last executing test programs:

13.883468688s ago: executing program 1 (id=310):
set_robust_list(&(0x7f0000000000), 0x18) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000880)="c1188e99b95d02ff4284860186ddd06b2f4bad9aa8dbba9b838a2cd3813aeedc37a2c4c54baf00c48b852d7840ee363e02c019996b74", 0x0, 0x7fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x4000000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="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", 0x345}, {&(0x7f0000002b40)="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", 0x26e}], 0x2}, 0x8400) (async, rerun: 32)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000003ac0)="64cc", 0x2}], 0x1}, 0x0) (async, rerun: 32)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfe8, 0x8, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2808082, &(0x7f0000000740)=ANY=[], 0x2, 0x70a, &(0x7f0000000980)="$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")

12.680772284s ago: executing program 1 (id=313):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x7, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x1, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x535a, r2, r3, 0x400f0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
syz_emit_vhci(0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r4 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x101002, 0x10}, 0x18)
sendmmsg(r4, &(0x7f0000002500)=[{{&(0x7f0000000380)=@caif=@util={0x25, "ff302cbc9873d99540b4b8a36ea72092"}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000480)="9fff304609551062b9fefeb3b9d649a3fa1dc3cee592123d9bd7e6ace3b1e5dacfc4416ca53bd7a51ce1c243568c401963da93d90fc85c4dab65c5d7087ef7fec478225943096479dd96fbee31ec568a817f72bcb9e76f514480094c0f5b4463143fe4e7e563ef5feaf09f2a634aee", 0x6f}, {&(0x7f0000000540)="a131b9e5a1b4d6d7de6bd6175ff12e0bec7518ef1c27ff533800b0fa54111ebc076137c95aadb541a6482e977378114097115376d0f3aae0f603c082181e81228f2886be65cacef1173d2c9c43a530cb69a6d926c246792f3f2b02de9e72b7db98a09111406622b9bc013cc309d1cec7c0ac92d7d3ae44c12157cf94624d49a0434d6e7d0c468e6ecff5a4ab0918ec1d4525fa47cdc695cc42ae1c43484a74c24373df69a5f9", 0xa6}, {&(0x7f0000000600)="53f04e2b0bd4e1dad54717020ffc417784e1e2c97c99a04f17e9a8436706ec32a737e2df93cedc538e02acbff7960a46170936fcffc0bb8a0aaf558497590cf42b079408e5c4be6f9cd56a4c7e56da71070293707d90deb5c2a6192f7152b0e3f7856aadbd782a299d82f6a356cc87b8afcc2d2c5b77bb", 0x77}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="d402f5ea0b706974d37fd222a0c33a636d469915545770585f8d9e7add0a9d789ff96fef0f80457592b1c916bcf7b37d83130a881f329dd2e8102544338911933553f81232b9b8ea7c7d9d7f7511fe21e2eed5443e33769e2487ff0af4aa2ea207f6ab0498f43ae40dfc7f056675bc15ac98526efb4ed8d0fcb4109e168fc9b8", 0x80}, {&(0x7f00000018c0)="a954b7e3c4", 0x5}, {&(0x7f0000001900)="6cae2f007c847e213d2258a9423b30db9790459eba33be4facd20c7e3316f2d3d439bd626d51f18b6ef395fe387b1245ba0db91aa4e8265478a512bbfbf15cf6c46c0da4104001e56d616d951fa8b0b92549fad45614f2a8adb0", 0x5a}], 0x7, &(0x7f0000000680)=[{0x88, 0x0, 0x1, "4039d747164de30d9ecbf299642a334d66ffcee54d5794610036a695f9177515a78f33e72740ec83d554b7685ab4cea927e6bef37250015b665cf2ed89a3351103409ed8d2756db47d359489331118744c19fa5f4ceea64675f7c57e0a085a76744002f35e424681630d1b676e36c796b67a4277"}, {0x88, 0x114, 0x1ff, "7e5c8d16898abf2be3490fe5b6d828a58c113dde545f74804ae215123af35d9eb60a8b9b015bfb5e1b0e651682b4dd65507662d6a1a73df3a501047a7a4b63913883a057ce9c2de83bf821b6197ac494caad44a80b8feb75dff8d956e75624386bb6e9e8f940a6a9b80000000000000000"}], 0x110}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)="d1c0d2a0d259a49b63d71b6cbd6fa2e5796a7a1752eef66942e8a520ed8c00a938f5335123f55fc7115172c5dcd3ec8c2c59f1669b7532215431c2361187e2189afdd38ac1df26d02aa152c69cb2c5d246782eee77baec29bb5677c810239e2cb15f52d345402536bbb1bbc2d66616116115f36c6ad0d1d633950bcbf865039caeffde0a4f607fb0", 0x88}, {&(0x7f0000001bc0)="c118a404d156cbdc7c61ac0ad1b2d0b255f6aafe8bb7e6952963558edcd38b1c3b8842a041c2623aec322eac43dab03d6e", 0x31}], 0x2, &(0x7f0000001c40)=[{0x90, 0x0, 0xb, "d898dd901f63d81db38885aad5f1b4a73cdd7045209078a88ae8f73df53e5e8847e2969ff85d6c7a357f563646f987152fd432e03c0e6154d6ef914df8896d8b2e6a43423e894d4551c10f7cfc44a6124b485500e884339e3966fec003e775fe97f4c2c6be0ba64725dd92e9f5c64acc840a97e0a6a7d14117ba141b45"}, {0x78, 0xff, 0x8871, "4a4a027fc1fcbfa69d8c2097256a01e1f20eeb72d46b66fb6299c6147e186d4c0894c861a159b0768b4841d2699fb6238b2a6dcb2f0c9996c674f3b2df9467d8ac54b5966d5b6c2b0a9985a4476bfe4302d10dbb529deb155a1ba62ca3f467af48f9d1b9bed6"}, {0x68, 0x101, 0x4, "83e3918afd762e00e6ba96b2dc219fefff3ca6f9f88e9aa0b46902c72227b90cd75d5e8ab315c06c0e094585537fc91eb32b2ba584af36951fc19093159b57fb957ab647f37701bef28dfa360cf9e569ea4979a9f9794d"}], 0x170}}, {{&(0x7f0000001dc0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001e40)="8fd077621d8ca8d32f60d5b39f0e410e614eb8dc89b15ebb2a11fbbac5fe785ff9b13c5ec5b08e4a112f14caa36b81b7087221a7752a20b4de0f8d8eade98613fc78737ea35c2fb3bcbc74452abebfce709b4d2e850967f2e3b7058bf3e8e5c23bf4ae47a7976a5035d2d8b0bf082a72f1685b3fa2e45af9114090702755bacbe2315a7f4e4a682e60e652daaf186a0acf38d0d0373f6840e67f0a225ca19b9450e9e72e38fc543950473a471e45536108a341774fc36a16016074d47af2d90e02825bea4299aaeacf63972158df9c05a6f5cb6d68e7ea22c7", 0xd9}, {&(0x7f0000001f40)="6dc6d8c6955af8236e99e84815a375be94b577be01c8da980dd29701880c68397c47263661e9e2de494e31a25a8a1b5e429a0679bb256f70c08a07dd5285971cad262470e2932ff5eaea0635abbb5ef3443389a6ca3df47ae813f5e00c21ab100f497ecdff5e72092ba9c95a1bddcf907522e71e07be3f318a49a354914ea66a0c748a43d9077cf3d5574b7fadf7d24a69430a03f011e99e0351d63fc165136c1609532df1b2641be63f717a9036aa91511963a63db79cc07ab1e32e43dffebf26b7ad326b71918046c387aa134f1fc145e8cb08", 0xd4}, {&(0x7f00000021c0)="81c4fe7047ec2fdba11fca9909f776ffada35a5cf0bb48cc73177dc3e7ca552047ff9cb551177358ffd0a0d86dbe65cbf5e23d63995b13767964361d5caa27e4f5999d9acf03ac5552e033a577fba8c1d227a8724b6b8bd38a603554fe93c07395f409ba40ab9f0f6fdd0cb8baa5e7cbf420f61f279fe219acb70522baeb99db226deca9f8c2a5f26aed299c73f043e7edf436147c9d70ac3e9009cdf66abd164993431a5b3884e10b0ea7fc77ee7f215cbe321cd3b5670246784d82eb9291e305a534137590a8b29848e2a204b52c70af4f929ce76ed530b7d798c05b9f1359d94606f450891ec4577bd82c5f1fb0353f1da965a0eb", 0xf6}], 0x3}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002300)="ceb99f168aaeb56b6118db13a92baa07fd0ec69e182e4fa61ac4df9aaa", 0x1d}, {&(0x7f0000002340)="7253b5a192fd536e304bb9f3c8d248a61824d46f9167cb1538694d07183baba8a58f3503344a7e49196635d21bffca6d4691551cf2edd6ea163ef474973494ae1a3c20119591be74acdf5f4e7c3a435781efaab52f9ff489a443c0674e79115eaf705434dc0a18e6750db786728fcbb814e3bc4abc5534bf9b3863862065e79e3ccadbf5bf8b379d8806a9", 0x8b}, {&(0x7f0000002400)="3f2fdf4c9c5f97c4e674e554e224a51521b79c5ef0e1e7c6106f594c83af6d9dbd657fc186cef0ab69be31ef9cf7cbd2896c42aaa758c24572a9091ae63f005566c0ba121d85830f60102e59ae397a62f6341e5ee2bf89c1fef6ee9121319d08295e254aad756ed62d636334634556b32f9a18e6adc9efee6e100c2d30f6a4fe772e3dd76f9be10378e3a4dbdd0b0c2b79855db4e54f2075960ef5362974bec56e161a36107bc6bcf5919938277abae7082aec3c13191b", 0xb7}], 0x3}}], 0x4, 0x20000811)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xb26f5000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40)
syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003a12dbf20950b2b77e8ee0102030109022400010024000309046c0202fa458b0409050b03100001060809050c0df703f801065614fb858d6e3eab2d7b9c1a025295df87194b51f4412a9d07108083273040f67218e2ddbd933b7be3624c03ded4ca41d25c09f799d218e0d5e12d1bf8dd2aaebe37e953ef7a570a99ad3d032ed76a547721fe35e687b1406b2a68b4bb729a052d2c2c01f5cd5d834b322e3471"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})

12.002213551s ago: executing program 0 (id=318):
r0 = socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ptrace(0x10, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1702)
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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")
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x501000, 0x20)
getdents(r3, 0xfffffffffffffffd, 0xbb)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x180500, 0x137, 0xc}, 0x18)
close_range(r4, r4, 0x2)
mkdirat(r4, 0x0, 0x4)
ioctl$EVIOCGLED(0xffffffffffffffff, 0x80284511, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0xffffffffffffffbb)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800)
mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x10, 0x3)
r5 = socket$packet(0x11, 0xd4e96bee3af975, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req={0x5, 0x400, 0x7ba, 0x4c}, 0x10)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x10800f83, 0x7}, 0x1c)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r6=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088f74803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100eec72cbd706e56aeb814bf372a5800fddbdf2502801001a10000030100000000000b00b3090000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0)

9.3190702s ago: executing program 0 (id=322):
prlimit64(0x0, 0xe, 0x0, 0x0)
getpgid(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
userfaultfd(0x80801)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x61})
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0c80, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0)
read$FUSE(r1, 0x0, 0x1100)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

8.97119344s ago: executing program 1 (id=324):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000180))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000060000005a0b0000000000000c01000000000000000200000d04000000fdfffffd040000000a000000010000000000000000000004000000000400000000000008030000000000000061"], 0x0, 0x5e, 0x0, 0xffffffff}, 0x28)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x8001, 0x0, 0x8, 0x800, 0xffffffffffffffff, 0x7, '\x00', r4, r3, 0x5, 0x0, 0x5}, 0x50)
r5 = getpgid(0xffffffffffffffff)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYRES64=r5, @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)
syz_emit_ethernet(0x18, &(0x7f0000000100)={@remote, @random="9f54e7a27261", @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x0, 0x1}}, {@generic={0x800, "3bf9"}}}, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8001)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="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", 0x596}], 0x1}, 0x400c000)
sendmsg$sock(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x80, 0x3, 0x14, 0x10}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0})

7.859995383s ago: executing program 3 (id=327):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8)
sendmsg$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0xe0})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3)
ioctl$TCSETS2(r0, 0x402c542b, 0x0)
socket$kcm(0x2, 0x3, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0x66, 0x4)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x2000011, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

7.306917023s ago: executing program 2 (id=328):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff9, 0x2}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xdf774816f75c4f57}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c014}, 0x51)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2ecd80, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mlock(&(0x7f000073e000/0xa000)=nil, 0xa000)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0\x00', 0x4, &(0x7f0000000c00)=ANY=[], 0x7f, 0x6df, &(0x7f0000000680)="$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")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x20441, 0x189)
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0xa5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x3, 0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000f80)=[r4, r1, r2, r2, r2, r2], &(0x7f0000000fc0)=[{0x5, 0x2, 0xf, 0x8}, {0x2, 0x3, 0x10, 0x5}], 0x10, 0xaf}, 0x94)

7.049223173s ago: executing program 4 (id=329):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$kcm(0x2, 0x5, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000ff0200000000000000000000000000014e240000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000020000e9000000000180fffffffffffffeffffffffffffff000000000008000000e385000000000000000020002000000b000000000000000000000000000000010100030000000065a4c71bd50d5d2ce14626c9e7a51ac8ad02c0ad49"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8)

6.417726924s ago: executing program 2 (id=330):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r2 = socket(0x2b, 0x801, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000180)=0xe, 0x4)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001a00)={0x5, 0x0, [{0x8000000, 0x1000, &(0x7f0000000880)=""/4096}, {0xeeeea000, 0x31, &(0x7f0000001880)=""/49}, {0x8003000, 0x3c, &(0x7f00000018c0)=""/60}, {0x50000, 0xb8, &(0x7f0000001900)=""/184}, {0x5000, 0x3f, &(0x7f00000019c0)=""/63}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000300)=0xfffffffe)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000340))
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x200088d1)

6.41480149s ago: executing program 4 (id=331):
socket$packet(0x11, 0x3, 0x300)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="a5af93f1017a63b39c5f91da7436a31fe4969219d6ddce5154b00d0712a8fa36b90f09440472658d126df0b2a7653cabe6db7aa0d231d6c6f4f0441452436047fce3d3e8a58726bfb01313bc90aded321a8531c17426326305607f12b826a3509d1ab8298e4f8f56351f6be6df78b9f3f11eb6134c45900c0f2741290e6a21bb104d9f0861962f19f9b5eae16f5bfe1701802e45620c14b370b2d9113bb8bc72b0f1b4faafea6b67ee5fa5a48029143e0733ec3fbd50e055874ed0efea9adb37cc34", @ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000000340)=""/132, 0x84, 0x41)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)

6.043385866s ago: executing program 4 (id=332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x2000000000000000}, 0x40000010)

6.041150763s ago: executing program 2 (id=333):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182)
close(r0)
r1 = socket(0x1e, 0x1, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2})
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="0055a9775faaaaaaaa210180c200000381"], 0x18)
write$nci(r0, &(0x7f00000004c0)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x2, {0x1, 0x1}}, 0x5)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51a, &(0x7f0000000600)="$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")
r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x100)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r8, 0x10, 0xffff, 0x8001)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000280)=<r9=>0x0)
ioctl$KDGETMODE(r7, 0x4b3b, &(0x7f0000000240))
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r10, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r10, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004})
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000480)={0x7, 0x0, 0xcf33, 0x0, 0x7fff, 0x1, 0x0, &(0x7f0000000440)=[{0x3, 0x1ff, 0x7}]})
ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r10, r10, 0x3, 0x1ff, 0x3fff})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x2200400, &(0x7f0000000c80)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="fc7766646e6f3d36356c5db0b5488221d93b0eafacba966bc5f8293e11922a4587db465cbfa1aec8be25ee6617041750803f1321c58487de164e0f4c48c3733cffa6e994c3abe7df7500"/88, @ANYRESHEX=r1, @ANYRESDEC=r9])

5.957401682s ago: executing program 3 (id=334):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52}, 0x28)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1000050, &(0x7f00000005c0)=ANY=[], 0x1, 0x73a, &(0x7f0000001a00)="$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")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000028c0)='./file1\x00', 0x2a08800, &(0x7f0000000040)=ANY=[], 0x1, 0x6af, &(0x7f0000003180)="$eJzs3ctrHPcdAPDvjFYrrQuOktiJWwIVMaSlorYeyK16idtD0SGU4B5CSy+LvY6F10qQlCKb0qrvaw/5A9KDDoWcCr0b0tJTm1uuOpVAoZecdFOZ2ZndlVa71trSru18PjA7v5nfc77z2J0RYgL40lqdi8rDSGJ17q3tbHlvd6m5t7s0VWQ3IyJLpxGV1iyS9Yjkk4jr0Zriq9nKonzSr58P11ZufPbF3uetpUox5eXTQfVOZqeYYjYiJop5r8nHau9m3/YGq7dTSXsLs4BdLgMH43bQY2eY6k943gJPg6T1vdljJuJcREwXvwOiuDqkox3d6RvqKgcAAADPqBf2Yz+24/y4xwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPkuL9/0kxpWV6NpLy/f+VYl2mGhE30jGPeXhJO/VwrOMAAAAAAAAAgNPx9f3Yj+04Xy4ftP40Xsk/L+SfX4kPYjMasRFXYjvqsRVbsRELETHT1VB1u761tbEQrz+y5uKxNRdHsbUAAAAAAAAA8Nz6Tax2/v4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPgyRiojXLpwtleibSSkRMR0Q1K7cT8WmZfkYkZaLWtfLheMYCAAAAj236uJWf/mNgnRf2Yz+243y5fJDk9/yv5PfL0/FBrMdWrMVWNKMRt4p76OyuP93bXWru7S7d29tdyjv+2UFLq53v/2+ooectRuvZw/E9X8pL1OJ2rOVrrsTNfDC3Is1rZi4V42lPhzv5dTam2puFE47sVjHPOvtT91OE05YOW2EmrzTZjsh8MbasoRcHR+KRe6cysKeFSNtPfi4M6KncpGTImJ8r60XEH47E/M3//OUnJ2zmDLQjkUYeicWuo++VdhSmjq/8jb99/M6d5vrdO7c3587sMBqVo8fEUlckXh189D3lkagMWX6+faS3NmU1fhg/jrmYjbdjI9bi55EdD40oroxRL8plnzNdUYroidT1Q0tvP2ok1WK/tK6iaVxs5/SOqR5b0YjZmMpT9Xg9r3s+1iKJ9+JWNOJaXGufesuxHCtde/hi3z2cV8ivtOlwZ/3lb3ZCGH888ph2oH+etODwWl+pWVxf7Ipr9zV3Js/rXtOJ0ksn+D4a8tpY+VqRyPr4bT7/6VPyEP5oJBa6IvHy4Ej8OT83Npvrdzfu1N/v0/7OkeU3Jjvp35/lN/PQsh3yUkwXV5LDR0eW93L7KnM4XtXiLy6tvLQn72KelyTlmfqjrjP1WizGQnynOFOrxW+43pYW87xXe/MmypFf6so79Hsr3vvXeOIJwJDOfetctfbf2r9rH9V+V7tTe2v6B1PfnXqtGpN/n/xeZX7ijfS15K/xUfyyc/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vs37D+7Wm83GxvGJtH/W6SaS4kU+/cpUohan1VfxwsJfdWVNxllv4P0H1d5N3jn1vmJE++vJEuWbq560nXeuj2DMExGjjGrMHHcWTJ1SxHoT2eaVayaik1V0eOzLRYHnwdWte+9f3bz/4Ntr9+rvNt5trE8uL6/MryxfW7p6e63ZmG99jnuUwFno/B7oV+Lj0Q4IAAAAAAAAAAAAeKRR/FdDV3ezY9xUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bm1OheVyUhiYf7KfLa8t7vUzKYy3SlZiYg0jUh+EZF8EnE9WlPMdDWX9Ovnw7WVG599sfd5p61KWT4dVK9UHZi7U0wxGxETxXxgGwcHJ27vZr/2Tixpb2EWsMtl4GDc/h8AAP//ZlAA0Q==")
r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

