last executing test programs:

3m8.005271617s ago: executing program 2 (id=142):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000020000000400000009"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f0000000780), &(0x7f00000007c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r6}, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x80001)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r5, r1, 0x0, r5}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socketpair(0x2a, 0x2, 0x9, &(0x7f00000000c0))
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x310})
ppoll(&(0x7f0000000080)=[{r7, 0x630}], 0x1, 0x0, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x20, 0x1, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10044804}, 0xeca1372a5614bd30)

3m7.866449931s ago: executing program 2 (id=144):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, 0x0, 0x0)

3m7.40670203s ago: executing program 2 (id=145):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x11000a0, 0x0, 0xfe, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000024c0)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) (async)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', 0x0, 0x18) (async)
syz_fuse_handle_req(r0, &(0x7f0000002580)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r0, &(0x7f0000004680)="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", 0x2000, &(0x7f0000006680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006740)={0x150, 0x0, 0xfffffffffffffffb, [{{0x2, 0x1, 0x6, 0x800, 0x9, 0x4, {0xfffffffffffffffd, 0x56541a38, 0x7, 0x8, 0x4, 0x1ff, 0xb28d, 0x0, 0xffff, 0x4000, 0x0, r2, r3, 0x8, 0x6}}, {0x4, 0x7, 0x2, 0x0, '.%'}}, {{0x6, 0x3, 0x5, 0x7fffffffffffffef, 0x3, 0x3, {0x5, 0x0, 0x7000, 0x6, 0x6, 0x6, 0x1000003, 0x8, 0x5e, 0x6000, 0x0, r2, r3, 0x8, 0xa}}, {0x6, 0x7, 0x7, 0x4e24, 'user_id'}}]}, 0x0, 0x0, 0x0})
getdents64(r4, &(0x7f00000068c0)=""/134, 0x86) (async)
getdents64(r4, 0x0, 0xc0) (async)
syz_fuse_handle_req(r0, &(0x7f0000006980)="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", 0x2000, &(0x7f0000008980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)={0x10, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0}) (async)
getdents(r4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00')

3m6.090708887s ago: executing program 2 (id=149):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ef)
mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x200844, &(0x7f0000000200)=ANY=[@ANYBLOB='nr_inodes=t,gid=', @ANYRESHEX=0xee01])
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x8c6, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8no}, {@numtail}, {@fat=@check_strict}, {@shortname_win95}, {@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@utf8}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@shortname_mixed}, {@rodir}, {@utf8}, {@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x1, 0x296, &(0x7f0000000440)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000700)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000000740)=""/184, 0xb8)
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x200000, &(0x7f0000000880)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000008c0)="$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")
r2 = inotify_init1(0x80000)
inotify_add_watch(r2, &(0x7f0000000c80)='.\x00', 0x1000401)
getdents(r0, &(0x7f0000000cc0)=""/184, 0xb8)
openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x2c41, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x42, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file2\x00', 0x1000)
r3 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000dc0)='task\x00')
syz_read_part_table(0x4072, &(0x7f0000000e00)="$eJzszz1KK2EUBuA3yZ3rKIEgaCWIwcJOxs5qdpFesgYrCxVnJ5biAtyHe7DUJYwMMtFBLQNBnqc4nPO9fH9hs731TblaGiV5Wj7uJjmap6mqj/Bfn29/7q7OUuyU40yTXH4/fPGw1rcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbZutLPx4kN0ma56uTfi678r8ry4M013XOp0m5P0vuJinqw1H2kvnpD3dMkpckoySvSRaz9X0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhLLobj7XAc/xZ07o/T1MUqbdv2nd05JgAABoEY+GMN1iQmwQLsdwaSXmdf8uv6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDmQAAAAAhPlb59F+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmwIAAP//k10WsQ==")
fchdir(r4)
mount(0x0, &(0x7f0000004e80)='.\x00', &(0x7f0000004ec0)='proc\x00', 0x0, 0x0)
syz_open_procfs$namespace(r3, &(0x7f0000004f00)='ns/pid_for_children\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r5, &(0x7f0000000180)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff000000", 0x2f)

