.561004ms ago: executing program 4 (id=402):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x15, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@ldst={0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x67, &(0x7f0000000140)=""/103, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x5, 0x5, 0x0, 0x2}, {0x4, 0x1, 0x4, 0xa}, {0x2, 0x4, 0xc}, {0x1, 0x1, 0x0, 0x8}, {0x5, 0x4, 0x10, 0x7}, {0x3, 0x1, 0x9, 0x7}, {0x2, 0x5}], 0x10, 0x3}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=<r1=>0xffffffffffffffff, 0x0, 0x1, 0xffff, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000700), 0x602140, 0x0)
sendmsg$kcm(r3, &(0x7f0000000c40)={&(0x7f0000000840)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000008c0)="0c878b650681932933d1849f4295c88f65a324d0b9a8f9dab255c4dfb65636ad78ad08a699ea3ef466f1372e1490d63c20860d302ec480df3a84eecb5331a5296da93718c9989ec7b769d28c8ef740f07f2d425b24de197566f6625c8c3056ac74757a6ae85a9e432c4ca2c3302d98dd8d070e52eb4aa941ab3f46da570250a1d1d8525a011a22ca62b12987a40412d4ae49dcd583bd7e62d1997bdb1d0dcd0aa9754146a73dc40b0c104656581056f163f83e69a2002df0fe232a1dbc6c9d591572de35177e754a5eaa18ec222143", 0xcf}, {&(0x7f00000009c0)="0b27d7691d52d284d3cc397031ae12fdd93a2d6f2c55d6b1eaa6e5b8c12e7cd4a510b2dd3681c786d08211c6efa20c26340d56f9dd4cfdea73a763246396eaa1890dec80ae8ce0f7d3272cbb89914d5909b840218bd01fcedc323c462038df07c053e1e3581784fd5ce85c439d76778c31063c784d0926dd08d438b527bdbff95cb66cc4604c27914c7421d76fa5dd71fe436ae9f893f6ceeb97d7fb066372b71703ba0f3eebf04a1d00fa045e124a60c72c7f0de8c64c1d0eb97c5e536426d6f628587c3335a157491a4380f393d82b09", 0xd1}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000ac0)="72bf873fa8749b5a4257ed", 0xb}], 0x4, &(0x7f0000000b40)=[{0x88, 0x10d, 0x9, "5e8b26661aba1f4cb56344c5d71ec9965ba2fd1da5bc85a760b540e1d776cbeb61a2efbb438137fa2a606a721b56a82d0a1f69eae38d53b7299bec337f0f1e40348769a486f83cfdd9f8e0226f32723e2b2afbe6ce81bfa0d7372b436cd6200242bc552ae6e614c35423ea85fe5ce158dedbc316"}, {0x20, 0x10f, 0x7c3db720, "29e2142b961ff6a3d1a1b818e5f6ac64"}, {0x48, 0x111, 0x5, "70410800ac0ad95247c3ebc5bc47d698933e92c22e2afc1450557c277640c6ed08710642d37b3873f1f2c1278f72b8a007e5420d"}], 0xf0}, 0x40)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000780)=<r5=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r5, 0xffffffffffffffff, 0x0, 0x5e, &(0x7f00000007c0)=')\xeb\x17\x9d\xa8\xc6\x8e\x88BZ`@r2*\x01\xfe^\xab\a.e\xac\x12\xd1\x81HV\xbf\r\b\x97\xe1\xbd\v\xfde\x91I\xe0\x9d\xaf\xa3\x1bc\x190\xc9\x04\xef\v\xea\x12T\xe0#|H\x98\x94\\\xbcu\x10\v\x90\x97U\x18]\x16\xfb\x1ct\xae\n[,1w\x163_\xca\x7f>S\xefE%:>\xdc_', <r6=>0x0}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r4, r0, 0x21, 0x28, 0x0, @void, @void, @void, @value=r6, r2}, 0x20)
r7 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x88582)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f0000000240)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x1, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4a2e00d9683dda1af1ea09de2b7fb0a0100000000000000000300000000000a000029bf00", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r9, &(0x7f0000000980)={'syz0\x00', {0x0, 0x20}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffefff, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c)
ioctl$UI_GET_SYSNAME(r9, 0x8040552c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r10, &(0x7f0000002000)=""/102400, 0x19000)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
r12 = accept$alg(r11, 0x0, 0x0)
sendmmsg$alg(r12, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004)
r13 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x8c082)
ioctl$LOOP_CONFIGURE(r13, 0x4c0a, &(0x7f0000001280)={r7, 0x6, {0x2a12, 0x80010000, 0x0, 0x2, 0x3, 0x0, 0x0, 0xa, 0x1a, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dd00000000deffe3ff0000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "00000000000000f7ffffffff03c2d8d0fe874028161db200", [0xc00]}})

778.510343ms ago: executing program 0 (id=403):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)={[{@errors_continue}, {@discard_unit_section}, {@alloc_mode_def}, {@six_active_logs}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@background_gc_off}, {@nobarrier}, {@compress_cache}, {@lfs_mode}, {@errors_remount}, {@nocheckpoint_merge}, {@segment_mode}, {@inline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x1e)
chdir(&(0x7f0000000100)='./bus/file0\x00')
write$dsp(r0, &(0x7f00000008c0)="9803", 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x5a063, 0x20a1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x2808000, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c696f636861727365743d63703933362c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c636f6465706167653d3837302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d312c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c0067083272af10ca0e9a1a267a4f89324c16f0a13aafbec36ddda5"], 0x11, 0x2b1, &(0x7f0000001980)="$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")
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="10080400000000001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB="08000880"], 0x3c}}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c"], 0x118}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x3fe0000, 0x7, 0x3c5a, 0x1, 0x7, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf01, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0x20d, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0xfffffffe, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x5, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x200, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x9, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x8, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x6, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814)
r6 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r6, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3)

496.888891ms ago: executing program 1 (id=404):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

264.213374ms ago: executing program 1 (id=405):
unshare(0x2c020400)
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00')
write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x4, 0x4, 0x6}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3}, 0x48)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x2, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x20)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x8)

656.28µs ago: executing program 2 (id=406):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9f01010018000000000000000c000000f80600000000000002000200000000f7030000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28)

0s ago: executing program 1 (id=407):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4)
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000100)={[{@gquota}, {@nolargeio}, {@logbufs={'logbufs', 0x3d, 0x6}}]}, 0x1, 0x983b, &(0x7f000001c700)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x11080})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)

kernel console output (not intermixed with test programs):

audit: type=1326 audit(1761539001.747:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm=86216E7E9BDCC8BF968F4C2B3E484F exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8eaaf907f7 code=0x7ffc0000
[  127.808466][    T9] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[  127.919376][   T27] audit: type=1326 audit(1761539001.747:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm=86216E7E9BDCC8BF968F4C2B3E484F exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  127.934086][ T6375] loop2: detected capacity change from 0 to 256
[  128.004838][ T6375] FAT-fs (loop2): Directory bread(block 64) failed
[  128.009696][   T27] audit: type=1326 audit(1761539001.747:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm=86216E7E9BDCC8BF968F4C2B3E484F exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8eaaf907f7 code=0x7ffc0000
[  128.032176][ T6375] FAT-fs (loop2): Directory bread(block 65) failed
[  128.047959][ T6375] FAT-fs (loop2): Directory bread(block 66) failed
[  128.054997][ T6375] FAT-fs (loop2): Directory bread(block 67) failed
[  128.072411][ T6375] FAT-fs (loop2): Directory bread(block 68) failed
[  128.079030][ T6375] FAT-fs (loop2): Directory bread(block 69) failed
[  128.082399][   T27] audit: type=1326 audit(1761539001.747:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm=86216E7E9BDCC8BF968F4C2B3E484F exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8eaaf8dc2a code=0x7ffc0000
[  128.115139][  T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  128.122120][ T6377] loop3: detected capacity change from 0 to 1024
[  128.135777][ T6375] FAT-fs (loop2): Directory bread(block 70) failed
[  128.151086][ T6375] FAT-fs (loop2): Directory bread(block 71) failed
[  128.171290][ T6375] FAT-fs (loop2): Directory bread(block 72) failed
[  128.184609][ T6377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  128.204649][ T6375] FAT-fs (loop2): Directory bread(block 73) failed
[  128.206081][   T27] audit: type=1326 audit(1761539001.747:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm=86216E7E9BDCC8BF968F4C2B3E484F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  128.214925][ T6377] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  128.317394][ T6356] loop0: detected capacity change from 0 to 32768
[  128.350539][ T6377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.367307][  T788] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  128.376546][ T6356] jfs: Unrecognized mount option "no1uota" or missing value
[  128.415228][  T788] usb 2-1: config 0 has no interface number 0
[  128.467705][  T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.536048][  T788] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.537661][ T6377] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  128.590691][  T788] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  128.634177][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.665571][  T788] usb 2-1: config 0 descriptor??
[  128.669119][ T6380] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.91: missing EA_INODE flag
[  128.724560][ T6382] loop2: detected capacity change from 0 to 512
[  128.743529][ T6382] EXT4-fs: Ignoring removed oldalloc option
[  128.785744][ T6382] EXT4-fs (loop2): 1 truncate cleaned up
[  128.828788][ T6380] EXT4-fs (loop3): Remounting filesystem read-only
[  128.840008][ T6382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.988652][ T6377] overlayfs: failed to get metacopy (-5)
[  129.055704][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.188105][  T788] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0003/input/input5
[  129.314224][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.352418][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.403374][  T788] holtek_kbd 0003:04D9:A055.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1
[  129.487741][  T788] usb 2-1: USB disconnect, device number 3
[  129.584763][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.626474][ T6389] fido_id[6389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  129.871670][  T130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.037920][  T130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.238503][  T130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.309105][ T6396] FAULT_INJECTION: forcing a failure.
[  130.309105][ T6396] name failslab, interval 1, probability 0, space 0, times 0
[  130.335759][ T6396] CPU: 0 PID: 6396 Comm: syz.1.98 Not tainted syzkaller #0
[  130.343047][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  130.353146][ T6396] Call Trace:
[  130.356459][ T6396]  <TASK>
[  130.359416][ T6396]  dump_stack_lvl+0x16c/0x230
[  130.364155][ T6396]  ? show_regs_print_info+0x20/0x20
[  130.369399][ T6396]  ? load_image+0x3b0/0x3b0
[  130.373946][ T6396]  ? __might_sleep+0xe0/0xe0
[  130.378560][ T6396]  ? __lock_acquire+0x7c80/0x7c80
[  130.383610][ T6396]  ? kasan_set_track+0x5f/0x70
[  130.388389][ T6396]  ? __kasan_kmalloc+0x8f/0xa0
[  130.393171][ T6396]  ? __kmalloc+0xb4/0x240
[  130.397522][ T6396]  should_fail_ex+0x39d/0x4d0
[  130.402263][ T6396]  should_failslab+0x9/0x20
[  130.406788][ T6396]  slab_pre_alloc_hook+0x59/0x310
[  130.411839][ T6396]  kmem_cache_alloc_lru+0x4d/0x2e0
[  130.416974][ T6396]  ? shmem_alloc_inode+0x28/0x40
[  130.421937][ T6396]  shmem_alloc_inode+0x28/0x40
[  130.426721][ T6396]  ? shmem_match+0x160/0x160
[  130.431354][ T6396]  new_inode_pseudo+0x63/0x1d0
[  130.436138][ T6396]  new_inode+0x22/0x1b0
[  130.440313][ T6396]  ? __rwlock_init+0x150/0x150
[  130.445115][ T6396]  shmem_get_inode+0x34f/0xcc0
[  130.449925][ T6396]  __shmem_file_setup+0x167/0x2c0
[  130.455008][ T6396]  __se_sys_memfd_create+0x357/0x660
[  130.460339][ T6396]  do_syscall_64+0x55/0xb0
[  130.464786][ T6396]  ? clear_bhb_loop+0x40/0x90
[  130.469480][ T6396]  ? clear_bhb_loop+0x40/0x90
[  130.474174][ T6396]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  130.480095][ T6396] RIP: 0033:0x7ff8e5b8efc9
[  130.484550][ T6396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.504176][ T6396] RSP: 002b:00007ff8e6a0be18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  130.512610][ T6396] RAX: ffffffffffffffda RBX: 0000000000000212 RCX: 00007ff8e5b8efc9
[  130.520629][ T6396] RDX: 00007ff8e6a0bef0 RSI: 0000000000000000 RDI: 00007ff8e5c12960
[  130.528650][ T6396] RBP: 0000200000000140 R08: 00007ff8e6a0bbb7 R09: 00007ff8e6a0be40
[  130.537161][ T6396] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000a40
[  130.545150][ T6396] R13: 00007ff8e6a0bef0 R14: 00007ff8e6a0beb0 R15: 0000200000000040
[  130.553157][ T6396]  </TASK>
[  130.725095][  T130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.861232][ T6399] mkiss: ax0: crc mode is auto.
[  131.232839][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.259907][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.275484][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.290151][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.307500][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  131.322365][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  133.280453][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  133.405849][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.442090][ T5102] Bluetooth: hci3: command tx timeout
[  133.866845][ T6406] chnl_net:caif_netlink_parms(): no params data found
[  134.517109][ T6437] loop0: detected capacity change from 0 to 32768
[  134.661631][ T6456] netlink: 'syz.2.108': attribute type 1 has an invalid length.
[  134.697495][ T6456] netlink: 'syz.2.108': attribute type 2 has an invalid length.
