last executing test programs:

15.263368382s ago: executing program 0 (id=938):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0200f7dca6c6027f0000000000000000000009000000850022002f000000186500000300000000cedb55f9030098bf89"], &(0x7f0000000080)='GPL\x00', 0x101, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x2000000}}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28)
r1 = dup2(r0, r0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000d80)={&(0x7f0000000180)=0x2, 0x7, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000d40)})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r3=>0x0})
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x80000c, &(0x7f0000000280)={[{@creator={'creator', 0x3d, "7fd8e627"}}, {@nls={'nls', 0x3d, 'cp857'}}, {@barrier}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0xd}}, {@force}, {}, {@nobarrier}]}, 0x2, 0x6f2, &(0x7f0000000340)="$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")
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={r1, 0x6, 0xc4f5, "3da8bbc01a60da51b7cc00be5a730b34932b283065399afbaa60d66207003ce3b34ba824102d6b97a43565ddc0b05be1bfdef53c837e7c5a626d42b7dc7458b8f0ae440302b7bd62af4cce626578f9f1c9682cf8b3ffddfcb2a761cb5f896b611a016b281f5a805b54"})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @random="95c72e1e20eb"}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
set_mempolicy(0x1, &(0x7f0000000040)=0x4, 0x1)

15.118846573s ago: executing program 0 (id=939):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
syz_usb_connect$uac2(0x4, 0x10c, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0x4, 0x20, 0x5, {0x8, 0xb, 0x0, 0x0, 0x1, 0x7, 0x20, 0x52}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xa, 0xa, 0x39, 0x1}, [@input_terminal={0x10, 0x24, 0x2, 0x1, 0x202, 0x3, 0x81, 0xe1, 0x3ff, 0x1, 0x6, 0x57}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x401, 0x4, 0xd6, 0xa3, 0x2, 0xfd, 0x8, 0x4}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x205, 0x6, 0x0, 0x7f, 0x5, 0x5, 0xe, 0x90}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff7, 0x5c, 0x9, 0xc7}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x9, 0x3, "", '\\'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xaa, 0x8, 0xc4, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x80, 0x7, {0x8, 0x25, 0x1, 0x82, 0xf, 0xe8, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xb2, 0x9, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x1, 0x7, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe, 0x3, 0x81, 0x7, "da", '%]I'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xfd, 0x2, 0x9, 0x40, 'r'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xdd, 0x4, 0x9, 0x8, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0x8, 0x37, "7cab", 'X'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x9, 0xc, {0x8, 0x25, 0x1, 0x2, 0x3, 0x2, 0x4}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x1, 0x4, 0xf5, 0x10, 0xf9}, 0x23, &(0x7f0000000700)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x1, 0x101}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "c059d2b9fc25aa495e96a367f7647eee"}]}, 0x2, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x810}}]})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fcntl$notify(0xffffffffffffffff, 0x402, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r4, 0x402, 0x1a)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280))
r5 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$sock(r5, &(0x7f00000005c0)={&(0x7f0000000180)=@nl=@unspec, 0x80, 0x0}, 0x814)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.7347283s ago: executing program 0 (id=950):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1)
keyctl$invalidate(0x15, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f102140ea8", 0x18}, {&(0x7f00000005c0)="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", 0xeab}], 0x5}, 0x40000)
setrlimit(0x8, &(0x7f0000000080)={0x9, 0x7})

9.582216351s ago: executing program 3 (id=956):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7'])
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x140f, 0x305, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x24040004}, 0x24000004)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000)

8.742070561s ago: executing program 4 (id=960):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790038000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d70a000020000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x12, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x62)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x3, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e)
r1 = syz_open_dev$evdev(&(0x7f0000001dc0), 0x1000000e, 0x825c0)
ioctl$EVIOCGREP(r1, 0x80084503, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0xc}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x5}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4044080)
r4 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', 0xfffffffffffffffb)
r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x1)
syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff002000005407000000000438bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80"], 0x0}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002180)=ANY=[@ANYBLOB="280000006c0021020000000000000000070000001400d08008001c00", @ANYRES32=0xee00, @ANYBLOB='\b\x00?'], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000080)=0x3, 0xfdef)
write$tun(r8, &(0x7f0000000280)={@val={0x0, 0x8}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @remote, @rand_addr=' \x01\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local}}, 0x38)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000300000000000400030000000000100006000000000020"], 0x24, 0x2)

8.741243273s ago: executing program 3 (id=961):
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd700000000000030000005800018044000400200001000a00000000000000ff12000000000000000000000000000100000000200002000a004e20f4fffffffe80"], 0x6c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000006000000040000000000000700000000"], &(0x7f0000000380)=""/219, 0x3e, 0xdb, 0x1}, 0x28)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005", 0x1f}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40012120)
syz_open_dev$sg(&(0x7f0000000340), 0x10001, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f00000003c0)=ANY=[], 0x5, 0x301, &(0x7f0000000080)="$eJzs3c9rE00YwPEnSdMk7du3Pby8iCgMFUSRLm3AmweLtCAGlLYRrCBs7VZDtklJQiEitoLg1bOHHjyKIII3LyJee/EvUOutl97soTiy2R/NjzWmlbRVv59D8jQzz850Z9LSaXZ288KTxfxCUkQiElDOQ1Ri3percvb92qeT0+/+8YrV5PjMWFqpqIjcvP9i+G2l//rrf98kZH3o1uZW+sv6iRmRbzN3JapyZVXQWplqrlisOE2o+Vw5byh1zbbMsqVyhbJVqnjl5pxtqQW7uLRUVWZhfqBvqWSVy8osVFXeqqpKUVVKVWXeMXMFZRiGGugTiMhQEEVbyiLtErPPt7WWLa21TqyK1jqk9qofxL3nxK91FkdJ0/i3rdsyOWLd7BkOwrbu6Xj88edx3/+fn3Y2/nrlgLqFAzJ9Y/bKeCYzMaVUUmTx8XJ2Oes+u+Uf+yUntliyNnVudkecOeKRiPM4eTkzMapqhuT04oqXv7KcdX85jC/U8jf8pLp88fPH3HzVmB+Xvt18S9IyKP9JaH7az5doXX6vnDlVl2/IoHy4LUWxZd6ZyXX5D8aUunQ109R+qlavzsNDGB4AAAAAAAAAAPbFUIHd9ftI8K/elGEkap/4CMpTzstOPbdCsL4+KoOyE74+Pxq6vt8jx3sO8RsHAAAAAOAvUq7ey5u2bZW6E8Sepdo0ETdEnEDk0bDTmbYH/N/rcWet94pIa1GsfRMNQeq8297LKa9j0s0T5QfJPfQwJPAv1sibO6/8opSEVY7uaQKM9Iae+WQpIl2dPw2BdFJZkvub2ImOp1ZzEAvaOhZaR0d+fhxt2nH3FQlGsH3WxT29HX4YJJtP1MiGe1y7zQ+Nr8ESHwAAAIDfSN0fTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JAE1/9HvDv9d7J5mL9vf2OReLeIb92Srfk+8ez7DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAI+h4AAP//0fmz5A==")
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8004)

7.513614221s ago: executing program 4 (id=965):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x30ad408, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e27, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}], 0x1c) (async)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async)
recvmsg(r0, &(0x7f00000019c0)={&(0x7f0000000180)=@nl=@proc, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/119, 0x77}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000000780)=""/167, 0xa7}, {&(0x7f0000000840)=""/228, 0xe4}], 0x5, &(0x7f00000009c0)=""/4096, 0x1000}, 0x10162) (async)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) (async, rerun: 64)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b13f8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(&(0x7f0000000480)=[{r2, 0x8400}], 0x1, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
chdir(&(0x7f0000000140)='./bus\x00') (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)

6.643694815s ago: executing program 4 (id=966):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000300000000000400030000000000100006000000000020"], 0x24, 0x2)

6.277233656s ago: executing program 4 (id=970):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x8, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x50)

6.260454115s ago: executing program 0 (id=971):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000300)}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb00000000000020000400"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x48840)
r4 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="0ba910dd9e84a1a808", 0x9}, {0x0}], 0x2}}], 0x2, 0x2004000)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6.062553232s ago: executing program 4 (id=973):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x4, 0x6c2, &(0x7f0000000ec0)="$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")
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090584f30002000000090503020002000000aa56f7e0f283b36519f5e3d37849cebaa764293893602b98ce7b5da5038074a4c0a4ac66d4afe0403eae0270e35fc2b9d6987ef373bae439e482935d6a6b7b1d25652f4c597e36ebdbc04ce6e608"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10)
recvmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000a00)=""/14, 0xe}, {&(0x7f0000000d40)=""/201, 0xc9}, {&(0x7f0000000b00)=""/244, 0xf4}], 0x4}, 0x9}], 0x1, 0x3, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x3, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4841}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x1fffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_pidfd_open(0x0, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r1, 0x82, 0x0, &(0x7f0000002340))
syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="001ccd1f03100072aba8009707832700070000000000939083f9dad71afc1a188c16ffdf3324cc89ffbe3c8df60fef70b01e2f59ff79227964a79daf08f2007c56b83ed2516b3e7dfc2fa1e05f3965bcc88657c68b05da87299c26f0a4288ab5ecedea1970649df8232f5db8908ebfa09667ab7c0eb2c4ae3068af7121de2314c067be8f40a9031bae6832ca330bbab6d15601bef0685f66007a7933b955762ada81e4efcb624747a440d67bc7b30d42161f1cbfa2d0df67504c5e76c6"], &(0x7f0000000800)=ANY=[@ANYBLOB="0003790000007903366d9f3032407fd9bcf607d29c688226728a7ab744880ee557d57f7266cdbbda3e0417018c3f08fdcd3c6fa0b2ef2ee95c88c8b69cbd3313ac6fc81f7e5bf9eeac2475420d9ff811a986a5ffcb819e6f85634da21cb7bd99f68cf22f0635a6836d0fa7ee913ff839f58d0d0b51dd1041b50dc21d2d4e628dc6521b464f3b27cb8664ca2764563d6412c0c659d3d8f3f6999d94cd1e8463e7b1289d34a40f900c26550f84a13af1886bc1689e5a8a4a8208543827543123e0d6d53bc59afb8d0aeb1853d598bea954001f0c95a7f6e82f7c305d6d29c19a5955e98b7fcc5d7e4d433c089b0947368112a3352cfdd417d840ce626cba6b6dd2f4e16c09d49dae92fc9b0000004104fb6eb4605e06b14c3133b99c60396478f5cb03c559505928f3ff"], &(0x7f00000001c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0xff8c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "150763166c48a24163a1cf17ba08d61b"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x80, 0x1, 0x0, "21254e9c", "751b006a"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x6d, 0x7f, 0x8, 0x1, 0xa}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="201ba7000000a097671065d1cffd3ad8b9b883dbfb6b1e72239971d898a9081d20be177e1870d660c479a5ad85a69771de222e3604f98271ac2b56cb083522bbee18f8647f088674f963ae325f4d21da5bc3c0e504b7613380d8df7c6349c698736337e2f5de8645c2be3df6811a7f99f284ad2ff4fb26d0b28de4c5bf279bbbcdb5ba97075bfe01c94a6a2d2c65d527a4fd6922ad80a9a02358e4b883d1e8c245973f885653438694271d2cc5"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xa8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x40}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000004c0)={0x40, 0x9, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "441b"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "056c"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1}})
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000a40)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYRES64=r3], 0x4, 0x350, &(0x7f0000000580)="$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")
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0307000000000000000008000000680004800400078013000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

5.665097216s ago: executing program 3 (id=977):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40179a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)={0x40, 0x12, 0x4, "d212def0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x85cb5000)
ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, 0x0)

5.595034812s ago: executing program 1 (id=978):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2808043, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="31000000bf3f9f8008000a00", @ANYBLOB="5400128011000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