3m4.416399461s ago: executing program 2 (id=152):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff)
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(r2, 0x1, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, 0x0, 0x20004056)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1806000056701f5000000000b10000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152}, 0x94)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x2)
readv(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001180)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe56, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

3m3.350733442s ago: executing program 2 (id=155):
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6)
r3 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f00000008c0)='key_or_keyring\x00Z\t\xd1<gQ\xe7A\x06\\jS\x9b\x00\x00\x00\x00\x00\x00\x00\x00\xbb50A\x86\xef\xceq\xd2\x00\xce\x80\xb5\x9d\x9fp\xb4\x0f\x82\xdc8{{p\a\xbe\x01\xe9\xfa%\xb8O\x80[\n+\x9c\xee\xc1\xbc\xad\xd05fYHt\xefo\x91\x17\x9d\x19\x8b\x14\xc2M\b\xfen\xf0\b\x9e6G\\B\xdf\xf6\xbe\x18\xe9B\xafbO\xb4\x95\x01\xb0\xca\x16')
socket$netlink(0x10, 0x3, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='fd/3\x00')
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000b40)={0x80000011})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000b80)={0x1a})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @jmp={0x5, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x63, &(0x7f0000000200)=""/99, 0x61900, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x6, 0x9dc, 0x5d}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'syz_tun\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000700)=ANY=[@ANYBLOB="b7020000000000007b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r9, r8, 0x25, 0x0, @void}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r10, 0x0, 0x0, 0x10fff9)
lseek(r10, 0x0, 0x3)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r8, r6, 0x3a, 0x2019, 0xffffffffffffffff, @value=r10}, 0x20)
syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x163)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f0000000580), 0x4)
write$binfmt_misc(r10, &(0x7f0000000580), 0x0)

3m2.519004219s ago: executing program 32 (id=155):
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6)
r3 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f00000008c0)='key_or_keyring\x00Z\t\xd1<gQ\xe7A\x06\\jS\x9b\x00\x00\x00\x00\x00\x00\x00\x00\xbb50A\x86\xef\xceq\xd2\x00\xce\x80\xb5\x9d\x9fp\xb4\x0f\x82\xdc8{{p\a\xbe\x01\xe9\xfa%\xb8O\x80[\n+\x9c\xee\xc1\xbc\xad\xd05fYHt\xefo\x91\x17\x9d\x19\x8b\x14\xc2M\b\xfen\xf0\b\x9e6G\\B\xdf\xf6\xbe\x18\xe9B\xafbO\xb4\x95\x01\xb0\xca\x16')
socket$netlink(0x10, 0x3, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='fd/3\x00')
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000b40)={0x80000011})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000b80)={0x1a})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @jmp={0x5, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x63, &(0x7f0000000200)=""/99, 0x61900, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x6, 0x9dc, 0x5d}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'syz_tun\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000700)=ANY=[@ANYBLOB="b7020000000000007b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r9, r8, 0x25, 0x0, @void}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r10, 0x0, 0x0, 0x10fff9)
lseek(r10, 0x0, 0x3)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r8, r6, 0x3a, 0x2019, 0xffffffffffffffff, @value=r10}, 0x20)
syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x163)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f0000000580), 0x4)
write$binfmt_misc(r10, &(0x7f0000000580), 0x0)

18.124142902s ago: executing program 1 (id=742):
r0 = syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x2042)
io_setup(0x9, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

18.04596834s ago: executing program 5 (id=744):
mknod(&(0x7f0000000500)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000540)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000580)='./file0\x00', 0x1, 0x27)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x20000000000006)
r2 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
tee(r2, r3, 0x1, 0x0)

17.95480091s ago: executing program 1 (id=745):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r0, 0x83000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000100)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x34b5b}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd, 0x0, 0x4}}}}}]}}]}}, 0x0)
gettid()
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000940), 0xf0302, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c050895012930"], 0x0}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x4000000)