[  134.747222][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.759314][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.783541][ T6406] bridge_slave_0: entered allmulticast mode
[  134.792156][ T6443] syz.1.106 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  134.804680][ T6406] bridge_slave_0: entered promiscuous mode
[  134.843389][ T6459] loop1: detected capacity change from 0 to 512
[  134.873164][ T6459] EXT4-fs: Ignoring removed mblk_io_submit option
[  134.879762][ T6459] EXT4-fs: Ignoring removed bh option
[  134.912301][ T6459] EXT4-fs: Ignoring removed oldalloc option
[  134.926848][ T6459] journal_path: Lookup failure for './file0'
[  134.950411][ T6459] EXT4-fs: error: could not find journal device path
[  134.999591][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.032202][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.072284][ T6406] bridge_slave_1: entered allmulticast mode
[  135.079775][ T6406] bridge_slave_1: entered promiscuous mode
[  135.462046][ T5102] Bluetooth: hci3: command tx timeout
[  135.518390][ T6406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.556267][ T6406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.699018][  T130] hsr_slave_0: left promiscuous mode
[  135.721428][  T130] hsr_slave_1: left promiscuous mode
[  135.738504][  T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.762467][  T130] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.798848][  T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.832254][  T130] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.848125][  T130] bridge_slave_1: left allmulticast mode
[  135.860062][  T130] bridge_slave_1: left promiscuous mode
[  135.872677][  T130] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.923302][  T130] bridge_slave_0: left allmulticast mode
[  135.929035][  T130] bridge_slave_0: left promiscuous mode
[  135.945248][  T130] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.024664][  T130] veth1_macvtap: left promiscuous mode
[  136.030957][  T130] veth0_macvtap: left promiscuous mode
[  136.052184][  T130] veth1_vlan: left promiscuous mode
[  136.057988][  T130] veth0_vlan: left promiscuous mode
[  136.309718][ T6470] loop2: detected capacity change from 0 to 32768
[  136.914381][ T6485] loop0: detected capacity change from 0 to 32768
[  137.505596][  T130] team0 (unregistering): Port device team_slave_1 removed
[  137.542288][ T5102] Bluetooth: hci3: command tx timeout
[  137.574341][  T130] team0 (unregistering): Port device team_slave_0 removed
[  137.630621][  T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.697298][  T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.417745][ T6493] loop2: detected capacity change from 0 to 128
[  138.426209][ T6493] FAT-fs (loop2): Unrecognized mount option "x����k[��3i~4��kW���=��(ҡ)�sa�Ā�6���M5d��L(D�v!�u���"��΍��n����;��Ϧɐ�Jk[��Er�{Ν;sg�t�L6�?Z" or missing value
[  138.480930][ T5953] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  138.595574][  T130] bond0 (unregistering): Released all slaves
[  139.020865][ T6406] team0: Port device team_slave_0 added
[  139.236540][ T6406] team0: Port device team_slave_1 added
[  139.363362][ T6497] loop1: detected capacity change from 0 to 1024
[  139.370871][ T6497] journal_path: Lookup failure for './file0'
[  139.378167][ T6497] EXT4-fs: error: could not find journal device path
[  139.415933][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.463481][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.531941][ T6406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.590386][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.623240][ T5102] Bluetooth: hci3: command tx timeout
[  139.631403][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.726820][ T6406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.716711][ T6406] hsr_slave_0: entered promiscuous mode
[  140.751325][ T6406] hsr_slave_1: entered promiscuous mode
[  140.812195][ T6406] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.819925][ T6406] Cannot create hsr debugfs directory
[  141.880170][ T6517] loop2: detected capacity change from 0 to 4096
[  141.902722][ T6517] __ntfs_error: 6 callbacks suppressed
[  141.902741][ T6517] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  141.917205][ T6517] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  141.930487][ T6517] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  141.966536][ T6517] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  141.992193][ T6517] ntfs: (device loop2): load_system_files(): Failed to load $Volume.
[  142.000478][ T6517] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files.
[  142.033343][ T6517] netlink: 116 bytes leftover after parsing attributes in process `syz.2.122'.
[  142.089196][ T6524] loop1: detected capacity change from 0 to 512
[  142.133184][ T6524] EXT4-fs (loop1): orphan cleanup on readonly fs
[  142.220306][ T6524] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  142.238233][ T6524] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #15: comm syz.1.123: corrupted inode contents
[  142.292364][ T6524] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #15: comm syz.1.123: mark_inode_dirty error
[  142.372854][ T6524] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #15: comm syz.1.123: corrupted inode contents
[  142.437654][ T6524] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3017: inode #15: comm syz.1.123: mark_inode_dirty error
[  142.495228][ T6524] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3020: inode #15: comm syz.1.123: mark inode dirty (error -117)
[  142.572037][ T6524] EXT4-fs warning (device loop1): ext4_evict_inode:272: xattr delete (err -117)
[  142.581291][ T6524] EXT4-fs (loop1): 1 orphan inode deleted
[  142.623997][ T6524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  142.772706][ T6406] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  142.799334][ T6406] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  142.819719][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.822167][ T6406] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  142.923540][ T6406] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  143.062945][ T6547] loop2: detected capacity change from 0 to 2048
[  143.118771][ T6547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.187455][ T6547] FAULT_INJECTION: forcing a failure.
[  143.187455][ T6547] name failslab, interval 1, probability 0, space 0, times 0
[  143.215686][ T6547] CPU: 0 PID: 6547 Comm: syz.2.127 Not tainted syzkaller #0
[  143.223056][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  143.233155][ T6547] Call Trace:
[  143.236480][ T6547]  <TASK>
[  143.239449][ T6547]  dump_stack_lvl+0x16c/0x230
[  143.244190][ T6547]  ? show_regs_print_info+0x20/0x20
[  143.249441][ T6547]  ? load_image+0x3b0/0x3b0
[  143.254002][ T6547]  ? __might_sleep+0xe0/0xe0
[  143.258656][ T6547]  ? __lock_acquire+0x7c80/0x7c80
[  143.263746][ T6547]  should_fail_ex+0x39d/0x4d0
[  143.268479][ T6547]  should_failslab+0x9/0x20
[  143.273029][ T6547]  slab_pre_alloc_hook+0x59/0x310
[  143.278111][ T6547]  kmem_cache_alloc_lru+0x4d/0x2e0
[  143.283289][ T6547]  ? __d_alloc+0x31/0x730
[  143.287684][ T6547]  __d_alloc+0x31/0x730
[  143.291919][ T6547]  d_alloc+0x4e/0x250
[  143.295959][ T6547]  lookup_one_qstr_excl+0xca/0x250
[  143.301107][ T6547]  filename_create+0x222/0x460
[  143.305908][ T6547]  ? kern_path_create+0x50/0x50
[  143.310812][ T6547]  ? __virt_addr_valid+0x18c/0x540
[  143.315950][ T6547]  ? __virt_addr_valid+0x469/0x540
[  143.321098][ T6547]  do_mkdirat+0xa1/0x440
[  143.325390][ T6547]  ? vfs_mkdir+0x440/0x440
[  143.329843][ T6547]  __x64_sys_mkdirat+0x89/0xa0
[  143.334638][ T6547]  do_syscall_64+0x55/0xb0
[  143.339076][ T6547]  ? clear_bhb_loop+0x40/0x90
[  143.343771][ T6547]  ? clear_bhb_loop+0x40/0x90
[  143.348493][ T6547]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.354420][ T6547] RIP: 0033:0x7f8eaaf8d717
[  143.358854][ T6547] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.378680][ T6547] RSP: 002b:00007f8eabddae68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  143.387118][ T6547] RAX: ffffffffffffffda RBX: 00007f8eabddaef0 RCX: 00007f8eaaf8d717
[  143.395108][ T6547] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c
[  143.403098][ T6547] RBP: 0000200000000140 R08: 00002000000000c0 R09: 0000000000000000
[  143.412387][ T6547] R10: 0000200000000140 R11: 0000000000000246 R12: 0000200000000040
[  143.420722][ T6547] R13: 00007f8eabddaeb0 R14: 0000000000000000 R15: 0000000000000000
[  143.428901][ T6547]  </TASK>
[  143.805944][ T6545] loop1: detected capacity change from 0 to 32768
[  144.657583][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.831496][ T6406] 8021q: adding VLAN 0 to HW filter on device team0
[  144.925471][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.932745][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.992105][    T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  145.064102][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.071404][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.161184][ T6531] loop0: detected capacity change from 0 to 40427
[  145.216547][ T6531] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  145.225657][    T8] usb 3-1: Using ep0 maxpacket: 16
[  145.245331][    T8] usb 3-1: unable to read config index 0 descriptor/start: -61
[  145.281307][ T6531] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  145.299044][    T8] usb 3-1: can't read configurations, error -61
[  145.338191][ T6531] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4)
[  145.566942][    T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  145.782414][    T8] usb 3-1: Using ep0 maxpacket: 16
[  145.796381][    T8] usb 3-1: unable to read config index 0 descriptor/start: -61
[  145.831821][    T8] usb 3-1: can't read configurations, error -61
[  145.867754][    T8] usb usb3-port1: attempt power cycle
[  146.041205][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.086217][ T6574] loop1: detected capacity change from 0 to 2048
[  146.117292][ T6574] EXT4-fs: Ignoring removed nobh option
[  146.157849][ T6574] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.129: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349)
[  146.199542][ T6574] EXT4-fs (loop1): Remounting filesystem read-only
[  146.210691][ T6574] EXT4-fs (loop1): get root inode failed
[  146.219831][ T6574] EXT4-fs (loop1): mount failed
[  146.302471][    T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  146.352742][    T8] usb 3-1: Using ep0 maxpacket: 16
[  146.379931][    T8] usb 3-1: unable to read config index 0 descriptor/start: -61
[  146.402709][    T8] usb 3-1: can't read configurations, error -61
[  146.572278][    T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  146.623497][    T8] usb 3-1: Using ep0 maxpacket: 16
[  146.635526][    T8] usb 3-1: unable to read config index 0 descriptor/start: -61
[  146.669268][    T8] usb 3-1: can't read configurations, error -61
[  146.689722][    T8] usb usb3-port1: unable to enumerate USB device
[  146.768958][ T6588] loop1: detected capacity change from 0 to 2048
[  146.915852][ T6406] veth0_vlan: entered promiscuous mode
[  146.980109][ T6406] veth1_vlan: entered promiscuous mode
[  147.069923][ T6406] veth0_macvtap: entered promiscuous mode
[  147.098765][ T6406] veth1_macvtap: entered promiscuous mode
[  147.160654][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.179655][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.190116][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.221721][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.252569][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.273489][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.308358][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.342894][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.381221][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.411939][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.442104][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.471936][ T6406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.501778][ T6609] loop1: detected capacity change from 0 to 2048
[  147.511750][ T6609] EXT4-fs: Ignoring removed nobh option
[  147.512049][ T6406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.565575][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.606244][ T6609] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.133: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349)
[  147.617109][ T6406] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.682095][ T6406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.690935][ T6406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.712315][ T6609] EXT4-fs (loop1): Remounting filesystem read-only
[  147.719009][ T6609] EXT4-fs (loop1): get root inode failed
[  147.732115][ T6406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.772222][ T6609] EXT4-fs (loop1): mount failed
[  148.151303][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.188875][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.306596][  T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.332548][  T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.347164][ T6623] loop2: detected capacity change from 0 to 4096
[  148.508342][ T6626] loop0: detected capacity change from 0 to 4096
[  148.605044][ T6626] ntfs: volume version 3.1.
[  148.621732][ T6623] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  148.749720][   T27] audit: type=1804 audit(1761539023.077:25): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.137" name="/newroot/26/file0/file1" dev="loop0" ino=67 res=1 errno=0
[  149.801646][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  149.863338][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  149.904011][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  150.102878][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  150.313619][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  150.506864][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  150.624833][ T6650] mmap: syz.2.141 (6650) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  152.143160][ T6646] loop0: detected capacity change from 0 to 32768
[  152.171378][ T6646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.140 (6646)
[  152.234400][ T6656] loop2: detected capacity change from 0 to 4096
[  152.287117][ T6646] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.320016][ T6646] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  152.358826][ T6646] BTRFS info (device loop0): turning off barriers
[  152.413060][ T6646] BTRFS info (device loop0): setting nodatasum
[  152.443862][ T6646] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  152.494561][ T6646] BTRFS info (device loop0): use zstd compression, level 3
[  152.533138][ T6646] BTRFS info (device loop0): using free space tree
[  152.559343][ T6646] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  152.592884][ T6646] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  152.613012][ T6646] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  152.667203][ T6646] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  152.734730][ T6646] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  152.813049][ T6646] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  152.898058][ T6646] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  152.948569][ T6646] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  152.983964][ T6646] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  153.052678][ T6646] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  153.146688][ T6646] BTRFS error (device loop0): open_ctree failed: -12
[  153.329752][ T6671] loop2: detected capacity change from 0 to 32768
[  153.371150][ T6671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.144 (6671)
[  153.462893][ T6671] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.482099][ T6671] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  153.521768][ T6671] BTRFS info (device loop2): using free space tree
[  153.599293][ T5953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (5953)
[  154.017583][ T6706] tipc: Failed to remove unknown binding: 66,1,1/0:2408837151/2408837153
[  154.026492][ T6706] tipc: Failed to remove unknown binding: 66,1,1/0:2408837151/2408837153
[  154.043634][ T6706] sp0: Synchronizing with TNC
[  154.247242][ T6671] BTRFS info (device loop2): enabling ssd optimizations
[  154.254422][ T6671] BTRFS info (device loop2): auto enabling async discard
[  154.403821][ T6722] netlink: 'syz.1.151': attribute type 3 has an invalid length.
[  154.493689][ T6722] loop1: detected capacity change from 0 to 1024
[  154.636814][ T6722] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5
[  154.655119][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'.
[  154.712234][ T6729] netlink: 15 bytes leftover after parsing attributes in process `syz.0.152'.
[  154.730156][ T6722] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  154.753200][ T6722] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.151: Failed to acquire dquot type 0
[  154.810144][ T6722] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  154.887856][   T56] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  154.895421][ T6722] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #13: comm syz.1.151: corrupted inode contents
[  155.002478][ T6722] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #13: comm syz.1.151: mark_inode_dirty error
[  155.100618][ T6722] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #13: comm syz.1.151: corrupted inode contents
[  155.156458][ T6722] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.151: mark_inode_dirty error
[  155.173653][ T6722] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #13: comm syz.1.151: corrupted inode contents
[  155.225257][ T6722] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  155.263166][ T6722] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #13: comm syz.1.151: corrupted inode contents
[  155.321147][ T6722] EXT4-fs error (device loop1): ext4_truncate:4294: inode #13: comm syz.1.151: mark_inode_dirty error
[  155.321397][ T5794] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.374563][ T6722] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  155.416141][ T6722] EXT4-fs (loop1): 1 truncate cleaned up
[  155.445239][ T6722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.448179][ T6700] loop4: detected capacity change from 0 to 32768
[  155.740070][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.768670][ T6700] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  155.997044][ T6755] trusted_key: encrypted_key: master key parameter is missing
[  156.119006][ T6757] FAULT_INJECTION: forcing a failure.
[  156.119006][ T6757] name failslab, interval 1, probability 0, space 0, times 0
[  156.152005][ T6700] XFS (loop4): Ending clean mount
[  156.182278][ T6757] CPU: 1 PID: 6757 Comm: syz.1.156 Not tainted syzkaller #0
[  156.189647][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  156.199732][ T6757] Call Trace:
[  156.203028][ T6757]  <TASK>
[  156.205968][ T6757]  dump_stack_lvl+0x16c/0x230
[  156.210712][ T6757]  ? show_regs_print_info+0x20/0x20
[  156.215944][ T6757]  ? load_image+0x3b0/0x3b0
[  156.220476][ T6757]  ? __might_sleep+0xe0/0xe0
[  156.225090][ T6757]  ? __lock_acquire+0x7c80/0x7c80
[  156.230141][ T6757]  ? kasan_set_track+0x5f/0x70
[  156.234929][ T6757]  ? __kasan_kmalloc+0x8f/0xa0
[  156.239733][ T6757]  ? __kmalloc+0xb4/0x240
[  156.244110][ T6757]  should_fail_ex+0x39d/0x4d0
[  156.248829][ T6757]  should_failslab+0x9/0x20
[  156.253365][ T6757]  slab_pre_alloc_hook+0x59/0x310
[  156.258433][ T6757]  kmem_cache_alloc_lru+0x4d/0x2e0
[  156.263569][ T6757]  ? shmem_alloc_inode+0x28/0x40
[  156.268538][ T6757]  shmem_alloc_inode+0x28/0x40
[  156.273317][ T6757]  ? shmem_match+0x160/0x160
[  156.277921][ T6757]  new_inode_pseudo+0x63/0x1d0
[  156.282707][ T6757]  new_inode+0x22/0x1b0
[  156.286881][ T6757]  ? __rwlock_init+0x150/0x150
[  156.291676][ T6757]  shmem_get_inode+0x34f/0xcc0
[  156.296510][ T6757]  __shmem_file_setup+0x167/0x2c0
[  156.301562][ T6757]  __se_sys_memfd_create+0x357/0x660
[  156.306890][ T6757]  do_syscall_64+0x55/0xb0
[  156.311333][ T6757]  ? clear_bhb_loop+0x40/0x90
[  156.316061][ T6757]  ? clear_bhb_loop+0x40/0x90
[  156.320781][ T6757]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.326795][ T6757] RIP: 0033:0x7ff8e5b8efc9
[  156.331230][ T6757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.351048][ T6757] RSP: 002b:00007ff8e6a0be18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  156.359496][ T6757] RAX: ffffffffffffffda RBX: 000000000001f893 RCX: 00007ff8e5b8efc9
[  156.367509][ T6757] RDX: 00007ff8e6a0bef0 RSI: 0000000000000000 RDI: 00007ff8e5c12960
[  156.375503][ T6757] RBP: 0000200000020280 R08: 00007ff8e6a0bbb7 R09: 00007ff8e6a0be40
[  156.383501][ T6757] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000980
[  156.391486][ T6757] R13: 00007ff8e6a0bef0 R14: 00007ff8e6a0beb0 R15: 0000200000000780
[  156.399502][ T6757]  </TASK>
[  156.422361][ T6700] XFS (loop4): Quotacheck needed: Please wait.