4.2577619s ago: executing program 1 (id=982):
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="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", 0x115}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec", 0x61}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

4.193387721s ago: executing program 0 (id=984):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xd55c, @mcast1, 0x200000}, 0x1c)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x25, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x6, 0x65, &(0x7f0000000480)=""/101, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x3, 0xf3ed, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000640)=[{0x4, 0x3, 0x6, 0xb}, {0x5, 0x4, 0xc, 0x7}], 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c5000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/29, 0x1d}, 0x8}], 0x1, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x0, 0x20000000], [], [0x400000000000000]})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff3f14000000", @ANYRES32, @ANYBLOB="00336f43af654d6b70f067035c89c22e0000000900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000000000000200"/28], 0x50)
r3 = io_uring_setup(0x5635, &(0x7f0000000180)={0x0, 0x872e, 0x10000, 0x0, 0x14e})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000240)=[@ioring_restriction_register_op={0x0, 0x16}, @ioring_restriction_sqe_flags_required={0x3, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1d}], 0x3)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0xffffffffffffffe7)

3.78825485s ago: executing program 1 (id=988):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
setfsgid(0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200041a, &(0x7f0000000080)={[{@nobarrier}, {@nobarrier}, {@nls={'nls', 0x3d, 'macinuit'}}]}, 0x9, 0x5c8, &(0x7f00000006c0)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x80)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x3, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x842}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x480}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc00}]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0c8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], &(0x7f0000000000)=""/228, 0x1a, 0xe4, 0x1}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
socket$nl_xfrm(0x10, 0x3, 0x6)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)

2.490523063s ago: executing program 0 (id=993):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1)
keyctl$invalidate(0x15, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f102140ea8", 0x18}, {&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaabab0ab31a653c4c13d5a1a6e099729ab1a39b0d999338d0f44875083d", 0xeab}], 0x5}, 0x40000)
setrlimit(0x8, &(0x7f0000000080)={0x9, 0x7})

2.441144148s ago: executing program 1 (id=994):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04", 0x28}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8", 0x44}], 0x3}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe8000000040"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000300)='dn\f\x03\xba\x7f\x98\xffqry*G;\xc7,\xcf\x7f\x81\x9c\xdeE:cb2e\x18,\x16\x17^\xfe\xc6,\tq\x88\x861{(6\x00\x95\x88\x1c|\xd9!\xc2|\xbc<~\x02\x99\xc2\xaf\x99{\x1e\x96`k\x7f\xe1\x9b\x8b\xa9.\f\x14z\x8a\xd9e\xd3H9K\x0eF\xff\xdb%\xfd\x1d\x84\xce\x12\x9dz\x18fF\x1f\'U\xbb|\xeb2\xda\xac\x91\xeb\xd9\x9a\x11\x12\xc3\xec\xbb_\xe8\x16\xe9\xb5\x00\xa6\x98\xbbY_\xcb\xac\xae\xb6\xa9\x87\"$MQ#\xbb\xe3\x1b\xf0\x9b\xef\x01\x10\xb4\xa2\xd0wf\xf8+n\x17]\x03E\x83\xc3Y\x88\xbe\x9a\t]\xca\xf9:w7\nY\xa3\x8as\x9f\xd2W_{\xed\xcf-\xff\xd7d,\xd1\x1fU\xc3\x0f\x9c\xda\b#\xb2]\xb7\xe5\x97\xf2 \xb3\xc7r~!\xa4\xabs:\xffU\tj`\xca[\x8a\x8f\t*\xf1\xdeD\xb8p\xf4\xf0\xa7\x9c\xbd?)\xd2\f\x8d\xb26\v%\xb8\xc2\xacp\xe6x7\xd6\x17\xa4$I\xc4\xfcwIHQ\xe0\xa3<=\x94\x91\xd5b\x01bT\x06\xa7\x16\xd3\xd3\xcb\\\x15\xdc\xd34\r\xa8\x11\xc42h\x1fA|\xe1\x80\xe6]\xca\x87\x93\xab\xe4\xcd\xebe\xe0\xb2Y\x16\x12\\\xe2\xa2\xd2\xdd\xfd\tGu\xbasA\x9c\xc7\x14@\xec\xe1sB\x88\xaeZ9\xc1\xfb\x1bH\xc0\x16\xc2#\xc5:\x87\xf3Z2z;W/\xcc9\xd1\xe4V\xb1')
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = gettid()
r6 = getpid()
rt_tgsigqueueinfo(r6, r5, 0x1d, &(0x7f00000003c0)={0x14, 0x1851, 0x6})

2.147070306s ago: executing program 2 (id=996):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x4000)

2.067016139s ago: executing program 3 (id=997):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @none={0x0, 0xffff}}, 0x14)

1.829725498s ago: executing program 3 (id=998):
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0xfff7, 0x8, 0x94, 0x8, 0x8, 0x9, 0x2}, &(0x7f0000000500)=0x20)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r0, 0x29, 0x1a, 0x0, &(0x7f0000000100))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x8001, 0x1, &(0x7f0000000080)="0200000409800000", 0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = timerfd_create(0x5, 0x100000)
ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000280)={0x4e8a52e, 0x3, 0x8, 0x0, 0xea82, 0x6, 0x0, &(0x7f0000000200)=[{0x1, 0xfe, 0x4}, {0x18, 0xfe, 0x81}, {0x2, 0xfe, 0x61e0}, {0x2, 0xfe, 0xffffffff}, {0x6, 0xfe, 0xd93}, {0xb, 0x1ff, 0x4fd}]})
timerfd_settime(r3, 0x3, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, &(0x7f0000000140))

1.670988617s ago: executing program 2 (id=999):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001740)=[{0x0}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x4040001)

1.632283443s ago: executing program 2 (id=1000):
bpf$MAP_CREATE(0x18000000, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48)

1.51647725s ago: executing program 2 (id=1001):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7)

1.394999622s ago: executing program 1 (id=1002):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c000180080001000000ffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x5, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.384821717s ago: executing program 1 (id=1003):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000180)=0x4, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d8000000180081060000f782db4cb904021d0800fe067c05e8fe55a10adea01d528b0300000000000000ed90f7833a0c2aca5c2b6809830fe49781000000f412015aaba6b49d725a2521fbec", 0xfffffffffffffca6}, {&(0x7f0000000640)="bb94f580612c6e41aaed81765c09bc0293a332e60b192c68f4448d4c936361bd6a73148ab97a62000657f02ee92dd6a92ec4d2aae5e5c21d468b688677348a91adee55134c97d04d527d35f20f108e8fc869bc055d", 0x55}], 0x2}, 0x810)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001)
recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141)
sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="0215040602000200000000000000df25014d522222a40c83134e2c8b8441f8cebddddb277c4de12f3ea85457478dbc43a9f0a06c8a"], 0x10}}, 0x4001)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100dc3ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x105a7, &(0x7f0000020c00)="$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")
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000840)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xaf3, &(0x7f0000002400)="$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")
mknod(&(0x7f0000000000)='./file3\x00', 0x100, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000000000)=0xe, 0x4)
recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'})
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba0d299095c43211b45e9903128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb", 0x4d}, {&(0x7f0000000880)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

1.030115294s ago: executing program 3 (id=1004):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="95000000ae0000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38}, 0x94)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b00000000000300000005000000180001801400020073797a5f74756e00000000000000000028000380240003809f47433e5342"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
close_range(r0, 0xffffffffffffffff, 0x2)
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="99", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r4, 0x1)
setsockopt(r4, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8)
r5 = fanotify_init(0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
read(r5, 0x0, 0x18)
fanotify_mark(r5, 0x101, 0x8000031, r6, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r6)
sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000002080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002040)={&(0x7f0000001ac0)={0x570, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2d3}, @TIPC_NLA_NODE_ID={0x85, 0x3, "ef012d723849ae73cc007da501d90a4bb58c5c34bd5bf99a34b507fb95be3ad058dbefbfd8477e6f44dae8348f530994c81cc371ebccca5d82d42633f043d12c9ff92f993fffb8e3d1f334fd509e99fb07233b2ed24be06613a0e4ce8dd34ed6af8400b804c740cdf821a274d922112d2af27b58077ca6e7cd4275c92d6e0c730d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "f604bcc22040396311a4ac6bc2d6de688ba3ef5bb754415d5cacd1b33f0fcd6ff78cb3a3f3512ce83beb100b105b92fe88a1e6652f7f3a67018473350f1bddb421d01b66518aa958a6dccb9de51f4bdad38f7e738dc9cf5b6218f195aed4bf3d4682826191e6a6b560c940a4776aa0f2805b274de55559bcdb02a301089c01e4b2bbfd7073f9ed90b9aeaaa49138b3e29e454b5afeb1afd69a41d42edb87060bceba72ed1c97f55f12921052e3338a70a08b05e239bb1f9f995ad49423d5b5a7c890a2f9fe9a4ccd5116a1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffff524}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x21, 0x3, "a03ac94ac1655213bc546a636d6394154198f1187caa711c851a25c9a1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x8e, 0x3, "bea99c152123726b2167126226e0c709fb5bf47384e3eeb59a69e0f53fabd569a87000813c92b5e45810914e06be75b1b6aa78fbed32831e356b6deefe22c13324320fd13b949082cd4198d6fe7550b84d2f826f19c69d39359f8059ca2209217f06897772d2aa3be594021ffbf49ba9b31573574643443b2f7d76ea737d5fa7d11e0df06c5e54f12e9f"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "b0264cb3b150983e3b291bd05627f79b6e46830921b876ce991f38998c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1df0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xebc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}]}]}, 0x570}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000)
ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f00000000c0))

841.125176ms ago: executing program 4 (id=1005):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2808043, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40800, &(0x7f0000000240)={[{@noquota}, {@noblock_validity}, {@nogrpid}, {@data_journal}]}, 0xfe, 0x282, &(0x7f00000015c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

563.023117ms ago: executing program 2 (id=1006):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x38, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xaf}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x200}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000840)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x8969, 0xfffffffc})
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x50)

0s ago: executing program 2 (id=1007):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9feb0100180000000000000078000000780000000a000000080000000000000700000000040000000000000c0300000005000000000000080400000004000000030000930100000000000001050000000a0000000a00000005000000000000000d00000008000000008000000700000000000010040000000c00000000000007000000000000000000000008040000000061612e2e5f2e2e61"], 0x0, 0x9a, 0x0, 0x0, 0x10001}, 0x28)

kernel console output (not intermixed with test programs):