5.765912775s ago: executing program 4 (id=335):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
write$input_event(r0, &(0x7f0000000080)={{r1, r2/1000+10000}, 0x2, 0x5, 0x7}, 0x18) (async, rerun: 64)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50a, &(0x7f0000000600)="$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") (rerun: 64)

5.365478144s ago: executing program 2 (id=337):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
syz_pidfd_open(r0, 0x0)
ptrace$getenv(0x4201, r0, 0xed6, &(0x7f0000000180))
r1 = getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setuid(0xee00)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000009, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
clock_gettime(0x0, &(0x7f00000025c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000002c0)={@rand_addr=0x64010101, @rand_addr=0x64010100, r6}, 0xc)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r7, &(0x7f0000000440)=[{&(0x7f0000000140)="93d90400000300", 0x7}], 0x1)
io_setup(0x20, &(0x7f0000001140)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="fc", 0x7}])
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x8, '\x00', r6, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50)

5.338822035s ago: executing program 0 (id=338):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20000)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x2, &(0x7f0000000440)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0xa00}])
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x4, 0x3, 0x8, @vifc_lcl_ifindex=r7, @remote}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x4, 0x77}, {0x8, 0x11}, 0x1, 0x4, 0x9})

5.331387736s ago: executing program 3 (id=339):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000000)={0x0, 0xe, 0x2, 'Wk'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

4.930714107s ago: executing program 1 (id=341):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180))
r3 = eventfd(0xff)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r3, 0x1)
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000040, 0xb5821ab55062022a})
syz_io_uring_submit(r1, r2, r6, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x0, 0xfffffffffffffde8, 0x0}, 0x0, 0x40000040, 0xb5821ab55062022a})
r7 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r7, 0x0, 0x0)
io_uring_enter(r0, 0x1, 0xeed, 0x1, 0x0, 0x0)

4.801197555s ago: executing program 0 (id=342):
r0 = inotify_init1(0x80800)
inotify_add_watch(r0, &(0x7f0000000640)='.\x00', 0x80000001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x640900, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x2, 0x0, 0x8, 0xffffffffffffffff})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)=""/270, 0x10e}], 0x1}, 0x40003e22)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x3, 0x8, 0x73e9})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000007b7030000000800008500000086002000bf092000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, 0x0, 0x24044010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r5, @ANYRES16=r6, @ANYRES32=r1], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
fallocate(r1, 0x0, 0x8e14, 0x8ffff)

4.781491935s ago: executing program 5 (id=343):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff9, 0x2}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xdf774816f75c4f57}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c014}, 0x51)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2ecd80, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mlock(&(0x7f000073e000/0xa000)=nil, 0xa000)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0\x00', 0x4, &(0x7f0000000c00)=ANY=[], 0x7f, 0x6df, &(0x7f0000000680)="$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")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x20441, 0x189)
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0xa5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x3, 0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000f80)=[r4, r1, r2, r2, r2, r2], &(0x7f0000000fc0)=[{0x5, 0x2, 0xf, 0x8}, {0x2, 0x3, 0x10, 0x5}], 0x10, 0xaf}, 0x94)

4.519734073s ago: executing program 3 (id=344):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xfe94)

4.492438578s ago: executing program 5 (id=345):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0xa, 0x4e24, 0x80000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x2, 0x3}}}, 0x118)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
kexec_load(0x58fb, 0x0, 0x0, 0x160000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xfe94)

4.333508642s ago: executing program 2 (id=346):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8)
sendmsg$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0xe0})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3)
ioctl$TCSETS2(r0, 0x402c542b, 0x0)
socket$kcm(0x2, 0x3, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0x66, 0x4)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x2000011, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)

3.705084161s ago: executing program 3 (id=347):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = syz_open_dev$video(&(0x7f0000000080), 0x80, 0x20000)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
read(r0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x24b, &(0x7f00000009c0)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))

3.162019567s ago: executing program 1 (id=348):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) (async)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fadbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5428a0900"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000)
sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x4, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="c0f68d163e1490bd94aab321919e3daeba08ec7ae926dbb52d0f77f944bea23b573d4eac099d0e20e142c9028aeb747e5bc87584e221e668fd08d20056a71be1e535f28d48c9f278c038820f301019f8d5e699534982481c3ec12c9515efe4ec7629cd32e1c8edacda0d689bfc7717", 0x6f}, {&(0x7f0000000280)="fb5b70a92afb87efbde450598614ef0261dfaef78033b860f9e60e8853b3c632202dcc84c4d9b384cf4f0fec92a549842baa6b4e05e288dd1c3e555e4be1eaeaa6f861070cc6e3c7eb675fd8f5f0c7057d0a3ca2c50a", 0x56}, {&(0x7f0000000340)="84ddc5cd442950ecc455da2e1a62a1f6740cdfa43b00478a6e12e5912ef2d2df05ebee72fc5c5811521cade3c278498d445c77ce823140ba3f460b4ef1b84b8b9a5eb09ed028875e33b992d27318b49bde69cb835ebc355b8e4a99cf83b6b8e39624ff386aed4f17072f9579b363f8e9b6d1ed807b3d77edef9aee335b9e0c082188487b75102dfef27552465f92933896e1fd2168c8e64b37a84843832299b342111e2e4bf6fc1a4bbe2a9c47ba90bb680fbabb9dec9e4756c78b3209b9f70bee1597155993f6545defff37ec712bba2757730c33dd16", 0xd7}, {&(0x7f0000000480)="38c0c19b3e439ef9ab3937462e3b1e446143f456eecd38f588c8a9cad9ca98175fba5d9b20be89ec8c0a1944243107a1f963f7391f1e6cded3472674d54fb634f72e33ab60bcd17a8e9822eb107440517e2ecfcaaa580849609766ff94fe2e6450ebf711bfb076f03fed5f4bc9b55e3bb304ec12a80c06d47161b411556cf5309dfb0dfb50fcc32c6c2c889aa2431cf85ab5161a2f0b18ac66bb53bb14e0a007bb9876a8eeb1ea2914d0c90d83153139dad5f1f03b8ea04f7db83b6c9e443d060610db0a45b4c9351eabdc71b560355d84fe71929993f700b459858944a924e8cc4a7d8984934553", 0xe8}], 0x4, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1be6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x60}, 0x24005041) (async)
sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x4, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="c0f68d163e1490bd94aab321919e3daeba08ec7ae926dbb52d0f77f944bea23b573d4eac099d0e20e142c9028aeb747e5bc87584e221e668fd08d20056a71be1e535f28d48c9f278c038820f301019f8d5e699534982481c3ec12c9515efe4ec7629cd32e1c8edacda0d689bfc7717", 0x6f}, {&(0x7f0000000280)="fb5b70a92afb87efbde450598614ef0261dfaef78033b860f9e60e8853b3c632202dcc84c4d9b384cf4f0fec92a549842baa6b4e05e288dd1c3e555e4be1eaeaa6f861070cc6e3c7eb675fd8f5f0c7057d0a3ca2c50a", 0x56}, {&(0x7f0000000340)="84ddc5cd442950ecc455da2e1a62a1f6740cdfa43b00478a6e12e5912ef2d2df05ebee72fc5c5811521cade3c278498d445c77ce823140ba3f460b4ef1b84b8b9a5eb09ed028875e33b992d27318b49bde69cb835ebc355b8e4a99cf83b6b8e39624ff386aed4f17072f9579b363f8e9b6d1ed807b3d77edef9aee335b9e0c082188487b75102dfef27552465f92933896e1fd2168c8e64b37a84843832299b342111e2e4bf6fc1a4bbe2a9c47ba90bb680fbabb9dec9e4756c78b3209b9f70bee1597155993f6545defff37ec712bba2757730c33dd16", 0xd7}, {&(0x7f0000000480)="38c0c19b3e439ef9ab3937462e3b1e446143f456eecd38f588c8a9cad9ca98175fba5d9b20be89ec8c0a1944243107a1f963f7391f1e6cded3472674d54fb634f72e33ab60bcd17a8e9822eb107440517e2ecfcaaa580849609766ff94fe2e6450ebf711bfb076f03fed5f4bc9b55e3bb304ec12a80c06d47161b411556cf5309dfb0dfb50fcc32c6c2c889aa2431cf85ab5161a2f0b18ac66bb53bb14e0a007bb9876a8eeb1ea2914d0c90d83153139dad5f1f03b8ea04f7db83b6c9e443d060610db0a45b4c9351eabdc71b560355d84fe71929993f700b459858944a924e8cc4a7d8984934553", 0xe8}], 0x4, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1be6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x60}, 0x24005041)

2.586491558s ago: executing program 5 (id=349):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @host}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040)

2.547350275s ago: executing program 0 (id=350):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ae6000/0x1000)=nil)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/100)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x3, &(0x7f0000000740)=""/4096)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
openat$cgroup_pressure(r6, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r6, r7, 0x18, 0x0, @val=@perf_event={0x6}}, 0x18)
r8 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0)
r9 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r9, 0xc0884123, &(0x7f0000000080))
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cce801000600000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r10}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r10}, 0x38)

2.440606863s ago: executing program 4 (id=351):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52}, 0x28)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1000050, &(0x7f00000005c0)=ANY=[], 0x1, 0x73a, &(0x7f0000001a00)="$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")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000028c0)='./file1\x00', 0x2a08800, &(0x7f0000000040)=ANY=[], 0x1, 0x6af, &(0x7f0000003180)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2.365874155s ago: executing program 2 (id=352):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
clock_adjtime(0xffffffd3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
recvmsg$unix(r2, &(0x7f0000000240)={&(0x7f0000000680), 0x6e, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000700)=""/123, 0x7b}, {&(0x7f0000000780)=""/71, 0x47}, {&(0x7f0000000800)=""/118, 0x76}, {&(0x7f0000000880)=""/78, 0x4e}, {&(0x7f0000000b00)=""/255, 0xff}], 0x7, &(0x7f0000000cc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x100) (async)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000440)={0x14, {{0x29, 0x0, 0x3e000000, @mcast2, 0x40000005}}}, 0x88)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x8, 0xf5, 0x0, 0x0, @u32=0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006940}, 0xc000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="c4000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000020000a000000000000feffffffff7f40000200000000000008000000000000001801001000000000000a001000010000000000000046a581e8105bb1d22745a0dc4d36a52d0fc72bcb0227b070f112805093c53d93dd712d380a5d67c148799afb00bf23a291827c80faaca290da84ea1ed1525e5aa27ea52e6ef3e8bdf856a2be9f740049319994170c381599816a25c033a00aa0c40ad3d8cdca410d01ece0a7578b"], 0xc4}}, 0x0) (async)
r8 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) (async)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @dev={0xfe, 0x80, '\x00', 0xc}, 0xff}, 0x1c)
fcntl$dupfd(r9, 0x406, r9) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0)

2.287254593s ago: executing program 1 (id=353):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f400088050000080040009801400040002004e2064010101000000000000000006000500010000000800030002000000240001"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="ad4308a803a93ae832cfe6d5ef23337e0f698efa258fa9d3bc1c9df29b8749c5ffd0074397d4b10c19ca158b9169fc747e0ce81800f6ab54701b60db0d358f0341b17544b7edabe88d90fc5a63b52a5eee75baf1278b9c106f3c728d86482d41a1b38f52ef3bd9e716e77953d785625a2279cf4fd6266ccaba213de2e35c65a01968cf04d00a1ca520baf750b816fafde164d33bfafb0fee4aae07b55527d4d61deda8a79a1be0238b8309d25f34019a61f0363bd8bdf6bae02edd9d34b01b8157e510cce6e027a234aed059efc56f40c91c898a6e7d7217224d331981b5c2bb14d88bdc317c7a88eb04c5ef7be4021f8dbbf25c65b82d0f787de0c0b87c2d51c21e948c9c8f8077e0341b04c4ff0c0f3e7a48fae5ca15222bc350f59307d42d0670f91610d4dec94cfbbbe3b383decd29515965a3059d4b2cbed6a77948d374d320ef04b9fd74c87eef26125b3e3418aca9bd8e98db179d57611d0f85528116cae7b18393dd78c7528c45e7a8d64db9adb31bb95564d75ff0dc06fb71fc52ee5c02779cb166d93180cbd74ab3fb7e19b3509381c4e2b6e9cb7953347d0993c3d7445d201aa1e11c8eace70bc364fb0572af4c00f9c53d1a8fa4702a792ff9a83eef082e90a18dadd9", 0x1c9}], 0x1, 0x0, 0x0, 0x4000}, 0x40080)
setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000540), 0x4)
sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @loopback}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x4001)

2.254101576s ago: executing program 3 (id=354):
syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000140)=0x10007fd, 0x12) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000)
write$char_usb(r2, &(0x7f0000000000)="5e88ffa3ee350070971d2b70b9f1f1d744023a582bdbdf08207e211710a0670b97d828bad8cb22c5a81ea8b769b12c89e0", 0x31)

1.203076337s ago: executing program 5 (id=355):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x208]}}, {0x5, 0x6a, 0xfa, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}], 0x38)
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000140))
getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000040))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0x4, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2002c814}, 0x4000)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
preadv2(r3, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2, 0x2, 0x6, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
close_range(r4, r4, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x400000, 0x0, 0x0, 0x0, 0x8, r4, 0x0, 0x0, 0xad5}])
r6 = pidfd_getfd(r2, r3, 0x0)
io_submit(r5, 0x8, &(0x7f0000001c40)=[&(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x17, r0, &(0x7f0000000600)="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", 0x1000, 0x2, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000001640)="55c3c55853f39cb54a2d46395e9efd2a33afc782a3bf47acb0fb237d9029866fec8cb15c042166152f9630792f2cde6a5d73a8f2c5b73f6d74e0ecede11e78509eeb37bc336b91cb8a5910822e6dce036edcd8147d5c2d1e1d75250ae8834f53f60a2318a4a3cffcdca9196198f604e5568da735a6e7cfe43c7e5d617f00b9678a48fde6138c83ba0bbb2fcc35af2e0974e1a92f3b3803d0c99bc73cd681a2cd6113f7cbc0b9d17957cc94d80ccb35350926f07854cb0670b04d2a22bf154066a7e196b816619ee6a22ea7ce477f888bd823787cd2eb883fe7a7380648a37a682563d18a3adad96442db21eb", 0xec, 0x400, 0x0, 0x1, r2}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000001780)="35157ab30f0d161b26eb8f13f835cdf224c952acf255066c9cce6de2182c0088ba586de28bc1dd31b6d5038094b299c718d12f38b3a17e4f863eda5bf6924aa942838f5927d0c893a5e112febfdefa622d558f09962c84191e434537a9a7a92f3b2cb910dfdea836a2de6fca99a2438bbc7f57800f2f026b6bfc58b5f743b5bbf2b6a3ad07ecf4d80a288088ab737fb8be8669f1c7", 0x95, 0xffff, 0x0, 0x1, r3}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000001880)="20f08959af2093ab77e080d0", 0xc, 0x8, 0x0, 0x2, r2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x7, 0x8, r2, &(0x7f0000001900)="aebdcbea73b07b4b9d01014e44384eb0fb9d2f189bc1c9dada280890b26c57004685c1cc3ff8344fa890fba86587a990effe438ccd0d76cfc9ba83810e1d1bfde390c971476768587e43a021daacc9867a9a5cd3874f4f1146186997519fa98236065dfeb6d9f7593ea70dea5056388031926f03e0441091c3860838c20bef7692ec37fc60e617a41c19a7f1fe57f9d58e152cfd04330e161690d9ae7cfd06da47d46d325470d4d867dcae958a3c47ce154b992d4f427b9568a0cb89bd2e6a61f26830047441", 0xc6, 0x8, 0x0, 0x1, r6}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000001a40)="93dd512eec6cbc1ebf32148258217fe7edb15710860c16c83fc8f192c9a74575e24c11971e7a45d049cecdc326d3741902032401b182122f51332cd47c631710fba6195d762bca7c852bdccd46a3bd0cd2dc5a6cb17f6bf98f012541b7bf49ea6af965bbf2d6ae1e0d7f6f3c9cf8bb8949586a", 0x73, 0x6, 0x0, 0x0, r3}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x8, 0x8, r3, &(0x7f0000001b00)="8aa5d0d369d9e370795e3f2fa7bde4740463fde9a16f11fea568cf2f0eced90eaadf97cb4cdf464f437b2dcc8444b4a2cbff7dfeb35768c1037f5e1ee129e1140a7727b170", 0x45, 0x9, 0x0, 0x1, r3}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000001bc0)="28c36a5e02f04f05a3c2647b4da5a700f5450a4b2acb445ff9d5e7129610b5555e8348443c7942537f", 0x29, 0x1, 0x0, 0x3, r3}])
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.148597134s ago: executing program 0 (id=356):
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x0, 0x5})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030003000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)