[  156.651037][ T6700] XFS (loop4): Quotacheck: Done.
[  156.831720][ T6406] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  156.878456][ T6768] loop0: detected capacity change from 0 to 512
[  157.077829][ T6768] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.160: bad orphan inode 11862016
[  157.140156][ T6768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  157.252117][ T6768] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.498761][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  157.735399][ T6790] loop0: detected capacity change from 0 to 1024
[  157.939742][ T6794] loop4: detected capacity change from 0 to 24
[  157.966314][ T6794] romfs: Unknown parameter '�'
[  158.610995][ T6809] FAULT_INJECTION: forcing a failure.
[  158.610995][ T6809] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.651177][ T6809] CPU: 1 PID: 6809 Comm: syz.2.170 Not tainted syzkaller #0
[  158.658552][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  158.668656][ T6809] Call Trace:
[  158.671982][ T6809]  <TASK>
[  158.674947][ T6809]  dump_stack_lvl+0x16c/0x230
[  158.679681][ T6809]  ? show_regs_print_info+0x20/0x20
[  158.684934][ T6809]  ? load_image+0x3b0/0x3b0
[  158.689491][ T6809]  ? __might_fault+0xaa/0x120
[  158.694228][ T6809]  ? __lock_acquire+0x7c80/0x7c80
[  158.699306][ T6809]  should_fail_ex+0x39d/0x4d0
[  158.704052][ T6809]  _copy_from_iter+0x1d3/0x1290
[  158.708959][ T6809]  ? __virt_addr_valid+0x18c/0x540
[  158.714129][ T6809]  ? __lock_acquire+0x7c80/0x7c80
[  158.719209][ T6809]  ? copyout_mc+0x70/0x70
[  158.723592][ T6809]  ? __virt_addr_valid+0x18c/0x540
[  158.728772][ T6809]  ? __virt_addr_valid+0x18c/0x540
[  158.733945][ T6809]  ? __virt_addr_valid+0x469/0x540
[  158.739117][ T6809]  ? __phys_addr_symbol+0x2f/0x70
[  158.744201][ T6809]  ? __check_object_size+0x506/0xa30
[  158.749556][ T6809]  file_tty_write+0x4d0/0x980
[  158.754301][ T6809]  vfs_write+0x43b/0x940
[  158.758605][ T6809]  ? file_end_write+0x250/0x250
[  158.763545][ T6809]  ? __fget_files+0x44a/0x4d0
[  158.768397][ T6809]  ? __fdget_pos+0x1d8/0x330
[  158.773080][ T6809]  ? ksys_write+0x75/0x250
[  158.777564][ T6809]  ksys_write+0x147/0x250
[  158.781986][ T6809]  ? __ia32_sys_read+0x90/0x90
[  158.786813][ T6809]  ? lockdep_hardirqs_on+0x98/0x150
[  158.792083][ T6809]  do_syscall_64+0x55/0xb0
[  158.796564][ T6809]  ? clear_bhb_loop+0x40/0x90
[  158.801381][ T6809]  ? clear_bhb_loop+0x40/0x90
[  158.806118][ T6809]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.812073][ T6809] RIP: 0033:0x7f8eaaf8efc9
[  158.816530][ T6809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.836190][ T6809] RSP: 002b:00007f8eabddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  158.844745][ T6809] RAX: ffffffffffffffda RBX: 00007f8eab1e5fa0 RCX: 00007f8eaaf8efc9
[  158.852854][ T6809] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000004
[  158.860875][ T6809] RBP: 00007f8eabddb090 R08: 0000000000000000 R09: 0000000000000000
[  158.868897][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.876915][ T6809] R13: 00007f8eab1e6038 R14: 00007f8eab1e5fa0 R15: 00007fffac4a79e8
[  158.884952][ T6809]  </TASK>
[  158.988406][ T6796] loop1: detected capacity change from 0 to 32768
[  159.073309][ T6796] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  159.098362][ T6822] FAULT_INJECTION: forcing a failure.
[  159.098362][ T6822] name failslab, interval 1, probability 0, space 0, times 0
[  159.111285][ T6822] CPU: 0 PID: 6822 Comm: syz.2.172 Not tainted syzkaller #0
[  159.118637][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  159.128740][ T6822] Call Trace:
[  159.132053][ T6822]  <TASK>
[  159.135022][ T6822]  dump_stack_lvl+0x16c/0x230
[  159.139763][ T6822]  ? show_regs_print_info+0x20/0x20
[  159.145104][ T6822]  ? load_image+0x3b0/0x3b0
[  159.149668][ T6822]  ? __might_sleep+0xe0/0xe0
[  159.154303][ T6822]  ? __lock_acquire+0x7c80/0x7c80
[  159.159469][ T6822]  ? prepend_path+0x4b/0x960
[  159.164101][ T6822]  should_fail_ex+0x39d/0x4d0
[  159.168816][ T6822]  should_failslab+0x9/0x20
[  159.173348][ T6822]  slab_pre_alloc_hook+0x59/0x310
[  159.178404][ T6822]  ? __asan_memcpy+0x40/0x70
[  159.183026][ T6822]  ? tomoyo_encode+0x28b/0x540
[  159.187829][ T6822]  ? tomoyo_encode+0x28b/0x540
[  159.192639][ T6822]  __kmem_cache_alloc_node+0x53/0x260
[  159.198069][ T6822]  ? prepend_path+0x4b/0x960
[  159.202697][ T6822]  ? tomoyo_encode+0x28b/0x540
[  159.207573][ T6822]  __kmalloc+0xa4/0x240
[  159.212048][ T6822]  tomoyo_encode+0x28b/0x540
[  159.216676][ T6822]  tomoyo_realpath_from_path+0x592/0x5d0
[  159.222355][ T6822]  tomoyo_path_number_perm+0x1ea/0x590
[  159.227865][ T6822]  ? tomoyo_path_number_perm+0x1ba/0x590
[  159.233526][ T6822]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  159.239014][ T6822]  ? ksys_write+0x1c1/0x250
[  159.243568][ T6822]  ? __fget_files+0x28/0x4d0
[  159.248225][ T6822]  security_file_ioctl+0x70/0xa0
[  159.253196][ T6822]  __se_sys_ioctl+0x48/0x170
[  159.257909][ T6822]  do_syscall_64+0x55/0xb0
[  159.262346][ T6822]  ? clear_bhb_loop+0x40/0x90
[  159.267037][ T6822]  ? clear_bhb_loop+0x40/0x90
[  159.271729][ T6822]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.277637][ T6822] RIP: 0033:0x7f8eaaf8efc9
[  159.282067][ T6822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.301692][ T6822] RSP: 002b:00007f8eabddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  159.310128][ T6822] RAX: ffffffffffffffda RBX: 00007f8eab1e5fa0 RCX: 00007f8eaaf8efc9
[  159.318119][ T6822] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000003
[  159.326113][ T6822] RBP: 00007f8eabddb090 R08: 0000000000000000 R09: 0000000000000000
[  159.334144][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.342131][ T6822] R13: 00007f8eab1e6038 R14: 00007f8eab1e5fa0 R15: 00007fffac4a79e8
[  159.350135][ T6822]  </TASK>
[  159.358844][ T6822] ERROR: Out of memory at tomoyo_realpath_from_path.
[  159.663781][ T6796] XFS (loop1): Ending clean mount
[  159.693816][ T6796] XFS (loop1): Quotacheck needed: Please wait.
[  159.827717][ T6796] XFS (loop1): Quotacheck: Done.
[  159.990905][ T6833] loop4: detected capacity change from 0 to 2048
[  160.069556][ T6814] loop0: detected capacity change from 0 to 32768
[  160.078510][ T6833]  loop4: p1 < > p3
[  160.092615][ T6814] XFS: attr2 mount option is deprecated.
[  160.111220][ T6833] loop4: p3 size 134217728 extends beyond EOD, truncated
[  160.200298][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.202845][ T5157]  loop4: p1 < > p3
[  160.312334][ T5157] loop4: p3 size 134217728 extends beyond EOD, truncated
[  160.367221][ T6814] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.823542][ T6814] XFS (loop0): Ending clean mount
[  160.848347][ T6814] XFS (loop0): Quotacheck needed: Please wait.
[  160.970906][ T6814] XFS (loop0): Quotacheck: Done.
[  161.032702][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'.
[  161.108567][ T5953] udevd[5953]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  161.126699][ T6814] fuse: Bad value for 'fd'
[  161.134276][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  161.314558][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.342197][ T6858] loop1: detected capacity change from 0 to 4096
[  161.606253][ T6850] loop2: detected capacity change from 0 to 32768
[  163.065585][ T6867] loop1: detected capacity change from 0 to 32768
[  163.359565][ T6867] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  163.447815][ T6882] loop0: detected capacity change from 0 to 128
[  163.637238][ T6867] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  163.939004][ T1141] (kworker/u4:7,1141,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  164.057773][ T6882] EXT4-fs (loop0): Test dummy encryption mode enabled
[  164.099554][ T6882] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c118, mo2=0002]
[  164.146845][ T6882] System zones: 1-3, 19-19, 35-36
[  164.186674][ T6882] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  164.226649][ T6882] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.399121][ T6882] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  164.410849][ T5788] ocfs2: Unmounting device (7,1) on (node local)
[  164.449840][ T6882] EXT4-fs error (device loop0): ext4_validate_block_bitmap:421: comm syz.0.184: bg 0: bad block bitmap checksum
[  164.660007][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  164.712182][    T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  164.904323][ T6886] loop4: detected capacity change from 0 to 32768
[  164.934001][ T6915] loop0: detected capacity change from 0 to 128
[  164.989422][ T6915] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  165.032486][ T6886] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  165.052248][ T6915] hpfs: filesystem error: improperly stopped
[  165.058332][ T6915] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  165.096856][ T6915] hpfs: You really don't want any checks? You are crazy...
[  165.106563][ T6915] hpfs: hpfs_map_sector(): read error
[  165.112070][ T6915] hpfs: code page support is disabled
[  165.119741][ T6915] hpfs: hpfs_map_4sectors(): unaligned read
[  165.125882][    T8] usb 3-1: Using ep0 maxpacket: 16
[  165.132950][ T6915] hpfs: hpfs_map_4sectors(): unaligned read
[  165.139361][ T6915] hpfs: filesystem error: unable to find root dir
[  165.164772][    T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.166084][ T6886] XFS (loop4): Ending clean mount
[  165.179666][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.202922][    T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  165.213116][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.221159][    T8] usb 3-1: Product: syz
[  165.243550][    T8] usb 3-1: Manufacturer: syz
[  165.253284][    T8] usb 3-1: SerialNumber: syz
[  165.380445][ T6406] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  165.567155][ T6905] loop2: detected capacity change from 0 to 2048
[  165.594478][ T6905] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  165.648795][ T6905] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932307, location=3932307
[  165.661189][ T6905] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  165.716701][ T6905] UDF-fs: Scanning with blocksize 512 failed
[  165.756535][ T6905] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  165.822176][ T6905] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932307, location=3932307
[  165.867571][ T6905] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  165.899668][ T6905] UDF-fs: Scanning with blocksize 1024 failed
[  165.927215][ T6905] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  165.953940][ T6905] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932307, location=3932307
[  166.002925][ T6905] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  166.010652][ T6905] UDF-fs: Scanning with blocksize 2048 failed
[  166.034994][ T6905] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  166.059596][ T6905] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932307, location=3932307
[  166.072143][ T6932] syz.4.191 uses obsolete (PF_INET,SOCK_PACKET)
[  166.112371][ T6905] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  166.120098][ T6905] UDF-fs: Scanning with blocksize 4096 failed
[  166.156399][ T6905] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  166.523717][    T8] usb 3-1: cannot find UAC_HEADER
[  166.634207][    T8] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  166.654412][    T8] usb 3-1: USB disconnect, device number 11
[  166.687081][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.788580][ T6937] loop1: detected capacity change from 0 to 32768
[  166.848135][ T6937] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  166.956406][ T6937] XFS (loop1): Ending clean mount
[  166.984927][   T27] audit: type=1400 audit(1761539041.357:26): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6951 comm="syz.0.194"
[  166.997769][ T6952] loop0: detected capacity change from 0 to 512
[  167.101829][ T6952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.213514][ T6942] loop4: detected capacity change from 0 to 32768
[  167.226230][ T5788] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  167.285555][ T6942] FAULT_INJECTION: forcing a failure.