d with raw_refcnt=0x0, refcnt=1
[  485.007451][ T8781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.009593][  T197] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  485.032964][ T1526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  485.033018][ T1526] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  485.038040][ T1526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  485.060734][ T1007] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  485.164806][ T1526] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  486.231564][ T8800] binder_alloc: 8780: binder_alloc_buf, no vma
[  486.408879][   T13] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  486.445113][  T197] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  486.461543][  T197] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  486.462265][  T197] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  487.004857][ T1007] usb 5-1: Using ep0 maxpacket: 32
[  487.023563][ T1007] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  487.023590][ T1007] usb 5-1: config 0 has no interface number 0
[  487.023620][ T1007] usb 5-1: config 0 interface 239 has no altsetting 0
[  487.222846][ T1007] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[  487.222875][ T1007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.222895][ T1007] usb 5-1: Product: syz
[  487.222909][ T1007] usb 5-1: Manufacturer: syz
[  487.222923][ T1007] usb 5-1: SerialNumber: syz
[  487.364031][ T1007] usb 5-1: config 0 descriptor??
[  487.369013][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  487.606318][ T1007] usb 5-1: USB disconnect, device number 18
[  488.058559][ T8810] loop4: detected capacity change from 0 to 512
[  488.098563][   T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.099159][   T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.100223][   T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.124054][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.130861][ T5723] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  488.146839][  T197] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.195214][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.215409][ T8807] loop2: detected capacity change from 0 to 1024
[  488.216325][ T8807] EXT4-fs: Ignoring removed bh option
[  488.216373][ T8807] EXT4-fs: inline encryption not supported
[  488.222255][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.237221][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.254262][  T197] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.290817][ T5723] usb 2-1: Using ep0 maxpacket: 8
[  488.293601][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short
[  488.293675][ T5723] usb 2-1: too many configurations: 82, using maximum allowed: 8
[  488.325107][ T5723] usb 2-1: unable to read config index 0 descriptor/start: -61
[  488.325139][ T5723] usb 2-1: can't read configurations, error -61
[  488.352098][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.355501][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.380819][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.382904][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.383341][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.388509][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.388546][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.402043][ T8810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  488.455753][ T8810] netlink: 64 bytes leftover after parsing attributes in process `syz.4.813'.
[  488.461617][ T5723] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  488.501615][ T8810] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  488.502732][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.503144][ T8807] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  488.506558][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.508620][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.564069][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.564128][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.672015][ T1191] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  488.676686][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.684674][ T3401] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  488.689824][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.696785][ T1031] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.704754][ T1031] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.707945][ T1031] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.710051][ T1031] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  488.715053][ T3401] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  488.726700][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.726706][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.734539][ T5723] usb 2-1: Using ep0 maxpacket: 8
[  488.739045][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  488.739300][ T3401] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  488.747740][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short
[  488.750921][ T5723] usb 2-1: too many configurations: 82, using maximum allowed: 8
[  488.751814][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.753688][ T8810] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  488.753930][ T8810] ext4 filesystem being remounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  488.803717][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.812725][ T1031] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  488.812925][ T1031] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  488.813021][ T1031] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  488.859022][ T5723] usb 2-1: unable to read config index 0 descriptor/start: -61
[  488.859054][ T5723] usb 2-1: can't read configurations, error -61
[  488.874872][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.900537][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.907842][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.961189][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.972615][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.975449][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  488.976570][ T8807] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.806: lblock 2 mapped to illegal pblock 2 (length 1)
[  488.976594][ T8807] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  488.978799][ T1191] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  488.979249][ T8807] EXT4-fs (loop2): Remounting filesystem read-only
[  488.979266][ T8807] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  488.979367][ T8807] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  488.979441][ T8807] EXT4-fs (loop2): 1 orphan inode deleted
[  488.981340][ T8807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.084216][ T5723] usb usb2-port1: attempt power cycle
[  489.117731][  T197] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  489.127029][ T8806] netlink: 64 bytes leftover after parsing attributes in process `syz.2.806'.
[  489.189377][   T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  489.190442][   T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  489.218174][  T197] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  489.227630][   T67] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  489.239841][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.265145][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  489.265297][  T164] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  489.265316][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  489.303634][ T5614] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  489.325040][ T1191] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  489.392017][   T67] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  489.409054][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  489.466811][ T5723] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  489.487970][ T5723] usb 2-1: Using ep0 maxpacket: 8
[  489.499196][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short
[  489.577854][ T8827] loop3: detected capacity change from 0 to 256
[  489.602915][ T1191] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.611876][ T1191] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.633501][ T5723] usb 2-1: too many configurations: 82, using maximum allowed: 8
[  489.638198][ T5723] usb 2-1: unable to read config index 0 descriptor/start: -61
[  489.638236][ T5723] usb 2-1: can't read configurations, error -61
[  489.672518][ T3401] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.672740][ T3401] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.674547][ T3401] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.679454][ T3401] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.679537][ T3401] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  489.680409][   T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.685548][   T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.698331][  T197] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.718440][   T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.720238][ T1191] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.780698][ T5723] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  489.786239][   T67] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  489.786276][   T67] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  489.804390][ T5723] usb 2-1: Using ep0 maxpacket: 8
[  489.830956][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short
[  489.831042][ T5723] usb 2-1: too many configurations: 82, using maximum allowed: 8
[  489.844825][ T5723] usb 2-1: unable to read config index 0 descriptor/start: -61
[  489.844864][ T5723] usb 2-1: can't read configurations, error -61
[  489.887170][ T5723] usb usb2-port1: unable to enumerate USB device
[  489.945335][ T1191] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  489.974654][  T197] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  489.975887][  T197] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  489.976228][  T197] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  489.977646][  T197] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  489.983310][  T197] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  490.207745][ T3401] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  490.207809][ T3401] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  490.207841][ T3401] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  490.208100][ T3401] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  490.332219][  T164] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  490.428583][ T8836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.820'.
[  490.670254][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.694949][ T1191] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  490.815105][  T164] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  490.815192][  T164] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  491.057690][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  491.262809][ T5619] Bluetooth: hci3: unexpected event for opcode 0x1009
[  491.287601][   T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  491.346893][ T3401] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  491.936617][   T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  491.953515][ T5614] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  492.290701][   T32] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  492.454275][   T32] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[  492.454302][   T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  492.454321][   T32] usb 1-1: config 0 has no interface number 0
[  492.454361][   T32] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  492.454389][   T32] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  492.466723][   T32] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  492.466797][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.466851][   T32] usb 1-1: Product: syz
[  492.466898][   T32] usb 1-1: Manufacturer: syz
[  492.466932][   T32] usb 1-1: SerialNumber: syz
[  492.624557][   T32] usb 1-1: config 0 descriptor??
[  492.625263][ T8856] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  492.722173][   T37] audit: type=1326 audit(1778381776.459:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.4.822" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f4979cdd9 code=0x0
[  492.741321][   T32] vmk80xx 1-1:0.6: driver 'vmk80xx' failed to auto-configure device.
[  492.880218][   T32] vmk80xx 1-1:0.6: probe with driver vmk80xx failed with error -22
[  492.945661][ T8874] loop3: detected capacity change from 0 to 256
[  492.953037][  T164] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  492.961068][ T8874] exFAT-fs (loop3): bogus number of FAT structure
[  492.961105][ T8874] exFAT-fs (loop3): failed to read boot sector
[  492.961131][ T8874] exFAT-fs (loop3): failed to recognize exfat type
[  492.965998][ T8874] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  493.129246][ T8876] loop2: detected capacity change from 0 to 8192
[  493.205044][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.206651][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.209894][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.219846][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.234254][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.254664][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.256097][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.274049][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.284739][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.285824][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.286027][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.286406][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.286854][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.288549][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.289105][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.301006][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  493.555608][ T8878] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  494.155146][   T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.160231][   T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.176073][   T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.176294][   T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.176457][   T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.190755][   T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.213550][   T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.230088][   T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.238717][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.239181][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.239396][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.239719][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.240273][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.240888][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.291716][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.292410][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.295046][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.296966][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.311836][   T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.331053][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.352372][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.356855][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.359580][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.363765][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.389473][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.394776][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.397024][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.397586][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.401399][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.402172][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.404010][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.404507][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.466829][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.469728][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.483138][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.483230][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.483292][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.518171][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.518215][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.518239][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.518263][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.520224][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.530690][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.539932][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.573669][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.577364][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.587809][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.587859][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.590772][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.605027][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.606272][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.620706][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.627147][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.627714][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.638228][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.638345][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.646254][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.658609][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.659263][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.674126][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.674515][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.687816][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.689561][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.693008][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.697616][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.697761][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.699774][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.704484][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.717245][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.725495][   T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.725544][   T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.731050][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.740887][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.741010][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.742332][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.743588][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.762421][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.775153][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.777095][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.777682][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.778332][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.785769][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.791546][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.796938][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.799532][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.801158][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.804877][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.806483][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.815976][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.818982][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.875458][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.890112][   T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.909064][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.920360][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.921468][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.923421][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.930541][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.937917][ T3401] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  494.966356][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  494.995941][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  495.000062][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  495.011289][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  495.025158][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  495.045303][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  495.065956][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  495.093461][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  495.250755][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  495.261844][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  495.288363][ T3401] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  496.404817][ T8436] usb 1-1: USB disconnect, device number 14