1.147687757s ago: executing program 4 (id=357):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f00000022c0)=ANY=[], 0x9, 0x6e6, &(0x7f0000000a40)="$eJzs3c1vHGcdB/DvrNeON1Sp0yY0hyKsRCpIEYkTK4VwwSCEcqhQVQ49IitxGqubpEpclFYIuYDghMShf0BB8o0DQuIeFC5cyq1XHyshcYkQinpZNLOz6117N7YTvyT084nG8zzzvMxvn3lmxrvOagJ8aV05m+b9FLly9o17ZX59bb69vjZ/pC5uJynTjaTZXaW4lRQPkoWyvBhYMrDe4uPly2999nD9826uWS9V/Yl+u+lxrTsvDmRG7GO1XjJb9zc7spvJbQZjsL8qvLyQ5Gq9Hja1076GKpaDdqZew6HrbLG6m+Zjz3fg2de7OxXd++YWM8nR+s5c/U5QXx0aBxfh/tjVVQ4AAACeU5/ePuwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PlTP/+/qJdGvc5sit7z/6d62+r0M2hhxzXv72scAAAAAAAAAHAwvv4oj3Ivx3r5TlH9zf90lTmRLzrJV/J+7mYpd3Iu97KYlazkTi4kmRnoaOre4srKnQv9lqXRLS+ObHnxoF4xAAAAAAAAAPxf+mVaG3//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ0GRTHRX1XIi+W+5zkwazWyUZTX5Z5Kpw453F4pRG+8ffBwAAADwVKafoM2Lj/Io93Kszhar1Xv+fLV6vzyd93MrK1nOStpZyrX6PXT5rr+xvjbfXl+bv1kuZX643+//e1dhTNU9THSjGLHnU1WNVq5nudpyLlerYK6l0d33meRUL56BuAZ8VMZUfK+2w8ia9bCWO/v9uE8R9sTwRxGNx9RsbQSX5Hr/yBf9lse7I1BUH9SkM7FpJLY9Os2h3EzV62R/7C+k0f/k58Q+jPnRbLye3+zrmO9WfyQaqUbiYm/2lefM40ci+cZf//T2jfatd29cv3v22XlJ25gYs33znJgfGIlXnuuRaO6y/lw1Eif7+Sv5UX6Ss5nNm7mT5fwsi1nJUjp1+WI9n8ufM48fqYWh3JvbRTJVH5fuMdtJTLP5YZVazOmq7bEsp8jtXMtSXq/+XcyFfDuXcimXB47wybFxV6+tOusbm8/63pH+28jgz3yzTpRXt99uXOUWHveKx83OvdK9sJbjenxgXLuz/mG/1vGB82BuYJRe6o3O5MjOd3dt3PRRe7mPX21znzhYM/VIlCdQ7y7Ri+7l7kiUp9aoef6HTtku7Vudzo3F98b0v7op/1q9LqfV2te2q90z+lDsrfJQvZTp+koyPDvKspf7V5mBss7GXO6WDd9xy3Ynq7Ki6J2pP87tagJsPVOn6t/htvZ0sSp7ZWTZfFV2aqBs6Pet3E471w5g/AB4Ev94u5+cydGp1r9an7Y+af26daP1xvQPjnznyKtTmfz75HebcxOvNV4t/pJP8ov++38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAp3P3gw3cX2+2lO6MTjfFFQ4lWNm8Z1/OR0f0U9QN9drCv5yIxnWRoS/WcowMPo7U5jE2J7qO5xjZvbNP8SRO9Z1qNrvO7MtHcMqNGJRaGtvx5a4cf7TLCYmfnxT4mGjnYnU6MmQCHdkkCDsj5lZvvnb/7wYffWr65+M7SO0u3Ji9dujx3+dLr8+evL7eX5ro/DztKYD9s3PQPOxIAAAAAAAAAAABgp0Z9MeD0C9W3PibqKjv+OkFZeeGnzdTf8fA/CwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA9ceVsmvdT5MLcubkyv7423y6XXnqjZjNJo5EUP0+KB8lCuktmBror8scH6YzYz8fLl9/67OH65xt9Nbv1k0a9Hu/xpUlW6yWzSSbq9VMY6u/qU/dX/Kf3GsoB+6LT6Sw8XXywN/4XAAD//1aJ60s=")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f00000000c0)={[{}]})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0c0023900600020000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000000)=0x84, 0x4)
sendto$inet6(r8, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x101}, 0x1c)
sendto$inet6(r8, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x20004090)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
remap_file_pages(&(0x7f0000a7a000/0x2000)=nil, 0x2000, 0x1000000, 0xcfb8, 0x20000)
recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=""/29, 0x1d}, 0x2}], 0x400000000000194, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

227.685154ms ago: executing program 5 (id=358):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}})
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000340)={0xaaaaaaaaaaaacef, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'})

0s ago: executing program 5 (id=359):
r0 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000002c0)="ef", 0x1}, {&(0x7f0000000480)}, {&(0x7f0000000540)="d90ff9741a97f65c75ede2944f4c319564a7dd7ab26d100582e8a31147df88e061a474a75f97d234cea5b292a4551a81bb1bb693a26b0943f8be9d2aa942f4093e0b7fbd7f2f981b93b7", 0x4a}, {&(0x7f0000000680)="1eacbad0305691d4e5be426ade75adfa1bd6e24db88e90bd389f040d68f29daacd30eacfb5e1bc09dd9a55ce644c77c299e6fbcd9d23e19317358891bf19c71663f6894c0b70da20329e513cb34ae1a7336da92a19563c97d49dd7c1ec0f7e05d8304fec0a180fa05d49e989372a34731442297626932a9d969706d50c37c944e0a260bf424a5620d536347695c741c5133a65455810de31f05f65da4c684dede38a6099fb9d309f83f9c665c92a8bbc6d77d4fa0dd78937fd4388b4ab1f6ed5529a05d54ab77c3f3e67678cccb07ab35be5164f7bc9372748052c2d2d22c46f7d90d7a7a560c2427cb919e2be", 0xed}, {&(0x7f0000000780)="b0a1b592030006829315e7a63f37ffe3cd1e7d2a02cd3ed1cca8957d00cd426c7c6c53fe37cc3852fd1f8b8e86f4474a6380af32c623571ab8874b0b60e4dbbc301f5508063cbdd18a54b284d12b6921ff4e48dabb51930291ade004656919932d2edea90cfc490d9a47179ffb65367e42dc8e99df6500a89666dc1e73575c3a205f99eefaec77bde7f154a82e514e2edd8d1cfb8f4ad706739bb80a6d49b12c5abb424ea3091276ef1e3ca354263eaad2c8bd6db0cefbae4a5297", 0xbb}, {&(0x7f0000000840)="efc888a422ab54f285364089d97a4c71e0d1462a71dc2f9f3093f0e091e2d74ee9118e48c3d4980d394c5daec2c8ccd654e940c2d0ef64fee4610d0849c9188e", 0x40}], 0x6}, 0xc000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00')
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000480)={0x1, 'ipvlan1\x00', 0x1}, 0x18)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x8, 0x0, {}, {<r5=>0xee01}, 0x2, 0x5})
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in=@local, @in6=@private2, 0x4e24, 0x0, 0x4e23, 0x8, 0xa, 0x20, 0x40, 0x87, r3, r5}, {0xfffffffe, 0xd, 0x0, 0x80, 0x1, 0x6f, 0x56, 0x6}, {0x10000, 0x1, 0x4, 0x67c00}, 0xfffffffd, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x0, 0x0, 0x3, 0x3, 0x3, 0x9, 0x7}}, 0xe8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r6)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r8 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
fcntl$setstatus(r8, 0x4, 0x42000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x4010)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)

kernel console output (not intermixed with test programs):

 batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.567840][  T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.579209][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.599553][  T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.609793][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.628110][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.692799][   T48] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   92.728283][ T5973] BTRFS error (device loop5): failed to load root extent
[   92.735627][ T5973] BTRFS warning (device loop5): try to load backup roots slot 1
[   92.746421][   T36] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   92.766669][  T134] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.785830][ T5973] BTRFS warning (device loop5): couldn't read tree root
[   92.786584][ T5992] loop2: detected capacity change from 0 to 512
[   92.792877][ T5973] BTRFS warning (device loop5): try to load backup roots slot 2
[   92.809836][ T1327] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   92.830828][  T134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.844450][ T5973] BTRFS warning (device loop5): couldn't read tree root
[   92.852404][ T5973] BTRFS warning (device loop5): try to load backup roots slot 3
[   92.892331][ T5973] BTRFS info (device loop5): rebuilding free space tree
[   92.920701][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.944088][ T5973] BTRFS info (device loop5): checking UUID tree
[   92.954689][ T5973] BTRFS info (device loop5): enabling ssd optimizations
[   92.957875][   T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.961706][ T5973] BTRFS info (device loop5): turning on async discard
[   92.961730][ T5973] BTRFS info (device loop5): enabling free space tree
[   92.961752][ T5973] BTRFS info (device loop5): force clearing of disk cache
[   92.961773][ T5973] BTRFS info (device loop5): enabling auto defrag
[   92.961794][ T5973] BTRFS info (device loop5): trying to use backup root at mount time
[   92.961817][ T5973] BTRFS info (device loop5): use zstd compression, level 3
[   92.971547][ T5992] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   93.028171][   T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.085359][  T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.139381][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.155676][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.169375][  T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.183048][ T5992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.207477][  T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.233017][ T5824] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   93.266902][  T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.326209][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.358053][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.446582][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.484079][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.573925][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.613009][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.794068][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.814167][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.840435][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.849063][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.891240][ T5902] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   94.091930][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.111561][ T5902] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   94.138166][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.146262][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.181300][ T5902] usb 6-1: Product: syz
[   94.194366][ T5902] usb 6-1: Manufacturer: syz
[   94.208208][ T5902] usb 6-1: SerialNumber: syz
[   94.232970][ T5902] usb 6-1: config 0 descriptor??
[   94.958983][ T5902] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   95.150688][ T6029] loop0: detected capacity change from 0 to 64
[   95.594945][ T6001] loop5: detected capacity change from 0 to 256
[   95.650632][ T6001] exfat: Bad value for 'uid'
[   95.683962][ T6001] exfat: Bad value for 'uid'
[   95.768664][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.854118][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.860239][ T6029] hfs: unable to load codepage "none"
[   95.895700][ T6001] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   95.932622][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.030813][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.335058][ T6036] loop1: detected capacity change from 0 to 32768
[   96.351306][ T5902] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[   96.422428][ T6036] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   96.433462][ T6036] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   96.456015][ T6036] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[   96.465948][ T5909] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   96.480260][ T5909] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   96.526947][ T5909] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms
[   96.537791][ T5909] gfs2: fsid=syz:syz.0: jid=0: Done
[   96.543530][ T6036] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   96.561952][ T1211] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   96.708019][ T6036] gfs2: fsid=syz:syz.0: found 1 quota changes
[   96.775672][ T1211] usb 5-1: Using ep0 maxpacket: 8
[   97.019911][ T1211] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   97.311824][ T1211] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   97.362812][ T1211] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   97.442824][ T1211] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   97.507861][ T1211] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.598573][ T1211] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   97.660665][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.711223][ T5967] usb 6-1: USB disconnect, device number 2
[   97.744601][ T5822] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[   97.762912][ T5822] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[   97.782273][ T5822] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5822 [syz-executor] gfs2_quota_sync+0x370/0x470
[   97.801835][ T5822] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[   97.810856][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   97.810885][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   97.810900][ T5822] Call Trace:
[   97.810910][ T5822]  <TASK>
[   97.810923][ T5822]  dump_stack_lvl+0xe8/0x150
[   97.810965][ T5822]  gfs2_withdraw+0xc3/0x1b0
[   97.810998][ T5822]  inode_go_instantiate+0xdd8/0x1220
[   97.811027][ T5822]  ? __pfx_bit_wait+0x10/0x10
[   97.811070][ T5822]  ? __pfx_bit_wait+0x10/0x10
[   97.811104][ T5822]  ? __pfx_inode_go_instantiate+0x10/0x10
[   97.811138][ T5822]  ? __pfx_wake_bit_function+0x10/0x10
[   97.811173][ T5822]  gfs2_instantiate+0x168/0x220
[   97.811209][ T5822]  gfs2_glock_wait+0x1d4/0x2a0
[   97.811245][ T5822]  do_sync+0x49a/0xcb0
[   97.811281][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   97.811312][ T5822]  ? _raw_spin_unlock+0x28/0x50
[   97.811341][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   97.811371][ T5822]  ? gfs2_quota_sync+0x370/0x470
[   97.811423][ T5822]  ? __pfx_do_sync+0x10/0x10
[   97.811474][ T5822]  ? gfs2_quota_sync+0x370/0x470
[   97.811512][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   97.811546][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   97.811575][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[   97.811610][ T5822]  gfs2_quota_sync+0x370/0x470
[   97.811670][ T5822]  gfs2_sync_fs+0x4c/0xb0
[   97.811710][ T5822]  sync_filesystem+0xee/0x230
[   97.811741][ T5822]  generic_shutdown_super+0x77/0x2d0
[   97.811772][ T5822]  kill_block_super+0x44/0x90
[   97.811804][ T5822]  deactivate_locked_super+0xbc/0x130
[   97.811832][ T5822]  cleanup_mnt+0x437/0x4d0
[   97.811861][ T5822]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.811897][ T5822]  task_work_run+0x1d9/0x270
[   97.811931][ T5822]  ? __pfx_task_work_run+0x10/0x10
[   97.811972][ T5822]  exit_to_user_mode_loop+0xed/0x480
[   97.812003][ T5822]  ? rcu_is_watching+0x15/0xb0
[   97.812047][ T5822]  do_syscall_64+0x32d/0xf80
[   97.812083][ T5822]  ? trace_irq_disable+0x3b/0x150
[   97.812106][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.812139][ T5822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.812165][ T5822] RIP: 0033:0x7f4f1599da57
[   97.812188][ T5822] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   97.812207][ T5822] RSP: 002b:00007fff093be938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   97.812232][ T5822] RAX: 0000000000000000 RBX: 00007f4f15a32048 RCX: 00007f4f1599da57
[   97.812250][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff093be9f0
[   97.812265][ T5822] RBP: 00007fff093be9f0 R08: 00007fff093bf9f0 R09: 00000000ffffffff
[   97.812283][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff093bfa80
[   97.812313][ T5822] R13: 00007f4f15a32048 R14: 0000000000017c62 R15: 00007fff093bfac0
[   97.812352][ T5822]  </TASK>
[   97.813516][ T5822] gfs2: fsid=syz:syz.0: about to withdraw this file system
[   98.180297][ T1211] usb 5-1: usb_control_msg returned -32
[   98.185955][ T1211] usbtmc 5-1:16.0: can't read capabilities
[   98.549486][ T6070] loop5: detected capacity change from 0 to 16
[   98.570233][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   98.688080][ T6070] erofs (device loop5): mounted with root inode @ nid 36.
[   98.815910][   T10] usb 3-1: Using ep0 maxpacket: 8
[   98.976605][   T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   98.990373][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   99.116287][ T6072] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[   99.299546][ T5967] usb 5-1: USB disconnect, device number 2
[   99.513430][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   99.572582][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  100.051591][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.072133][ T6076] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[  100.093490][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  100.127046][ T6080] loop3: detected capacity change from 0 to 64
[  100.182896][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.246800][ T6074] netlink: 88 bytes leftover after parsing attributes in process `syz.0.27'.
[  100.418512][   T10] usb 3-1: usb_control_msg returned -32
[  100.451337][   T10] usbtmc 3-1:16.0: can't read capabilities
[  100.893141][ T6096] FAULT_INJECTION: forcing a failure.
[  100.893141][ T6096] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  100.907574][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.3.32 Not tainted syzkaller #0 PREEMPT(full) 
[  100.907605][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  100.907620][ T6096] Call Trace:
[  100.907635][ T6096]  <TASK>
[  100.907645][ T6096]  dump_stack_lvl+0xe8/0x150
[  100.907687][ T6096]  should_fail_ex+0x412/0x560
[  100.907734][ T6096]  _copy_from_user+0x2d/0xb0
[  100.907767][ T6096]  video_usercopy+0x36f/0x14b0
[  100.907803][ T6096]  ? __pfx___video_do_ioctl+0x10/0x10
[  100.907832][ T6096]  ? __pfx_video_usercopy+0x10/0x10
[  100.907855][ T6096]  ? srso_alias_return_thunk+0x5/0xfbef5
[  100.907903][ T6096]  ? __pfx_v4l2_ioctl+0x10/0x10
[  100.907953][ T6096]  v4l2_ioctl+0x18d/0x1e0
[  100.907995][ T6096]  ? __pfx_v4l2_ioctl+0x10/0x10
[  100.908036][ T6096]  __se_sys_ioctl+0xfc/0x170
[  100.908072][ T6096]  do_syscall_64+0x14d/0xf80
[  100.908108][ T6096]  ? trace_irq_disable+0x3b/0x150
[  100.908131][ T6096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.908163][ T6096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.908189][ T6096] RIP: 0033:0x7f1fb999c819
[  100.908212][ T6096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.908232][ T6096] RSP: 002b:00007f1fba876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.908257][ T6096] RAX: ffffffffffffffda RBX: 00007f1fb9c16180 RCX: 00007f1fb999c819
[  100.908276][ T6096] RDX: 0000200000000080 RSI: 00000000c0405602 RDI: 0000000000000003
[  100.908292][ T6096] RBP: 00007f1fba876090 R08: 0000000000000000 R09: 0000000000000000
[  100.908308][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.908323][ T6096] R13: 00007f1fb9c16218 R14: 00007f1fb9c16180 R15: 00007fff72d240e8
[  100.908362][ T6096]  </TASK>
[  101.387205][ T6097] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[  101.594329][ T6098] usbtmc 3-1:16.0: stb usb_control_msg returned -32
[  101.780598][ T5949] usb 3-1: USB disconnect, device number 2
[  102.807820][ T6108] loop0: detected capacity change from 0 to 128
[  102.815375][ T6108] EXT4-fs: Ignoring removed nobh option
[  102.844768][ T6108] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  102.987651][ T6108] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  103.262469][ T6082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.461534][ T5822] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566
[  103.486198][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  103.486232][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  103.486247][ T5822] Call Trace:
[  103.486257][ T5822]  <TASK>
[  103.486267][ T5822]  dump_stack_lvl+0xe8/0x150
[  103.486310][ T5822]  gfs2_assert_warn_i+0x194/0x2c0
[  103.486352][ T5822]  gfs2_make_fs_ro+0x30d/0x320
[  103.486393][ T5822]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  103.486427][ T5822]  ? do_raw_spin_lock+0x12b/0x2f0
[  103.486455][ T5822]  ? __pfx_autoremove_wake_function+0x10/0x10
[  103.486484][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.486518][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.486552][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.486582][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[  103.486622][ T5822]  gfs2_put_super+0x220/0x860
[  103.486668][ T5822]  ? __pfx_gfs2_put_super+0x10/0x10
[  103.486705][ T5822]  generic_shutdown_super+0x13d/0x2d0
[  103.486736][ T5822]  kill_block_super+0x44/0x90
[  103.486768][ T5822]  deactivate_locked_super+0xbc/0x130
[  103.486796][ T5822]  cleanup_mnt+0x437/0x4d0
[  103.486825][ T5822]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.486863][ T5822]  task_work_run+0x1d9/0x270
[  103.486896][ T5822]  ? __pfx_task_work_run+0x10/0x10
[  103.486936][ T5822]  exit_to_user_mode_loop+0xed/0x480
[  103.486967][ T5822]  ? rcu_is_watching+0x15/0xb0
[  103.487010][ T5822]  do_syscall_64+0x32d/0xf80
[  103.487045][ T5822]  ? trace_irq_disable+0x3b/0x150
[  103.487068][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.487100][ T5822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.487126][ T5822] RIP: 0033:0x7f4f1599da57
[  103.487149][ T5822] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  103.487169][ T5822] RSP: 002b:00007fff093be938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  103.487195][ T5822] RAX: 0000000000000000 RBX: 00007f4f15a32048 RCX: 00007f4f1599da57
[  103.487212][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff093be9f0
[  103.487228][ T5822] RBP: 00007fff093be9f0 R08: 00007fff093bf9f0 R09: 00000000ffffffff
[  103.487246][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff093bfa80
[  103.487262][ T5822] R13: 00007f4f15a32048 R14: 0000000000017c62 R15: 00007fff093bfac0
[  103.487301][ T5822]  </TASK>
[  103.984997][ T6116] loop2: detected capacity change from 0 to 2048
[  104.073581][ T6116] NILFS (loop2): corrupt root inode
[  104.411818][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'.
[  104.553139][ T5909] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.805106][ T5909] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  104.911646][ T5819] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  104.930702][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.139512][ T5909] usb 4-1: config 0 descriptor??
[  105.186553][ T5909] cp210x 4-1:0.0: cp210x converter detected
[  105.205752][ T6137] netlink: 'syz.1.23': attribute type 2 has an invalid length.
[  105.253706][ T6138] netlink: 'syz.1.23': attribute type 2 has an invalid length.
[  105.362188][ T6142] FAULT_INJECTION: forcing a failure.
[  105.362188][ T6142] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.375886][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.2.48 Not tainted syzkaller #0 PREEMPT(full) 
[  105.375926][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  105.375943][ T6142] Call Trace:
[  105.375954][ T6142]  <TASK>
[  105.375966][ T6142]  dump_stack_lvl+0xe8/0x150
[  105.376002][ T6142]  should_fail_ex+0x412/0x560
[  105.376054][ T6142]  _copy_from_user+0x2d/0xb0
[  105.376093][ T6142]  wants_mount_setattr+0x1ba/0x8e0
[  105.376128][ T6142]  ? __pfx_wants_mount_setattr+0x10/0x10
[  105.376165][ T6142]  __se_sys_mount_setattr+0x16a/0x280
[  105.376203][ T6142]  ? __pfx___se_sys_mount_setattr+0x10/0x10
[  105.376243][ T6142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  105.376270][ T6142]  ? __x64_sys_mount_setattr+0x20/0xc0
[  105.376292][ T6142]  do_syscall_64+0x14d/0xf80
[  105.376321][ T6142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.376358][ T6142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.376394][ T6142] RIP: 0033:0x7fa1b9f9c819
[  105.376417][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.376432][ T6142] RSP: 002b:00007fa1bae7b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba
[  105.376451][ T6142] RAX: ffffffffffffffda RBX: 00007fa1ba216090 RCX: 00007fa1b9f9c819
[  105.376465][ T6142] RDX: 0000000000008800 RSI: 0000200000001d80 RDI: 0000000000000004
[  105.376482][ T6142] RBP: 00007fa1bae7b090 R08: 0000000000000020 R09: 0000000000000000
[  105.376500][ T6142] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[  105.376519][ T6142] R13: 00007fa1ba216128 R14: 00007fa1ba216090 R15: 00007ffc3fda4d68
[  105.376563][ T6142]  </TASK>
[  105.602576][ T5909] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121
[  105.662670][ T6142] loop2: detected capacity change from 0 to 512
[  105.689611][ T6142] EXT4-fs: Ignoring removed mblk_io_submit option
[  105.729416][ T6142] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  105.984000][ T6132] dvmrp1: entered allmulticast mode
[  106.030235][ T5909] cp210x 4-1:0.0: querying part number failed
[  106.047241][ T6137] !��: entered promiscuous mode
[  106.080987][ T5909] usb 4-1: cp210x converter now attached to ttyUSB0
[  106.110880][ T6142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002]
[  106.164799][ T6142] EXT4-fs (loop2): orphan cleanup on readonly fs
[  106.169523][ T6138] !��: left promiscuous mode
[  106.216225][ T6142] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.48: bg 0: block 361: padding at end of block bitmap is not set
[  106.292113][ T6142] loop2: lost filesystem error report for type 5 error -117
[  106.300126][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  106.314091][    C1] EXT4-fs (loop2): initial error at time 1775888361: ext4_validate_block_bitmap:441
[  106.323643][    C1] EXT4-fs (loop2): last error at time 1775888361: ext4_validate_block_bitmap:441
[  106.333430][ T6142] EXT4-fs (loop2): Remounting filesystem read-only
[  106.390841][ T6142] EXT4-fs (loop2): 1 truncate cleaned up
[  106.414406][ T6142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  106.423082][ T5967] usb 4-1: USB disconnect, device number 2
[  106.504482][ T5967] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  106.548921][ T5967] cp210x 4-1:0.0: device disconnected
[  106.613448][ T6123] loop5: detected capacity change from 0 to 32768
[  106.615484][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  106.701469][ T6123] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  106.766928][ T6123] XFS (loop5): Ending clean mount
[  106.863165][ T6123] XFS (loop5): Quotacheck needed: Please wait.
[  107.060566][ T6164] loop2: detected capacity change from 0 to 32768
[  107.068240][ T5902] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  107.076512][ T6123] XFS (loop5): Quotacheck: Done.
[  107.081767][ T6164] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.51 (6164)
[  107.137713][ T6164] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  107.148367][ T6164] BTRFS info (device loop2): using sha256 checksum algorithm
[  107.164195][ T6166] loop1: detected capacity change from 0 to 2048
[  107.184165][ T5902] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  107.345377][ T6166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.397540][ T5824] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  107.407311][ T6175] tmpfs: Bad value for 'mpol'
[  107.417004][ T6164] BTRFS info (device loop2): rebuilding free space tree
[  107.432287][ T6164] BTRFS info (device loop2): disabling free space tree
[  107.439267][ T6164] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.445653][ T6175] loop6: detected capacity change from 0 to 8
[  107.449062][ T6164] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.486353][ T6164] BTRFS info (device loop2): checking UUID tree
[  107.496959][ T6164] BTRFS info (device loop2): setting nodatasum
[  107.503328][ T6164] BTRFS info (device loop2): setting nodatacow
[  107.509576][ T6164] BTRFS info (device loop2): turning off barriers
[  107.516037][ T6164] BTRFS info (device loop2): force clearing of disk cache
[  107.535041][ T6189] netlink: 48 bytes leftover after parsing attributes in process `syz.3.53'.
[  107.663185][ T6181] fido_id[6181]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  107.820875][ T6048]  loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12
[  108.060506][ T6048] loop6: p1 start 839529528 is beyond EOD, truncated
[  108.114680][ T6195] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  108.179575][ T6195] use of bytesused == 0 is deprecated and will be removed in the future,
[  108.188371][ T6195] use the actual size instead.
[  108.448936][ T6048] loop6: p2 start 892810804 is beyond EOD, truncated
[  108.495065][ T6048] loop6: p3 start 926026292 is beyond EOD, truncated
[  108.596923][ T6048] loop6: p4 start 892679990 is beyond EOD, truncated
[  108.652413][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.666254][ T6048] loop6: p5 start 842478090 is beyond EOD, truncated
[  108.682785][ T5831] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  108.697204][ T6048] loop6: p6 start 943011127 is beyond EOD, truncated
[  108.705695][ T6048] loop6: p7 start 875706162 is beyond EOD, truncated
[  108.715128][ T6048] loop6: p8 start 876098869 is beyond EOD, truncated
[  108.754926][ T6048] loop6: p9 start 909390391 is beyond EOD, truncated
[  108.803420][ T6048] loop6: p10 start 171194421 is beyond EOD, truncated
[  108.840651][ T6048] loop6: p11 start 926299186 is beyond EOD, truncated
[  108.870825][ T6048] loop6: p12 start 839529528 is beyond EOD, truncated
[  109.014001][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.059127][ T6175]  loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12
[  109.072314][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.106501][ T6175] loop6: p1 start 839529528 is beyond EOD, truncated
[  109.132355][ T6175] loop6: p2 start 892810804 is beyond EOD, truncated
[  109.139075][ T6175] loop6: p3 start 926026292 is beyond EOD, truncated
[  109.189846][   T30] audit: type=1800 audit(1775888364.356:2): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.56" name="file0" dev="overlay" ino=108 res=0 errno=0
[  109.200367][ T5902] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  109.222865][ T6175] loop6: p4 start 892679990 is beyond EOD, truncated
[  109.240577][ T6175] loop6: p5 start 842478090 is beyond EOD, truncated
[  109.250871][ T6175] loop6: p6 start 943011127 is beyond EOD, truncated
[  109.268968][ T6175] loop6: p7 start 875706162 is beyond EOD, truncated
[  109.280272][ T5967] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  109.323649][ T6175] loop6: p8 start 876098869 is beyond EOD, truncated
[  109.358059][ T6175] loop6: p9 start 909390391 is beyond EOD, truncated
[  109.381776][ T6175] loop6: p10 start 171194421 is beyond EOD, truncated
[  109.395798][ T5902] usb 2-1: Using ep0 maxpacket: 8
[  109.407651][ T6175] loop6: p11 start 926299186 is beyond EOD, truncated
[  109.416600][ T5902] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  109.431795][ T5902] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  109.435037][ T6175] loop6: p12 start 839529528 is beyond EOD, 
[  109.455046][ T5967] usb 3-1: device descriptor read/64, error -71
[  109.471643][ T6175] truncated
[  109.474777][ T5902] usb 2-1: config 9 has no interfaces?
[  109.496161][ T5902] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  109.520635][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.737894][ T5967] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  109.881296][ T5967] usb 3-1: device descriptor read/64, error -71
[  109.906569][ T6221] loop1: detected capacity change from 0 to 1024
[  109.952141][ T6221] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38923!=20869)
[  110.008907][ T6221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  110.026569][ T5967] usb usb3-port1: attempt power cycle