[  167.285555][ T6942] name failslab, interval 1, probability 0, space 0, times 0
[  167.306536][ T6942] CPU: 1 PID: 6942 Comm: syz.4.193 Not tainted syzkaller #0
[  167.313915][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  167.324026][ T6942] Call Trace:
[  167.327343][ T6942]  <TASK>
[  167.330322][ T6942]  dump_stack_lvl+0x16c/0x230
[  167.335122][ T6942]  ? show_regs_print_info+0x20/0x20
[  167.340441][ T6942]  ? load_image+0x3b0/0x3b0
[  167.344997][ T6942]  ? __might_sleep+0xe0/0xe0
[  167.349611][ T6942]  ? __lock_acquire+0x7c80/0x7c80
[  167.354658][ T6942]  should_fail_ex+0x39d/0x4d0
[  167.359365][ T6942]  should_failslab+0x9/0x20
[  167.363896][ T6942]  slab_pre_alloc_hook+0x59/0x310
[  167.368950][ T6942]  kmem_cache_alloc_lru+0x4d/0x2e0
[  167.374083][ T6942]  ? __d_alloc+0x31/0x730
[  167.378444][ T6942]  __d_alloc+0x31/0x730
[  167.382646][ T6942]  d_alloc_parallel+0xde/0x1530
[  167.387552][ T6942]  ? lockdep_init_map_type+0xa1/0x880
[  167.393031][ T6942]  ? lockdep_softirqs_off+0x430/0x430
[  167.398420][ T6942]  ? d_hash_and_lookup+0x1b0/0x1b0
[  167.403564][ T6942]  ? __init_waitqueue_head+0xa9/0x150
[  167.408958][ T6942]  __lookup_slow+0x117/0x3b0
[  167.413580][ T6942]  ? lookup_one_len+0x2c0/0x2c0
[  167.418473][ T6942]  ? try_to_unlazy+0x34c/0x5a0
[  167.423271][ T6942]  ? down_read+0x1ac/0x2e0
[  167.427730][ T6942]  lookup_slow+0x53/0x70
[  167.432006][ T6942]  walk_component+0x2be/0x3f0
[  167.436704][ T6942]  ? path_lookupat+0x15c/0x440
[  167.441492][ T6942]  path_lookupat+0x169/0x440
[  167.446116][ T6942]  filename_lookup+0x1f4/0x510
[  167.450955][ T6942]  ? __virt_addr_valid+0x18c/0x540
[  167.456134][ T6942]  ? hashlen_string+0x110/0x110
[  167.461032][ T6942]  ? strncpy_from_user+0x197/0x2e0
[  167.466171][ T6942]  ? getname_flags+0x20a/0x500
[  167.470962][ T6942]  user_path_at_empty+0x42/0x60
[  167.475853][ T6942]  __se_sys_chdir+0x95/0x290
[  167.480463][ T6942]  ? __x64_sys_chdir+0x40/0x40
[  167.485260][ T6942]  ? lockdep_hardirqs_on+0x98/0x150
[  167.490487][ T6942]  do_syscall_64+0x55/0xb0
[  167.494936][ T6942]  ? clear_bhb_loop+0x40/0x90
[  167.499634][ T6942]  ? clear_bhb_loop+0x40/0x90
[  167.504336][ T6942]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.510271][ T6942] RIP: 0033:0x7fa2c3d8efc9
[  167.514704][ T6942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.534335][ T6942] RSP: 002b:00007fa2c1ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
[  167.542767][ T6942] RAX: ffffffffffffffda RBX: 00007fa2c3fe5fa0 RCX: 00007fa2c3d8efc9
[  167.550761][ T6942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340
[  167.558751][ T6942] RBP: 00007fa2c1ff6090 R08: 0000000000000000 R09: 0000000000000000
[  167.566837][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.574837][ T6942] R13: 00007fa2c3fe6038 R14: 00007fa2c3fe5fa0 R15: 00007ffc27d2e078
[  167.582839][ T6942]  </TASK>
[  167.697719][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.028361][ T6965] netlink: 'syz.4.198': attribute type 7 has an invalid length.
[  168.091998][ T6965] netlink: 'syz.4.198': attribute type 8 has an invalid length.
[  168.850514][ T6957] loop2: detected capacity change from 0 to 32768
[  168.862006][ T5798] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  168.914570][ T6957] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  168.929885][ T6961] loop0: detected capacity change from 0 to 32768
[  169.018730][ T6967] loop4: detected capacity change from 0 to 32768
[  169.018821][ T6957] XFS (loop2): Ending clean mount
[  169.030697][ T5798] usb 2-1: device descriptor read/64, error -71
[  169.351198][ T5798] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  169.370302][ T6994] loop0: detected capacity change from 0 to 64
[  169.542151][ T5798] usb 2-1: device descriptor read/64, error -71
[  169.712681][ T5798] usb usb2-port1: attempt power cycle
[  169.858772][ T5794] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  169.919821][ T7001] loop0: detected capacity change from 0 to 64
[  169.975619][ T7001] IPVS: length: 228 != 24
[  170.142310][ T5798] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  170.222510][ T5798] usb 2-1: device descriptor read/8, error -71
[  170.491968][ T5798] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  170.522862][ T5798] usb 2-1: device descriptor read/8, error -71
[  170.582129][    T8] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  170.642201][ T5798] usb usb2-port1: unable to enumerate USB device
[  170.774492][    T8] usb 1-1: unable to get BOS descriptor or descriptor too short
[  170.783049][    T8] usb 1-1: not running at top speed; connect to a high speed hub
[  170.803427][    T8] usb 1-1: config 129 has an invalid interface number: 135 but max is 0
[  170.811846][    T8] usb 1-1: config 129 has an invalid interface number: 5 but max is 0
[  170.823640][    T8] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  170.833317][    T8] usb 1-1: config 129 has no interface number 0
[  170.839704][    T8] usb 1-1: config 129 has no interface number 1
[  170.846618][    T8] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  170.860559][    T8] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  170.882156][    T8] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  170.905685][    T8] usb 1-1: config 129 interface 135 has no altsetting 0
[  170.922001][    T8] usb 1-1: config 129 interface 5 has no altsetting 0
[  170.944007][    T8] usb 1-1: language id specifier not provided by device, defaulting to English
[  170.966824][    T8] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  170.983408][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.002090][    T8] usb 1-1: SerialNumber: syz
[  171.124565][ T7022] __vm_enough_memory: pid: 7022, comm: syz.2.205, not enough memory for the allocation
[  171.159652][ T7022] syz.2.205[7022] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  171.159839][ T7022] syz.2.205[7022] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  171.240865][ T7022] loop2: detected capacity change from 0 to 512
[  171.292548][ T7022] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  171.337168][    T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  171.354257][    T8] usb 1-1: MIDIStreaming interface descriptor not found
[  171.396982][ T7022] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.205: bg 0: block 5: invalid block bitmap
[  171.452847][ T7022] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  171.497144][ T7022] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.205: invalid indirect mapped block 3 (level 2)
[  171.565607][    T8] usb 1-1: USB disconnect, device number 3
[  171.582724][ T7022] EXT4-fs (loop2): 2 truncates cleaned up
[  171.619954][ T7022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.795989][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  171.930264][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.218161][ T5102] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  172.846008][ T7043] FAULT_INJECTION: forcing a failure.
[  172.846008][ T7043] name failslab, interval 1, probability 0, space 0, times 0
[  172.930818][ T7043] CPU: 1 PID: 7043 Comm: syz.2.207 Not tainted syzkaller #0
[  172.938286][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  172.948476][ T7043] Call Trace:
[  172.951878][ T7043]  <TASK>
[  172.954855][ T7043]  dump_stack_lvl+0x16c/0x230
[  172.959597][ T7043]  ? show_regs_print_info+0x20/0x20
[  172.964867][ T7043]  ? load_image+0x3b0/0x3b0
[  172.969434][ T7043]  ? __might_sleep+0xe0/0xe0
[  172.974208][ T7043]  ? __lock_acquire+0x7c80/0x7c80
[  172.979289][ T7043]  should_fail_ex+0x39d/0x4d0
[  172.984025][ T7043]  should_failslab+0x9/0x20
[  172.988580][ T7043]  slab_pre_alloc_hook+0x59/0x310
[  172.993658][ T7043]  ? tomoyo_encode+0x28b/0x540
[  172.998477][ T7043]  ? tomoyo_encode+0x28b/0x540
[  173.003299][ T7043]  __kmem_cache_alloc_node+0x53/0x260
[  173.008723][ T7043]  ? tomoyo_realpath_from_path+0x5d0/0x5d0
[  173.014689][ T7043]  ? tomoyo_encode+0x28b/0x540
[  173.021433][ T7043]  __kmalloc+0xa4/0x240
[  173.025743][ T7043]  tomoyo_encode+0x28b/0x540
[  173.030415][ T7043]  tomoyo_realpath_from_path+0x592/0x5d0
[  173.036130][ T7043]  tomoyo_path_number_perm+0x1ea/0x590
[  173.041653][ T7043]  ? tomoyo_path_number_perm+0x1ba/0x590
[  173.047441][ T7043]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  173.053008][ T7043]  ? make_kuid+0x640/0x640
[  173.057483][ T7043]  ? down_write+0x162/0x1f0
[  173.062053][ T7043]  tomoyo_path_chown+0x46/0xc0
[  173.066927][ T7043]  security_path_chown+0xe1/0x140
[  173.072006][ T7043]  chown_common+0x3aa/0x5a0
[  173.076593][ T7043]  ? __ia32_sys_chmod+0x70/0x70
[  173.081494][ T7043]  ? rcu_read_lock_any_held+0xb4/0x120
[  173.087008][ T7043]  ? rcu_read_lock_bh_held+0xe0/0xe0
[  173.092359][ T7043]  ? __mnt_want_write+0x223/0x2a0
[  173.097454][ T7043]  ? mnt_want_write_file+0x178/0x200
[  173.102807][ T7043]  ksys_fchown+0xed/0x160
[  173.107192][ T7043]  __x64_sys_fchown+0x7a/0x90
[  173.111929][ T7043]  do_syscall_64+0x55/0xb0
[  173.116416][ T7043]  ? clear_bhb_loop+0x40/0x90
[  173.121173][ T7043]  ? clear_bhb_loop+0x40/0x90
[  173.125915][ T7043]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  173.131864][ T7043] RIP: 0033:0x7f8eaaf8efc9
[  173.136321][ T7043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.155983][ T7043] RSP: 002b:00007f8eabddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d
[  173.164462][ T7043] RAX: ffffffffffffffda RBX: 00007f8eab1e5fa0 RCX: 00007f8eaaf8efc9
[  173.172484][ T7043] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000004
[  173.180594][ T7043] RBP: 00007f8eabddb090 R08: 0000000000000000 R09: 0000000000000000
[  173.188613][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.196648][ T7043] R13: 00007f8eab1e6038 R14: 00007f8eab1e5fa0 R15: 00007fffac4a79e8
[  173.204690][ T7043]  </TASK>
[  173.258166][ T7043] ERROR: Out of memory at tomoyo_realpath_from_path.
[  174.051986][    T8] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  174.264089][ T5791] Bluetooth: hci1: command tx timeout
[  174.278309][    T8] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  174.319252][    T8] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.339490][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  174.346748][    T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  174.352319][ T7064] loop1: detected capacity change from 0 to 32768
[  174.355993][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.375531][    T8] usb 3-1: config 0 descriptor??
[  174.443851][ T7064] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  174.465344][ T7064] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  174.492822][ T7064] BTRFS info (device loop1): using free space tree
[  174.614183][ T7064] BTRFS info (device loop1): enabling ssd optimizations
[  174.621226][ T7064] BTRFS info (device loop1): auto enabling async discard
[  174.666598][    T8] hid-rmi 0003:06CB:81A7.0004: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0
[  174.708510][ T7071] loop4: detected capacity change from 0 to 32768
[  174.740247][ T7106] usb usb1: usbfs: process 7106 (syz.0.217) did not claim interface 0 before use
[  174.775619][ T7064] warning: `syz.1.211' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  174.794420][    T8] usb 3-1: USB disconnect, device number 12
[  174.880900][ T7071] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  174.938983][ T7108] fido_id[7108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  175.058285][ T7120] loop0: detected capacity change from 0 to 64
[  175.137404][ T5788] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.280625][ T7071] XFS (loop4): Ending clean mount
[  176.026156][ T6406] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.342641][ T5102] Bluetooth: hci1: command 0x0406 tx timeout
[  176.548509][ T7130] loop2: detected capacity change from 0 to 32768
[  176.584940][ T7130] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.220 (7130)
[  176.673092][ T7130] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  176.712457][ T7130] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  176.721288][ T7130] BTRFS info (device loop2): using free space tree
[  176.786494][ T7132] loop1: detected capacity change from 0 to 32768
[  176.813221][ T7132] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.219 (7132)
[  176.922017][ T7130] BTRFS info (device loop2): enabling ssd optimizations
[  176.924545][ T7132] x_tables: duplicate underflow at hook 1
[  176.939397][ T7130] BTRFS info (device loop2): auto enabling async discard
[  176.985083][ T5798] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  177.145023][ T5953] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (5953)
[  177.157643][ T5794] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.183615][ T5798] usb 5-1: Using ep0 maxpacket: 16
[  177.208193][ T5798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.265239][ T5798] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  177.304217][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.355636][ T5798] usb 5-1: config 0 descriptor??
[  178.454888][ T5798] kye 0003:0458:500F.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  178.603235][ T5798] kye 0003:0458:500F.0005: unknown main item tag 0x0
[  178.610008][ T5798] kye 0003:0458:500F.0005: unknown main item tag 0x0
[  178.617306][ T5798] kye 0003:0458:500F.0005: unknown main item tag 0x0
[  178.642048][ T5798] kye 0003:0458:500F.0005: unknown main item tag 0x0
[  178.698005][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.708156][ T5798] kye 0003:0458:500F.0005: unknown main item tag 0x0
[  178.745168][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.758399][ T5798] kye 0003:0458:500F.0005: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.4-1/input0
[  178.926370][ T5798] kye 0003:0458:500F.0005: tablet-enabling feature report not found
[  178.991960][ T5798] kye 0003:0458:500F.0005: tablet enabling failed
[  179.119746][ T5798] usb 5-1: USB disconnect, device number 2
[  179.302744][ T7194] loop0: detected capacity change from 0 to 2048
[  179.347673][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'.
[  179.355475][ T7194] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  179.416738][ T7196] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.452113][ T7194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.541075][ T7195] fido_id[7195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  179.556602][ T7200] loop1: detected capacity change from 0 to 2048
[  179.669422][ T7200] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  179.735364][ T7200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.780664][ T7203] loop4: detected capacity change from 0 to 256
[  179.843193][ T7203] exfat: Deprecated parameter 'utf8'
[  179.848719][ T7203] exfat: Deprecated parameter 'namecase'
[  179.898847][ T7196] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.928314][ T7203] exfat: Deprecated parameter 'utf8'
[  179.997217][ T7203] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  180.096493][ T7203] bio_check_eod: 464 callbacks suppressed
[  180.096515][ T7203] syz.4.230: attempt to access beyond end of device
[  180.096515][ T7203] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  180.119149][ T7208] FAULT_INJECTION: forcing a failure.