[  496.563131][   T32] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  496.739721][  T197] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  496.739777][  T197] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  496.739809][  T197] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  496.739839][  T197] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  496.739890][  T197] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  496.739930][  T197] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  496.787308][   T44] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  496.814909][   T32] usb 4-1: Using ep0 maxpacket: 32
[  496.815668][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  496.834075][   T32] usb 4-1: unable to get BOS descriptor or descriptor too short
[  496.842894][   T32] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  496.842957][   T32] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  496.843012][   T32] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  496.843069][   T32] usb 4-1: config 128 has no interface number 0
[  496.843177][   T32] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  496.843258][   T32] usb 4-1: config 128 interface 127 has no altsetting 0
[  496.860718][   T32] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  496.860744][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.860764][   T32] usb 4-1: Product: syz
[  496.860778][   T32] usb 4-1: Manufacturer: syz
[  496.860793][   T32] usb 4-1: SerialNumber: syz
[  497.017218][ T8910] netlink: 136 bytes leftover after parsing attributes in process `syz.4.849'.
[  497.437445][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'.
[  497.672938][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'.
[  497.672960][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'.
[  497.672985][ T8925] netlink: 'syz.2.847': attribute type 14 has an invalid length.
[  497.672999][ T8925] netlink: 'syz.2.847': attribute type 13 has an invalid length.
[  498.626646][ T8946] FAULT_INJECTION: forcing a failure.
[  498.626646][ T8946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  498.626682][ T8946] CPU: 0 UID: 0 PID: 8946 Comm: syz.4.858 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  498.626716][ T8946] Tainted: [L]=SOFTLOCKUP
[  498.626724][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  498.626737][ T8946] Call Trace:
[  498.626745][ T8946]  <TASK>
[  498.626753][ T8946]  dump_stack_lvl+0xe8/0x150
[  498.626783][ T8946]  should_fail_ex+0x46b/0x600
[  498.626811][ T8946]  _copy_from_user+0x2d/0xb0
[  498.626841][ T8946]  __copy_msghdr+0x3c5/0x5b0
[  498.626868][ T8946]  ___sys_sendmsg+0x213/0x360
[  498.626890][ T8946]  ? __lock_acquire+0x6b5/0x2d10
[  498.626916][ T8946]  ? __pfx____sys_sendmsg+0x10/0x10
[  498.626945][ T8946]  ? kstrtouint+0x6e/0xe0
[  498.626992][ T8946]  ? __fget_files+0x2a/0x420
[  498.627018][ T8946]  ? __fget_files+0x3a6/0x420
[  498.627054][ T8946]  __sys_sendmmsg+0x282/0x4e0
[  498.627083][ T8946]  ? __pfx___sys_sendmmsg+0x10/0x10
[  498.627115][ T8946]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  498.627160][ T8946]  ? ksys_write+0x248/0x270
[  498.627193][ T8946]  ? __pfx_ksys_write+0x10/0x10
[  498.627230][ T8946]  __x64_sys_sendmmsg+0xa0/0xc0
[  498.627253][ T8946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.627275][ T8946]  do_syscall_64+0x15f/0xf80
[  498.627299][ T8946]  ? trace_irq_disable+0x3b/0x140
[  498.627330][ T8946]  ? clear_bhb_loop+0x40/0x90
[  498.627355][ T8946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.627375][ T8946] RIP: 0033:0x7f0f4979cdd9
[  498.627393][ T8946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.627411][ T8946] RSP: 002b:00007f0f479f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  498.627432][ T8946] RAX: ffffffffffffffda RBX: 00007f0f49a15fa0 RCX: 00007f0f4979cdd9
[  498.627447][ T8946] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003
[  498.627461][ T8946] RBP: 00007f0f479f6090 R08: 0000000000000000 R09: 0000000000000000
[  498.627474][ T8946] R10: 0000000000040884 R11: 0000000000000246 R12: 0000000000000001
[  498.627487][ T8946] R13: 00007f0f49a16038 R14: 00007f0f49a15fa0 R15: 00007ffcfcf0a638
[  498.627518][ T8946]  </TASK>
[  499.032660][ T5619] Bluetooth: hci2: unexpected event for opcode 0x1009
[  499.194562][ T8944] Bluetooth: hci0: invalid len left 7, exp >= 50
[  499.250921][ T8953] loop4: detected capacity change from 0 to 2048
[  499.535609][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.537901][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.537940][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.537964][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.537996][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.538254][ T8953] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  499.590697][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.590739][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.590759][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.590778][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.590804][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.594866][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.595577][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.596141][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.596903][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.597503][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.599968][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.695211][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.720053][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.722744][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.737619][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.752375][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755418][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755459][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755484][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755509][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755534][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755558][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755582][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755606][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755630][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755654][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755678][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755702][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755726][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.755750][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.762332][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.762385][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.762417][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.762444][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.762473][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.793841][   T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  499.881010][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.881049][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.881073][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  499.966503][   T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  499.966557][   T43] usb 1-1: config 0 has no interface number 0
[  499.966627][   T43] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  499.966700][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.974153][   T32] usb 4-1: USB disconnect, device number 24
[  500.078659][   T43] usb 1-1: config 0 descriptor??
[  500.143307][   T43] usb 1-1: selecting invalid altsetting 1
[  500.146049][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  500.165767][   T43] dvb_ttusb_budget: ttusb_init_controller: error
[  500.165805][   T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  500.195254][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  500.217551][ T8966] loop1: detected capacity change from 0 to 128
[  500.232815][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.232883][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  500.233237][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.239273][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.239312][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.249678][   T44] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  500.272295][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.272987][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.277252][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.302385][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.308339][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.315635][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.315750][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.315817][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.350783][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.370405][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  500.433098][ T8966] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  500.433377][  T164] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  500.433630][ T8966] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  500.481080][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  500.549824][ T8953] syz.4.860: attempt to access beyond end of device
[  500.549824][ T8953] loop4: rw=0, sector=111568486480, nr_sectors = 2 limit=2048
[  500.550042][ T8953] NILFS (loop4): I/O error reading meta-data file (ino=4, block-offset=0)
[  500.754139][ T8953] NILFS (loop4): error -5 while loading last checkpoint (checkpoint number=2)
[  501.357165][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  501.357261][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  501.415499][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  501.415766][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  501.415829][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  501.434449][ T8953] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  501.470377][ T5615] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  501.515441][ T1191] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  501.543149][ T5615] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  501.636679][   T43] DVB: Unable to find symbol cx22700_attach()
[  501.921521][ T8989] FAULT_INJECTION: forcing a failure.
[  501.921521][ T8989] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  501.921557][ T8989] CPU: 0 UID: 0 PID: 8989 Comm: syz.0.872 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  501.921584][ T8989] Tainted: [L]=SOFTLOCKUP
[  501.921592][ T8989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  501.921604][ T8989] Call Trace:
[  501.921613][ T8989]  <TASK>
[  501.921622][ T8989]  dump_stack_lvl+0xe8/0x150
[  501.921652][ T8989]  should_fail_ex+0x46b/0x600
[  501.921688][ T8989]  _copy_to_user+0x31/0xb0
[  501.921720][ T8989]  simple_read_from_buffer+0xe1/0x170
[  501.921752][ T8989]  proc_fail_nth_read+0x1be/0x230
[  501.921783][ T8989]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  501.921813][ T8989]  ? rw_verify_area+0x2ac/0x4e0
[  501.921845][ T8989]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  501.921874][ T8989]  vfs_read+0x212/0xa80
[  501.921911][ T8989]  ? __pfx_vfs_read+0x10/0x10
[  501.921944][ T8989]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  501.921969][ T8989]  ? lockdep_hardirqs_on+0x7a/0x110
[  501.921993][ T8989]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  501.922018][ T8989]  ? mutex_lock_nested+0x152/0x1d0
[  501.922048][ T8989]  ? fdget_pos+0x252/0x320
[  501.922082][ T8989]  ksys_read+0x156/0x270
[  501.922114][ T8989]  ? __pfx_ksys_read+0x10/0x10
[  501.922153][ T8989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.922175][ T8989]  do_syscall_64+0x15f/0xf80
[  501.922199][ T8989]  ? trace_irq_disable+0x3b/0x140
[  501.922230][ T8989]  ? clear_bhb_loop+0x40/0x90
[  501.922255][ T8989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.922276][ T8989] RIP: 0033:0x7f4c48e9d60e
[  501.922294][ T8989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  501.922311][ T8989] RSP: 002b:00007f4c4712dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  501.922333][ T8989] RAX: ffffffffffffffda RBX: 00007f4c4712e6c0 RCX: 00007f4c48e9d60e
[  501.922348][ T8989] RDX: 000000000000000f RSI: 00007f4c4712e0a0 RDI: 0000000000000003
[  501.922361][ T8989] RBP: 00007f4c4712e090 R08: 0000000000000000 R09: 0000000000000000
[  501.922375][ T8989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.922387][ T8989] R13: 00007f4c49156038 R14: 00007f4c49155fa0 R15: 00007fff6a0b16e8
[  501.922419][ T8989]  </TASK>
[  502.204725][   T43] DVB: Unable to find symbol tda10046_attach()
[  502.204738][   T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  502.947963][   T43] usb 1-1: USB disconnect, device number 15
[  503.453704][ T9000] FAULT_INJECTION: forcing a failure.
[  503.453704][ T9000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  503.453741][ T9000] CPU: 0 UID: 0 PID: 9000 Comm: syz.4.877 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  503.453769][ T9000] Tainted: [L]=SOFTLOCKUP
[  503.453777][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  503.453790][ T9000] Call Trace:
[  503.453798][ T9000]  <TASK>
[  503.453806][ T9000]  dump_stack_lvl+0xe8/0x150
[  503.453836][ T9000]  should_fail_ex+0x46b/0x600
[  503.453864][ T9000]  _copy_from_iter+0x3b0/0x1670
[  503.453902][ T9000]  ? __pfx__copy_from_iter+0x10/0x10
[  503.453932][ T9000]  ? ip6_dst_lookup_tail+0x2df/0x15a0
[  503.453968][ T9000]  ? skb_put+0x11b/0x210
[  503.453993][ T9000]  rawv6_send_hdrinc+0x894/0x1950
[  503.454038][ T9000]  ? __pfx_rawv6_send_hdrinc+0x10/0x10
[  503.454068][ T9000]  ? txopt_get+0x343/0x3f0
[  503.454097][ T9000]  ? aa_label_sk_perm+0x532/0x6e0
[  503.454128][ T9000]  ? __pfx_txopt_get+0x10/0x10
[  503.454167][ T9000]  rawv6_sendmsg+0x1338/0x18e0
[  503.454209][ T9000]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  503.454269][ T9000]  ? __pfx_aa_sk_perm+0x10/0x10
[  503.454305][ T9000]  ? sock_rps_record_flow+0x19/0x350
[  503.454335][ T9000]  ? inet_sendmsg+0x2f4/0x370
[  503.454360][ T9000]  ? aa_sock_msg_perm+0x122/0x200
[  503.454392][ T9000]  ? __pfx_inet_sendmsg+0x10/0x10
[  503.454416][ T9000]  sock_sendmsg_nosec+0xf9/0x150
[  503.454445][ T9000]  ____sys_sendmsg+0x55c/0x870
[  503.454473][ T9000]  ? __pfx_____sys_sendmsg+0x10/0x10
[  503.454505][ T9000]  ? import_iovec+0x73/0xa0
[  503.454536][ T9000]  ___sys_sendmsg+0x2a5/0x360
[  503.454558][ T9000]  ? __lock_acquire+0x6b5/0x2d10
[  503.454583][ T9000]  ? __pfx____sys_sendmsg+0x10/0x10
[  503.454639][ T9000]  ? __fget_files+0x2a/0x420
[  503.454664][ T9000]  ? __fget_files+0x3a6/0x420
[  503.454699][ T9000]  __x64_sys_sendmsg+0x1c3/0x2a0
[  503.454726][ T9000]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  503.454758][ T9000]  ? __pfx_ksys_write+0x10/0x10
[  503.454796][ T9000]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.454818][ T9000]  do_syscall_64+0x15f/0xf80
[  503.454841][ T9000]  ? trace_irq_disable+0x3b/0x140
[  503.454871][ T9000]  ? clear_bhb_loop+0x40/0x90
[  503.454896][ T9000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.454916][ T9000] RIP: 0033:0x7f0f4979cdd9
[  503.454934][ T9000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  503.454952][ T9000] RSP: 002b:00007f0f479f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  503.454974][ T9000] RAX: ffffffffffffffda RBX: 00007f0f49a15fa0 RCX: 00007f0f4979cdd9
[  503.454989][ T9000] RDX: 0000000020008b88 RSI: 0000200000001c00 RDI: 0000000000000004
[  503.455002][ T9000] RBP: 00007f0f479f6090 R08: 0000000000000000 R09: 0000000000000000
[  503.455015][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  503.455027][ T9000] R13: 00007f0f49a16038 R14: 00007f0f49a15fa0 R15: 00007ffcfcf0a638
[  503.455059][ T9000]  </TASK>
[  504.169604][   T37] audit: type=1326 audit(1778381787.889:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.2.874" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54b42acdd9 code=0x0
[  504.821750][ T1007] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  505.028891][ T8436] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  505.327467][ T1007] usb 4-1: config 0 has an invalid interface number: 6 but max is 0
[  505.327553][ T1007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  505.327706][ T1007] usb 4-1: config 0 has no interface number 0
[  505.329373][ T1007] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  505.329592][ T1007] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  505.425479][ T8436] usb 1-1: Using ep0 maxpacket: 16
[  505.554465][ T1007] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  505.554544][ T1007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.554588][ T1007] usb 4-1: Product: syz
[  505.554626][ T1007] usb 4-1: Manufacturer: syz
[  505.554674][ T1007] usb 4-1: SerialNumber: syz
[  505.675987][ T8436] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  505.676330][ T8436] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  505.676410][ T8436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  505.676469][ T8436] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  506.039920][ T8436] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  506.039950][ T8436] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  506.039970][ T8436] usb 1-1: Product: syz
[  506.039987][ T8436] usb 1-1: SerialNumber: syz
[  506.162115][ T8436] usb 1-1: config 0 descriptor??
[  506.162390][ T1007] usb 4-1: config 0 descriptor??
[  506.201783][ T9005] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  506.223013][ T8436] xbox_remote_probe: Unexpected endpoint_in
[  506.284383][ T1007] vmk80xx 4-1:0.6: driver 'vmk80xx' failed to auto-configure device.
[  506.303536][ T1007] vmk80xx 4-1:0.6: probe with driver vmk80xx failed with error -22
[  506.418970][ T1007] usb 4-1: USB disconnect, device number 25
[  506.607853][ T8436] usb 1-1: USB disconnect, device number 16
[  506.627513][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.883'.
[  506.818653][ T9032] loop1: detected capacity change from 0 to 256