[  110.179019][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.188154][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.462545][ T5967] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  110.647247][ T5967] usb 3-1: device descriptor read/8, error -71
[  110.843410][ T5902] usb 2-1: string descriptor 0 read error: -71
[  110.866358][ T6206] loop0: detected capacity change from 0 to 32768
[  110.866422][ T5902] usb 2-1: USB disconnect, device number 2
[  111.059514][ T5967] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  111.073375][ T6229] xt_hashlimit: size too large, truncated to 1048576
[  111.113491][ T5967] usb 3-1: device descriptor read/8, error -71
[  111.233055][ T5967] usb usb3-port1: unable to enumerate USB device
[  111.403437][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.240498][ T6239] sock: sock_set_timeout: `syz.3.68' (pid 6239) tries to set negative timeout
[  112.574986][ T6241] loop4: detected capacity change from 0 to 8192
[  112.659560][ T6230] loop5: detected capacity change from 0 to 32768
[  112.675961][ T6230] ocfs2: Unknown parameter 'error]&��f�2heartbeat'
[  112.779381][ T6241] syzkaller1: entered promiscuous mode
[  112.869780][ T6241] syzkaller1: entered allmulticast mode
[  112.975062][ T6230] Zero length message leads to an empty skb
[  113.110010][ T6264] loop0: detected capacity change from 0 to 128
[  113.278211][ T6264] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  113.330686][   T24] IPVS: starting estimator thread 0...
[  113.443201][ T6268] IPVS: using max 24 ests per chain, 57600 per kthread
[  113.594135][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  114.619317][ T6275] Process accounting resumed
[  114.730773][   T24] usb 1-1: Using ep0 maxpacket: 16
[  114.756287][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  114.807014][   T24] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  114.860167][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.912874][   T24] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40
[  114.944364][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.969591][   T24] usb 1-1: Product: syz
[  114.991473][   T24] usb 1-1: Manufacturer: syz
[  115.014154][   T24] usb 1-1: SerialNumber: syz
[  115.020746][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.80'.
[  116.014166][ T6285] loop2: detected capacity change from 0 to 131072
[  116.046729][ T6281] vlan2: entered allmulticast mode
[  116.058292][ T6285] F2FS-fs (loop2): invalid crc value
[  116.130928][ T6285] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  116.143777][ T6285] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  116.188607][ T6281] veth1_to_bond: entered allmulticast mode
[  116.682742][   T24] usb 1-1: unit 6: unexpected type 0x0d
[  116.688584][   T24] usb 1-1: unit 0 not found!
[  118.219467][   T24] usb 1-1: USB disconnect, device number 2
[  118.464898][ T6308] loop3: detected capacity change from 0 to 512
[  118.642988][ T6308] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.87: inode has both inline data and extents flags
[  118.670406][ T6308] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  118.671633][ T6308] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.87: couldn't read orphan inode 15 (err -117)
[  118.680871][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  118.680947][    C0] EXT4-fs (loop3): initial error at time 1775888373: ext4_orphan_get:1397: inode 15
[  118.681027][    C0] EXT4-fs (loop3): last error at time 1775888373: ext4_orphan_get:1397: inode 15
[  118.759776][ T6315] loop5: detected capacity change from 0 to 16
[  118.820902][ T6315] erofs (device loop5): unidentified incompatible feature 7ffffe00, please upgrade kernel
[  118.883149][ T6308] loop3: lost filesystem error report for type 5 error -117
[  118.885514][ T6308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.044275][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.146109][ T6319] fuse: Bad value for 'user_id'
[  119.151115][ T6319] fuse: Bad value for 'user_id'
[  119.812880][ T6337] loop3: detected capacity change from 0 to 2048
[  119.871385][ T6340] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.964009][ T6337] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  120.040310][ T6337] Remounting filesystem read-only
[  120.123582][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.98'.
[  120.311882][ T6350] FAULT_INJECTION: forcing a failure.
[  120.311882][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.538021][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.98'.
[  121.228766][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  121.256351][ T6350] CPU: 0 UID: 0 PID: 6350 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT(full) 
[  121.256386][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  121.256406][ T6350] Call Trace:
[  121.256415][ T6350]  <TASK>
[  121.256423][ T6350]  dump_stack_lvl+0xe8/0x150
[  121.256456][ T6350]  should_fail_ex+0x412/0x560
[  121.256491][ T6350]  _copy_from_iter+0x1d3/0x1670
[  121.256511][ T6350]  ? srso_alias_return_thunk+0x5/0xfbef5
[  121.256534][ T6350]  ? rcu_is_watching+0x15/0xb0
[  121.256562][ T6350]  ? srso_alias_return_thunk+0x5/0xfbef5
[  121.256583][ T6350]  ? trace_kmem_cache_alloc+0x29/0xf0
[  121.256603][ T6350]  ? __build_skb+0x62/0x440
[  121.256628][ T6350]  ? __build_skb+0x62/0x440
[  121.256651][ T6350]  ? __pfx__copy_from_iter+0x10/0x10
[  121.256673][ T6350]  ? srso_alias_return_thunk+0x5/0xfbef5
[  121.256695][ T6350]  ? __build_skb+0x2a2/0x440
[  121.256719][ T6350]  ? srso_alias_return_thunk+0x5/0xfbef5
[  121.256740][ T6350]  ? skb_put+0x11b/0x210
[  121.256766][ T6350]  netlink_sendmsg+0x6c0/0xb40
[  121.256797][ T6350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.256821][ T6350]  ? srso_alias_return_thunk+0x5/0xfbef5
[  121.256842][ T6350]  ? aa_sock_msg_perm+0xf1/0x1b0
[  121.256874][ T6350]  ? srso_alias_return_thunk+0x5/0xfbef5
[  121.256905][ T6350]  ? srso_alias_return_thunk+0x5/0xfbef5
[  121.256941][ T6350]  ____sys_sendmsg+0x972/0x9f0
[  121.256982][ T6350]  ? __pfx_____sys_sendmsg+0x10/0x10
[  121.257019][ T6350]  ? srso_alias_return_thunk+0x5/0xfbef5
[  121.257040][ T6350]  ? import_iovec+0x73/0xa0
[  121.257067][ T6350]  ___sys_sendmsg+0x2a5/0x360
[  121.257098][ T6350]  ? __pfx____sys_sendmsg+0x10/0x10
[  121.257156][ T6350]  ? __fget_files+0x2a/0x420
[  121.257172][ T6350]  ? srso_alias_return_thunk+0x5/0xfbef5
[  121.257193][ T6350]  ? __fget_files+0x3a0/0x420
[  121.257220][ T6350]  __x64_sys_sendmsg+0x1bd/0x2a0
[  121.257248][ T6350]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  121.257283][ T6350]  ? __pfx_ksys_write+0x10/0x10
[  121.257315][ T6350]  do_syscall_64+0x14d/0xf80
[  121.257341][ T6350]  ? trace_irq_disable+0x3b/0x150
[  121.257358][ T6350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.257382][ T6350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.257405][ T6350] RIP: 0033:0x7fd9b779c819
[  121.257422][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.257437][ T6350] RSP: 002b:00007fd9b8594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.257456][ T6350] RAX: ffffffffffffffda RBX: 00007fd9b7a15fa0 RCX: 00007fd9b779c819
[  121.257469][ T6350] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  121.257481][ T6350] RBP: 00007fd9b8594090 R08: 0000000000000000 R09: 0000000000000000
[  121.257492][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.257502][ T6350] R13: 00007fd9b7a16038 R14: 00007fd9b7a15fa0 R15: 00007ffce46c5f78
[  121.257531][ T6350]  </TASK>
[  122.080124][   T10] usb 5-1: Using ep0 maxpacket: 8
[  122.196607][   T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  122.210141][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  122.259510][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  122.303334][ T6362] loop1: detected capacity change from 0 to 4096
[  122.310015][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  122.491183][ T6369] loop5: detected capacity change from 0 to 16
[  122.570891][ T6369] erofs (device loop5): mounted with root inode @ nid 36.
[  122.614984][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.701501][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  122.715987][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.955012][ T6362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.970225][ T5909] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  123.032095][   T10] usb 5-1: usb_control_msg returned -32
[  123.037730][   T10] usbtmc 5-1:16.0: can't read capabilities
[  123.148745][ T5909] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  123.287216][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0
[  123.341295][ T5909] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  123.373335][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  123.472492][ T5909] usb 3-1: Product: syz
[  123.484202][ T5909] usb 3-1: Manufacturer: syz
[  123.488311][ T6381] usbtmc 5-1:16.0: stb usb_control_msg returned -32
[  123.492538][ T5909] usb 3-1: SerialNumber: syz
[  123.521315][   T10] usb 5-1: USB disconnect, device number 3
[  123.893644][   T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  123.938385][ T5909] usb 3-1: config 0 descriptor??
[  124.204856][   T29] usb 4-1: Using ep0 maxpacket: 8
[  124.252315][   T29] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  124.261372][ T5909] usb 3-1: selecting invalid altsetting 0
[  124.280166][   T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  124.340591][   T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  124.343009][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.361210][ T6377] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  124.393320][   T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  124.428612][ T6377] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  124.440438][   T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  124.464978][   T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  124.478000][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.501335][ T5909] usb 3-1: USB disconnect, device number 7
[  124.510539][ T6384] openvswitch: netlink: IPv4 tun info is not correct
[  124.573075][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.106'.
[  124.657805][ T6386] loop1: detected capacity change from 0 to 64
[  124.664424][ T6377] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  124.683583][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.717881][   T29] usb 4-1: usb_control_msg returned -32
[  124.730161][   T29] usbtmc 4-1:16.0: can't read capabilities
[  124.742217][ T6377] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  124.802675][ T6377] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  124.857810][ T6377] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  124.900850][ T6377] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  124.907873][ T6377] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  125.001734][ T6377] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  125.169843][ T6393] usbtmc 4-1:16.0: stb usb_control_msg returned -32
[  125.606476][ T6377] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  125.618364][ T5923] usb 4-1: USB disconnect, device number 3
[  125.632386][ T6377] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  125.754766][ T6377] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  125.803828][ T6377] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  125.863083][ T6377] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  125.875502][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'.
[  125.903789][ T6377] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  125.933832][ T6377] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  125.976560][ T6377] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  126.252567][ T6397] loop2: detected capacity change from 0 to 32768
[  126.259784][ T6397] xfs: Unknown parameter 'mtpt'
[  126.530318][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  127.040315][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  127.048455][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  127.204777][ T6377] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  127.220318][ T6402] loop3: detected capacity change from 0 to 512
[  127.372379][ T6402] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.112: inode has both inline data and extents flags
[  127.411652][ T6402] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  127.418582][ T6402] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.112: couldn't read orphan inode 15 (err -117)
[  127.427854][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  127.427878][    C1] EXT4-fs (loop3): initial error at time 1775888382: ext4_orphan_get:1397: inode 15
[  127.427919][    C1] EXT4-fs (loop3): last error at time 1775888382: ext4_orphan_get:1397: inode 15
[  127.568701][ T6402] loop3: lost filesystem error report for type 5 error -117
[  127.572177][ T6402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.612569][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  128.480719][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  128.700867][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout
[  128.706991][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout
[  128.713104][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout
[  129.180299][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  129.180323][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout
[  129.320860][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.463295][   T30] audit: type=1326 audit(1775888384.666:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6422 comm="syz.0.115" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9b779c819 code=0x0
[  129.486231][ T6425] support for cryptoloop has been removed.  Use dm-crypt instead.
[  129.690233][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  129.921836][ T6434] 9pnet_fd: Insufficient options for proto=fd
[  129.995226][ T6434] binder: 6433:6434 ioctl c0306201 200000000680 returned -14
[  130.020748][ T6440] sctp: [Deprecated]: syz.5.121 (pid 6440) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.020748][ T6440] Use struct sctp_sack_info instead
[  130.300201][ T5838] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  130.440231][ T5838] usb 1-1: device descriptor read/64, error -71
[  130.683484][ T5838] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  130.730221][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout
[  130.738367][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout
[  130.738755][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[  130.820189][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  130.850193][ T5838] usb 1-1: device descriptor read/64, error -71
[  130.921692][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'.
[  130.951536][ T6454] loop1: detected capacity change from 0 to 4096
[  130.960978][ T5838] usb usb1-port1: attempt power cycle
[  131.020702][   T10] usb 6-1: Using ep0 maxpacket: 8
[  131.044426][   T10] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  131.054121][   T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  131.099964][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  131.130631][   T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  131.194644][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  131.211366][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[  131.211394][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  131.329890][   T30] audit: type=1800 audit(1775888386.526:4): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.126" name="file1" dev="loop1" ino=0 res=0 errno=0
[  131.485803][ T5838] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  131.494158][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.524257][ T6462] loop2: detected capacity change from 0 to 4096
[  131.603602][ T6467] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  131.784741][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  131.902788][ T5838] usb 1-1: device descriptor read/8, error -71
[  132.173978][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  132.180665][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  132.180995][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  132.253732][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.410162][ T5838] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  132.500381][ T5838] usb 1-1: device descriptor read/8, error -71
[  132.617015][ T5838] usb usb1-port1: unable to enumerate USB device
[  132.624767][   T10] usb 6-1: usb_control_msg returned -32
[  132.634498][   T10] usbtmc 6-1:16.0: can't read capabilities
[  132.814676][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout
[  132.815902][ T6478] loop1: detected capacity change from 0 to 512
[  132.821074][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout
[  132.850905][ T6476] CUSE: info not properly terminated
[  133.023205][ T6449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.066044][ T6449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.989355][ T5838] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  134.137027][   T29] usb 6-1: USB disconnect, device number 3
[  134.552410][ T6499] loop3: detected capacity change from 0 to 32768
[  134.560659][ T5838] usb 1-1: Using ep0 maxpacket: 8
[  134.588004][ T6499] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  134.596871][ T6499] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  134.620888][ T5838] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  134.646460][ T6500] loop2: detected capacity change from 0 to 256
[  134.694696][ T6499] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  134.718712][ T6500] exfat: Deprecated parameter 'utf8'
[  134.725711][ T5838] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  134.751615][   T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  134.768592][   T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  134.785925][ T6500] exfat: Deprecated parameter 'utf8'
[  134.800252][ T5923] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  134.810219][ T6500] exfat: Deprecated parameter 'utf8'
[  134.810679][ T5838] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  134.815599][ T6500] exfat: Deprecated parameter 'namecase'
[  134.870215][ T5838] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  134.930266][ T6500] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  134.932945][ T5838] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  134.983276][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  135.005409][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.011704][ T5923] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  135.060743][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  135.111176][ T5923] usb 2-1: config 0 has no interface number 0
[  135.120660][   T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 352ms
[  135.121517][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  135.140847][ T5949] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  135.155071][   T10] gfs2: fsid=syz:syz.0: jid=0: Done
[  135.179910][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.190445][ T6499] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  135.215716][ T5923] usb 2-1: Product: syz
[  135.244521][ T5923] usb 2-1: Manufacturer: syz
[  135.249155][ T5923] usb 2-1: SerialNumber: syz
[  135.281786][ T5838] usb 1-1: GET_CAPABILITIES returned 0
[  135.317112][ T5923] usb 2-1: config 0 descriptor??
[  135.329457][ T5949] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  135.348078][ T5838] usbtmc 1-1:16.0: can't read capabilities
[  135.360138][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.449967][ T5949] usb 6-1: Product: syz
[  135.481404][ T5949] usb 6-1: Manufacturer: syz
[  135.503985][ T5949] usb 6-1: SerialNumber: syz
[  135.522114][ T5949] usb 6-1: config 0 descriptor??
[  135.528904][ T6485] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90
[  135.558696][ T5949] gspca_main: sq905c-2.14.0 probing 2770:9052
[  135.685233][ T6518] SET target dimension over the limit!
[  136.181117][ T5838] usb 1-1: USB disconnect, device number 7
[  136.283964][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.380844][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.431485][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.551221][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.731635][   T29] usb 6-1: USB disconnect, device number 4
[  136.974963][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.146'.
[  137.321049][ T6536] loop5: detected capacity change from 0 to 1024
[  137.361105][ T6536] hfsplus: failed to load catalog file
[  137.426817][ T5923] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  137.460227][ T5923] uvcvideo 2-1:0.105: No valid video chain found.
[  137.510275][   T29] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  137.532590][ T6538] loop3: detected capacity change from 0 to 4096
[  137.543882][ T5923] usb 2-1: USB disconnect, device number 3
[  137.655275][ T6543] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  137.695658][ T6542] Bluetooth: MGMT ver 1.23
[  137.775533][ T6538] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 32 already freed
[  137.818588][ T6538] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  137.880319][   T29] usb 1-1: device descriptor read/64, error -71
[  137.955309][ T6538] syzkaller0: entered promiscuous mode
[  137.990401][ T6538] syzkaller0: entered allmulticast mode
[  138.141135][   T29] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  138.266670][ T6552] syzkaller0: entered promiscuous mode
[  138.272341][ T6552] syzkaller0: entered allmulticast mode
[  138.328691][   T29] usb 1-1: device descriptor read/64, error -71
[  138.460749][   T29] usb usb1-port1: attempt power cycle
[  138.599838][ T6532] loop2: detected capacity change from 0 to 32768
[  138.703674][ T6532] (syz.2.148,6532,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  139.120608][ T6558] loop5: detected capacity change from 0 to 32768
[  139.163166][ T6532] (syz.2.148,6532,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  139.341409][ T6558] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  139.429030][ T6532] JBD2: Ignoring recovery information on journal
[  139.453127][   T29] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  139.483004][   T29] usb 1-1: device descriptor read/8, error -71
[  139.494255][ T6571] sctp: [Deprecated]: syz.1.157 (pid 6571) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.494255][ T6571] Use struct sctp_sack_info instead
[  139.549096][ T6558] XFS (loop5): Ending clean mount
[  139.557162][ T6558] XFS (loop5): Quotacheck needed: Please wait.
[  139.570941][ T6572] loop3: detected capacity change from 0 to 64
[  139.598207][ T6572] hfs: Unknown parameter '01777777777777777777777#4)���È�I���bT˓Vu�v�;XP$-�\�DvȆ���`ej6H#�(��'O`����s���TG���YB���cM�v�!3�b�E�k��w-xVJ�� �Uz��`�Ghi��ҕ@&��4"e����t�}ޜawI�8	n�gp
[  139.598207][ T6572] k6h�r��$'��t���4�Qs{����M�:���iF �)7����X	�N_V�'
[  139.624758][ T6558] XFS (loop5): Quotacheck: Done.
[  139.812084][   T29] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  139.880955][ T6532] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  139.897234][   T29] usb 1-1: device descriptor read/8, error -71
[  139.993493][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'.
[  140.020713][   T29] usb usb1-port1: unable to enumerate USB device
[  140.021834][ T5824] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.453696][ T5831] ocfs2: Unmounting device (7,2) on (node local)
[  140.539096][ T6581] syz.0.161 uses obsolete (PF_INET,SOCK_PACKET)
[  141.083671][ T6587] loop5: detected capacity change from 0 to 128
[  141.143576][ T6587] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  141.158664][ T6586] loop2: detected capacity change from 0 to 2048
[  141.234651][ T6587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.245110][ T6586] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  141.386321][ T6577] loop1: detected capacity change from 0 to 32768
[  141.413724][ T6592] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.424773][ T6577] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.159 (6577)
[  141.445098][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'.
[  141.520200][ T6577] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.583099][ T6577] BTRFS info (device loop1): using sha256 checksum algorithm
[  141.625868][ T6594] warning: `syz.5.165' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  141.710216][ T5838] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  141.778408][ T6612] nfs4: Unknown parameter 'Ydma'
[  141.791572][ T6577] BTRFS info (device loop1): enabling ssd optimizations
[  141.820215][ T6577] BTRFS info (device loop1): turning on async discard
[  141.837288][ T6577] BTRFS info (device loop1): enabling free space tree
[  141.860279][   T29] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  141.870127][ T5838] usb 3-1: Using ep0 maxpacket: 8
[  141.878361][ T5838] usb 3-1: config 0 has an invalid interface number: 97 but max is 0
[  141.896952][ T5838] usb 3-1: config 0 has no interface number 0
[  141.917193][ T5838] usb 3-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30
[  141.938359][ T5838] usb 3-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  141.951415][ T6608] loop4: detected capacity change from 0 to 4096