[  180.119149][ T7208] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.137099][ T7208] CPU: 1 PID: 7208 Comm: syz.1.232 Not tainted syzkaller #0
[  180.144564][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  180.154674][ T7208] Call Trace:
[  180.158003][ T7208]  <TASK>
[  180.160980][ T7208]  dump_stack_lvl+0x16c/0x230
[  180.165744][ T7208]  ? show_regs_print_info+0x20/0x20
[  180.170972][ T7208]  ? load_image+0x3b0/0x3b0
[  180.175495][ T7208]  ? __might_fault+0xaa/0x120
[  180.180196][ T7208]  ? __lock_acquire+0x7c80/0x7c80
[  180.185245][ T7208]  should_fail_ex+0x39d/0x4d0
[  180.189955][ T7208]  _copy_from_user+0x2f/0xe0
[  180.194590][ T7208]  __sys_bpf+0x1e9/0x800
[  180.198853][ T7208]  ? bpf_link_show_fdinfo+0x350/0x350
[  180.204260][ T7208]  ? lock_chain_count+0x20/0x20
[  180.209162][ T7208]  __x64_sys_bpf+0x7c/0x90
[  180.213600][ T7208]  do_syscall_64+0x55/0xb0
[  180.218041][ T7208]  ? clear_bhb_loop+0x40/0x90
[  180.222739][ T7208]  ? clear_bhb_loop+0x40/0x90
[  180.227447][ T7208]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.233365][ T7208] RIP: 0033:0x7ff8e5b8efc9
[  180.237807][ T7208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.257453][ T7208] RSP: 002b:00007ff8e6a0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  180.265979][ T7208] RAX: ffffffffffffffda RBX: 00007ff8e5de5fa0 RCX: 00007ff8e5b8efc9
[  180.273985][ T7208] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  180.281970][ T7208] RBP: 00007ff8e6a0c090 R08: 0000000000000000 R09: 0000000000000000
[  180.289953][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.297942][ T7208] R13: 00007ff8e5de6038 R14: 00007ff8e5de5fa0 R15: 00007fffbbf42c98
[  180.305951][ T7208]  </TASK>
[  180.349000][ T7203] syz.4.230: attempt to access beyond end of device
[  180.349000][ T7203] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  180.492684][   T27] audit: type=1800 audit(1761539054.867:27): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.230" name="file1" dev="loop4" ino=1048614 res=0 errno=0
[  180.524992][ T7212] loop0: detected capacity change from 0 to 64
[  180.579887][ T7212] hfs: unable to parse mount options
[  181.615577][ T7245] process 'syz.0.241' launched './file1' with NULL argv: empty string added
[  182.096255][ T7234] loop4: detected capacity change from 0 to 32768
[  182.132118][ T7234] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.238 (7234)
[  182.228906][ T7234] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.253688][ T7234] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  182.285941][ T7234] BTRFS info (device loop4): metadata ratio 2
[  182.315271][ T7234] BTRFS info (device loop4): allowing degraded mounts
[  182.352381][ T7234] BTRFS info (device loop4): force zlib compression, level 3
[  182.359867][ T7234] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  182.361229][ T7236] loop2: detected capacity change from 0 to 40427
[  182.390158][ T7234] BTRFS info (device loop4): use zstd compression, level 3
[  182.433869][ T7236] F2FS-fs (loop2): invalid crc value
[  182.459675][ T7236] F2FS-fs (loop2): Found nat_bits in checkpoint
[  182.462234][ T7234] BTRFS info (device loop4): force clearing of disk cache
[  182.535703][ T7234] BTRFS info (device loop4): turning on flush-on-commit
[  182.587954][ T7234] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  182.642716][ T7234] BTRFS info (device loop4): trying to use backup root at mount time
[  182.673953][ T7234] BTRFS info (device loop4): using free space tree
[  182.819111][ T7236] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  182.934464][ T7234] BTRFS info (device loop4): enabling ssd optimizations
[  182.962875][ T7234] BTRFS info (device loop4): rebuilding free space tree
[  183.289629][ T6406] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.467672][ T5794] syz-executor: attempt to access beyond end of device
[  183.467672][ T5794] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  183.526760][ T5794] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  184.880916][ T7325] loop1: detected capacity change from 0 to 1024
[  184.910695][ T7325] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  185.065581][ T7329] loop2: detected capacity change from 0 to 4096
[  185.095882][ T7329] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  185.117199][ T7325] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.253: lblock 2 mapped to illegal pblock 2 (length 1)
[  185.181119][ T7325] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  185.192860][ T7325] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.253: lblock 0 mapped to illegal pblock 48 (length 1)
[  185.313746][ T7325] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  185.466391][ T7325] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.253: Failed to acquire dquot type 0
[  185.697170][ T7325] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5916: Corrupt filesystem
[  185.909839][ T7325] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.253: mark_inode_dirty error
[  186.049200][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'.
[  186.177577][ T7325] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[  186.370010][ T7325] EXT4-fs (loop1): 1 orphan inode deleted
[  186.439239][   T12] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  186.645673][ T7325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.725200][   T12] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  186.755806][ T7306] loop4: detected capacity change from 0 to 40427
[  186.759346][   T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u4:1: Failed to release dquot type 0
[  187.069699][ T5953] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  187.098663][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.112951][   T12] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  187.166808][   T12] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  187.201987][   T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u4:1: Failed to release dquot type 0
[  187.229865][ T5788] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0
[  187.262331][ T5788] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5916: Corrupt filesystem
[  187.297635][ T5788] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  187.460445][ T7341] loop1: detected capacity change from 0 to 256
[  187.821983][ T5953] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  188.597952][ T7350] sp0: Synchronizing with TNC
[  189.104440][ T7356] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.260'.
[  190.042301][ T2018] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  190.051955][  T788] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  190.211976][  T788] usb 1-1: device descriptor read/64, error -71
[  190.255371][ T2018] usb 2-1: unable to get BOS descriptor or descriptor too short
[  190.273868][ T2018] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x1 is Bulk; changing to Interrupt
[  190.291968][ T2018] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.315683][ T2018] usb 2-1: config 1 interface 0 has no altsetting 0
[  190.335609][ T2018] usb 2-1: string descriptor 0 read error: -22
[  190.353244][ T2018] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  190.371966][ T2018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.393602][ T7362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  190.429035][ T7367] loop2: detected capacity change from 0 to 32768
[  190.455166][ T7367] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.492143][  T788] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  190.618827][ T2018] usb 2-1: USB disconnect, device number 8
[  190.652038][  T788] usb 1-1: device descriptor read/64, error -71
[  190.782293][  T788] usb usb1-port1: attempt power cycle
[  190.812728][ T7377] tmpfs: Unknown parameter 'usrquota,9'
[  190.819738][ T7367] XFS (loop2): Ending clean mount
[  191.046017][   T23] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 
[  191.068778][   T23] XFS (loop2): Unmount and run xfs_repair
[  191.080053][   T23] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  191.090607][   T23] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  191.105043][ T7380] netlink: 'syz.4.267': attribute type 2 has an invalid length.
[  191.105057][   T23] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  191.122511][   T23] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  191.131510][   T23] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  191.140573][   T23] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  191.150300][   T23] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  191.159385][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  191.168368][   T23] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  191.179748][ T7367] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74
[  191.192016][  T788] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  191.206494][ T7367] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598).  Shutting down filesystem.
[  191.223312][ T7367] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  191.224004][  T788] usb 1-1: device descriptor read/8, error -71
[  191.269277][ T7366] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.512075][  T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  191.572592][  T788] usb 1-1: device descriptor read/8, error -71
[  191.702613][  T788] usb usb1-port1: unable to enumerate USB device
[  191.804043][ T7383] loop1: detected capacity change from 0 to 32768
[  191.814743][ T7383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.268 (7383)
[  191.841076][ T7383] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.865271][ T7383] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  191.882748][ T7383] BTRFS info (device loop1): turning off barriers
[  191.893340][ T7383] BTRFS info (device loop1): setting nodatasum
[  191.899690][ T7383] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  191.914307][ T7383] BTRFS info (device loop1): use zstd compression, level 3
[  191.922039][ T7383] BTRFS info (device loop1): using free space tree
[  192.252722][ T5788] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.660019][ T7404] loop4: detected capacity change from 0 to 32768
[  192.675951][ T7409] loop1: detected capacity change from 0 to 256
[  192.702900][ T7409] FAT-fs (loop1): Unrecognized mount option "utf9=1" or missing value
[  192.773343][ T7404] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  193.021684][ T7404] XFS (loop4): Ending clean mount
[  193.056864][ T7404] XFS (loop4): Quotacheck needed: Please wait.
[  193.203499][ T7404] XFS (loop4): Quotacheck: Done.
[  193.464624][ T6406] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  193.505463][ T7425] loop1: detected capacity change from 0 to 4096
[  193.718120][ T7425] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  193.774234][ T7429] loop0: detected capacity change from 0 to 1024
[  193.781460][ T7425] ntfs3: loop1: Failed to load $Extend (-22).
[  193.801943][ T7425] ntfs3: loop1: Failed to initialize $Extend.
[  193.869556][ T7431] loop4: detected capacity change from 0 to 1024
[  193.922115][ T7429] FAULT_INJECTION: forcing a failure.
[  193.922115][ T7429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.971010][ T7429] CPU: 1 PID: 7429 Comm: syz.0.277 Not tainted syzkaller #0
[  193.978382][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  193.988485][ T7429] Call Trace:
[  193.991814][ T7429]  <TASK>
[  193.994790][ T7429]  dump_stack_lvl+0x16c/0x230
[  193.999525][ T7429]  ? show_regs_print_info+0x20/0x20
[  194.004785][ T7429]  ? load_image+0x3b0/0x3b0
[  194.009349][ T7429]  ? __might_fault+0xaa/0x120
[  194.014082][ T7429]  ? __lock_acquire+0x7c80/0x7c80
[  194.019179][ T7429]  should_fail_ex+0x39d/0x4d0
[  194.023930][ T7429]  strncpy_from_user+0x36/0x2e0
[  194.028838][ T7429]  getname_flags+0xf6/0x500
[  194.033408][ T7429]  do_sys_openat2+0xcb/0x1c0
[  194.038062][ T7429]  ? do_sys_open+0xe0/0xe0
[  194.042533][ T7429]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  194.048578][ T7429]  ? lock_chain_count+0x20/0x20
[  194.053549][ T7429]  __x64_sys_open+0x11f/0x140
[  194.058298][ T7429]  do_syscall_64+0x55/0xb0
[  194.062772][ T7429]  ? clear_bhb_loop+0x40/0x90
[  194.067505][ T7429]  ? clear_bhb_loop+0x40/0x90
[  194.072235][ T7429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  194.078177][ T7429] RIP: 0033:0x7f3615f8efc9
[  194.082646][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.102300][ T7429] RSP: 002b:00007f3616d79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  194.110745][ T7429] RAX: ffffffffffffffda RBX: 00007f36161e5fa0 RCX: 00007f3615f8efc9
[  194.118738][ T7429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  194.126732][ T7429] RBP: 00007f3616d79090 R08: 0000000000000000 R09: 0000000000000000
[  194.134727][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.142720][ T7429] R13: 00007f36161e6038 R14: 00007f36161e5fa0 R15: 00007fffed8df0b8
[  194.150725][ T7429]  </TASK>
[  194.153883][    C1] vkms_vblank_simulate: vblank timer overrun
[  194.162037][ T7425] overlayfs: missing 'workdir'
[  194.262195][ T7411] loop2: detected capacity change from 0 to 32768
[  194.395138][   T12] hfsplus: b-tree write err: -5, ino 4
[  194.410748][ T7411] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  194.436571][ T3470] hfsplus: b-tree write err: -5, ino 4
[  194.580372][ T7443] FAULT_INJECTION: forcing a failure.
[  194.580372][ T7443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.593820][ T7443] CPU: 1 PID: 7443 Comm: syz.1.278 Not tainted syzkaller #0
[  194.601155][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  194.611363][ T7443] Call Trace:
[  194.614695][ T7443]  <TASK>
[  194.617660][ T7443]  dump_stack_lvl+0x16c/0x230
[  194.622404][ T7443]  ? show_regs_print_info+0x20/0x20
[  194.627674][ T7443]  ? load_image+0x3b0/0x3b0
[  194.632321][ T7443]  ? __might_fault+0xaa/0x120
[  194.637043][ T7443]  ? __lock_acquire+0x7c80/0x7c80
[  194.642124][ T7443]  should_fail_ex+0x39d/0x4d0
[  194.646864][ T7443]  _copy_from_user+0x2f/0xe0
[  194.651506][ T7443]  sctp_setsockopt+0x19e/0x11e0
[  194.656411][ T7443]  ? sock_common_recvmsg+0x1b0/0x1b0
[  194.661757][ T7443]  do_sock_setsockopt+0x175/0x1a0
[  194.666837][ T7443]  ? __fdget+0x180/0x210
[  194.671129][ T7443]  __x64_sys_setsockopt+0x184/0x200
[  194.676383][ T7443]  do_syscall_64+0x55/0xb0
[  194.680839][ T7443]  ? clear_bhb_loop+0x40/0x90
[  194.685570][ T7443]  ? clear_bhb_loop+0x40/0x90
[  194.690273][ T7443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  194.696186][ T7443] RIP: 0033:0x7ff8e5b8efc9
[  194.700629][ T7443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.720354][ T7443] RSP: 002b:00007ff8e6a0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  194.728788][ T7443] RAX: ffffffffffffffda RBX: 00007ff8e5de5fa0 RCX: 00007ff8e5b8efc9
[  194.736780][ T7443] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005
[  194.744797][ T7443] RBP: 00007ff8e6a0c090 R08: 000000000000009c R09: 0000000000000000
[  194.752786][ T7443] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  194.760785][ T7443] R13: 00007ff8e5de6038 R14: 00007ff8e5de5fa0 R15: 00007fffbbf42c98
[  194.768841][ T7443]  </TASK>
[  194.772003][    C1] vkms_vblank_simulate: vblank timer overrun
[  194.788298][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.794760][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.941924][ T7411] XFS (loop2): Ending clean mount
[  194.991466][ T7411] XFS (loop2): Quotacheck needed: Please wait.
[  195.124654][ T7411] XFS (loop2): Quotacheck: Done.
[  195.416595][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  195.499116][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'.
[  195.570879][ T7464] loop0: detected capacity change from 0 to 512
[  195.599932][ T7464] EXT4-fs: Ignoring removed i_version option
[  195.619784][ T7461] loop1: detected capacity change from 0 to 8192
[  195.653484][ T7464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.665857][ T7461]  loop1: p1 < >
[  196.034741][ T5953] udevd[5953]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  196.131978][ T5889] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  196.358379][ T5889] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  196.382533][ T5889] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  196.392129][ T5889] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  196.412076][ T5889] usb 1-1: config 220 has no interface number 2
[  196.428647][ T5889] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  196.454819][ T5889] usb 1-1: config 220 interface 0 has no altsetting 0
[  196.461677][ T5889] usb 1-1: config 220 interface 76 has no altsetting 0
[  196.481383][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.292'.
[  196.496262][ T5889] usb 1-1: config 220 interface 1 has no altsetting 0
[  196.523125][ T5889] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  196.544527][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.579790][ T7473] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 747
[  196.631110][ T5889] usb 1-1: Product: syz
[  196.642032][ T5889] usb 1-1: Manufacturer: syz
[  196.683790][ T5889] usb 1-1: SerialNumber: syz
[  196.753251][ T7470] loop1: detected capacity change from 0 to 32768
[  196.827754][ T7470] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  196.931397][ T7470] XFS (loop1): Ending clean mount
[  196.950374][ T7470] XFS (loop1): Quotacheck needed: Please wait.
[  196.981593][ T5889] usb 1-1: selecting invalid altsetting 0
[  197.022143][ T5889] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  197.028589][ T5889] usb 1-1: No valid video chain found.
[  197.060920][ T5889] usb 1-1: selecting invalid altsetting 0
[  197.071918][ T5889] usbtest: probe of 1-1:220.1 failed with error -22
[  197.079760][ T7483] virtio-fs: tag </dev/md0> not found
[  197.097929][ T7470] XFS (loop1): Quotacheck: Done.