[  506.832599][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.835281][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.836393][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.836658][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.839332][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.850793][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  506.861895][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.643452][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.659678][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.680639][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.695939][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.706394][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.710164][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.713215][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.720338][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.720694][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.721380][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.723111][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.727434][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.730750][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.731134][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.731716][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.732026][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.732238][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.732484][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.732644][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.732897][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.733070][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.733411][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.735159][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.896710][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.918521][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.920955][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.921907][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.927394][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.929257][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.933671][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  507.991553][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.025881][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.026287][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.026815][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.058323][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.065214][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.067438][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.072213][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.093903][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.097585][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.101446][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.112347][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.114314][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.119288][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.125961][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.140153][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.152168][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.155227][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.164078][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.169126][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.195069][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.218279][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.224734][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  508.226992][ T9032] FAT-fs (loop1): Directory bread(block 64) failed
[  508.227095][ T9032] FAT-fs (loop1): Directory bread(block 65) failed
[  508.227397][ T9032] FAT-fs (loop1): Directory bread(block 66) failed
[  508.227468][ T9032] FAT-fs (loop1): Directory bread(block 67) failed
[  508.227748][ T9032] FAT-fs (loop1): Directory bread(block 68) failed
[  508.227815][ T9032] FAT-fs (loop1): Directory bread(block 69) failed
[  508.228098][ T9032] FAT-fs (loop1): Directory bread(block 70) failed
[  508.228164][ T9032] FAT-fs (loop1): Directory bread(block 71) failed
[  508.250712][ T9032] FAT-fs (loop1): Directory bread(block 72) failed
[  508.250801][ T9032] FAT-fs (loop1): Directory bread(block 73) failed
[  508.361943][   T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  508.589882][ T9046] loop2: detected capacity change from 0 to 64
[  508.606243][ T9046] hfs: Unknown parameter './file2'
[  508.606611][ T9046] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  508.723411][ T9050] loop4: detected capacity change from 0 to 64
[  508.753382][ T1031] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.761891][ T1031] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.763463][ T1031] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.768350][ T1031] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.795025][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.795061][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.795086][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.795109][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.795131][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.821101][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.856566][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.856612][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.863570][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.880387][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.888779][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.888829][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.888853][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.888877][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  508.895853][ T3401] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  508.940651][  T164] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  509.263775][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.885'.
[  509.594358][ T9054] can: request_module (can-proto-3) failed.
[  509.851808][   T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  509.851890][   T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  509.910735][   T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  509.911545][  T164] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  509.911610][  T164] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  509.912074][   T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  509.913009][   T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  509.916984][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  510.079428][   T13] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  510.094022][   T44] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  510.145658][ T5615] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  510.190757][ T5893] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  510.191748][   T32] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  510.346391][ T5893] usb 1-1: Using ep0 maxpacket: 32
[  510.349531][ T5893] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024
[  510.349562][ T5893] usb 1-1: config 1 interface 0 has no altsetting 0
[  510.351588][   T32] usb 4-1: config 0 has an invalid interface number: 6 but max is 0
[  510.351613][   T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  510.351632][   T32] usb 4-1: config 0 has no interface number 0
[  510.351830][   T32] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  510.351858][   T32] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  510.369340][   T32] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  510.374015][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.374047][   T32] usb 4-1: Product: syz
[  510.374104][   T32] usb 4-1: Manufacturer: syz
[  510.377784][   T32] usb 4-1: SerialNumber: syz
[  510.398717][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  510.398782][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.398961][ T5893] usb 1-1: Product: à ‰
[  510.398976][ T5893] usb 1-1: SerialNumber: ã°�
[  510.518676][   T32] usb 4-1: config 0 descriptor??
[  510.519404][ T9067] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  510.551501][ T9063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  510.636148][ T9088] loop4: detected capacity change from 0 to 2048
[  510.637427][ T9088] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  510.866450][   T32] vmk80xx 4-1:0.6: driver 'vmk80xx' failed to auto-configure device.
[  510.868154][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.896961][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.938764][ T5893] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[  510.944407][   T32] vmk80xx 4-1:0.6: probe with driver vmk80xx failed with error -22
[  510.972905][ T9095] loop4: detected capacity change from 0 to 764
[  511.010348][ T5893] usb 1-1: USB disconnect, device number 17
[  511.030209][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.033276][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.041995][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.063404][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.094655][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.096898][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.097532][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.097568][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.098245][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.098902][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.102220][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.107939][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.111376][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.115289][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.216696][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.216729][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.216746][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.216761][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.218253][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.305021][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.305788][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.306869][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.307468][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.308217][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.308958][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.309646][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.310382][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.337930][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.367322][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.398705][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.407057][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.424976][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.496524][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.541865][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  511.542071][ T9095] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  511.894262][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  512.085782][ T9115] FAULT_INJECTION: forcing a failure.
[  512.085782][ T9115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.085818][ T9115] CPU: 0 UID: 0 PID: 9115 Comm: syz.4.913 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  512.085846][ T9115] Tainted: [L]=SOFTLOCKUP
[  512.085854][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  512.085867][ T9115] Call Trace:
[  512.085878][ T9115]  <TASK>
[  512.085887][ T9115]  dump_stack_lvl+0xe8/0x150
[  512.085917][ T9115]  should_fail_ex+0x46b/0x600
[  512.085946][ T9115]  _copy_from_user+0x2d/0xb0
[  512.085976][ T9115]  comedi_unlocked_ioctl+0x603/0x1b00
[  512.086017][ T9115]  ? kasan_quarantine_put+0xbb/0x1f0
[  512.086044][ T9115]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  512.086083][ T9115]  ? do_vfs_ioctl+0x117b/0x1540
[  512.086106][ T9115]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  512.086159][ T9115]  ? __fget_files+0x2a/0x420
[  512.086188][ T9115]  ? __fget_files+0x2a/0x420
[  512.086213][ T9115]  ? __fget_files+0x3a6/0x420
[  512.086237][ T9115]  ? __fget_files+0x2a/0x420
[  512.086266][ T9115]  ? bpf_lsm_file_ioctl+0x9/0x20
[  512.086290][ T9115]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  512.086314][ T9115]  __se_sys_ioctl+0xff/0x170
[  512.086346][ T9115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.086368][ T9115]  do_syscall_64+0x15f/0xf80
[  512.086392][ T9115]  ? trace_irq_disable+0x3b/0x140
[  512.086424][ T9115]  ? clear_bhb_loop+0x40/0x90
[  512.086449][ T9115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.086469][ T9115] RIP: 0033:0x7f0f4979cdd9
[  512.086489][ T9115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.086506][ T9115] RSP: 002b:00007f0f479f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  512.086528][ T9115] RAX: ffffffffffffffda RBX: 00007f0f49a15fa0 RCX: 00007f0f4979cdd9
[  512.086551][ T9115] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[  512.086569][ T9115] RBP: 00007f0f479f6090 R08: 0000000000000000 R09: 0000000000000000
[  512.086582][ T9115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.086595][ T9115] R13: 00007f0f49a16038 R14: 00007f0f49a15fa0 R15: 00007ffcfcf0a638
[  512.086627][ T9115]  </TASK>
[  512.368107][ T9117] FAULT_INJECTION: forcing a failure.
[  512.368107][ T9117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.368143][ T9117] CPU: 0 UID: 0 PID: 9117 Comm: syz.2.917 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  512.368171][ T9117] Tainted: [L]=SOFTLOCKUP
[  512.368178][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  512.368191][ T9117] Call Trace:
[  512.368199][ T9117]  <TASK>
[  512.368207][ T9117]  dump_stack_lvl+0xe8/0x150
[  512.368238][ T9117]  should_fail_ex+0x46b/0x600
[  512.368266][ T9117]  strncpy_from_user+0x36/0x2b0
[  512.368292][ T9117]  do_getname+0x77/0x250
[  512.368317][ T9117]  user_path_at+0x2a/0x160
[  512.368348][ T9117]  __se_sys_mount+0x2dc/0x420
[  512.368379][ T9117]  ? __pfx___se_sys_mount+0x10/0x10
[  512.368410][ T9117]  ? __x64_sys_mount+0x20/0xc0
[  512.368435][ T9117]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.368457][ T9117]  do_syscall_64+0x15f/0xf80
[  512.368481][ T9117]  ? trace_irq_disable+0x3b/0x140
[  512.368526][ T9117]  ? clear_bhb_loop+0x40/0x90
[  512.368551][ T9117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.368571][ T9117] RIP: 0033:0x7f54b42ae04a
[  512.368590][ T9117] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.368607][ T9117] RSP: 002b:00007f54b2505e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  512.368629][ T9117] RAX: ffffffffffffffda RBX: 00007f54b2505ee0 RCX: 00007f54b42ae04a
[  512.368644][ T9117] RDX: 00002000000001c0 RSI: 0000200000000380 RDI: 0000000000000000
[  512.368658][ T9117] RBP: 00002000000001c0 R08: 00007f54b2505ee0 R09: 0000000000322020
[  512.368672][ T9117] R10: 0000000000322020 R11: 0000000000000246 R12: 0000200000000380
[  512.368686][ T9117] R13: 00007f54b2505ea0 R14: 0000000000000000 R15: 0000200000000140
[  512.368720][ T9117]  </TASK>
[  512.482730][ T5736] usb 4-1: USB disconnect, device number 26
[  513.160267][ T9134] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  513.160287][ T9134] overlayfs: missing 'lowerdir'
[  513.726259][ T9141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.922'.
[  513.996848][ T9144] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR
[  514.509601][ T9157] FAULT_INJECTION: forcing a failure.
[  514.509601][ T9157] name failslab, interval 1, probability 0, space 0, times 0
[  514.509638][ T9157] CPU: 1 UID: 0 PID: 9157 Comm: syz.2.931 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  514.509669][ T9157] Tainted: [L]=SOFTLOCKUP
[  514.509677][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  514.509689][ T9157] Call Trace:
[  514.509698][ T9157]  <TASK>
[  514.509707][ T9157]  dump_stack_lvl+0xe8/0x150
[  514.509736][ T9157]  should_fail_ex+0x46b/0x600
[  514.509766][ T9157]  should_failslab+0xa8/0x100
[  514.509801][ T9157]  kmem_cache_alloc_noprof+0x87/0x680
[  514.509830][ T9157]  ? skb_clone+0x212/0x3a0
[  514.509859][ T9157]  skb_clone+0x212/0x3a0
[  514.509881][ T9157]  ? raw6_local_deliver+0x5f5/0x960
[  514.509914][ T9157]  raw6_local_deliver+0x60b/0x960
[  514.509953][ T9157]  ? raw6_local_deliver+0x116/0x960
[  514.509991][ T9157]  ip6_protocol_deliver_rcu+0x431/0x1740
[  514.510052][ T9157]  ip6_input_finish+0x191/0x370
[  514.510089][ T9157]  NF_HOOK+0x336/0x3c0
[  514.510122][ T9157]  ? __pfx_ip6_input_finish+0x10/0x10
[  514.510153][ T9157]  ? NF_HOOK+0x9e/0x3c0
[  514.510183][ T9157]  ? __pfx_NF_HOOK+0x10/0x10
[  514.510216][ T9157]  ? __pfx_ip6_input_finish+0x10/0x10
[  514.510250][ T9157]  ? ipv6_chk_mcast_addr+0x2e/0x860
[  514.510283][ T9157]  ip6_input+0x16a/0x270
[  514.510310][ T9157]  ? ip6_input+0x23/0x270
[  514.510352][ T9157]  ip6_mc_input+0x655/0xbd0
[  514.510391][ T9157]  ? __pfx_ip6_mc_input+0x10/0x10
[  514.510427][ T9157]  ? ip6_rcv_finish+0x265/0x280
[  514.510461][ T9157]  NF_HOOK+0x336/0x3c0
[  514.510493][ T9157]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  514.510521][ T9157]  ? NF_HOOK+0x9e/0x3c0
[  514.510551][ T9157]  ? __pfx_NF_HOOK+0x10/0x10
[  514.510582][ T9157]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  514.510619][ T9157]  ? netif_receive_skb+0x102/0xbf0
[  514.510649][ T9157]  netif_receive_skb+0x278/0xbf0
[  514.510682][ T9157]  ? __pfx_netif_receive_skb+0x10/0x10
[  514.510710][ T9157]  ? rcu_is_watching+0x15/0xb0
[  514.510733][ T9157]  ? __local_bh_disable_ip+0x3c/0x420
[  514.510766][ T9157]  ? tun_rx_batched+0x191/0x760
[  514.510792][ T9157]  ? tun_rx_batched+0x191/0x760
[  514.510822][ T9157]  tun_rx_batched+0x1ee/0x760
[  514.510856][ T9157]  ? __pfx_tun_rx_batched+0x10/0x10
[  514.510893][ T9157]  ? tun_get_user+0x278d/0x4400
[  514.510922][ T9157]  ? tun_get_user+0x278d/0x4400
[  514.510953][ T9157]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  514.510981][ T9157]  ? lockdep_hardirqs_on+0x7a/0x110
[  514.511010][ T9157]  tun_get_user+0x2bd1/0x4400
[  514.511038][ T9157]  ? __pfx_snprintf+0x10/0x10
[  514.511065][ T9157]  ? tun_get_user+0x278d/0x4400
[  514.511102][ T9157]  ? __pfx_trim_netdev_trace+0x10/0x10
[  514.511126][ T9157]  ? stack_trace_save+0xa9/0x100
[  514.511156][ T9157]  ? __pfx_tun_get_user+0x10/0x10
[  514.511202][ T9157]  ? ref_tracker_alloc+0x332/0x4a0
[  514.511225][ T9157]  ? tun_get+0x157/0x2f0
[  514.511251][ T9157]  ? vfs_write+0x629/0xba0
[  514.511278][ T9157]  ? ksys_write+0x156/0x270
[  514.511306][ T9157]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  514.511341][ T9157]  ? tun_get+0x1c/0x2f0
[  514.511375][ T9157]  ? tun_get+0x1c/0x2f0
[  514.511402][ T9157]  ? tun_get+0x1c/0x2f0
[  514.511435][ T9157]  tun_chr_write_iter+0x119/0x210
[  514.511466][ T9157]  vfs_write+0x629/0xba0
[  514.511504][ T9157]  ? __pfx_vfs_write+0x10/0x10
[  514.511545][ T9157]  ? __fget_files+0x2a/0x420
[  514.511580][ T9157]  ksys_write+0x156/0x270
[  514.511613][ T9157]  ? __pfx_ksys_write+0x10/0x10
[  514.511652][ T9157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.511674][ T9157]  do_syscall_64+0x15f/0xf80
[  514.511697][ T9157]  ? trace_irq_disable+0x3b/0x140
[  514.511727][ T9157]  ? clear_bhb_loop+0x40/0x90
[  514.511753][ T9157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.511772][ T9157] RIP: 0033:0x7f54b426d60e
[  514.511791][ T9157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  514.511808][ T9157] RSP: 002b:00007f54b2505fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  514.511829][ T9157] RAX: ffffffffffffffda RBX: 00007f54b25066c0 RCX: 00007f54b426d60e