[  141.970705][ T5838] usb 3-1: config 0 interface 97 has no altsetting 0
[  142.010774][ T5838] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  142.020467][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.033690][ T5838] usb 3-1: Product: syz
[  142.033717][ T5838] usb 3-1: Manufacturer: syz
[  142.033737][ T5838] usb 3-1: SerialNumber: syz
[  142.052575][   T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.052621][   T29] usb 1-1: config 0 interface 0 has no altsetting 0
[  142.054769][   T29] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  142.054801][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.054826][   T29] usb 1-1: Product: syz
[  142.054845][   T29] usb 1-1: Manufacturer: syz
[  142.054864][   T29] usb 1-1: SerialNumber: syz
[  142.059604][   T29] usb 1-1: config 0 descriptor??
[  142.064235][ T5838] usb 3-1: config 0 descriptor??
[  142.065232][   T29] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  142.073045][ T6608] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  142.086174][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  142.087248][   T29] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  142.087311][   T29] usb 1-1: media controller created
[  142.112376][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  142.133902][ T6608] ntfs3(loop4): ino=1a, mi_enum_attr
[  142.134087][ T6608] ntfs3(loop4): ino=1a, mi_enum_attr
[  142.134110][ T6608] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  142.170723][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  142.178456][   T29] DVB: Unable to find symbol tda10046_attach()
[  142.178473][   T29] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  142.178490][   T29] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  142.204279][   T30] audit: type=1800 audit(1775888397.396:5): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.167" name="file1" dev="loop4" ino=30 res=0 errno=0
[  142.241985][ T6608] ntfs3(loop4): ino=1e, "file1" attr_set_size_ex
[  142.330189][   T24] usb 6-1: Using ep0 maxpacket: 16
[  142.378916][ T5838] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  142.430212][   T29] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  142.456048][   T24] usb 6-1: config 0 has no interfaces?
[  142.463681][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.476933][   T29] usb 1-1: USB disconnect, device number 12
[  142.486655][ T5838] gspca_sonixj: reg_w1 err -71
[  142.487631][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  142.492270][ T5838] sonixj 3-1:0.97: probe with driver sonixj failed with error -71
[  142.506624][   T24] usb 6-1: SerialNumber: syz
[  142.521460][   T24] usb 6-1: config 0 descriptor??
[  142.553018][ T5822] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.582632][ T6602] ntfs3(loop4): ino=1e, "file1" attr_set_size_ex
[  142.615286][ T5838] usb 3-1: USB disconnect, device number 8
[  142.801377][ T5949] usb 6-1: USB disconnect, device number 5
[  143.130951][ T6624] loop3: detected capacity change from 0 to 32768
[  143.196226][ T6624] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  143.243805][ T6642] FAULT_INJECTION: forcing a failure.
[  143.243805][ T6642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.273702][ T6624] XFS (loop3): Ending clean mount
[  143.283743][ T6624] XFS (loop3): Quotacheck needed: Please wait.
[  143.330413][ T6642] CPU: 1 UID: 0 PID: 6642 Comm: syz.4.175 Not tainted syzkaller #0 PREEMPT(full) 
[  143.330446][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  143.330461][ T6642] Call Trace:
[  143.330470][ T6642]  <TASK>
[  143.330481][ T6642]  dump_stack_lvl+0xe8/0x150
[  143.330522][ T6642]  should_fail_ex+0x412/0x560
[  143.330570][ T6642]  _copy_from_user+0x2d/0xb0
[  143.330603][ T6642]  io_query+0x13c/0x680
[  143.330635][ T6642]  ? __pfx_io_query+0x10/0x10
[  143.330681][ T6642]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  143.330726][ T6642]  __se_sys_io_uring_register+0x52b/0x19a0
[  143.330775][ T6642]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  143.330817][ T6642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.330847][ T6642]  ? ksys_write+0x242/0x270
[  143.330880][ T6642]  ? __pfx_ksys_write+0x10/0x10
[  143.330916][ T6642]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.330955][ T6642]  do_syscall_64+0x14d/0xf80
[  143.330989][ T6642]  ? trace_irq_disable+0x3b/0x150
[  143.331012][ T6642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.331044][ T6642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.331069][ T6642] RIP: 0033:0x7f119c39c819
[  143.331091][ T6642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.331111][ T6642] RSP: 002b:00007f119d31a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  143.331137][ T6642] RAX: ffffffffffffffda RBX: 00007f119c615fa0 RCX: 00007f119c39c819
[  143.331155][ T6642] RDX: 0000200000000000 RSI: 0000000000000023 RDI: ffffffffffffffff
[  143.331173][ T6642] RBP: 00007f119d31a090 R08: 0000000000000000 R09: 0000000000000000
[  143.331189][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.331204][ T6642] R13: 00007f119c616038 R14: 00007f119c615fa0 R15: 00007ffdf9f86038
[  143.331243][ T6642]  </TASK>
[  143.598058][ T6624] XFS (loop3): Quotacheck: Done.
[  143.847236][ T6647] loop4: detected capacity change from 0 to 1024
[  143.939290][ T5820] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  144.143050][ T6652] loop2: detected capacity change from 0 to 2048
[  144.150216][ T5949] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  144.256838][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'.
[  144.314675][ T5949] usb 6-1: Using ep0 maxpacket: 32
[  144.330885][ T5949] usb 6-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config
[  144.365590][ T5949] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  144.412410][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.447141][ T5949] usb 6-1: Product: syz
[  144.464210][ T5949] usb 6-1: Manufacturer: syz
[  144.483760][ T5949] usb 6-1: SerialNumber: syz
[  144.510217][ T5949] usb 6-1: config 0 descriptor??
[  144.527559][ T5949] usb 6-1: bad CDC descriptors
[  144.534330][ T5949] usb 6-1: unsupported MDLM descriptors
[  144.670745][   T29] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  144.796226][ T6672] loop3: detected capacity change from 0 to 128
[  144.802952][   T29] usb 5-1: device descriptor read/64, error -71
[  144.832946][ T6672] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  144.904031][ T6672] hpfs: filesystem error: improperly stopped
[  144.904946][ T6675] loop2: detected capacity change from 0 to 64
[  144.916719][ T5949] usb 6-1: USB disconnect, device number 6
[  144.937393][ T6672] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  144.943842][ T6675] hfs: invalid btree extent records
[  144.957763][ T6672] hpfs: You really don't want any checks? You are crazy...
[  144.976211][ T6672] hpfs: Code page index out of array
[  144.983087][ T6675] hfs: unable to open extent tree
[  144.988127][ T6675] hfs: can't find a HFS filesystem on dev loop2
[  144.992874][ T6672] hpfs: code page support is disabled
[  145.013900][ T6672] hpfs: hpfs_map_4sectors(): unaligned read
[  145.027017][ T6672] hpfs: hpfs_map_4sectors(): unaligned read
[  145.040015][ T6672] hpfs: filesystem error: unable to find root dir
[  145.050704][   T29] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  145.125717][ T6672] mmap: syz.3.183 (6672) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  145.210646][   T29] usb 5-1: device descriptor read/64, error -71
[  145.323542][   T29] usb usb5-port1: attempt power cycle
[  145.473284][ T6682] tmpfs: Unknown parameter 'usrquota_'
[  145.715173][   T29] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  145.883398][   T29] usb 5-1: device descriptor read/8, error -71
[  145.909201][ T6686] loop1: detected capacity change from 0 to 1024
[  146.079447][ T6690] FAULT_INJECTION: forcing a failure.
[  146.079447][ T6690] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.113911][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.2.189 Not tainted syzkaller #0 PREEMPT(full) 
[  146.113945][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  146.113960][ T6690] Call Trace:
[  146.113970][ T6690]  <TASK>
[  146.113980][ T6690]  dump_stack_lvl+0xe8/0x150
[  146.114024][ T6690]  should_fail_ex+0x412/0x560
[  146.114072][ T6690]  _copy_from_user+0x2d/0xb0
[  146.114106][ T6690]  rose_rt_ioctl+0x4db/0x12a0
[  146.114149][ T6690]  ? __pfx_rose_rt_ioctl+0x10/0x10
[  146.114193][ T6690]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.114224][ T6690]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.114254][ T6690]  ? security_capable+0x7e/0x2c0
[  146.114302][ T6690]  rose_ioctl+0x3fb/0x8f0
[  146.114330][ T6690]  ? __pfx_rose_ioctl+0x10/0x10
[  146.114364][ T6690]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  146.114406][ T6690]  sock_do_ioctl+0x101/0x320
[  146.114451][ T6690]  ? __pfx_sock_do_ioctl+0x10/0x10
[  146.114489][ T6690]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  146.114548][ T6690]  sock_ioctl+0x5c6/0x7f0
[  146.114590][ T6690]  ? __pfx_sock_ioctl+0x10/0x10
[  146.114631][ T6690]  ? __fget_files+0x2a/0x420
[  146.114654][ T6690]  ? __fget_files+0x3a0/0x420
[  146.114676][ T6690]  ? __fget_files+0x2a/0x420
[  146.114702][ T6690]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.114733][ T6690]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.114765][ T6690]  ? __pfx_sock_ioctl+0x10/0x10
[  146.114804][ T6690]  __se_sys_ioctl+0xfc/0x170
[  146.114839][ T6690]  do_syscall_64+0x14d/0xf80
[  146.114875][ T6690]  ? trace_irq_disable+0x3b/0x150
[  146.114898][ T6690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.114930][ T6690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.114956][ T6690] RIP: 0033:0x7fa1b9f9c819
[  146.114980][ T6690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.115000][ T6690] RSP: 002b:00007fa1bae9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  146.115025][ T6690] RAX: ffffffffffffffda RBX: 00007fa1ba215fa0 RCX: 00007fa1b9f9c819
[  146.115044][ T6690] RDX: 00002000000007c0 RSI: 000000000000890b RDI: 0000000000000004
[  146.115060][ T6690] RBP: 00007fa1bae9c090 R08: 0000000000000000 R09: 0000000000000000
[  146.115077][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.115092][ T6690] R13: 00007fa1ba216038 R14: 00007fa1ba215fa0 R15: 00007ffc3fda4d68
[  146.115131][ T6690]  </TASK>
[  146.369118][   T29] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  146.391221][   T29] usb 5-1: device descriptor read/8, error -71
[  146.747141][ T6692] loop5: detected capacity change from 0 to 4096
[  147.048228][   T29] usb usb5-port1: unable to enumerate USB device
[  147.140688][ T6693] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  147.255168][ T6699] loop2: detected capacity change from 0 to 128
[  147.350361][ T6703] openvswitch: netlink: IPv4 tun info is not correct
[  147.358304][ T6699] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.455433][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'.
[  147.510296][ T6699] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  147.613748][   T29] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  147.823354][   T29] usb 1-1: Using ep0 maxpacket: 8
[  147.878477][   T29] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  147.909580][   T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  147.974462][   T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  148.015592][   T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  148.057101][   T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  148.109849][   T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  148.129798][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.275847][ T5831] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  148.446764][   T29] usb 1-1: usb_control_msg returned -32
[  148.457681][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.5.201'.
[  148.495347][   T29] usbtmc 1-1:16.0: can't read capabilities
[  148.711631][ T6724] veth3: entered promiscuous mode
[  148.738172][ T6731] loop4: detected capacity change from 0 to 512
[  148.790562][ T6731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  149.128932][ T6731] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.202: iget: bad i_size value: 38620345925642
[  149.420707][ T6731] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  149.427114][ T6731] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.202: couldn't read orphan inode 15 (err -117)
[  149.436406][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  149.436432][    C1] EXT4-fs (loop4): initial error at time 1775888404: ext4_orphan_get:1397: inode 15
[  149.436472][    C1] EXT4-fs (loop4): last error at time 1775888404: ext4_orphan_get:1397: inode 15
[  149.570236][ T6731] loop4: lost filesystem error report for type 5 error -117
[  149.604397][ T6731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.725449][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'.
[  149.792684][ T6749] capability: warning: `syz.5.208' uses deprecated v2 capabilities in a way that may be insecure
[  149.845158][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.950259][ T5967] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  150.014170][ T6755] loop5: detected capacity change from 0 to 256
[  150.089797][ T6759] loop2: detected capacity change from 0 to 128
[  150.127543][ T5967] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3
[  150.167959][ T5967] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  150.173661][ T6759] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985
[  150.276242][ T6759] ; already mounted read-only
[  150.422992][ T6759] hpfs: filesystem error: improperly stopped
[  150.441869][ T5967] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  150.460232][ T6759] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  150.470638][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.486326][ T6759] hpfs: You really don't want any checks? You are crazy...
[  150.499727][ T6746] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  150.511470][ T6759] hpfs: Code page index out of array
[  150.530695][ T6759] hpfs: code page support is disabled
[  150.539331][ T6759] hpfs: hpfs_map_4sectors(): unaligned read
[  150.601677][ T6759] hpfs: hpfs_map_4sectors(): unaligned read
[  150.608022][ T6759] hpfs: filesystem error: unable to find root dir
[  150.652214][   T29] usb 1-1: USB disconnect, device number 13
[  150.713134][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.909013][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.950276][ T5967] usb 2-1: string descriptor 0 read error: -71
[  151.040662][ T5967] hub 2-1:32.0: bad descriptor, ignoring hub
[  151.056821][ T5967] hub 2-1:32.0: probe with driver hub failed with error -5
[  151.097552][ T6770] loop0: detected capacity change from 0 to 512
[  151.553281][ T6773] loop3: detected capacity change from 0 to 16
[  151.584396][ T6773] erofs (device loop3): mounted with root inode @ nid 36.
[  151.688783][ T6770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.774926][ T6770] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.798769][ T5967] usb 2-1: USB disconnect, device number 4
[  152.488768][ T6787] netlink: 168 bytes leftover after parsing attributes in process `syz.0.216'.
[  152.978625][ T6788] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.216: invalid fast symlink length 10
[  152.993901][ T6788] EXT4-fs (loop0): Remounting filesystem read-only
[  153.094639][ T6780] loop2: detected capacity change from 0 to 32768
[  153.101856][ T6785] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  153.160136][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  153.290009][   T30] audit: type=1800 audit(1775888408.456:6): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.217" name="file1" dev="loop2" ino=4 res=0 errno=0
[  153.360768][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.391912][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.961199][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'.
[  154.671028][ T6803] loop3: detected capacity change from 0 to 131072
[  154.715221][ T6803] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  154.723410][ T6803] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  154.725103][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'.
[  154.779927][ T6803] F2FS-fs (loop3): invalid crc value
[  154.895328][ T6803] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  154.936687][ T6803] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  154.943967][ T6803] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  155.315961][ T6807] loop2: detected capacity change from 0 to 2048
[  155.746504][ T6807]  loop2: p1 p2 p3
[  155.746504][ T6807]  p1: <netbsd: p5 >
[  155.770686][ T6818] loop0: detected capacity change from 0 to 512
[  155.783428][ T6807] loop2: p2 size 458752 extends beyond EOD, truncated
[  155.850928][ T6818] EXT4-fs: Ignoring removed nobh option
[  155.890877][ T6818] EXT4-fs: Ignoring removed orlov option
[  155.931044][ T5949] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  155.941149][ T6807] loop2: p3 start 3036741376 is beyond EOD, truncated
[  155.993304][ T6818] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  156.111122][ T6818] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.226: invalid indirect mapped block 256 (level 1)
[  156.143013][ T5949] usb 6-1: Using ep0 maxpacket: 32
[  156.180553][ T5949] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  156.188857][ T5949] usb 6-1: config 0 has no interface number 0
[  156.206595][ T6818] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  156.210124][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  156.225764][    C0] EXT4-fs (loop0): initial error at time 1775888411: ext4_free_branches:1023: inode 13
[  156.235571][    C0] EXT4-fs (loop0): last error at time 1775888411: ext4_free_branches:1023: inode 13
[  156.247289][ T6818] EXT4-fs (loop0): Remounting filesystem read-only
[  156.267080][ T6818] EXT4-fs (loop0): 1 truncate cleaned up
[  156.276952][ T5949] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  156.288091][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.296599][ T5949] usb 6-1: Product: syz
[  156.302207][ T5949] usb 6-1: Manufacturer: syz
[  156.307180][ T5949] usb 6-1: SerialNumber: syz
[  156.341700][ T5949] usb 6-1: config 0 descriptor??
[  156.372578][ T6818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.421383][ T6824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.229'.
[  156.479049][ T6824] bridge: RTM_NEWNEIGH with invalid ether address
[  156.507119][ T6824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.229'.
[  156.520032][ T6828] syz.0.226: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  156.553140][ T6824] bridge: RTM_NEWNEIGH with invalid ether address
[  156.590482][ T6828] CPU: 1 UID: 0 PID: 6828 Comm: syz.0.226 Not tainted syzkaller #0 PREEMPT(full) 
[  156.590517][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  156.590533][ T6828] Call Trace:
[  156.590543][ T6828]  <TASK>
[  156.590553][ T6828]  dump_stack_lvl+0xe8/0x150
[  156.590596][ T6828]  warn_alloc+0x249/0x340
[  156.590629][ T6828]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  156.590668][ T6828]  ? __pfx_warn_alloc+0x10/0x10
[  156.590697][ T6828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.590737][ T6828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.590768][ T6828]  ? kasan_save_track+0x4f/0x80
[  156.590796][ T6828]  ? kasan_save_track+0x3e/0x80
[  156.590823][ T6828]  ? __kasan_kmalloc+0x93/0xb0
[  156.590853][ T6828]  ? __kmalloc_cache_noprof+0x31c/0x660
[  156.590883][ T6828]  ? xskq_create+0x56/0x170
[  156.590921][ T6828]  ? xsk_setsockopt+0x54c/0x990
[  156.590951][ T6828]  ? do_sock_setsockopt+0x17c/0x1b0
[  156.590985][ T6828]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  156.591018][ T6828]  ? do_syscall_64+0x14d/0xf80
[  156.591063][ T6828]  __vmalloc_node_range_noprof+0x132/0x1730
[  156.591130][ T6828]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  156.591168][ T6828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.591199][ T6828]  ? __kasan_kmalloc+0x93/0xb0
[  156.591231][ T6828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.591267][ T6828]  vmalloc_user_noprof+0xad/0xe0
[  156.591297][ T6828]  ? xskq_create+0xbf/0x170
[  156.591330][ T6828]  xskq_create+0xbf/0x170
[  156.591365][ T6828]  xsk_init_queue+0x8a/0xe0
[  156.591407][ T6828]  xsk_setsockopt+0x54c/0x990
[  156.591441][ T6828]  ? __pfx_xsk_setsockopt+0x10/0x10
[  156.591472][ T6828]  ? __pfx_aa_sk_perm+0x10/0x10
[  156.591513][ T6828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.591549][ T6828]  ? aa_sock_opt_perm+0xff/0x1a0
[  156.591578][ T6828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.591609][ T6828]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.591640][ T6828]  ? __pfx_xsk_setsockopt+0x10/0x10
[  156.591672][ T6828]  do_sock_setsockopt+0x17c/0x1b0
[  156.591713][ T6828]  __x64_sys_setsockopt+0x13d/0x1b0
[  156.591754][ T6828]  do_syscall_64+0x14d/0xf80
[  156.591791][ T6828]  ? trace_irq_disable+0x3b/0x150
[  156.591814][ T6828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.591848][ T6828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.591875][ T6828] RIP: 0033:0x7fd9b779c819
[  156.591898][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.591919][ T6828] RSP: 002b:00007fd9b8573028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  156.591945][ T6828] RAX: ffffffffffffffda RBX: 00007fd9b7a16090 RCX: 00007fd9b779c819
[  156.591965][ T6828] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  156.591980][ T6828] RBP: 00007fd9b7832c91 R08: 0000000000000004 R09: 0000000000000000
[  156.591997][ T6828] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.592014][ T6828] R13: 00007fd9b7a16128 R14: 00007fd9b7a16090 R15: 00007ffce46c5f78
[  156.592053][ T6828]  </TASK>
[  156.592101][ T6828] Mem-Info:
[  157.286554][ T6828] active_anon:20241 inactive_anon:0 isolated_anon:0
[  157.286554][ T6828]  active_file:14532 inactive_file:40385 isolated_file:0
[  157.286554][ T6828]  unevictable:768 dirty:162 writeback:0
[  157.286554][ T6828]  slab_reclaimable:11363 slab_unreclaimable:98804
[  157.286554][ T6828]  mapped:36301 shmem:14338 pagetables:1284
[  157.286554][ T6828]  sec_pagetables:0 bounce:0
[  157.286554][ T6828]  kernel_misc_reclaimable:0
[  157.286554][ T6828]  free:1283585 free_pcp:16232 free_cma:0
[  157.403216][ T6828] Node 0 active_anon:74532kB inactive_anon:0kB active_file:58188kB inactive_file:161332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145224kB dirty:676kB writeback:0kB shmem:49376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12904kB pagetables:5068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  157.477221][ T6828] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  157.527509][ T6828] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  157.584862][ T6005] udevd[6005]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  157.610038][ T6293] udevd[6293]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  157.610352][ T6828] lowmem_reserve[]:
[  157.622904][ T5884] udevd[5884]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  157.636245][ T6828]  0 2492 2493 2493 2493
[  157.641656][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.225'.
[  157.669617][ T6835] loop1: detected capacity change from 0 to 256
[  157.672374][ T6828] Node 0 DMA32 free:1196612kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:71932kB inactive_anon:0kB active_file:58188kB inactive_file:161332kB unevictable:1536kB writepending:676kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:63712kB local_pcp:20232kB free_cma:0kB
[  157.710866][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.5.225'.
[  157.784725][ T5949] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  157.847024][ T6835] FAT-fs (loop1): Directory bread(block 64) failed
[  157.854036][ T6835] FAT-fs (loop1): Directory bread(block 65) failed
[  157.860816][ T5949] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  157.872260][ T6828] lowmem_reserve[]: 0 0 0 0 0
[  157.877056][ T6828] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  157.900302][ T5949] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  157.908952][ T6835] FAT-fs (loop1): Directory bread(block 66) failed
[  157.919212][ T6839] netlink: 'syz.4.233': attribute type 2 has an invalid length.
[  157.969393][ T5949] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  157.970147][ T6835] FAT-fs (loop1): Directory bread(block 67) failed
[  157.996657][ T6828] lowmem_reserve[]: 0 0 0 0 0
[  158.001939][ T6828] Node 1 Normal free:3930512kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB
[  158.003154][ T6839] hma��224)
: entered promiscuous mode
[  158.035147][ T6835] FAT-fs (loop1): Directory bread(block 68) failed
[  158.051599][ T5949] usb 6-1: USB disconnect, device number 7
[  158.080178][ T6835] FAT-fs (loop1): Directory bread(block 69) failed
[  158.086835][ T6835] FAT-fs (loop1): Directory bread(block 70) failed
[  158.104420][ T6828] lowmem_reserve[]: 0 0 0 0 0