[  197.125565][ T5889] usb 1-1: USB disconnect, device number 8
[  197.468671][   T27] audit: type=1326 audit(1761539071.837:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  197.501595][   T27] audit: type=1326 audit(1761539071.837:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  197.541239][   T27] audit: type=1326 audit(1761539071.837:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  197.589731][   T27] audit: type=1326 audit(1761539071.837:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  197.621301][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.634880][   T27] audit: type=1326 audit(1761539071.837:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  197.678512][   T27] audit: type=1326 audit(1761539071.847:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  197.748222][   T27] audit: type=1326 audit(1761539071.857:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  197.771017][   T27] audit: type=1326 audit(1761539071.857:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  197.794442][   T27] audit: type=1326 audit(1761539071.857:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  197.819231][   T27] audit: type=1326 audit(1761539071.857:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  197.863628][ T7493] loop2: detected capacity change from 0 to 128
[  197.902610][ T5788] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  197.926980][ T7495] loop0: detected capacity change from 0 to 1024
[  197.954692][ T7495] EXT4-fs: Ignoring removed nomblk_io_submit option
[  197.961396][ T7495] EXT4-fs: Ignoring removed nobh option
[  197.982052][ T7495] EXT4-fs: inline encryption not supported
[  197.989618][ T7495] EXT4-fs: Ignoring removed bh option
[  198.144531][ T7495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  198.217521][ T7495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.412693][ T7504] loop4: detected capacity change from 0 to 131072
[  201.423866][ T7504] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  201.432106][ T7504] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  201.473812][ T7504] F2FS-fs (loop4): invalid crc value
[  201.546357][ T7504] F2FS-fs (loop4): Found nat_bits in checkpoint
[  201.548070][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.608604][ T7504] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  201.617076][ T7504] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  204.450264][ T7533] loop0: detected capacity change from 0 to 32768
[  204.525988][ T7533] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  204.672128][  T788] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  204.874131][ T5785] ocfs2: Unmounting device (7,0) on (node local)
[  205.006325][  T788] usb 5-1: Using ep0 maxpacket: 8
[  206.070081][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  206.110855][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  206.193217][  T788] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  206.272688][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  206.332252][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  206.350905][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'.
[  206.393245][  T788] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8
[  206.412165][  T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.475970][  T788] usb 5-1: Product: syz
[  206.480265][  T788] usb 5-1: Manufacturer: syz
[  206.552048][  T788] usb 5-1: SerialNumber: syz
[  206.613155][  T788] usb 5-1: config 0 descriptor??
[  206.741326][  T788] redrat3 5-1:0.0: Couldn't find all endpoints
[  207.212484][ T7576] netlink: 'syz.0.312': attribute type 10 has an invalid length.
[  207.238626][ T7577] loop2: detected capacity change from 0 to 64
[  207.460037][ T7576] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  207.474036][ T7583] FAULT_INJECTION: forcing a failure.
[  207.474036][ T7583] name failslab, interval 1, probability 0, space 0, times 0
[  207.494106][ T7583] CPU: 0 PID: 7583 Comm: syz.1.314 Not tainted syzkaller #0
[  207.501457][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  207.511558][ T7583] Call Trace:
[  207.514846][ T7583]  <TASK>
[  207.517784][ T7583]  dump_stack_lvl+0x16c/0x230
[  207.522501][ T7583]  ? show_regs_print_info+0x20/0x20
[  207.527709][ T7583]  ? load_image+0x3b0/0x3b0
[  207.532311][ T7583]  ? __might_sleep+0xe0/0xe0
[  207.536947][ T7583]  ? __lock_acquire+0x7c80/0x7c80
[  207.541976][ T7583]  ? prepend_path+0x4b/0x960
[  207.546574][ T7583]  should_fail_ex+0x39d/0x4d0
[  207.551267][ T7583]  should_failslab+0x9/0x20
[  207.555789][ T7583]  slab_pre_alloc_hook+0x59/0x310
[  207.560835][ T7583]  ? __asan_memcpy+0x40/0x70
[  207.565459][ T7583]  ? tomoyo_encode+0x28b/0x540
[  207.570239][ T7583]  ? tomoyo_encode+0x28b/0x540
[  207.575056][ T7583]  __kmem_cache_alloc_node+0x53/0x260
[  207.580470][ T7583]  ? prepend_path+0x4b/0x960
[  207.585096][ T7583]  ? tomoyo_encode+0x28b/0x540
[  207.590067][ T7583]  __kmalloc+0xa4/0x240
[  207.594253][ T7583]  tomoyo_encode+0x28b/0x540
[  207.598971][ T7583]  tomoyo_realpath_from_path+0x592/0x5d0
[  207.604668][ T7583]  tomoyo_path_number_perm+0x1ea/0x590
[  207.610182][ T7583]  ? tomoyo_path_number_perm+0x1ba/0x590
[  207.615868][ T7583]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  207.621401][ T7583]  ? ksys_write+0x1c1/0x250
[  207.625996][ T7583]  ? __fget_files+0x28/0x4d0
[  207.630655][ T7583]  security_file_ioctl+0x70/0xa0
[  207.635664][ T7583]  __se_sys_ioctl+0x48/0x170
[  207.640316][ T7583]  do_syscall_64+0x55/0xb0
[  207.644789][ T7583]  ? clear_bhb_loop+0x40/0x90
[  207.649514][ T7583]  ? clear_bhb_loop+0x40/0x90
[  207.654236][ T7583]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.660182][ T7583] RIP: 0033:0x7ff8e5b8efc9
[  207.664641][ T7583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.684284][ T7583] RSP: 002b:00007ff8e6a0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  207.692720][ T7583] RAX: ffffffffffffffda RBX: 00007ff8e5de5fa0 RCX: 00007ff8e5b8efc9
[  207.700829][ T7583] RDX: 0000200000000480 RSI: 00000000c0386105 RDI: 0000000000000003
[  207.708930][ T7583] RBP: 00007ff8e6a0c090 R08: 0000000000000000 R09: 0000000000000000
[  207.716941][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.724968][ T7583] R13: 00007ff8e5de6038 R14: 00007ff8e5de5fa0 R15: 00007fffbbf42c98
[  207.732984][ T7583]  </TASK>
[  207.794466][ T7583] ERROR: Out of memory at tomoyo_realpath_from_path.
[  208.902815][   T27] kauditd_printk_skb: 20 callbacks suppressed
[  208.902831][   T27] audit: type=1326 audit(1761539083.277:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  208.931193][    C1] vkms_vblank_simulate: vblank timer overrun
[  208.965893][ T5889] usb 5-1: USB disconnect, device number 3
[  209.013911][   T27] audit: type=1326 audit(1761539083.317:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  209.111306][   T27] audit: type=1326 audit(1761539083.317:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  209.162034][   T27] audit: type=1326 audit(1761539083.317:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  209.236266][   T27] audit: type=1326 audit(1761539083.337:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  209.280563][ T7606] loop1: detected capacity change from 0 to 1024
[  209.312302][   T27] audit: type=1326 audit(1761539083.347:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  209.365614][ T7606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  209.369683][   T27] audit: type=1326 audit(1761539083.347:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  209.425260][ T7606] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.453076][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.324'.
[  209.512374][ T5889] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  209.523877][   T27] audit: type=1326 audit(1761539083.347:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  209.715777][ T7612] loop2: detected capacity change from 0 to 128
[  209.723460][ T7612] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^��cwiet" or missing value
[  209.732270][   T27] audit: type=1326 audit(1761539083.347:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  209.743066][ T7606] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.322: inode has both inline data and extents flags
[  210.335678][ T7617] fuse: Bad value for 'fd'
[  214.113748][ T7618] loop0: detected capacity change from 0 to 32768
[  214.135928][   T27] audit: type=1326 audit(1761539083.347:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  214.223994][ T7610] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  214.250994][   T27] audit: type=1326 audit(1761539083.347:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  214.610504][ T7618] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.326 (7618)
[  214.631777][ T7620] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.322: inode has both inline data and extents flags
[  214.682780][   T27] audit: type=1326 audit(1761539083.347:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  214.794537][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -71
[  214.878530][ T5889] usb 5-1: can't read configurations, error -71
[  214.921978][   T27] audit: type=1326 audit(1761539083.367:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  214.980408][ T5953] udevd[5953]: incorrect btrfs checksum on /dev/loop0
[  215.013788][   T27] audit: type=1326 audit(1761539083.367:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  215.051424][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  215.137525][   T27] audit: type=1326 audit(1761539083.367:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  215.175644][ T7630] loop0: detected capacity change from 0 to 256
[  215.229795][ T7631] FAULT_INJECTION: forcing a failure.
[  215.229795][ T7631] name failslab, interval 1, probability 0, space 0, times 0
[  215.237060][ T7630] exfat: Deprecated parameter 'utf8'
[  215.276409][   T27] audit: type=1326 audit(1761539083.367:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  215.298902][ T7630] exfat: Deprecated parameter 'utf8'
[  215.311929][ T7631] CPU: 0 PID: 7631 Comm: syz.2.329 Not tainted syzkaller #0
[  215.319287][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  215.329384][ T7631] Call Trace:
[  215.332703][ T7631]  <TASK>
[  215.335677][ T7631]  dump_stack_lvl+0x16c/0x230
[  215.340418][ T7631]  ? show_regs_print_info+0x20/0x20
[  215.345668][ T7631]  ? load_image+0x3b0/0x3b0
[  215.350224][ T7631]  ? __might_sleep+0xe0/0xe0
[  215.354864][ T7631]  ? __lock_acquire+0x7c80/0x7c80
[  215.359942][ T7631]  should_fail_ex+0x39d/0x4d0
[  215.364698][ T7631]  should_failslab+0x9/0x20
[  215.369255][ T7631]  slab_pre_alloc_hook+0x59/0x310
[  215.374337][ T7631]  ? percpu_ref_get_many+0x21/0x1e0
[  215.379604][ T7631]  kmem_cache_alloc+0x5a/0x2e0
[  215.384412][ T7631]  ? getname_flags+0xbb/0x500
[  215.389121][ T7631]  getname_flags+0xbb/0x500
[  215.393648][ T7631]  io_openat_prep+0x220/0x5c0
[  215.398344][ T7631]  ? percpu_counter_set+0x1a0/0x1a0
[  215.403565][ T7631]  ? io_register_file_alloc_range+0x250/0x250
[  215.409663][ T7631]  ? io_task_refs_refill+0xba/0x170
[  215.414881][ T7631]  io_submit_sqes+0x975/0x1d00
[  215.419697][ T7631]  __se_sys_io_uring_enter+0x2de/0x22e0
[  215.425274][ T7631]  ? ksys_write+0x1c1/0x250
[  215.429799][ T7631]  ? __lock_acquire+0x7c80/0x7c80
[  215.434845][ T7631]  ? file_end_write+0x159/0x250
[  215.439722][ T7631]  ? vfs_write+0x586/0x940
[  215.444176][ T7631]  ? __x64_sys_io_uring_enter+0xf0/0xf0
[  215.449769][ T7631]  ? mutex_unlock+0x10/0x10
[  215.454298][ T7631]  ? __fget_files+0x44a/0x4d0
[  215.459006][ T7631]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  215.465002][ T7631]  ? lock_chain_count+0x20/0x20
[  215.469872][ T7631]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  215.475452][ T7631]  do_syscall_64+0x55/0xb0
[  215.479888][ T7631]  ? clear_bhb_loop+0x40/0x90
[  215.484581][ T7631]  ? clear_bhb_loop+0x40/0x90
[  215.489277][ T7631]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.495197][ T7631] RIP: 0033:0x7f8eaaf8efc9
[  215.499633][ T7631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.519281][ T7631] RSP: 002b:00007f8eabdba038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  215.527713][ T7631] RAX: ffffffffffffffda RBX: 00007f8eab1e6090 RCX: 00007f8eaaf8efc9
[  215.535723][ T7631] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000004
[  215.543711][ T7631] RBP: 00007f8eabdba090 R08: 0000000000000000 R09: 00000000fffffdcf
[  215.551699][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.559684][ T7631] R13: 00007f8eab1e6128 R14: 00007f8eab1e6090 R15: 00007fffac4a79e8
[  215.567685][ T7631]  </TASK>
[  215.595274][ T7630] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  215.638329][   T27] audit: type=1326 audit(1761539083.367:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  215.717224][ T7630] overlay: ./file0 is not a directory
[  215.741931][   T27] audit: type=1326 audit(1761539083.367:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  216.056734][   T27] audit: type=1326 audit(1761539083.377:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8eaaf8efc9 code=0x7ffc0000
[  216.268606][ T5792] Bluetooth: hci0: command 0x0406 tx timeout
[  216.274902][ T5791] Bluetooth: hci1: command 0x0406 tx timeout
[  216.280969][ T5791] Bluetooth: hci2: command 0x0406 tx timeout
[  216.612295][ T5872] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  216.648311][ T5872] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  216.796376][ T7635] loop1: detected capacity change from 0 to 32768
[  216.806845][ T7635] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.330 (7635)
[  216.824521][ T7635] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  216.835280][ T7635] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  216.844418][ T7635] BTRFS info (device loop1): metadata ratio 2
[  216.850646][ T7635] BTRFS info (device loop1): allowing degraded mounts
[  216.857799][ T7635] BTRFS info (device loop1): force zlib compression, level 3
[  216.865915][ T7635] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  216.876965][ T7635] BTRFS info (device loop1): use zstd compression, level 3
[  216.901953][ T7635] BTRFS info (device loop1): force clearing of disk cache
[  216.909312][ T7635] BTRFS info (device loop1): enabling disk space caching
[  216.932524][    T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  216.962825][ T7635] BTRFS info (device loop1): max_inline at 0
[  216.969032][ T7635] BTRFS info (device loop1): disk space caching is enabled
[  217.162027][ T7635] BTRFS info (device loop1): enabling ssd optimizations
[  217.169651][    T8] usb 1-1: Using ep0 maxpacket: 8
[  217.177473][    T8] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  217.190731][ T7635] BTRFS info (device loop1): rebuilding free space tree
[  217.200153][    T8] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  217.215158][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.225789][ T7635] BTRFS info (device loop1): disabling free space tree
[  217.235725][    T8] usb 1-1: Product: syz
[  217.240031][    T8] usb 1-1: Manufacturer: syz
[  217.254363][    T8] usb 1-1: SerialNumber: syz
[  217.259263][ T7635] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  217.284766][    T8] usb 1-1: config 0 descriptor??
[  217.290157][ T7635] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  217.314621][    T8] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  217.332253][    T8] usb 1-1: setting power ON
[  217.337732][    T8] dvb-usb: bulk message failed: -22 (2/0)
[  217.403694][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  217.443396][    T8] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  217.462015][    T8] usb 1-1: media controller created
[  217.557761][ T7647] dvb-usb: bulk message failed: -22 (3/0)
[  217.584669][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  217.596087][ T7647] dvb-usb: bulk message failed: -22 (7/0)
[  217.623543][ T7670] dvb-usb: bulk message failed: -22 (3/0)
[  217.664895][    T8] usb 1-1: selecting invalid altsetting 6
[  217.671468][    T8] usb 1-1: digital interface selection failed (-22)
[  217.729232][    T8] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  217.753566][    T8] usb 1-1: setting power OFF
[  217.770566][    T8] dvb-usb: bulk message failed: -22 (2/0)
[  217.785561][    T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  217.821965][    T8] (NULL device *): no alternate interface
[  217.944321][ T5788] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.014484][    T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  218.064384][    T8] usb 1-1: USB disconnect, device number 9
[  218.452351][ T7682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'.