17.886579357s ago: executing program 5 (id=747):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x501800, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r1, 0x303, 0x8004000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010)

14.68656153s ago: executing program 1 (id=753):
symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
socket(0xa, 0x3, 0x87)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000480), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000007c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001b40)={0x1, &(0x7f0000001b80)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1/../file0\x00')

14.575026372s ago: executing program 0 (id=754):
prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000010c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001140)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000011c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000001200), 0x10106, 0x2, 0x0)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0)

14.526755177s ago: executing program 5 (id=755):
syz_open_dev$usbmon(0x0, 0xcef, 0x20200)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
setns(0xc9, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x143102)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10)
syz_open_procfs(0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000940), &(0x7f0000000980)=r4}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r4}, 0x14)
syz_emit_ethernet(0xfdef, &(0x7f0000000a00)=ANY=[], 0x0)
unshare(0x8000000)

13.53986774s ago: executing program 1 (id=757):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @local]}]}}}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', <r1=>0x0, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x20, 0x8, 0x100, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r1, 0x29, 0x84, 0x84, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})
r2 = socket(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001f00)={@private, @empty}, &(0x7f0000001f40)=0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r4)
getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x202, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x8d0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, 0x0, 0x6048004)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x8e, 0x0, 0x2}, 0x28)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000980)={'tunl0\x00', 0x0, 0x10, 0x1, 0x9, 0x7f, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0xa3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1}}}})
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001d80)={0x34, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6784}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4000}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x401}]}, 0x34}}, 0x1)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYRES32=r9, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004"], &(0x7f0000000c80)='GPL\x00', 0xa, 0x1000, &(0x7f0000000cc0)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x21, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @exit, @alu={0x4, 0x0, 0x6, 0x0, 0x2, 0x20, 0x8}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e80)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001ec0)=[{0x0, 0x1, 0x4, 0x1}], 0x10, 0xfffffd2b}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)

13.454745009s ago: executing program 4 (id=758):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x7fff)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r4, &(0x7f00000006c0)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f00000196c0)=0x80000000000003)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={0x0, 0x50}}, 0x20044084)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000019880)={0x3, 0x40})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)={0x118, 0x32, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x8, 0xe9, 0x0, 0x0, @fd}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

11.262943757s ago: executing program 3 (id=759):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000300)=ANY=[], 0x8)

11.240883569s ago: executing program 4 (id=760):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="280000002d000100020000000000000008000000", @ANYRES32], 0x28}], 0x1}, 0x0)

11.190855954s ago: executing program 5 (id=761):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8)
open(0x0, 0x200100, 0x42)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x20)
r5 = openat(0xffffffffffffff9c, 0x0, 0x302, 0x10)
write(r5, &(0x7f0000000140), 0x0)
close(r4)

11.145188699s ago: executing program 1 (id=762):
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f0000000000000000000000000000200000001027000005000000"], 0x128}}, 0x40)

9.678521832s ago: executing program 5 (id=763):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0)

8.102810286s ago: executing program 1 (id=764):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f00000003c0)={0x4000000, 0xf, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"})
mount$9p_fd(0x0, &(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000500), 0x8401, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_pidfd_open(r0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="580100001000130402000000fcdbdf2500000000000000000000000000000001e0000c7904f31c0002000300000000000000000000fffd00004e220000000000201d000000", @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d3320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000008000ffffffffffffffff00000000000000000800000000020000fdffffffffffffff0000000000000000100000000000000006000000000000000000000000000000f600000000000000000000002cbd70000000000002000109000000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d80000"], 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000600)={0x1, 0x1, 0x1, 0x0, 0x80000000}, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)

7.672665491s ago: executing program 3 (id=765):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='mountinfo\x00')
sendfile(r4, r4, 0x0, 0x2000007ff)

6.167720428s ago: executing program 3 (id=766):
setns(0xc9, 0x0)
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0xa8000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000640)={{0x0, 0x2}})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000001a40)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001b00)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0})
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001780)={{0xfffffffe, 0x0, 0x6, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x800000, 'syz1\x00', 0x0})