[  158.109211][ T6828] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  158.144025][ T6835] FAT-fs (loop1): Directory bread(block 71) failed
[  158.163925][ T6828] Node 0 DMA32: 2614*4kB (UME) 1345*8kB (UME) 671*16kB (UM) 276*32kB (UME) 104*64kB (UME) 6*128kB (UME) 29*256kB (M) 29*512kB (ME) 8*1024kB (ME) 3*2048kB (UM) 272*4096kB (UM) = 1198928kB
[  158.185819][ T6835] FAT-fs (loop1): Directory bread(block 72) failed
[  158.205947][ T6835] FAT-fs (loop1): Directory bread(block 73) failed
[  158.240228][ T6828] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  158.281103][ T6828] Node 1 Normal: 2*4kB (UM) 9*8kB (UM) 10*16kB (UM) 9*32kB (UM) 6*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 958*4096kB (M) = 3930512kB
[  158.289699][ T6835] ubi31: attaching mtd0
[  158.325997][ T6835] ubi31: scanning is finished
[  158.330056][ T6828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  158.330741][ T6828] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  158.330767][ T6828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  158.330789][ T6828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  158.330811][ T6828] 62620 total pagecache pages
[  158.330823][ T6828] 0 pages in swap cache
[  158.330834][ T6828] Free swap  = 124996kB
[  158.330845][ T6828] Total swap = 124996kB
[  158.360226][ T6835] ubi31: empty MTD device detected
[  158.430319][ T6828] 2097051 pages RAM
[  158.434186][ T6828] 0 pages HighMem/MovableOnly
[  158.439035][ T6828] 427071 pages reserved
[  158.464655][ T6828] 0 pages cma reserved
[  158.676407][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.700567][ T6826] loop2: detected capacity change from 0 to 32768
[  158.746109][ T6851] loop5: detected capacity change from 0 to 64
[  158.807222][ T6826] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.909643][ T6826] XFS (loop2): Ending clean mount
[  158.925426][ T6835] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  158.970635][   T30] audit: type=1804 audit(1775888414.156:7): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.230" name="/newroot/45/file1/file1" dev="loop2" ino=6150 res=1 errno=0
[  159.258878][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.237'.
[  159.420821][ T5831] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.870223][ T6877] tipc: Started in network mode
[  159.875236][ T6877] tipc: Node identity d65a3fdb594c, cluster identity 4711
[  159.885968][ T6877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.894562][ T6877] syzkaller0: entered promiscuous mode
[  159.913103][ T6877] syzkaller0: entered allmulticast mode
[  159.949505][ T6878] tipc: Resetting bearer <eth:syzkaller0>
[  159.961156][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  160.013319][ T6876] tipc: Resetting bearer <eth:syzkaller0>
[  160.142473][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.163940][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  160.182357][ T6876] tipc: Disabling bearer <eth:syzkaller0>
[  160.231402][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  160.250430][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  160.270664][   T24] usb 2-1: SerialNumber: syz
[  160.308204][ T6880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.227'.
[  161.110956][ T6882] loop2: detected capacity change from 0 to 32768
[  161.139612][ T6882] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.241 (6882)
[  161.163174][ T6882] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  161.173325][ T6882] BTRFS info (device loop2): using sha256 checksum algorithm
[  161.197652][   T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  161.218033][   T24] usb-storage 2-1:1.0: USB Mass Storage device detected
[  161.520858][ T6896] loop4: detected capacity change from 0 to 40427
[  161.551330][   T24] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  161.577312][ T6896] F2FS-fs (loop4): invalid crc value
[  161.598663][ T6882] BTRFS info (device loop2): enabling ssd optimizations
[  161.605688][ T6882] BTRFS info (device loop2): turning on async discard
[  161.613608][ T6882] BTRFS info (device loop2): enabling free space tree
[  161.667191][ T6903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.801499][ T6896] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  161.811489][ T6896] F2FS-fs (loop4): Start checkpoint disabled!
[  161.823288][ T6903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.825563][ T6896] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  161.866423][ T6896] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  162.616274][ T6875] loop5: detected capacity change from 0 to 32768
[  162.630230][   T29] usb 2-1: USB disconnect, device number 5
[  162.796420][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'.
[  163.093050][ T6912] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.180326][ T6920] loop3: detected capacity change from 0 to 4096
[  163.197415][ T6920] ntfs3(loop3): Primary boot: invalid record size -14.
[  163.204717][ T6920] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  163.527076][ T6925] evm: overlay not supported
[  163.597296][ T5831] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.614141][   T12] kworker/u8:0: attempt to access beyond end of device
[  163.614141][   T12] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.704114][ T6925] loop0: detected capacity change from 0 to 1024
[  163.714524][ T6929] loop1: detected capacity change from 0 to 128
[  163.717202][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  163.717232][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  163.717248][   T12] Workqueue: writeback wb_workfn (flush-7:4)
[  163.717289][   T12] Call Trace:
[  163.717299][   T12]  <TASK>
[  163.717309][   T12]  dump_stack_lvl+0xe8/0x150
[  163.717348][   T12]  f2fs_handle_critical_error+0x37c/0x540
[  163.717400][   T12]  f2fs_write_end_io+0xcdb/0xff0
[  163.717448][   T12]  __submit_merged_bio+0x256/0x700
[  163.717492][   T12]  __submit_merged_write_cond+0x3c9/0x4e0
[  163.717538][   T12]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  163.717589][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.717630][   T12]  f2fs_write_data_pages+0x2975/0x35e0
[  163.717669][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.717699][   T12]  ? lock_release+0x4b/0x3d0
[  163.717771][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.717826][   T12]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  163.717894][   T12]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  163.717956][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.717986][   T12]  ? __lock_acquire+0x6b5/0x2cf0
[  163.718033][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.718067][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.718109][   T12]  do_writepages+0x32e/0x550
[  163.718160][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.718189][   T12]  ? reacquire_held_locks+0x104/0x190
[  163.718227][   T12]  ? writeback_sb_inodes+0x477/0x1a20
[  163.718270][   T12]  __writeback_single_inode+0x133/0x11a0
[  163.718309][   T12]  ? do_raw_spin_unlock+0xf5/0x210
[  163.718342][   T12]  writeback_sb_inodes+0x992/0x1a20
[  163.718406][   T12]  ? do_raw_spin_unlock+0xf5/0x210
[  163.718440][   T12]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  163.718474][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  163.718545][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.718575][   T12]  ? rcu_is_watching+0x15/0xb0
[  163.718612][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.718651][   T12]  wb_writeback+0x456/0xb70
[  163.718691][   T12]  ? queue_io+0x271/0x4a0
[  163.718736][   T12]  ? __pfx_wb_writeback+0x10/0x10
[  163.718768][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  163.718814][   T12]  wb_workfn+0x414/0xf50
[  163.718847][   T12]  ? look_up_lock_class+0x57/0x110
[  163.718899][   T12]  ? __pfx_wb_workfn+0x10/0x10
[  163.718932][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.718962][   T12]  ? do_raw_spin_lock+0x12b/0x2f0
[  163.718992][   T12]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  163.719019][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.719056][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.719089][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.719120][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.719153][   T12]  ? process_scheduled_works+0xa8d/0x18c0
[  163.719187][   T12]  ? process_scheduled_works+0xa8d/0x18c0
[  163.719223][   T12]  process_scheduled_works+0xb6e/0x18c0
[  163.719294][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.719335][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.719365][   T12]  ? assign_work+0x3d5/0x5e0
[  163.719409][   T12]  worker_thread+0xa53/0xfc0
[  163.719465][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.719505][   T12]  kthread+0x388/0x470
[  163.719532][   T12]  ? __pfx_worker_thread+0x10/0x10
[  163.719565][   T12]  ? __pfx_kthread+0x10/0x10
[  163.719592][   T12]  ret_from_fork+0x51e/0xb90
[  163.719631][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  163.719662][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  163.719691][   T12]  ? __switch_to+0xc7d/0x1450
[  163.719726][   T12]  ? __pfx_kthread+0x10/0x10
[  163.719754][   T12]  ret_from_fork_asm+0x1a/0x30
[  163.719812][   T12]  </TASK>
[  163.732178][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  163.786042][ T6929] EXT4-fs: inline encryption not supported
[  163.805280][ T6925] hfsplus: Unknown parameter './file0'
[  164.062496][ T6929] EXT4-fs (loop1): Test dummy encryption mode enabled
[  164.228218][ T6929] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  164.241834][ T6927] loop0: detected capacity change from 0 to 64
[  164.382473][ T6929] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  164.542532][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'.
[  164.745514][ T6936] dvmrp1: entered allmulticast mode
[  165.110258][ T6929] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  165.125342][ T6929] 9pnet_fd: Insufficient options for proto=fd
[  165.406492][ T6938] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  165.642803][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  165.899882][ T6943] loop1: detected capacity change from 0 to 1024
[  165.916319][ T6923] loop5: detected capacity change from 0 to 32768
[  166.241772][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'.
[  166.253125][ T6923] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop5": -EINTR
[  167.066209][ T6956] loop3: detected capacity change from 0 to 1024
[  167.282376][ T6956] hfsplus: b-tree write err: -5, ino 2
[  167.338682][   T12] hfsplus: b-tree write err: -5, ino 25
[  167.440413][   T12] hfsplus: b-tree write err: -5, ino 4
[  167.446145][   T12] hfsplus: b-tree write err: -5, ino 2
[  167.490315][   T12] hfsplus: b-tree write err: -5, ino 26
[  168.256358][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'.
[  168.307192][ T6970] : entered promiscuous mode
[  169.217917][ T6994] loop5: detected capacity change from 0 to 512
[  169.260519][ T6970] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  169.271768][ T6970] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  169.281582][ T6970] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  169.288665][ T6970] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  169.406306][ T6970] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  169.896678][ T6994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.980942][ T5967] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  170.211385][ T6995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.259'.
[  170.385421][ T5967] usb 4-1: Using ep0 maxpacket: 8
[  170.543482][ T5967] usb 4-1: unable to get BOS descriptor or descriptor too short
[  170.559936][ T5967] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  170.582275][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout
[  170.589310][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  170.603155][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  170.612958][ T5967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  170.622752][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  170.635204][ T7006] loop2: detected capacity change from 0 to 128
[  170.654716][ T5967] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  170.696868][ T5967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 8
[  170.707042][ T7006] FAT-fs (loop2): bogus number of reserved sectors
[  170.730259][ T7006] FAT-fs (loop2): Can't find a valid FAT filesystem
[  170.743025][ T5967] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  170.792959][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.824320][ T5967] usb 4-1: Product: syz
[  170.837362][ T5967] usb 4-1: Manufacturer: syz
[  170.867363][ T5967] usb 4-1: SerialNumber: syz
[  170.916185][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.919630][ T5967] usb 4-1: config 0 descriptor??
[  170.965554][ T6981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  170.985683][ T6981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  171.056891][ T5967] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  171.211641][ T7012] loop5: detected capacity change from 0 to 256
[  171.259330][ T7012] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  171.268813][ T7012] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  171.370216][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout
[  171.378305][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  171.388946][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout
[  171.450269][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout
[  171.518363][ T6706] udevd[6706]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  171.580914][   T24] usb 4-1: USB disconnect, device number 4
[  172.131898][ T7021] FAULT_INJECTION: forcing a failure.
[  172.131898][ T7021] name failslab, interval 1, probability 0, space 0, times 1
[  172.200516][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.5.270 Not tainted syzkaller #0 PREEMPT(full) 
[  172.200553][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  172.200569][ T7021] Call Trace:
[  172.200579][ T7021]  <TASK>
[  172.200589][ T7021]  dump_stack_lvl+0xe8/0x150
[  172.200631][ T7021]  should_fail_ex+0x412/0x560
[  172.200679][ T7021]  should_failslab+0xa8/0x100
[  172.200716][ T7021]  __kmalloc_noprof+0xe8/0x760
[  172.200745][ T7021]  ? srso_alias_return_thunk+0x5/0xfbef5
[  172.200778][ T7021]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  172.200814][ T7021]  tomoyo_realpath_from_path+0xe3/0x5d0
[  172.200854][ T7021]  ? tomoyo_path_number_perm+0x219/0x630
[  172.200892][ T7021]  tomoyo_path_number_perm+0x246/0x630
[  172.200932][ T7021]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  172.200972][ T7021]  ? srso_alias_return_thunk+0x5/0xfbef5
[  172.201002][ T7021]  ? __lock_acquire+0x6b5/0x2cf0
[  172.201054][ T7021]  ? srso_alias_return_thunk+0x5/0xfbef5
[  172.201084][ T7021]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  172.201147][ T7021]  ? __fget_files+0x2a/0x420
[  172.201175][ T7021]  ? __fget_files+0x2a/0x420
[  172.201197][ T7021]  ? __fget_files+0x3a0/0x420
[  172.201220][ T7021]  ? __fget_files+0x2a/0x420
[  172.201248][ T7021]  security_file_ioctl+0xc3/0x2a0
[  172.201286][ T7021]  __se_sys_ioctl+0x47/0x170
[  172.201322][ T7021]  do_syscall_64+0x14d/0xf80
[  172.201358][ T7021]  ? trace_irq_disable+0x3b/0x150
[  172.201381][ T7021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.201420][ T7021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.201446][ T7021] RIP: 0033:0x7f7df3f9c819
[  172.201469][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.201490][ T7021] RSP: 002b:00007f7df4dad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  172.201516][ T7021] RAX: ffffffffffffffda RBX: 00007f7df4215fa0 RCX: 00007f7df3f9c819
[  172.201535][ T7021] RDX: 0000000000000000 RSI: 0000000080885659 RDI: 0000000000000003
[  172.201551][ T7021] RBP: 00007f7df4dad090 R08: 0000000000000000 R09: 0000000000000000
[  172.201568][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.201582][ T7021] R13: 00007f7df4216038 R14: 00007f7df4215fa0 R15: 00007ffc7d3abb48
[  172.201621][ T7021]  </TASK>
[  172.201631][ T7021] ERROR: Out of memory at tomoyo_realpath_from_path.
[  173.251442][ T7028] binder: BINDER_SET_CONTEXT_MGR already set
[  173.283931][ T7028] binder: 7027:7028 ioctl 4018620d 200000000040 returned -16
[  173.302250][ T7028] FAULT_INJECTION: forcing a failure.
[  173.302250][ T7028] name failslab, interval 1, probability 0, space 0, times 0
[  173.336985][ T7028] CPU: 0 UID: 0 PID: 7028 Comm: syz.5.273 Not tainted syzkaller #0 PREEMPT(full) 
[  173.337018][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  173.337033][ T7028] Call Trace:
[  173.337044][ T7028]  <TASK>
[  173.337054][ T7028]  dump_stack_lvl+0xe8/0x150
[  173.337097][ T7028]  should_fail_ex+0x412/0x560
[  173.337144][ T7028]  should_failslab+0xa8/0x100
[  173.337183][ T7028]  __kmalloc_noprof+0xe8/0x760
[  173.337214][ T7028]  ? tomoyo_encode+0x28b/0x550
[  173.337248][ T7028]  tomoyo_encode+0x28b/0x550
[  173.337281][ T7028]  tomoyo_realpath_from_path+0x58d/0x5d0
[  173.337322][ T7028]  ? tomoyo_path_number_perm+0x219/0x630
[  173.337361][ T7028]  tomoyo_path_number_perm+0x246/0x630
[  173.337414][ T7028]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  173.337455][ T7028]  ? srso_alias_return_thunk+0x5/0xfbef5
[  173.337486][ T7028]  ? __lock_acquire+0x6b5/0x2cf0
[  173.337534][ T7028]  ? srso_alias_return_thunk+0x5/0xfbef5
[  173.337563][ T7028]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  173.337627][ T7028]  ? __fget_files+0x2a/0x420
[  173.337654][ T7028]  ? __fget_files+0x2a/0x420
[  173.337676][ T7028]  ? __fget_files+0x3a0/0x420
[  173.337699][ T7028]  ? __fget_files+0x2a/0x420
[  173.337727][ T7028]  security_file_ioctl+0xc3/0x2a0
[  173.337766][ T7028]  __se_sys_ioctl+0x47/0x170
[  173.337802][ T7028]  do_syscall_64+0x14d/0xf80
[  173.337838][ T7028]  ? trace_irq_disable+0x3b/0x150
[  173.337861][ T7028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.337893][ T7028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.337919][ T7028] RIP: 0033:0x7f7df3f9c819
[  173.337943][ T7028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.337964][ T7028] RSP: 002b:00007f7df4dad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.337991][ T7028] RAX: ffffffffffffffda RBX: 00007f7df4215fa0 RCX: 00007f7df3f9c819
[  173.338010][ T7028] RDX: 0000200000000c00 RSI: 00000000c0306201 RDI: 0000000000000006
[  173.338027][ T7028] RBP: 00007f7df4dad090 R08: 0000000000000000 R09: 0000000000000000
[  173.338043][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.338059][ T7028] R13: 00007f7df4216038 R14: 00007f7df4215fa0 R15: 00007ffc7d3abb48
[  173.338098][ T7028]  </TASK>
[  173.338120][ T7028] ERROR: Out of memory at tomoyo_realpath_from_path.
[  175.051556][ T5949] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  175.059285][ T5967] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  175.140153][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  175.551438][ T5949] usb 6-1: device descriptor read/64, error -71
[  175.660984][ T5967] usb 1-1: Using ep0 maxpacket: 16
[  175.692251][ T5967] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.726513][ T5967] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.749578][ T5967] usb 1-1: config 0 interface 0 has no altsetting 0
[  175.759229][ T7064] loop2: detected capacity change from 0 to 128
[  175.764105][ T5967] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  175.821275][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.846471][ T7064] FAULT_INJECTION: forcing a failure.
[  175.846471][ T7064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  175.880612][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.2.283 Not tainted syzkaller #0 PREEMPT(full) 
[  175.880652][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  175.880672][ T7064] Call Trace:
[  175.880682][ T7064]  <TASK>
[  175.880693][ T7064]  dump_stack_lvl+0xe8/0x150
[  175.880735][ T7064]  should_fail_ex+0x412/0x560
[  175.880784][ T7064]  _copy_to_user+0x31/0xb0
[  175.880820][ T7064]  simple_read_from_buffer+0xe1/0x170
[  175.880866][ T7064]  proc_fail_nth_read+0x1bb/0x230
[  175.880904][ T7064]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.880939][ T7064]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  175.880982][ T7064]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.881013][ T7064]  ? rw_verify_area+0x2a6/0x4d0
[  175.881041][ T7064]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  175.881084][ T7064]  vfs_read+0x20c/0xa70
[  175.881111][ T7064]  ? fdget_pos+0x246/0x320
[  175.881142][ T7064]  ? __pfx___mutex_lock+0x10/0x10
[  175.881182][ T7064]  ? __pfx_vfs_read+0x10/0x10
[  175.881213][ T7064]  ? __fget_files+0x2a/0x420
[  175.881241][ T7064]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.881272][ T7064]  ? __fget_files+0x3a0/0x420
[  175.881294][ T7064]  ? __fget_files+0x2a/0x420
[  175.881322][ T7064]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.881358][ T7064]  ksys_read+0x150/0x270
[  175.881390][ T7064]  ? __pfx_ksys_read+0x10/0x10
[  175.881419][ T7064]  ? srso_alias_return_thunk+0x5/0xfbef5
[  175.881474][ T7064]  do_syscall_64+0x14d/0xf80
[  175.881512][ T7064]  ? trace_irq_disable+0x3b/0x150
[  175.881535][ T7064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.881567][ T7064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.881593][ T7064] RIP: 0033:0x7fa1b9f5d04e
[  175.881616][ T7064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  175.881640][ T7064] RSP: 002b:00007fa1bae9bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  175.881670][ T7064] RAX: ffffffffffffffda RBX: 00007fa1bae9c6c0 RCX: 00007fa1b9f5d04e
[  175.881691][ T7064] RDX: 000000000000000f RSI: 00007fa1bae9c0a0 RDI: 0000000000000006
[  175.881707][ T7064] RBP: 00007fa1bae9c090 R08: 0000000000000000 R09: 0000000000000000
[  175.881723][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.881738][ T7064] R13: 00007fa1ba216038 R14: 00007fa1ba215fa0 R15: 00007ffc3fda4d68
[  175.881777][ T7064]  </TASK>
[  175.931152][ T5949] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  176.137901][ T5967] usb 1-1: config 0 descriptor??
[  176.271596][ T5949] usb 6-1: device descriptor read/64, error -71
[  176.384094][ T5949] usb usb6-port1: attempt power cycle
[  176.460034][ T7076] netlink: 'syz.2.288': attribute type 10 has an invalid length.
[  176.474403][ T7067] loop4: detected capacity change from 0 to 4096
[  176.482207][ T7076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.288'.
[  176.502116][ T5967] usbhid 1-1:0.0: can't add hid device: -71
[  176.518902][ T7076] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  176.521648][ T5967] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  176.638833][ T5967] usb 1-1: USB disconnect, device number 14
[  176.685577][   T30] audit: type=1800 audit(1775888431.886:8): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.284" name="file1" dev="loop4" ino=30 res=0 errno=0
[  176.735580][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.289'.
[  176.744747][ T5949] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  176.811180][ T5949] usb 6-1: device descriptor read/8, error -71
[  176.865344][ T7081] netlink: 'syz.1.289': attribute type 7 has an invalid length.
[  176.936225][ T7081] netlink: 'syz.1.289': attribute type 8 has an invalid length.
[  176.986938][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'.
[  177.100203][ T5949] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  177.323282][ T7090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.292'.
[  177.851897][ T5949] usb 6-1: device descriptor read/8, error -71
[  177.883268][ T7088] loop0: detected capacity change from 0 to 2048
[  177.960995][ T5949] usb usb6-port1: unable to enumerate USB device
[  178.159867][ T7095] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.287289][ T7094] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  178.360190][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  178.526425][ T7102] loop5: detected capacity change from 0 to 2048
[  178.659678][ T7102] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.778683][ T7111] loop2: detected capacity change from 0 to 764
[  179.549315][ T7127] loop5: detected capacity change from 0 to 32768
[  179.550174][ T7127] btrfs: Deprecated parameter 'usebackuproot'
[  179.550198][ T7127] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  179.560810][ T7127] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.301 (7127)
[  179.638831][ T7127] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.638872][ T7127] BTRFS info (device loop5): using crc32c checksum algorithm
[  179.638908][ T7127] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  179.799953][  T134] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0
[  179.800036][ T7127] BTRFS warning (device loop5): couldn't read tree root
[  179.800054][ T7127] BTRFS warning (device loop5): try to load backup roots slot 1
[  179.800783][   T58] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0
[  179.801331][ T7127] BTRFS warning (device loop5): couldn't read tree root
[  179.801350][ T7127] BTRFS warning (device loop5): try to load backup roots slot 2