[  219.917786][ T7697] No such timeout policy "syz1"
[  220.411971][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  220.452122][ T6390] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  220.632058][    T8] usb 2-1: Using ep0 maxpacket: 16
[  220.639477][ T6390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.644958][    T8] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.649548][ T6390] usb 1-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  220.661823][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  220.676945][    T8] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  220.680346][ T6390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.695343][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.705276][ T6390] usb 1-1: config 0 descriptor??
[  220.708540][    T8] usb 2-1: config 0 descriptor??
[  220.762767][ T5889] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  220.952290][ T5889] usb 3-1: Using ep0 maxpacket: 16
[  220.960323][ T5889] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.968490][ T5872] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  220.972225][ T5889] usb 3-1: config 0 interface 0 has no altsetting 0
[  220.972307][ T5889] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  220.972333][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.978532][ T5889] usb 3-1: config 0 descriptor??
[  221.144926][ T6390] wacom 0003:056A:00E3.0007: hidraw0: USB HID v0.02 Device [HID 056a:00e3] on usb-dummy_hcd.0-1/input0
[  221.162974][ T5872] usb 5-1: Using ep0 maxpacket: 32
[  221.172655][    T8] nzxt-smart2 0003:1E71:2009.0008: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  221.196966][ T5872] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  221.217608][ T5872] usb 5-1: config 0 has no interface number 0
[  221.248148][ T5872] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  221.272014][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.281686][ T5872] usb 5-1: Product: syz
[  221.311078][ T5872] usb 5-1: Manufacturer: syz
[  221.332590][ T5872] usb 5-1: SerialNumber: syz
[  221.353733][ T5872] usb 5-1: config 0 descriptor??
[  221.374164][ T5872] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  221.402154][ T5872] usb 5-1: selecting invalid altsetting 1
[  221.408101][ T5872] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  221.457362][ T5872] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  221.480822][ T5872] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  221.491347][ T5872] usb 5-1: media controller created
[  221.518546][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  221.519864][ T5889] nzxt-smart2 0003:1E71:2009.0009: hidraw2: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  221.671981][ T5872] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  221.687389][ T5889] usb 2-1: USB disconnect, device number 9
[  221.692609][ T5872] zl10353_read_register: readreg error (reg=127, ret==-71)
[  221.703936][ T5872] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  221.777935][ T6390] usb 1-1: USB disconnect, device number 10
[  221.820444][ T5872] usb 5-1: USB disconnect, device number 6
[  221.927074][   T23] usb 3-1: USB disconnect, device number 13
[  222.448760][ T7723] vlan0: entered promiscuous mode
[  222.488910][ T7723] syz_tun: entered promiscuous mode
[  222.526794][ T7723] syz_tun: left promiscuous mode
[  222.554284][ T7726] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  222.756321][ T7732] loop0: detected capacity change from 0 to 64
[  222.869715][ T7734] syz_tun: entered promiscuous mode
[  222.878074][ T7734] syz_tun: left promiscuous mode
[  223.245842][   T27] kauditd_printk_skb: 7 callbacks suppressed
[  223.245860][   T27] audit: type=1326 audit(1761539097.617:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x7ffc0000
[  223.295888][   T27] audit: type=1326 audit(1761539097.617:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x7ffc0000
[  223.449969][   T27] audit: type=1326 audit(1761539097.617:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8e5b8efc9 code=0x7ffc0000
[  223.472338][    C0] vkms_vblank_simulate: vblank timer overrun
[  223.531575][   T27] audit: type=1326 audit(1761539097.617:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x7ffc0000
[  223.568303][   T27] audit: type=1326 audit(1761539097.617:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff8e5b8efc9 code=0x7ffc0000
[  223.625671][   T27] audit: type=1326 audit(1761539097.617:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x7ffc0000
[  223.655108][   T27] audit: type=1326 audit(1761539097.617:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x7ffc0000
[  223.678657][   T27] audit: type=1326 audit(1761539097.627:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8e5b8efc9 code=0x7ffc0000
[  223.707628][   T27] audit: type=1326 audit(1761539097.627:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8e5b8efc9 code=0x7ffc0000
[  223.736621][   T27] audit: type=1326 audit(1761539097.627:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8e5b8efc9 code=0x7ffc0000
[  223.758696][    C0] vkms_vblank_simulate: vblank timer overrun
[  223.882112][ T5889] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  223.950128][ T7756] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  224.016312][ T7759] raw_sendmsg: syz.0.363 forgot to set AF_INET. Fix it!
[  224.043520][ T5889] usb 2-1: device descriptor read/64, error -71
[  224.312348][ T5889] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  224.342554][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.355614][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.408883][ T5872] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  224.482007][ T5889] usb 2-1: device descriptor read/64, error -71
[  224.618114][ T5889] usb usb2-port1: attempt power cycle
[  224.768944][ T7772] loop0: detected capacity change from 0 to 32768
[  224.810622][ T7772] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  225.032016][ T5889] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  225.172865][ T5889] usb 2-1: device descriptor read/8, error -71
[  225.961976][ T5889] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  226.104985][ T5889] usb 2-1: device descriptor read/8, error -71
[  226.249783][ T5889] usb usb2-port1: unable to enumerate USB device
[  226.269907][ T5785] ocfs2: Unmounting device (7,0) on (node local)
[  226.712010][ T6390] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  226.813735][ T7792] FAULT_INJECTION: forcing a failure.
[  226.813735][ T7792] name failslab, interval 1, probability 0, space 0, times 0
[  226.826990][ T7792] CPU: 0 PID: 7792 Comm: syz.1.372 Not tainted syzkaller #0
[  226.834344][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  226.844453][ T7792] Call Trace:
[  226.847781][ T7792]  <TASK>
[  226.850756][ T7792]  dump_stack_lvl+0x16c/0x230
[  226.855582][ T7792]  ? show_regs_print_info+0x20/0x20
[  226.860847][ T7792]  ? load_image+0x3b0/0x3b0
[  226.862314][ T7791] loop0: detected capacity change from 0 to 4096
[  226.865380][ T7792]  ? __might_sleep+0xe0/0xe0
[  226.865445][ T7792]  ? __lock_acquire+0x7c80/0x7c80
[  226.881448][ T7792]  should_fail_ex+0x39d/0x4d0
[  226.886188][ T7792]  should_failslab+0x9/0x20
[  226.890728][ T7792]  slab_pre_alloc_hook+0x59/0x310
[  226.895794][ T7792]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  226.901550][ T7792]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  226.907308][ T7792]  __kmem_cache_alloc_node+0x53/0x260
[  226.912721][ T7792]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  226.918475][ T7792]  __kmalloc+0xa4/0x240
[  226.922684][ T7792]  tomoyo_realpath_from_path+0xe3/0x5d0
[  226.928286][ T7792]  tomoyo_path_number_perm+0x1ea/0x590
[  226.933770][ T7792]  ? tomoyo_path_number_perm+0x1ba/0x590
[  226.939426][ T7792]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  226.944915][ T7792]  ? ksys_write+0x1c1/0x250
[  226.949491][ T7792]  ? __fget_files+0x28/0x4d0
[  226.954138][ T7792]  security_file_ioctl+0x70/0xa0
[  226.959122][ T7792]  __se_sys_ioctl+0x48/0x170
[  226.963778][ T7792]  do_syscall_64+0x55/0xb0
[  226.968255][ T7792]  ? clear_bhb_loop+0x40/0x90
[  226.973071][ T7792]  ? clear_bhb_loop+0x40/0x90
[  226.977787][ T7792]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.983704][ T7792] RIP: 0033:0x7ff8e5b8efc9
[  226.988162][ T7792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.007799][ T7792] RSP: 002b:00007ff8e69ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  227.016250][ T7792] RAX: ffffffffffffffda RBX: 00007ff8e5de6180 RCX: 00007ff8e5b8efc9
[  227.024247][ T7792] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000a
[  227.032247][ T7792] RBP: 00007ff8e69ca090 R08: 0000000000000000 R09: 0000000000000000
[  227.040246][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.048238][ T7792] R13: 00007ff8e5de6218 R14: 00007ff8e5de6180 R15: 00007fffbbf42c98
[  227.056248][ T7792]  </TASK>
[  227.060852][    C0] vkms_vblank_simulate: vblank timer overrun
[  227.070363][ T7792] ERROR: Out of memory at tomoyo_realpath_from_path.
[  227.092768][ T6390] usb 5-1: device descriptor read/64, error -71
[  227.372327][ T6390] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  227.504590][ T7796] loop2: detected capacity change from 0 to 512
[  227.552192][ T6390] usb 5-1: device descriptor read/64, error -71
[  227.672995][ T6390] usb usb5-port1: attempt power cycle
[  227.716318][ T7796] EXT4-fs: Ignoring removed orlov option
[  228.078811][ T7796] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.373: corrupted in-inode xattr: bad e_name length
[  228.158276][ T6390] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  228.276719][ T6390] usb 5-1: device descriptor read/8, error -71
[  228.342762][ T7796] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.373: couldn't read orphan inode 15 (err -117)
[  228.478141][ T7796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.524540][ T7804] loop0: detected capacity change from 0 to 512
[  228.531715][ T7804] FAT-fs (loop0): Unrecognized mount option "0x0000000000000000�" or missing value
[  228.596550][ T7796] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.373: Logical block already allocated
[  228.612109][ T6390] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  228.656109][ T6390] usb 5-1: device descriptor read/8, error -71
[  228.675979][ T7795] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.373: Logical block already allocated
[  228.802389][ T6390] usb usb5-port1: unable to enumerate USB device
[  228.841569][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.327162][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'.
[  229.347552][ T6390] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  229.387648][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'.
[  229.448560][ T7813] netlink: 32 bytes leftover after parsing attributes in process `syz.4.378'.
[  229.555529][ T6390] usb 3-1: config 12 has an invalid interface number: 145 but max is 0
[  229.566441][ T6390] usb 3-1: config 12 has no interface number 0
[  229.574209][ T6390] usb 3-1: config 12 interface 145 has no altsetting 0
[  229.592913][ T6390] usb 3-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=99.32
[  229.606182][ T6390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.614585][ T6390] usb 3-1: Product: syz
[  229.618890][ T6390] usb 3-1: Manufacturer: syz
[  229.623805][ T6390] usb 3-1: SerialNumber: syz
[  229.913175][ T7810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.923271][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.381'.
[  229.939138][ T7810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.955740][ T7823] netlink: 30 bytes leftover after parsing attributes in process `syz.0.381'.
[  229.974891][ T6390] plfxlc 3-1:12.145: Firmware Version: 0
[  229.981820][ T6390] plfxlc 3-1:12.145: Unit type is station
[  229.998190][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'.
[  230.150974][ T7823] loop0: detected capacity change from 0 to 2364
[  230.193100][ T7823] ISOFS: Unable to identify CD-ROM format.
[  230.206410][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.383'.
[  230.387052][ T6390] plfxlc 3-1:12.145: vendor command failed (-71)
[  230.407280][ T6390] plfxlc 3-1:12.145: FPGA download failed (-22)
[  230.679723][ T6390] plfxlc 3-1:12.145: pureLifi:Device error
[  230.707228][ T7837] loop4: detected capacity change from 0 to 8192
[  230.708956][ T6390] plfxlc: probe of 3-1:12.145 failed with error -22
[  230.731135][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  230.731151][   T27] audit: type=1326 audit(1761539105.097:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x50000
[  230.753130][ T6390] usb 3-1: USB disconnect, device number 15
[  230.837968][   T27] audit: type=1326 audit(1761539105.097:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8e5b8efc9 code=0x50000
[  230.947002][   T27] audit: type=1326 audit(1761539105.097:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x50000
[  230.974524][   T27] audit: type=1326 audit(1761539105.097:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x50000
[  231.420425][   T27] audit: type=1326 audit(1761539105.097:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x50000
[  231.433592][ T7850] loop8: detected capacity change from 0 to 8
[  231.507439][ T7850] Dev loop8: unable to read RDB block 8
[  231.653848][   T27] audit: type=1326 audit(1761539105.097:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x50000
[  231.692134][ T7850]  loop8: unable to read partition table
[  231.710044][ T7850] loop8: partition table beyond EOD, truncated
[  231.718005][ T7850] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  231.760104][ T7855] loop0: detected capacity change from 0 to 256
[  232.077738][   T27] audit: type=1326 audit(1761539105.097:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x50000
[  232.284507][ T7847] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002
[  232.368235][   T27] audit: type=1326 audit(1761539105.097:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x50000
[  232.472417][   T27] audit: type=1326 audit(1761539105.097:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x50000
[  232.534483][   T27] audit: type=1326 audit(1761539105.097:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e5b8efc9 code=0x50000
[  233.163107][ T6390] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  233.352843][ T6390] usb 2-1: Using ep0 maxpacket: 16
[  233.361107][ T6390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.373141][ T6390] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  233.383466][ T6390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.395543][ T6390] usb 2-1: config 0 descriptor??
[  233.752693][ T7889] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.398'.
[  233.825827][ T6390] greenasia 0003:0E8F:0012.000A: hidraw0: USB HID v0.05 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0
[  233.853500][ T6390] greenasia 0003:0E8F:0012.000A: no inputs found
[  234.044792][ T6390] usb 2-1: USB disconnect, device number 15
[  234.960248][ T7899] loop4: detected capacity change from 0 to 32768
[  235.002989][ T7899] 
[  235.002989][ T7899]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  235.002989][ T7899] 
[  235.089279][ T7899] read_mapping_page failed!
[  235.110394][ T7899] ERROR: (device loop4): txCommit: 
[  235.110394][ T7899] 
[  235.167720][ T7906] read_mapping_page failed!
[  235.193470][ T7906] ERROR: (device loop4): txCommit: 
[  235.193470][ T7906] 
[  235.313515][ T7907] read_mapping_page failed!