[  514.511844][ T9157] RDX: 0000000000000072 RSI: 0000200000000800 RDI: 00000000000000c8
[  514.511857][ T9157] RBP: 00007f54b2506090 R08: 0000000000000000 R09: 0000000000000000
[  514.511870][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.511882][ T9157] R13: 00007f54b4526038 R14: 00007f54b4525fa0 R15: 00007ffc84ccbb18
[  514.511915][ T9157]  </TASK>
[  514.849855][ T9161] FAULT_INJECTION: forcing a failure.
[  514.849855][ T9161] name failslab, interval 1, probability 0, space 0, times 0
[  514.849992][ T9161] CPU: 0 UID: 0 PID: 9161 Comm: syz.0.932 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  514.850060][ T9161] Tainted: [L]=SOFTLOCKUP
[  514.850079][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  514.850110][ T9161] Call Trace:
[  514.850130][ T9161]  <TASK>
[  514.850150][ T9161]  dump_stack_lvl+0xe8/0x150
[  514.850231][ T9161]  should_fail_ex+0x46b/0x600
[  514.850308][ T9161]  should_failslab+0xa8/0x100
[  514.850391][ T9161]  __kmalloc_noprof+0xdf/0x7b0
[  514.850480][ T9161]  ? tomoyo_encode+0x28b/0x550
[  514.850558][ T9161]  tomoyo_encode+0x28b/0x550
[  514.850584][ T9161]  tomoyo_realpath_from_path+0x58d/0x5d0
[  514.850682][ T9161]  tomoyo_check_open_permission+0x229/0x470
[  514.850757][ T9161]  ? tomoyo_check_open_permission+0x1d3/0x470
[  514.850830][ T9161]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  514.850893][ T9161]  ? __asan_memset+0x22/0x50
[  514.851018][ T9161]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  514.851110][ T9161]  ? tomoyo_file_open+0x166/0x220
[  514.851181][ T9161]  security_file_open+0xa9/0x240
[  514.851248][ T9161]  do_dentry_open+0x4c0/0x13e0
[  514.851315][ T9161]  ? vfs_open+0x31/0x350
[  514.851381][ T9161]  vfs_open+0x3b/0x350
[  514.851436][ T9161]  ? path_openat+0x2e2b/0x38a0
[  514.851519][ T9161]  path_openat+0x2e43/0x38a0
[  514.851676][ T9161]  ? __pfx_path_openat+0x10/0x10
[  514.851765][ T9161]  ? kasan_save_track+0x4f/0x80
[  514.851830][ T9161]  ? kasan_save_track+0x3e/0x80
[  514.851893][ T9161]  ? __kasan_slab_alloc+0x6c/0x80
[  514.851942][ T9161]  ? kmem_cache_alloc_noprof+0x33b/0x680
[  514.852021][ T9161]  ? do_raw_spin_lock+0x12b/0x2f0
[  514.852133][ T9161]  do_file_open+0x23e/0x4a0
[  514.852208][ T9161]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  514.852282][ T9161]  ? __pfx_do_file_open+0x10/0x10
[  514.852346][ T9161]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  514.852471][ T9161]  ? alloc_fd+0x64e/0x6c0
[  514.852569][ T9161]  do_sys_openat2+0x113/0x200
[  514.852640][ T9161]  ? __pfx_do_sys_openat2+0x10/0x10
[  514.852707][ T9161]  ? ksys_write+0x248/0x270
[  514.852784][ T9161]  ? __pfx_ksys_write+0x10/0x10
[  514.852867][ T9161]  __x64_sys_openat+0x138/0x170
[  514.852940][ T9161]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.852995][ T9161]  do_syscall_64+0x15f/0xf80
[  514.853053][ T9161]  ? trace_irq_disable+0x3b/0x140
[  514.853121][ T9161]  ? clear_bhb_loop+0x40/0x90
[  514.853187][ T9161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.853241][ T9161] RIP: 0033:0x7f4c48edcdd9
[  514.853289][ T9161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.853330][ T9161] RSP: 002b:00007f4c4712e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  514.853378][ T9161] RAX: ffffffffffffffda RBX: 00007f4c49155fa0 RCX: 00007f4c48edcdd9
[  514.853431][ T9161] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  514.853475][ T9161] RBP: 00007f4c4712e090 R08: 0000000000000000 R09: 0000000000000000
[  514.853523][ T9161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.853567][ T9161] R13: 00007f4c49156038 R14: 00007f4c49155fa0 R15: 00007fff6a0b16e8
[  514.853654][ T9161]  </TASK>
[  514.877240][ T9161] ERROR: Out of memory at tomoyo_realpath_from_path.
[  515.071456][ T9163] netlink: 'syz.0.932': attribute type 30 has an invalid length.
[  515.418004][ T9157] loop2: detected capacity change from 0 to 2048
[  515.467318][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.470433][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.482337][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.495255][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.499724][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.499769][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.500479][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.503709][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.505985][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.566828][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.566874][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.566905][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.566933][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.566959][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.570112][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.597763][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.597901][ T1526] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.605803][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.647067][ T9174] loop4: detected capacity change from 0 to 16
[  515.659016][ T9174] erofs: Unknown parameter '€6'
[  515.659398][ T9174] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  515.700416][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.709053][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.709163][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.709266][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.709869][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.710458][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.748624][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.758494][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.775187][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.775230][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.775256][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827078][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827131][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827159][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827195][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827226][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827250][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827274][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827298][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827321][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827345][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827368][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827391][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827414][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.827439][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.893603][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.948934][   T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  515.988007][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  516.021266][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  516.022719][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  516.055495][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  516.078712][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  516.097029][ T9177] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  516.144760][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  516.177373][ T1169] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  516.184469][ T1526] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  516.188241][ T1169] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  516.209897][ T9181] loop4: detected capacity change from 0 to 512
[  516.239329][ T1169] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.241833][ T1169] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.257215][ T1169] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.275210][ T9176] netlink: 56 bytes leftover after parsing attributes in process `syz.3.936'.
[  516.278331][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.283796][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.302477][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.310275][ T1169] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.310402][ T1169] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.326534][  T164] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.338239][  T164] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.349310][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.349472][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.369693][  T197] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.374305][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.393732][ T9181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  516.413700][ T9181] netlink: 64 bytes leftover after parsing attributes in process `syz.4.937'.
[  516.449033][ T9181] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  516.501341][ T1526] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  516.515314][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.518553][ T5723] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  516.519062][  T197] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  516.537837][  T197] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.556107][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  516.573139][ T9183] loop3: detected capacity change from 0 to 1024
[  516.574718][   T44] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  516.577444][ T9181] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  516.577508][ T9181] ext4 filesystem being remounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  516.577835][ T9183] hfsplus: Unknown parameter '0000000000000000000000000000000000000000000000'
[  516.578095][ T9183] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  516.661261][ T9190] loop1: detected capacity change from 0 to 256
[  516.693120][ T5723] usb 1-1: Using ep0 maxpacket: 16
[  516.696946][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.713121][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.713706][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.715872][ T5723] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  516.715888][ T5723] usb 1-1: config 0 has no interface number 0
[  516.715916][ T5723] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  516.715932][ T5723] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  516.736188][ T5723] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  516.736252][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.736299][ T5723] usb 1-1: Product: syz
[  516.736335][ T5723] usb 1-1: Manufacturer: syz
[  516.736379][ T5723] usb 1-1: SerialNumber: syz
[  516.745496][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.747835][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.758180][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.763200][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.766143][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.766894][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.767734][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.776003][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.838150][ T5723] usb 1-1: config 0 descriptor??
[  516.861027][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.887555][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.889875][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.893720][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.941489][ T9185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  516.941827][ T9185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  516.994038][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  516.996543][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.011854][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.023796][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.049279][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.059547][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.068807][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.069370][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.105727][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.105775][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.106185][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.106462][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.106818][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.107073][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.108377][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.108459][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.116907][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.207849][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.209127][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.250335][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.275666][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.308271][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.310075][ T1191] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  517.338779][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.350483][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.358623][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.358924][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.359294][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.359639][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.360254][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.360462][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.377486][ T9185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  517.387371][ T9185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  517.422472][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.427258][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.428409][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.457230][ T1169] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  517.457636][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.460902][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.477736][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.498371][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.498581][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.500425][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.523500][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.528547][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  517.566713][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.567007][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.567332][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.568423][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.568728][ T1169] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.579334][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.604897][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.640174][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  517.640422][ T5723] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  517.641918][ T9190] FAT-fs (loop1): Directory bread(block 64) failed
[  517.642123][ T9190] FAT-fs (loop1): Directory bread(block 65) failed
[  517.642358][ T9190] FAT-fs (loop1): Directory bread(block 66) failed
[  517.642466][ T9190] FAT-fs (loop1): Directory bread(block 67) failed
[  517.642664][ T9190] FAT-fs (loop1): Directory bread(block 68) failed
[  517.642691][ T9190] FAT-fs (loop1): Directory bread(block 69) failed
[  517.659449][ T9190] FAT-fs (loop1): Directory bread(block 70) failed
[  517.659638][ T9190] FAT-fs (loop1): Directory bread(block 71) failed
[  517.660456][ T9190] FAT-fs (loop1): Directory bread(block 72) failed
[  517.660518][ T9190] FAT-fs (loop1): Directory bread(block 73) failed
[  517.809420][ T1191] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  518.141648][ T1526] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  518.186069][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  518.414807][   T44] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  518.744219][ T9203] loop4: detected capacity change from 0 to 256
[  518.757860][ T9203] exfat: Deprecated parameter 'utf8'
[  518.758004][ T9203] exfat: Deprecated parameter 'namecase'
[  518.758058][ T9203] exfat: Deprecated parameter 'namecase'
[  518.846200][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.847174][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.847846][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.848837][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.848866][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.848889][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.849326][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.850124][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.971295][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.971335][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.971693][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.971718][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.971741][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.972097][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.972122][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  518.972145][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.036805][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.047835][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.050195][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.069701][  T197] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.078799][  T197] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.088461][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.090142][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.113176][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.126834][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.126871][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.126898][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.146002][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.146031][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.146058][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.146083][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.223320][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.223487][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.223933][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.224246][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.240229][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.250189][ T9190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.941'.
[  519.255836][  T164] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.309791][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.324893][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.419376][ T5723] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  519.419620][ T5723] asix 1-1:0.34: probe with driver asix failed with error -71
[  519.493976][ T5723] usb 1-1: USB disconnect, device number 18
[  519.514934][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.519122][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.548407][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.550292][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.550415][ T9203] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  519.575478][   T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  519.639925][ T5999] udevd[5999]: setting mode of /dev/bus/usb/001/018 to 020664 failed: No such file or directory
[  519.640040][ T5999] udevd[5999]: setting owner of /dev/bus/usb/001/018 to uid=0, gid=0 failed: No such file or directory