[  179.801630][   T58] BTRFS warning (device loop5): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1
[  179.801742][ T7127] BTRFS warning (device loop5): couldn't read tree root
[  179.801765][ T7127] BTRFS warning (device loop5): try to load backup roots slot 3
[  179.839323][ T7127] BTRFS info (device loop5): rebuilding free space tree
[  179.861628][ T7127] BTRFS info (device loop5): disabling free space tree
[  179.861698][ T7127] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  179.861728][ T7127] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  179.870692][ T7127] BTRFS info (device loop5): enabling ssd optimizations
[  179.870721][ T7127] BTRFS info (device loop5): turning off barriers
[  179.870743][ T7127] BTRFS info (device loop5): turning on sync discard
[  179.870764][ T7127] BTRFS info (device loop5): enabling disk space caching
[  179.870786][ T7127] BTRFS info (device loop5): force clearing of disk cache
[  179.870806][ T7127] BTRFS info (device loop5): enabling auto defrag
[  179.870828][ T7127] BTRFS info (device loop5): trying to use backup root at mount time
[  179.870851][ T7127] BTRFS info (device loop5): max_inline set to 0
[  180.272444][ T7098] loop4: detected capacity change from 0 to 32768
[  180.446029][ T5826] Bluetooth: hci4: Dropping invalid advertising data
[  180.446112][ T5826] Bluetooth: hci4: Malformed LE Event: 0x02
[  182.477550][ T5824] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.960251][ T5949] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  183.110340][ T5949] usb 4-1: device descriptor read/64, error -71
[  183.300719][ T7164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.307'.
[  184.128969][ T7168] loop4: detected capacity change from 0 to 32768
[  184.192398][ T5949] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  184.327415][ T7168] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  184.410217][ T5949] usb 4-1: device descriptor read/64, error -71
[  184.476188][ T7168] XFS (loop4): Ending clean mount
[  184.486746][ T7168] XFS (loop4): Quotacheck needed: Please wait.
[  184.577652][ T5949] usb usb4-port1: attempt power cycle
[  184.595762][ T7168] XFS (loop4): Quotacheck: Done.
[  185.280270][   T30] audit: type=1800 audit(1775888440.176:9): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.306" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  185.336073][ T5949] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  185.501823][ T5949] usb 4-1: device descriptor read/8, error -71
[  185.530533][   T30] audit: type=1800 audit(1775888440.466:10): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.306" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  185.673500][ T5825] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.761669][ T5949] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  185.802632][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  185.810009][ T5949] usb 4-1: device descriptor read/8, error -32
[  185.920462][ T5949] usb usb4-port1: unable to enumerate USB device
[  186.637703][ T5949] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  186.955277][ T7215] vxcan3: entered promiscuous mode
[  187.720615][ T7216] loop0: detected capacity change from 0 to 16
[  187.767693][ T7216] erofs (device loop0): mounted with root inode @ nid 36.
[  187.791342][ T7221] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  188.946402][ T7229] loop3: detected capacity change from 0 to 16
[  189.701759][ T7229] erofs (device loop3): mounted with root inode @ nid 36.
[  189.756293][   T30] audit: type=1800 audit(1775888444.936:11): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.323" name="file1" dev="loop3" ino=86 res=0 errno=0
[  189.967593][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.324'.
[  190.003123][ T7238] gretap0: entered promiscuous mode
[  190.016319][ T7238] gretap0: entered allmulticast mode
[  190.084392][ T7238] syz.1.324 uses old SIOCAX25GETINFO
[  190.189540][ T7238] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  190.220493][ T7238] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  190.567545][ T7244] FAULT_INJECTION: forcing a failure.
[  190.567545][ T7244] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  190.900313][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.5.326 Not tainted syzkaller #0 PREEMPT(full) 
[  190.900351][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  190.900368][ T7244] Call Trace:
[  190.900377][ T7244]  <TASK>
[  190.900389][ T7244]  dump_stack_lvl+0xe8/0x150
[  190.900432][ T7244]  should_fail_ex+0x412/0x560
[  190.900481][ T7244]  _copy_from_user+0x2d/0xb0
[  190.900517][ T7244]  ___sys_sendmsg+0x1c6/0x360
[  190.900563][ T7244]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.900734][ T7244]  ? __fget_files+0x2a/0x420
[  190.900763][ T7244]  ? srso_alias_return_thunk+0x5/0xfbef5
[  190.900797][ T7244]  ? __fget_files+0x3a0/0x420
[  190.900834][ T7244]  __x64_sys_sendmsg+0x1bd/0x2a0
[  190.900876][ T7244]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  190.900924][ T7244]  ? __pfx_ksys_write+0x10/0x10
[  190.900970][ T7244]  do_syscall_64+0x14d/0xf80
[  190.901008][ T7244]  ? trace_irq_disable+0x3b/0x150
[  190.901032][ T7244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.901066][ T7244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.901092][ T7244] RIP: 0033:0x7f7df3f9c819
[  190.901117][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.901139][ T7244] RSP: 002b:00007f7df4dad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.901167][ T7244] RAX: ffffffffffffffda RBX: 00007f7df4215fa0 RCX: 00007f7df3f9c819
[  190.901187][ T7244] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004
[  190.901204][ T7244] RBP: 00007f7df4dad090 R08: 0000000000000000 R09: 0000000000000000
[  190.901221][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.901237][ T7244] R13: 00007f7df4216038 R14: 00007f7df4215fa0 R15: 00007ffc7d3abb48
[  190.901278][ T7244]  </TASK>
[  191.720953][ T7245] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  191.737700][ T7245] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  191.752972][ T7245] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  191.760490][ T7245] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  191.772509][ T7245] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  192.106988][ T7266] loop2: detected capacity change from 0 to 512
[  192.234306][ T7268] loop3: detected capacity change from 0 to 764
[  192.328047][ T7268] rock: directory entry would overflow storage
[  192.342653][ T7268] rock: sig=0x4f50, size=4, remaining=3
[  192.363131][ T7268] iso9660: Corrupted directory entry in block 4 of inode 1792
[  192.419175][ T7271] loop4: detected capacity change from 0 to 512
[  192.484146][ T7271] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048)
[  192.639189][ T7271] loop4: detected capacity change from 0 to 512
[  192.861178][ T7271] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048)
[  193.215229][ T7271] loop4: detected capacity change from 0 to 512
[  193.263168][ T7271] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048)
[  193.411283][ T7271] loop4: detected capacity change from 0 to 512
[  193.444593][ T7271] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048)
[  193.587321][ T7271] loop4: detected capacity change from 0 to 512
[  193.626259][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  193.634800][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  193.764283][ T7296] netlink: 'syz.5.345': attribute type 4 has an invalid length.
[  193.780967][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout
[  193.787389][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout
[  193.793878][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout
[  193.801768][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout
[  193.808960][ T7271] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048)
[  193.910672][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout
[  194.316442][ T7271] loop4: detected capacity change from 0 to 512
[  194.705080][ T7271] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048)
[  194.982190][ T7271] loop4: detected capacity change from 0 to 512
[  195.090421][ T7301] loop3: detected capacity change from 0 to 64
[  195.227009][ T7302] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  195.261581][ T7271] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048)
[  195.290434][ T7302] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  195.295049][ T7301] syz.3.347: attempt to access beyond end of device
[  195.295049][ T7301] loop3: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  195.354064][ T7302] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  195.370454][ T7302] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  195.387528][ T7302] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  195.394227][ T7301] Buffer I/O error on dev loop3, logical block 512, async page read
[  195.443653][ T7301] syz.3.347: attempt to access beyond end of device
[  195.443653][ T7301] loop3: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  195.531079][ T7301] Buffer I/O error on dev loop3, logical block 56576, async page read
[  195.680858][ T7312] team_slave_0: entered promiscuous mode
[  195.686878][ T7312] team_slave_1: entered promiscuous mode
[  195.700147][ T7312] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  195.801432][ T7315] rock: directory entry would overflow storage
[  195.807678][ T7315] rock: sig=0x4f50, size=4, remaining=3
[  195.843120][ T7312] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  195.893555][ T7315] iso9660: Corrupted directory entry in block 4 of inode 1792
[  196.504208][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  196.727800][ T7324] xt_hashlimit: size too large, truncated to 1048576
[  196.835761][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 4096, setting to 1024
[  196.895379][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  196.956864][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 101, changing to 7
[  197.011227][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 49420, setting to 1024
[  197.031292][ T7334] netlink: 178664 bytes leftover after parsing attributes in process `syz.5.355'.
[  197.053458][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[  197.318506][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  197.320957][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  197.372947][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[  197.450692][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout
[  197.451008][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout
[  197.588966][   T24] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  197.641338][   T24] usb 4-1: Manufacturer: syz
[  197.689047][ T7337] set_capacity_and_notify: 1 callbacks suppressed
[  197.689064][ T7337] loop4: detected capacity change from 0 to 1024
[  197.834539][   T24] usb 4-1: config 0 descriptor??
[  197.846589][   T24] smsusb:smsusb_probe: board id=9, interface number 0
[  197.865280][ T7337] hfsplus: failed to load root directory
[  197.867100][   T24] smsusb:siano_media_device_register: media controller created
[  197.912414][   T24] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
[  197.953234][   T24] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
[  197.990503][   T24] ------------[ cut here ]------------
[  197.996099][   T24] !PageLargeKmalloc(page)
[  197.996116][   T24] WARNING: mm/slub.c:6393 at free_large_kmalloc+0xa3/0x140, CPU#1: kworker/1:0/24
[  198.011891][   T24] Modules linked in:
[  198.018013][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) 
[  198.027557][   T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  198.038147][   T24] Workqueue: usb_hub_wq hub_event
[  198.043292][   T24] RIP: 0010:free_large_kmalloc+0xa3/0x140
[  198.049361][   T24] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 3e c5 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 8c 66 f1 8d 5b 41 5e 5d e9 47 ab 03 ff
[  198.069412][   T24] RSP: 0018:ffffc900001e6b20 EFLAGS: 00010206
[  198.075565][   T24] RAX: 00000000ff000000 RBX: ffffea0001133880 RCX: 0000000000000001
[  198.083632][   T24] RDX: ffffc9001e601000 RSI: ffff888044ce2000 RDI: ffffea0001133880
[  198.091710][   T24] RBP: 0000000000000000 R08: ffff888034d90c03 R09: 1ffff110069b2180
[  198.099723][   T24] R10: dffffc0000000000 R11: ffffed10069b2181 R12: 1ffff110054a6682
[  198.107865][   T24] R13: 0000000000000000 R14: ffff888034d90c60 R15: dffffc0000000000
[  198.118039][   T24] FS:  0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000
[  198.128474][   T24] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.135237][   T24] CR2: 00007fcfabbcd000 CR3: 000000001fee3000 CR4: 0000000000350ef0
[  198.143502][   T24] Call Trace:
[  198.146804][   T24]  <TASK>
[  198.149741][   T24]  usb_free_urb+0xd0/0x120
[  198.154268][   T24]  smsusb_term_device+0x1d7/0x3e0
[  198.159322][   T24]  smsusb_probe+0x1aba/0x2280
[  198.164347][   T24]  ? __pfx_smsusb_probe+0x10/0x10
[  198.169477][   T24]  ? do_raw_spin_lock+0x12b/0x2f0
[  198.174716][   T24]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  198.180377][   T24]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  198.186244][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.192129][   T24]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  198.197982][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.203788][   T24]  ? __pm_runtime_set_status+0x9d4/0xcd0
[  198.209476][   T24]  usb_probe_interface+0x668/0xc90
[  198.216828][   T24]  ? __pfx_usb_probe_interface+0x10/0x10
[  198.224103][   T24]  really_probe+0x267/0xaf0
[  198.228665][   T24]  __driver_probe_device+0x18c/0x320
[  198.234361][   T24]  driver_probe_device+0x4f/0x240
[  198.239434][   T24]  __device_attach_driver+0x279/0x430
[  198.244991][   T24]  bus_for_each_drv+0x258/0x2f0
[  198.249887][   T24]  ? __pfx___device_attach_driver+0x10/0x10
[  198.255958][   T24]  ? __pfx_bus_for_each_drv+0x10/0x10
[  198.261883][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.267532][   T24]  ? lockdep_hardirqs_on+0x7a/0x110
[  198.272777][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.278762][   T24]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  198.284717][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.290430][   T24]  __device_attach+0x2c5/0x450
[  198.295227][   T24]  ? __pfx___device_attach+0x10/0x10
[  198.300597][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.306268][   T24]  ? _raw_spin_unlock+0x28/0x50
[  198.311292][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.319019][   T24]  device_initial_probe+0xa1/0xd0
[  198.325134][   T24]  bus_probe_device+0x12a/0x220
[  198.330012][   T24]  ? device_add+0x726/0xb70
[  198.334645][   T24]  device_add+0x7b6/0xb70
[  198.339001][   T24]  usb_set_configuration+0x1a87/0x2110
[  198.344619][   T24]  usb_generic_driver_probe+0x8d/0x150
[  198.350131][   T24]  usb_probe_device+0x1c4/0x3b0
[  198.355112][   T24]  ? __pfx_usb_probe_device+0x10/0x10
[  198.360560][   T24]  really_probe+0x267/0xaf0
[  198.365082][   T24]  __driver_probe_device+0x18c/0x320
[  198.370548][   T24]  driver_probe_device+0x4f/0x240
[  198.375627][   T24]  __device_attach_driver+0x279/0x430
[  198.381077][   T24]  bus_for_each_drv+0x258/0x2f0
[  198.386037][   T24]  ? __pfx___device_attach_driver+0x10/0x10
[  198.391996][   T24]  ? __pfx_bus_for_each_drv+0x10/0x10
[  198.397415][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.403154][   T24]  ? lockdep_hardirqs_on+0x7a/0x110
[  198.408452][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.414119][   T24]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  198.421864][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.427622][   T24]  __device_attach+0x2c5/0x450
[  198.433473][   T24]  ? __pfx___device_attach+0x10/0x10
[  198.438774][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.444479][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.450289][   T24]  ? _raw_spin_unlock+0x28/0x50
[  198.455151][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.461132][   T24]  device_initial_probe+0xa1/0xd0
[  198.466188][   T24]  bus_probe_device+0x12a/0x220
[  198.471113][   T24]  ? device_add+0x726/0xb70
[  198.475751][   T24]  device_add+0x7b6/0xb70
[  198.480186][   T24]  usb_new_device+0xa08/0x16f0
[  198.485524][   T24]  ? __pfx_usb_new_device+0x10/0x10
[  198.491112][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  198.496324][   T24]  hub_event+0x2a1c/0x4f30
[  198.500850][   T24]  ? __pfx_hub_event+0x10/0x10
[  198.505687][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.511481][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.517114][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.524387][   T24]  ? process_scheduled_works+0xa8d/0x18c0
[  198.531183][   T24]  ? process_scheduled_works+0xa8d/0x18c0
[  198.536997][   T24]  process_scheduled_works+0xb6e/0x18c0
[  198.542599][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  198.548668][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.554336][   T24]  ? assign_work+0x3d5/0x5e0
[  198.558937][   T24]  worker_thread+0xa53/0xfc0
[  198.563623][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.569277][   T24]  kthread+0x388/0x470
[  198.573454][   T24]  ? __pfx_worker_thread+0x10/0x10
[  198.578571][   T24]  ? __pfx_kthread+0x10/0x10
[  198.583205][   T24]  ret_from_fork+0x51e/0xb90
[  198.587833][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  198.593015][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.598659][   T24]  ? __switch_to+0xc7d/0x1450
[  198.603383][   T24]  ? __pfx_kthread+0x10/0x10
[  198.607974][   T24]  ret_from_fork_asm+0x1a/0x30
[  198.612823][   T24]  </TASK>
[  198.615832][   T24] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  198.623130][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) 
[  198.632329][   T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  198.642661][   T24] Workqueue: usb_hub_wq hub_event
[  198.647716][   T24] Call Trace:
[  198.650988][   T24]  <TASK>
[  198.653910][   T24]  vpanic+0x56c/0xa60
[  198.657896][   T24]  ? __pfx__printk+0x10/0x10
[  198.662487][   T24]  ? __pfx_vpanic+0x10/0x10
[  198.667015][   T24]  ? is_bpf_text_address+0x292/0x2b0
[  198.672322][   T24]  ? is_bpf_text_address+0x26/0x2b0
[  198.677649][   T24]  panic+0xc5/0xd0
[  198.681390][   T24]  ? __pfx_panic+0x10/0x10
[  198.685820][   T24]  ? ret_from_fork_asm+0x1a/0x30
[  198.690793][   T24]  __warn+0x315/0x4f0
[  198.694776][   T24]  ? free_large_kmalloc+0xa3/0x140
[  198.699905][   T24]  ? free_large_kmalloc+0xa3/0x140
[  198.705016][   T24]  __report_bug+0x29a/0x540
[  198.709712][   T24]  ? device_initial_probe+0xa1/0xd0
[  198.714933][   T24]  ? bus_probe_device+0x12a/0x220
[  198.719956][   T24]  ? device_add+0x7b6/0xb70
[  198.724463][   T24]  ? free_large_kmalloc+0xa3/0x140
[  198.729722][   T24]  ? __pfx___report_bug+0x10/0x10
[  198.734756][   T24]  ? usb_new_device+0xa08/0x16f0
[  198.739700][   T24]  ? hub_event+0x2a1c/0x4f30
[  198.744294][   T24]  ? process_scheduled_works+0xb6e/0x18c0
[  198.750129][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.755889][   T24]  ? smscore_unregister_device+0x651/0x780
[  198.761702][   T24]  ? free_large_kmalloc+0xa3/0x140
[  198.766833][   T24]  report_bug+0x16a/0x220
[  198.771192][   T24]  ? free_large_kmalloc+0xa3/0x140
[  198.776317][   T24]  ? free_large_kmalloc+0xa5/0x140
[  198.782212][   T24]  handle_bug+0x9c/0x200
[  198.786470][   T24]  exc_invalid_op+0x1a/0x50
[  198.791007][   T24]  asm_exc_invalid_op+0x1a/0x20
[  198.795856][   T24] RIP: 0010:free_large_kmalloc+0xa3/0x140
[  198.801575][   T24] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 3e c5 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 8c 66 f1 8d 5b 41 5e 5d e9 47 ab 03 ff
[  198.821201][   T24] RSP: 0018:ffffc900001e6b20 EFLAGS: 00010206
[  198.827273][   T24] RAX: 00000000ff000000 RBX: ffffea0001133880 RCX: 0000000000000001
[  198.835349][   T24] RDX: ffffc9001e601000 RSI: ffff888044ce2000 RDI: ffffea0001133880
[  198.843318][   T24] RBP: 0000000000000000 R08: ffff888034d90c03 R09: 1ffff110069b2180
[  198.851284][   T24] R10: dffffc0000000000 R11: ffffed10069b2181 R12: 1ffff110054a6682
[  198.859248][   T24] R13: 0000000000000000 R14: ffff888034d90c60 R15: dffffc0000000000
[  198.867241][   T24]  usb_free_urb+0xd0/0x120
[  198.871689][   T24]  smsusb_term_device+0x1d7/0x3e0
[  198.876740][   T24]  smsusb_probe+0x1aba/0x2280
[  198.881455][   T24]  ? __pfx_smsusb_probe+0x10/0x10
[  198.886512][   T24]  ? do_raw_spin_lock+0x12b/0x2f0
[  198.891540][   T24]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  198.897106][   T24]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  198.902919][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.908574][   T24]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  198.914414][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.920048][   T24]  ? __pm_runtime_set_status+0x9d4/0xcd0
[  198.925808][   T24]  usb_probe_interface+0x668/0xc90
[  198.930932][   T24]  ? __pfx_usb_probe_interface+0x10/0x10
[  198.936585][   T24]  really_probe+0x267/0xaf0
[  198.941100][   T24]  __driver_probe_device+0x18c/0x320
[  198.946420][   T24]  driver_probe_device+0x4f/0x240
[  198.951546][   T24]  __device_attach_driver+0x279/0x430
[  198.956946][   T24]  bus_for_each_drv+0x258/0x2f0
[  198.961794][   T24]  ? __pfx___device_attach_driver+0x10/0x10
[  198.967702][   T24]  ? __pfx_bus_for_each_drv+0x10/0x10
[  198.973090][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.978731][   T24]  ? lockdep_hardirqs_on+0x7a/0x110
[  198.983928][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.989559][   T24]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  198.995366][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.001006][   T24]  __device_attach+0x2c5/0x450
[  199.005783][   T24]  ? __pfx___device_attach+0x10/0x10
[  199.011080][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.016714][   T24]  ? _raw_spin_unlock+0x28/0x50
[  199.021565][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.027328][   T24]  device_initial_probe+0xa1/0xd0
[  199.032419][   T24]  bus_probe_device+0x12a/0x220
[  199.037299][   T24]  ? device_add+0x726/0xb70
[  199.041822][   T24]  device_add+0x7b6/0xb70
[  199.046186][   T24]  usb_set_configuration+0x1a87/0x2110
[  199.051760][   T24]  usb_generic_driver_probe+0x8d/0x150
[  199.057222][   T24]  usb_probe_device+0x1c4/0x3b0
[  199.062170][   T24]  ? __pfx_usb_probe_device+0x10/0x10
[  199.067541][   T24]  really_probe+0x267/0xaf0
[  199.072058][   T24]  __driver_probe_device+0x18c/0x320
[  199.077350][   T24]  driver_probe_device+0x4f/0x240
[  199.082388][   T24]  __device_attach_driver+0x279/0x430
[  199.087783][   T24]  bus_for_each_drv+0x258/0x2f0
[  199.092668][   T24]  ? __pfx___device_attach_driver+0x10/0x10
[  199.098569][   T24]  ? __pfx_bus_for_each_drv+0x10/0x10
[  199.103938][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.109566][   T24]  ? lockdep_hardirqs_on+0x7a/0x110
[  199.114936][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.120563][   T24]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  199.126367][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.131996][   T24]  __device_attach+0x2c5/0x450
[  199.136784][   T24]  ? __pfx___device_attach+0x10/0x10
[  199.142636][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.148505][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.154239][   T24]  ? _raw_spin_unlock+0x28/0x50
[  199.159090][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.164730][   T24]  device_initial_probe+0xa1/0xd0
[  199.169765][   T24]  bus_probe_device+0x12a/0x220
[  199.174612][   T24]  ? device_add+0x726/0xb70
[  199.179121][   T24]  device_add+0x7b6/0xb70
[  199.183461][   T24]  usb_new_device+0xa08/0x16f0
[  199.188244][   T24]  ? __pfx_usb_new_device+0x10/0x10
[  199.193459][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  199.198681][   T24]  hub_event+0x2a1c/0x4f30
[  199.203161][   T24]  ? __pfx_hub_event+0x10/0x10
[  199.207950][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.213632][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.219272][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.224907][   T24]  ? process_scheduled_works+0xa8d/0x18c0
[  199.230634][   T24]  ? process_scheduled_works+0xa8d/0x18c0
[  199.236382][   T24]  process_scheduled_works+0xb6e/0x18c0
[  199.241958][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  199.247946][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.253692][   T24]  ? assign_work+0x3d5/0x5e0
[  199.258311][   T24]  worker_thread+0xa53/0xfc0
[  199.262947][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.268604][   T24]  kthread+0x388/0x470
[  199.272691][   T24]  ? __pfx_worker_thread+0x10/0x10
[  199.277806][   T24]  ? __pfx_kthread+0x10/0x10
[  199.282390][   T24]  ret_from_fork+0x51e/0xb90
[  199.286988][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  199.292093][   T24]  ? srso_alias_return_thunk+0x5/0xfbef5
[  199.297717][   T24]  ? __switch_to+0xc7d/0x1450
[  199.302390][   T24]  ? __pfx_kthread+0x10/0x10
[  199.307150][   T24]  ret_from_fork_asm+0x1a/0x30
[  199.311934][   T24]  </TASK>
[  199.315276][   T24] Kernel Offset: disabled
[  199.319626][   T24] Rebooting in 86400 seconds..