[  235.318241][ T7907] ERROR: (device loop4): txCommit: 
[  235.318241][ T7907] 
[  235.453447][ T7899] ==================================================================
[  235.461625][ T7899] BUG: KASAN: slab-out-of-bounds in dtSplitPage+0x12ca/0x3b10
[  235.469143][ T7899] Read of size 1 at addr ffff88805efaf7d5 by task syz.4.402/7899
[  235.476910][ T7899] 
[  235.479260][ T7899] CPU: 1 PID: 7899 Comm: syz.4.402 Not tainted syzkaller #0
[  235.486840][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  235.496936][ T7899] Call Trace:
[  235.500251][ T7899]  <TASK>
[  235.503216][ T7899]  dump_stack_lvl+0x16c/0x230
[  235.507939][ T7899]  ? read_lock_is_recursive+0x20/0x20
[  235.513437][ T7899]  ? show_regs_print_info+0x20/0x20
[  235.518692][ T7899]  ? load_image+0x3b0/0x3b0
[  235.523241][ T7899]  ? _raw_spin_lock_irqsave+0xb4/0xf0
[  235.528667][ T7899]  ? __virt_addr_valid+0x18c/0x540
[  235.533824][ T7899]  ? __virt_addr_valid+0x469/0x540
[  235.538981][ T7899]  print_report+0xac/0x220
[  235.543443][ T7899]  ? dtSplitPage+0x12ca/0x3b10
[  235.548261][ T7899]  kasan_report+0x117/0x150
[  235.552817][ T7899]  ? dtSplitPage+0x12ca/0x3b10
[  235.557641][ T7899]  dtSplitPage+0x12ca/0x3b10
[  235.562304][ T7899]  ? __lock_acquire+0x7c80/0x7c80
[  235.567484][ T7899]  dtInsert+0x108f/0x5f40
[  235.571883][ T7899]  ? txLock+0x2b1/0x2090
[  235.576248][ T7899]  ? __lock_acquire+0x7c80/0x7c80
[  235.581300][ T7899]  ? UniStrupr+0x2e0/0x2e0
[  235.585740][ T7899]  ? txLock+0x1125/0x2090
[  235.590089][ T7899]  ? txEnd+0x520/0x520
[  235.594190][ T7899]  jfs_create+0x6a1/0xa40
[  235.598559][ T7899]  ? jfs_lookup+0x380/0x380
[  235.603075][ T7899]  ? jfs_get_parent+0xb0/0xb0
[  235.607774][ T7899]  ? make_vfsuid+0x51/0xb0
[  235.612214][ T7899]  ? inode_permission+0xf3/0x480
[  235.617174][ T7899]  ? bpf_lsm_inode_create+0x9/0x10
[  235.622326][ T7899]  ? security_inode_create+0xb7/0x100
[  235.627737][ T7899]  ? jfs_lookup+0x380/0x380
[  235.632351][ T7899]  path_openat+0x1277/0x3190
[  235.636974][ T7899]  ? do_filp_open+0x3d0/0x3d0
[  235.641679][ T7899]  do_filp_open+0x1c5/0x3d0
[  235.646211][ T7899]  ? vfs_tmpfile+0x490/0x490
[  235.650834][ T7899]  ? _raw_spin_unlock+0x28/0x40
[  235.655701][ T7899]  ? alloc_fd+0x58f/0x630
[  235.660056][ T7899]  do_sys_openat2+0x12c/0x1c0
[  235.664837][ T7899]  ? do_sys_open+0xe0/0xe0
[  235.669279][ T7899]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  235.675279][ T7899]  ? lock_chain_count+0x20/0x20
[  235.680150][ T7899]  __x64_sys_openat+0x139/0x160
[  235.685024][ T7899]  do_syscall_64+0x55/0xb0
[  235.689459][ T7899]  ? clear_bhb_loop+0x40/0x90
[  235.694153][ T7899]  ? clear_bhb_loop+0x40/0x90
[  235.698851][ T7899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.704766][ T7899] RIP: 0033:0x7fa2c3d8efc9
[  235.709213][ T7899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.728861][ T7899] RSP: 002b:00007fa2c1ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  235.737319][ T7899] RAX: ffffffffffffffda RBX: 00007fa2c3fe5fa0 RCX: 00007fa2c3d8efc9
[  235.745333][ T7899] RDX: 000000000000275a RSI: 0000200000000400 RDI: ffffffffffffff9c
[  235.753326][ T7899] RBP: 00007fa2c3e11f91 R08: 0000000000000000 R09: 0000000000000000
[  235.761312][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.769297][ T7899] R13: 00007fa2c3fe6038 R14: 00007fa2c3fe5fa0 R15: 00007ffc27d2e078
[  235.777294][ T7899]  </TASK>
[  235.780323][ T7899] 
[  235.782670][ T7899] Allocated by task 7899:
[  235.787009][ T7899]  kasan_set_track+0x4e/0x70
[  235.791620][ T7899]  __kasan_slab_alloc+0x6c/0x80
[  235.796619][ T7899]  slab_post_alloc_hook+0x6e/0x4d0
[  235.801755][ T7899]  kmem_cache_alloc_lru+0x115/0x2e0
[  235.806972][ T7899]  jfs_alloc_inode+0x28/0x60
[  235.811574][ T7899]  iget_locked+0x1ad/0x840
[  235.816001][ T7899]  jfs_iget+0x24/0x3c0
[  235.820086][ T7899]  jfs_lookup+0x1c6/0x380
[  235.824437][ T7899]  __lookup_slow+0x281/0x3b0
[  235.829061][ T7899]  lookup_slow+0x53/0x70
[  235.833322][ T7899]  walk_component+0x2be/0x3f0
[  235.838012][ T7899]  path_lookupat+0x169/0x440
[  235.842655][ T7899]  filename_lookup+0x1f4/0x510
[  235.847442][ T7899]  user_path_at_empty+0x42/0x60
[  235.852335][ T7899]  __se_sys_chdir+0x95/0x290
[  235.857115][ T7899]  do_syscall_64+0x55/0xb0
[  235.861547][ T7899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.867467][ T7899] 
[  235.869811][ T7899] Last potentially related work creation:
[  235.875562][ T7899]  kasan_save_stack+0x3e/0x60
[  235.880252][ T7899]  __kasan_record_aux_stack+0xaf/0xc0
[  235.885637][ T7899]  call_rcu+0x158/0x930
[  235.889813][ T7899]  evict+0x7db/0x870
[  235.893722][ T7899]  evict_inodes+0x5fe/0x690
[  235.898259][ T7899]  generic_shutdown_super+0x97/0x2b0
[  235.903570][ T7899]  kill_block_super+0x44/0x90
[  235.908259][ T7899]  deactivate_locked_super+0x97/0x100
[  235.913649][ T7899]  cleanup_mnt+0x429/0x4c0
[  235.918075][ T7899]  task_work_run+0x1ce/0x250
[  235.922688][ T7899]  exit_to_user_mode_loop+0xe6/0x110
[  235.928003][ T7899]  exit_to_user_mode_prepare+0xf6/0x180
[  235.933567][ T7899]  syscall_exit_to_user_mode+0x1a/0x50
[  235.939038][ T7899]  do_syscall_64+0x61/0xb0
[  235.943492][ T7899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.949488][ T7899] 
[  235.951838][ T7899] Second to last potentially related work creation:
[  235.958439][ T7899]  kasan_save_stack+0x3e/0x60
[  235.963136][ T7899]  __kasan_record_aux_stack+0xaf/0xc0
[  235.968535][ T7899]  call_rcu+0x158/0x930
[  235.972708][ T7899]  evict+0x7db/0x870
[  235.976617][ T7899]  evict_inodes+0x5fe/0x690
[  235.981134][ T7899]  generic_shutdown_super+0x97/0x2b0
[  235.986539][ T7899]  kill_block_super+0x44/0x90
[  235.991227][ T7899]  deactivate_locked_super+0x97/0x100
[  235.996632][ T7899]  cleanup_mnt+0x429/0x4c0
[  236.001080][ T7899]  task_work_run+0x1ce/0x250
[  236.005702][ T7899]  exit_to_user_mode_loop+0xe6/0x110
[  236.011009][ T7899]  exit_to_user_mode_prepare+0xf6/0x180
[  236.016660][ T7899]  syscall_exit_to_user_mode+0x1a/0x50
[  236.022154][ T7899]  do_syscall_64+0x61/0xb0
[  236.026624][ T7899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.032538][ T7899] 
[  236.034879][ T7899] The buggy address belongs to the object at ffff88805efaef00
[  236.034879][ T7899]  which belongs to the cache jfs_ip of size 2240
[  236.048717][ T7899] The buggy address is located 21 bytes to the right of
[  236.048717][ T7899]  allocated 2240-byte region [ffff88805efaef00, ffff88805efaf7c0)
[  236.063401][ T7899] 
[  236.065737][ T7899] The buggy address belongs to the physical page:
[  236.072208][ T7899] page:ffffea00017bea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5efa8
[  236.082371][ T7899] head:ffffea00017bea00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  236.091347][ T7899] memcg:ffff88801c3c0101
[  236.095594][ T7899] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  236.103613][ T7899] page_type: 0xffffffff()
[  236.107958][ T7899] raw: 00fff00000000840 ffff888018f95780 dead000000000122 0000000000000000
[  236.116649][ T7899] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88801c3c0101
[  236.125241][ T7899] page dumped because: kasan: bad access detected
[  236.131704][ T7899] page_owner tracks the page as allocated
[  236.137429][ T7899] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6334, tgid 6331 (syz.2.79), ts 123551596453, free_ts 116146254127
[  236.161001][ T7899]  post_alloc_hook+0x1cd/0x210
[  236.165792][ T7899]  get_page_from_freelist+0x195c/0x19f0
[  236.171360][ T7899]  __alloc_pages+0x1e3/0x460
[  236.175970][ T7899]  alloc_slab_page+0x5d/0x170
[  236.180667][ T7899]  new_slab+0x87/0x2e0
[  236.184757][ T7899]  ___slab_alloc+0xc6d/0x1300
[  236.189474][ T7899]  kmem_cache_alloc_lru+0x1ae/0x2e0
[  236.194688][ T7899]  jfs_alloc_inode+0x28/0x60
[  236.199292][ T7899]  new_inode_pseudo+0x63/0x1d0
[  236.204073][ T7899]  new_inode+0x22/0x1b0
[  236.208333][ T7899]  jfs_fill_super+0x396/0xac0
[  236.213044][ T7899]  mount_bdev+0x22b/0x2d0
[  236.217382][ T7899]  legacy_get_tree+0xea/0x180
[  236.222091][ T7899]  vfs_get_tree+0x8c/0x280
[  236.226529][ T7899]  do_new_mount+0x24b/0xa40
[  236.231049][ T7899]  __se_sys_mount+0x2da/0x3c0
[  236.235740][ T7899] page last free stack trace:
[  236.240422][ T7899]  free_unref_page_prepare+0x7ce/0x8e0
[  236.245911][ T7899]  free_unref_page+0x32/0x2e0
[  236.250614][ T7899]  __slab_free+0x35e/0x410
[  236.256097][ T7899]  qlist_free_all+0x75/0xe0
[  236.260615][ T7899]  kasan_quarantine_reduce+0x143/0x160
[  236.266199][ T7899]  __kasan_slab_alloc+0x22/0x80
[  236.271072][ T7899]  slab_post_alloc_hook+0x6e/0x4d0
[  236.276216][ T7899]  kmem_cache_alloc+0x11e/0x2e0
[  236.281085][ T7899]  getname_flags+0xbb/0x500
[  236.285605][ T7899]  user_path_at_empty+0x2c/0x60
[  236.290477][ T7899]  do_readlinkat+0xd8/0x480
[  236.294994][ T7899]  __x64_sys_readlink+0x7f/0x90
[  236.299860][ T7899]  do_syscall_64+0x55/0xb0
[  236.304292][ T7899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.310208][ T7899] 
[  236.312541][ T7899] Memory state around the buggy address:
[  236.318181][ T7899]  ffff88805efaf680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  236.326365][ T7899]  ffff88805efaf700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  236.334459][ T7899] >ffff88805efaf780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  236.342532][ T7899]                                                  ^
[  236.349216][ T7899]  ffff88805efaf800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  236.357294][ T7899]  ffff88805efaf880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  236.365378][ T7899] ==================================================================
[  236.504692][ T7899] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  236.511966][ T7899] CPU: 1 PID: 7899 Comm: syz.4.402 Not tainted syzkaller #0
[  236.519287][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  236.529384][ T7899] Call Trace:
[  236.532707][ T7899]  <TASK>
[  236.535668][ T7899]  dump_stack_lvl+0x16c/0x230
[  236.540399][ T7899]  ? show_regs_print_info+0x20/0x20
[  236.545640][ T7899]  ? load_image+0x3b0/0x3b0
[  236.550201][ T7899]  panic+0x2c0/0x710
[  236.554146][ T7899]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  236.560342][ T7899]  ? bpf_jit_dump+0xd0/0xd0
[  236.564874][ T7899]  ? _raw_spin_unlock_irqrestore+0xfa/0x110
[  236.570788][ T7899]  ? _raw_spin_unlock+0x40/0x40
[  236.575668][ T7899]  ? dtSplitPage+0x12ca/0x3b10
[  236.580454][ T7899]  check_panic_on_warn+0x84/0xa0
[  236.585415][ T7899]  ? dtSplitPage+0x12ca/0x3b10
[  236.590206][ T7899]  end_report+0x6f/0x140
[  236.594461][ T7899]  kasan_report+0x128/0x150
[  236.598980][ T7899]  ? dtSplitPage+0x12ca/0x3b10
[  236.603772][ T7899]  dtSplitPage+0x12ca/0x3b10
[  236.608395][ T7899]  ? __lock_acquire+0x7c80/0x7c80
[  236.613495][ T7899]  dtInsert+0x108f/0x5f40
[  236.617876][ T7899]  ? txLock+0x2b1/0x2090
[  236.622154][ T7899]  ? __lock_acquire+0x7c80/0x7c80
[  236.627225][ T7899]  ? UniStrupr+0x2e0/0x2e0
[  236.631668][ T7899]  ? txLock+0x1125/0x2090
[  236.636024][ T7899]  ? txEnd+0x520/0x520
[  236.640117][ T7899]  jfs_create+0x6a1/0xa40
[  236.644474][ T7899]  ? jfs_lookup+0x380/0x380
[  236.648991][ T7899]  ? jfs_get_parent+0xb0/0xb0
[  236.653691][ T7899]  ? make_vfsuid+0x51/0xb0
[  236.658133][ T7899]  ? inode_permission+0xf3/0x480
[  236.663090][ T7899]  ? bpf_lsm_inode_create+0x9/0x10
[  236.668222][ T7899]  ? security_inode_create+0xb7/0x100
[  236.673610][ T7899]  ? jfs_lookup+0x380/0x380
[  236.678134][ T7899]  path_openat+0x1277/0x3190
[  236.682765][ T7899]  ? do_filp_open+0x3d0/0x3d0
[  236.687490][ T7899]  do_filp_open+0x1c5/0x3d0
[  236.692032][ T7899]  ? vfs_tmpfile+0x490/0x490
[  236.696825][ T7899]  ? _raw_spin_unlock+0x28/0x40
[  236.701689][ T7899]  ? alloc_fd+0x58f/0x630
[  236.706038][ T7899]  do_sys_openat2+0x12c/0x1c0
[  236.710736][ T7899]  ? do_sys_open+0xe0/0xe0
[  236.715169][ T7899]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  236.721169][ T7899]  ? lock_chain_count+0x20/0x20
[  236.726040][ T7899]  __x64_sys_openat+0x139/0x160
[  236.730938][ T7899]  do_syscall_64+0x55/0xb0
[  236.735388][ T7899]  ? clear_bhb_loop+0x40/0x90
[  236.740088][ T7899]  ? clear_bhb_loop+0x40/0x90
[  236.744882][ T7899]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.750812][ T7899] RIP: 0033:0x7fa2c3d8efc9
[  236.755256][ T7899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.774886][ T7899] RSP: 002b:00007fa2c1ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  236.783318][ T7899] RAX: ffffffffffffffda RBX: 00007fa2c3fe5fa0 RCX: 00007fa2c3d8efc9
[  236.791306][ T7899] RDX: 000000000000275a RSI: 0000200000000400 RDI: ffffffffffffff9c
[  236.799288][ T7899] RBP: 00007fa2c3e11f91 R08: 0000000000000000 R09: 0000000000000000
[  236.807269][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.815265][ T7899] R13: 00007fa2c3fe6038 R14: 00007fa2c3fe5fa0 R15: 00007ffc27d2e078
[  236.823283][ T7899]  </TASK>
[  236.826612][ T7899] Kernel Offset: disabled
[  236.830981][ T7899] Rebooting in 86400 seconds..