[  519.703554][ T1526] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  519.752885][ T3401] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  519.754577][ T1526] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  519.796687][ T5615] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  520.669956][ T9223] loop3: detected capacity change from 0 to 2048
[  520.934923][ T1191] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  520.950841][   T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  520.959625][ T9223] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096)
[  520.961701][ T9223] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  521.259335][   T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  521.438799][  T164] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  521.500677][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  521.558224][ T9231] loop4: detected capacity change from 0 to 512
[  521.560069][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.576767][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.577018][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.582123][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.582276][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.630534][ T9231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  521.654569][ T9231] netlink: 64 bytes leftover after parsing attributes in process `syz.4.952'.
[  521.684875][  T164] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  521.685809][  T164] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.687422][  T164] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  521.702722][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.705457][  T164] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.733328][ T1328] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.737443][   T44] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  521.751717][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.758120][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.772071][ T1328] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.781238][ T9231] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  521.781307][ T9231] ext4 filesystem being remounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  521.797081][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.814727][  T164] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.853806][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.858488][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  521.904020][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.918707][   T44] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  521.924943][   T44] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  521.975978][ T9217] loop1: detected capacity change from 0 to 32768
[  521.988513][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  521.988777][ T9217] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.949 (9217)
[  522.012903][ T5617] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  522.036099][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.040325][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.058701][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.059343][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.062497][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.064167][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.071758][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.113976][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.117590][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.136702][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.153909][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.156383][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.156978][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.157534][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.158238][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.236824][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.237122][ T9217] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  522.237167][ T9217] BTRFS info (device loop1): using sha256 checksum algorithm
[  522.242090][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.260029][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.280463][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.282749][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.306589][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.320350][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.336437][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.348053][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.373231][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.384255][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.399483][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.419300][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.422329][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.440151][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.441406][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.457490][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.474799][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.477815][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.519474][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.540096][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.548709][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.548765][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.548802][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.592140][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.604288][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.666412][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.716451][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.719843][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.737049][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.781987][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.783627][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  522.791075][ T9261] binder: 9259:9261 unknown command 1847616617
[  522.791092][ T9261] binder: 9259:9261 ioctl c0306201 200000000080 returned -22
[  522.826564][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  523.041144][ T9267] FAULT_INJECTION: forcing a failure.
[  523.041144][ T9267] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  523.041180][ T9267] CPU: 1 UID: 0 PID: 9267 Comm: syz.2.962 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  523.041207][ T9267] Tainted: [L]=SOFTLOCKUP
[  523.041215][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  523.041228][ T9267] Call Trace:
[  523.041236][ T9267]  <TASK>
[  523.041246][ T9267]  dump_stack_lvl+0xe8/0x150
[  523.041276][ T9267]  should_fail_ex+0x46b/0x600
[  523.041306][ T9267]  _copy_to_user+0x31/0xb0
[  523.041338][ T9267]  simple_read_from_buffer+0xe1/0x170
[  523.041368][ T9267]  proc_fail_nth_read+0x1be/0x230
[  523.041398][ T9267]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  523.041428][ T9267]  ? rw_verify_area+0x2ac/0x4e0
[  523.041458][ T9267]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  523.041486][ T9267]  vfs_read+0x212/0xa80
[  523.041523][ T9267]  ? __pfx_vfs_read+0x10/0x10
[  523.041554][ T9267]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  523.041589][ T9267]  ? lockdep_hardirqs_on+0x7a/0x110
[  523.041613][ T9267]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  523.041638][ T9267]  ? mutex_lock_nested+0x152/0x1d0
[  523.041668][ T9267]  ? fdget_pos+0x252/0x320
[  523.041703][ T9267]  ksys_read+0x156/0x270
[  523.041734][ T9267]  ? __pfx_ksys_read+0x10/0x10
[  523.041772][ T9267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.041800][ T9267]  do_syscall_64+0x15f/0xf80
[  523.041823][ T9267]  ? trace_irq_disable+0x3b/0x140
[  523.041855][ T9267]  ? clear_bhb_loop+0x40/0x90
[  523.041879][ T9267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.041899][ T9267] RIP: 0033:0x7f54b426d60e
[  523.041916][ T9267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  523.041933][ T9267] RSP: 002b:00007f54b2505fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  523.041953][ T9267] RAX: ffffffffffffffda RBX: 00007f54b25066c0 RCX: 00007f54b426d60e
[  523.041968][ T9267] RDX: 000000000000000f RSI: 00007f54b25060a0 RDI: 0000000000000004
[  523.041981][ T9267] RBP: 00007f54b2506090 R08: 0000000000000000 R09: 0000000000000000
[  523.041993][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  523.042006][ T9267] R13: 00007f54b4526038 R14: 00007f54b4525fa0 R15: 00007ffc84ccbb18
[  523.042037][ T9267]  </TASK>
[  523.110735][ T5723] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  523.270979][ T5723] usb 4-1: Using ep0 maxpacket: 32
[  523.299027][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 91, changing to 10
[  523.299151][ T5723] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  523.299211][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.362411][ T5723] usb 4-1: config 0 descriptor??
[  523.392754][ T5723] hub 4-1:0.0: USB hub found
[  523.619061][ T9217] BTRFS error (device loop1): open_ctree failed: -4
[  523.813012][ T9271] loop3: detected capacity change from 0 to 128
[  523.814276][ T1328] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  523.873120][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  523.873217][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  523.873243][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  523.873267][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  523.873290][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  523.873590][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  523.873620][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  523.950202][ T5716] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  524.093135][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.094474][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.142126][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.160151][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.173695][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.174781][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.175765][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.176422][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.284596][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.285252][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.285949][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.310871][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.313915][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.314592][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.342788][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.352654][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.352811][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.368951][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.405729][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.406609][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.493258][   T13] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  524.762544][ T5723] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  524.787004][ T5723] usbhid 4-1:0.0: can't add hid device: -71
[  524.787078][ T5723] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  524.943483][ T5723] usb 4-1: USB disconnect, device number 27
[  525.225989][ T5619] Bluetooth: hci1: unexpected event for opcode 0x1009
[  525.393733][ T9296] loop4: detected capacity change from 0 to 1024
[  525.428266][ T5835] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  525.431151][ T1328] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  525.431341][ T1328] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  525.431426][ T9296] hfsplus: wrong filesystem version
[  525.431989][ T9296] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  525.722393][ T9305] loop2: detected capacity change from 0 to 512
[  525.727874][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.729687][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.757268][ T1328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.757338][ T1328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.759640][ T1328] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  525.759699][ T1328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.759726][ T1328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.765340][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.826381][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.830430][ T9310] loop1: detected capacity change from 0 to 512
[  525.854241][ T1328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.858426][ T9305] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.976: corrupted in-inode xattr: invalid ea_ino
[  525.858455][ T9305] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  525.865569][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  525.865588][    C0] EXT4-fs (loop2): initial error at time 1778381809: ext4_iget_extra_inode:5128: inode 15
[  525.865617][    C0] EXT4-fs (loop2): last error at time 1778381809: ext4_iget_extra_inode:5128: inode 15
[  525.866472][ T1328] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  525.899284][ T9305] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.976: couldn't read orphan inode 15 (err -117)
[  525.899339][ T9305] loop2: lost filesystem error report for type 5 error -117
[  525.900872][ T8436] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  525.921900][ T3401] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  525.933605][ T9305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.962144][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.972217][ T1191] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  525.975785][ T9305] FAULT_INJECTION: forcing a failure.
[  525.975785][ T9305] name failslab, interval 1, probability 0, space 0, times 0
[  525.975863][ T9305] CPU: 0 UID: 0 PID: 9305 Comm: syz.2.976 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  525.975931][ T9305] Tainted: [L]=SOFTLOCKUP
[  525.975950][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  525.975986][ T9305] Call Trace:
[  525.976006][ T9305]  <TASK>
[  525.976026][ T9305]  dump_stack_lvl+0xe8/0x150
[  525.976102][ T9305]  should_fail_ex+0x46b/0x600
[  525.976168][ T9305]  should_failslab+0xa8/0x100
[  525.976200][ T9305]  __kmalloc_noprof+0xdf/0x7b0
[  525.976232][ T9305]  ? __d_alloc+0xbf/0x6f0
[  525.976297][ T9305]  __d_alloc+0xbf/0x6f0
[  525.976387][ T9305]  d_alloc_parallel+0xe6/0x1610
[  525.976464][ T9305]  ? __d_lookup+0x66/0x780
[  525.976548][ T9305]  ? __d_lookup+0x66/0x780
[  525.976659][ T9305]  ? __d_lookup+0x66/0x780
[  525.976773][ T9305]  ? __pfx_d_alloc_parallel+0x10/0x10
[  525.976848][ T9305]  ? d_lookup+0x1f/0xc0
[  525.976936][ T9305]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  525.977027][ T9305]  path_openat+0xcc3/0x38a0
[  525.977193][ T9305]  ? __pfx_path_openat+0x10/0x10
[  525.977309][ T9305]  ? do_raw_spin_lock+0x12b/0x2f0
[  525.977419][ T9305]  do_file_open+0x23e/0x4a0
[  525.977493][ T9305]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  525.977569][ T9305]  ? __pfx_do_file_open+0x10/0x10
[  525.977639][ T9305]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  525.977744][ T9305]  ? alloc_fd+0x64e/0x6c0
[  525.977833][ T9305]  do_sys_openat2+0x113/0x200
[  525.977907][ T9305]  ? __pfx_do_sys_openat2+0x10/0x10
[  525.977974][ T9305]  ? ksys_write+0x248/0x270
[  525.978084][ T9305]  ? __pfx_ksys_write+0x10/0x10
[  525.978169][ T9305]  __x64_sys_openat+0x138/0x170
[  525.978238][ T9305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.978295][ T9305]  do_syscall_64+0x15f/0xf80
[  525.978356][ T9305]  ? trace_irq_disable+0x3b/0x140
[  525.978433][ T9305]  ? clear_bhb_loop+0x40/0x90
[  525.978493][ T9305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.978541][ T9305] RIP: 0033:0x7f54b42acdd9
[  525.978599][ T9305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  525.978639][ T9305] RSP: 002b:00007f54b2506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  525.978695][ T9305] RAX: ffffffffffffffda RBX: 00007f54b4525fa0 RCX: 00007f54b42acdd9
[  525.978734][ T9305] RDX: 000000000000a442 RSI: 0000200000000f40 RDI: ffffffffffffff9c
[  525.978765][ T9305] RBP: 00007f54b2506090 R08: 0000000000000000 R09: 0000000000000000
[  525.978801][ T9305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  525.978831][ T9305] R13: 00007f54b4526038 R14: 00007f54b4525fa0 R15: 00007ffc84ccbb18
[  525.978895][ T9305]  </TASK>
[  525.983277][ T1328] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  526.008804][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.015794][  T197] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  526.015925][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.057288][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.068852][  T164] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  526.068979][  T164] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.076992][ T8436] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.077103][ T8436] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  526.106463][ T8436] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  526.106534][ T8436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.106589][ T8436] usb 5-1: Product: syz
[  526.106625][ T8436] usb 5-1: Manufacturer: syz
[  526.106655][ T8436] usb 5-1: SerialNumber: syz
[  526.126291][   T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1
[  526.166701][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.170860][ T5723] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  526.197616][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.197780][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.197880][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.229427][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.239368][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.246271][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.272602][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.290423][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.332088][ T5723] usb 4-1: Using ep0 maxpacket: 16
[  526.349871][ T5723] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  526.349963][ T5723] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  526.350037][ T5723] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  526.350084][ T5723] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  526.350130][ T5723] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  526.350178][ T5723] usb 4-1: config 0 has no interface number 0
[  526.350278][ T5723] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  526.350356][ T5723] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  526.350421][ T5723] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  526.350512][ T5723] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  526.353875][ T5723] usb 4-1: config 0 interface 125 has no altsetting 0
[  526.353948][ T5723] usb 4-1: config 0 interface 125 has no altsetting 2
[  526.396884][ T5723] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  526.396958][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.397025][ T5723] usb 4-1: Product: syz
[  526.397062][ T5723] usb 4-1: Manufacturer: syz
[  526.397117][ T5723] usb 4-1: SerialNumber: syz
[  526.620496][ T9310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  526.648984][ T9310] netlink: 64 bytes leftover after parsing attributes in process `syz.1.978'.
[  526.660413][ T5723] usb 4-1: config 0 descriptor??
[  526.699526][ T5723] usb 4-1: selecting invalid altsetting 2
[  526.727180][ T1526] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  526.730773][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.731155][ T1526] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  526.742220][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.760154][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.772326][ T1526] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  526.786560][   T13] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1
[  526.852654][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  526.854744][ T9310] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  526.854903][ T9310] ext4 filesystem being remounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  526.898485][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  527.122111][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.171826][ T3401] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  527.189148][ T1526] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  527.208050][ T5615] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  527.783799][ T8436] cdc_ncm 5-1:1.0: bind() failure
[  527.813129][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.813758][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  528.084909][ T9342] loop1: detected capacity change from 0 to 1024
[  528.282574][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.413700][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.447849][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.448264][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.509245][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.521250][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.533297][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.533484][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.533662][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.533819][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.598430][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.599579][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.619800][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.630188][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.640004][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.641348][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.641383][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.641407][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.674935][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.674972][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.674997][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.675021][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.675045][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.675068][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.675092][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.675123][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.678018][ T8436] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  528.678132][ T8436] cdc_ncm 5-1:1.1: bind() failure
[  528.692694][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.692732][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.692757][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.692781][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.692805][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.692829][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.692852][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.692876][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.694658][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.694690][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.694714][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.694737][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.694766][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.694790][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.694813][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.694837][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  528.705321][ T1526] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.094707][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.118773][ T5893] usb 4-1: USB disconnect, device number 28
[  529.148098][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.165871][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.206001][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.224081][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.227415][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.227539][ T9326] loop4: detected capacity change from 0 to 256
[  529.228398][ T9326] vfat: Unknown parameter '9'
[  529.228759][ T9326] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  529.229637][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.262359][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.279733][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.293926][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.298030][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.328161][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.343565][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.344206][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  529.365450][   T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.370399][   T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.390523][  T197] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.395424][ T1191] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  529.436197][ T9351] Unsupported ieee802154 address type: 0
[  529.587706][ T5716] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  529.778467][ T5619] Bluetooth: hci2: unexpected event for opcode 0x1009
[  530.380031][ T5628] usb 5-1: USB disconnect, device number 19
[  530.937252][ T9372] loop3: detected capacity change from 0 to 256
[  530.973857][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  530.977334][   T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  530.978075][   T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  530.980313][   T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.021107][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.022552][ T1526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.024781][ T1526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.025362][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.026210][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.028837][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.046428][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.046486][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.056010][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.058628][ T9373] loop4: detected capacity change from 0 to 512
[  531.065577][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.065712][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.065771][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.065797][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.065822][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.065848][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.065873][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.069584][   T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.208750][ T9367] loop1: detected capacity change from 0 to 131072
[  531.214805][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.235043][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  531.236409][ T3401] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.236478][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.236516][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  531.237901][ T9367] F2FS-fs (loop1): Test dummy encryption mode enabled
[  531.238317][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  531.240653][ T9367] F2FS-fs (loop1): invalid crc value
[  531.247562][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  531.248518][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  531.248793][ T9367] F2FS-fs (loop1): invalid crc value
[  531.248876][ T9367] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  531.248954][ T9367] INFO: trying to register non-static key.
[  531.248975][ T9367] The code is fine but needs lockdep annotation, or maybe
[  531.248999][ T9367] you didn't initialize this object before use?
[  531.249018][ T9367] turning off the locking correctness validator.
[  531.249064][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.1.1003 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  531.249141][ T9367] Tainted: [L]=SOFTLOCKUP
[  531.249159][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  531.249203][ T9367] Call Trace:
[  531.249222][ T9367]  <TASK>
[  531.249257][ T9367]  dump_stack_lvl+0xe8/0x150
[  531.249349][ T9367]  assign_lock_key+0x133/0x150
[  531.249421][ T9367]  register_lock_class+0xcc/0x2e0
[  531.249484][ T9367]  __lock_acquire+0xad/0x2d10
[  531.249538][ T9367]  ? rtlock_slowlock_locked+0xfb/0x3c80
[  531.249592][ T9367]  ? __lock_acquire+0x6b5/0x2d10
[  531.249656][ T9367]  ? __lock_acquire+0x6b5/0x2d10
[  531.249714][ T9367]  ? f2fs_exist_written_data+0x53/0x90
[  531.249789][ T9367]  lock_acquire+0x106/0x350
[  531.249843][ T9367]  ? f2fs_exist_written_data+0x53/0x90
[  531.249926][ T9367]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[  531.249983][ T9367]  rt_spin_lock+0x83/0x400
[  531.250059][ T9367]  ? f2fs_exist_written_data+0x53/0x90
[  531.250128][ T9367]  ? __pfx_rt_spin_lock+0x10/0x10
[  531.250224][ T9367]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  531.250311][ T9367]  ? preempt_count_add+0x91/0x190
[  531.250392][ T9367]  f2fs_exist_written_data+0x53/0x90
[  531.250467][ T9367]  f2fs_drop_inode+0xda/0xbf0
[  531.250533][ T9367]  iput+0x651/0xe80
[  531.250576][ T9367]  f2fs_fill_super+0x6047/0x7850
[  531.250713][ T9367]  get_tree_bdev_flags+0x431/0x4f0
[  531.250794][ T9367]  ? __pfx_f2fs_fill_super+0x10/0x10
[  531.250891][ T9367]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  531.250988][ T9367]  vfs_get_tree+0x92/0x2a0
[  531.251069][ T9367]  do_new_mount+0x341/0xd30
[  531.251125][ T9367]  ? apparmor_capable+0x126/0x170
[  531.251211][ T9367]  ? __pfx_do_new_mount+0x10/0x10
[  531.251275][ T9367]  ? ns_capable+0x89/0xe0
[  531.251351][ T9367]  ? user_path_at+0xd4/0x160
[  531.251429][ T9367]  ? user_path_at+0xd4/0x160
[  531.251497][ T9367]  __se_sys_mount+0x31d/0x420
[  531.251617][ T9367]  ? __pfx___se_sys_mount+0x10/0x10
[  531.251719][ T9367]  ? __x64_sys_mount+0x20/0xc0
[  531.251788][ T9367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.251842][ T9367]  do_syscall_64+0x15f/0xf80
[  531.251919][ T9367]  ? trace_irq_disable+0x3b/0x140
[  531.251996][ T9367]  ? clear_bhb_loop+0x40/0x90
[  531.252053][ T9367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.252107][ T9367] RIP: 0033:0x7f0242c9e04a
[  531.252158][ T9367] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  531.252205][ T9367] RSP: 002b:00007f0240ef5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  531.252262][ T9367] RAX: ffffffffffffffda RBX: 00007f0240ef5ee0 RCX: 00007f0242c9e04a
[  531.252306][ T9367] RDX: 0000200000000000 RSI: 0000200000010600 RDI: 00007f0240ef5ea0
[  531.252345][ T9367] RBP: 0000200000000000 R08: 00007f0240ef5ee0 R09: 0000000000000010
[  531.252384][ T9367] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000010600
[  531.252421][ T9367] R13: 00007f0240ef5ea0 R14: 00000000000105a7 R15: 0000200000000180
[  531.252498][ T9367]  </TASK>
[  531.266258][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.268779][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.271209][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.271657][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.272070][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.276160][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.279749][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.280293][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.281597][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.283839][   T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.286208][ T9372] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  531.291312][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.292705][ T1526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.292962][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.301671][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.301789][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.307854][ T9373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  531.326238][ T1526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.338949][ T1526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.347267][ T1526] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  531.379002][ T9373] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  531.382583][ T9372] exFAT-fs (loop3): start_clu is invalid cluster(0x0)
[  531.416534][ T9367] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  531.951868][   T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  531.952228][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.952873][   T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  531.953500][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.956404][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.958755][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.959321][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.959992][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.960438][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.964454][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.974536][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.978007][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  531.994525][   T44] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  532.010526][ T9367] loop1: detected capacity change from 0 to 2048
[  532.013010][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.014390][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.022430][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.022502][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.022569][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.022639][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.022705][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.022759][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.022808][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.022844][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.022899][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.022954][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.023004][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.023065][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.023118][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.023155][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.023217][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.023259][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.027959][ T9373] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  532.028092][ T9373] ext4 filesystem being remounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  532.030177][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.030248][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.030303][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.030341][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.030362][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.030383][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.030403][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.030453][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.030500][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.031271][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.031432][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.031497][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.031551][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.031605][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.031643][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.031671][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.031750][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.031812][   T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  532.040707][ T1526] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.044029][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.046128][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.047688][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.053032][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.053153][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.053208][  T197] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.053813][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.054119][ T9383] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  532.056427][   T44] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  532.056604][   T44] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  532.062265][   T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  532.080089][  T197] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  532.118409][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.120648][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.120846][ T9367] syz.1.1003: attempt to access beyond end of device
[  532.120846][ T9367] loop1: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048
[  532.120902][ T9367] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[  532.442004][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.442125][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.442219][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.458296][   T12] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.488219][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.488785][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.497234][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.500779][ T1191] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.503992][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.527662][ T3401] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.535969][ T1191] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.546181][ T1526] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  532.546302][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.583738][ T1328] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.607439][   T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.623390][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  532.640109][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  532.641356][ T3401] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  532.649691][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  532.659814][ T1526] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  532.671926][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  532.673247][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.673331][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.673394][ T1526] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  532.676513][ T1191] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  532.737519][ T5998] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  532.751620][   T57] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  532.762143][ T5614] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  532.788693][ T3401] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  532.796860][ T3401] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  532.839548][ T5716] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1