5.395336888s ago: executing program 4 (id=767):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1401000032000100000000000000000004015a800c00010001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c06a029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a96ae52bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebdd"], 0x114}], 0x1}, 0x0)

5.098301369s ago: executing program 0 (id=768):
mount(&(0x7f0000000040)=@filename='mtd0\x00', 0x0, 0x0, 0x800000, 0x0)
syz_io_uring_setup(0x34b8, 0x0, 0x0, 0x0, 0x0)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000240)={0x30, 0x0})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x4a102)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
chdir(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000019500040000000000360a020000000000180100002020782500000000002020207b1a11fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

4.627971428s ago: executing program 4 (id=769):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000640)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)

4.150360518s ago: executing program 0 (id=770):
r0 = socket$packet(0x11, 0x3, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0)

4.070832046s ago: executing program 4 (id=771):
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0xffffffffffffffa5, &(0x7f0000000180)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8)
prctl$PR_SET_PTRACER(0x59616d61, r2)
symlinkat(&(0x7f0000019840)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000019880)='./file6\x00')

2.59099216s ago: executing program 0 (id=772):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_DIRENTPLUS(r3, 0x0, 0x10)
mkdirat(0xffffffffffffffff, 0x0, 0x36)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x20008000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})

2.59086686s ago: executing program 4 (id=773):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x4)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xffbd}}, 0x26)

2.347923775s ago: executing program 5 (id=774):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpgrp(0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f00000244c0)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir\x00', 0x1f7)
mount(0x0, &(0x7f0000000280)='./tracefs_dir\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0)
acct(&(0x7f0000000300)='./tracefs_dir/free_buffer\x00')

1.350188039s ago: executing program 3 (id=775):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r1=>0x0})
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan0\x00', 0x1})
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000000600)={0x11, 0x300, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)

1.230745962s ago: executing program 0 (id=776):
socket$nl_generic(0x10, 0x3, 0x10)
lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/163, 0xa3)
fsopen(&(0x7f0000000500)='proc\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000780), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x141c, 0x0, &(0x7f00000008c0), &(0x7f00000000c0), &(0x7f0000000000))
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
r4 = io_uring_setup(0x168f, &(0x7f0000000980)={0x0, 0x631d, 0x2, 0x2, 0x2d8})
io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0)
io_uring_enter(r3, 0x4118, 0x9bbf, 0x8, 0x0, 0x0)
futex(0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0xb0090199)
keyctl$clear(0x3, 0xfffffffffffffffd)

1.105948085s ago: executing program 3 (id=777):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="280000002d000100020000000000000008000000", @ANYRES32], 0x28}], 0x1}, 0x0)

206.846229ms ago: executing program 0 (id=778):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f000000a800))

0s ago: executing program 3 (id=779):
dup(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103a42, 0x32)
ftruncate(r1, 0x6000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
fallocate(r0, 0x0, 0xa20, 0x8000c64)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000)

kernel console output (not intermixed with test programs):

40427
[  122.742972][ T4714] 9pnet: Insufficient options for proto=fd
[  123.224393][ T4710] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  123.230795][ T4710] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  123.254964][ T4710] F2FS-fs (loop2): invalid crc value
[  123.330910][ T4710] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  123.344817][ T4291] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  123.555592][ T4721] loop1: detected capacity change from 0 to 32768
[  123.578385][ T4710] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  123.585606][ T4710] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  123.751460][ T4723] loop0: detected capacity change from 0 to 32768
[  123.925361][ T4291] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.010554][ T4291] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00
[  124.366879][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.427756][ T4291] usb 5-1: playback/capture sample widths do not match
[  124.727794][ T4732] attempt to access beyond end of device
[  124.727794][ T4732] loop2: rw=10241, want=53256, limit=40427
[  125.561304][ T4198] attempt to access beyond end of device
[  125.561304][ T4198] loop2: rw=2049, want=45104, limit=40427
[  125.766608][ T4737] loop3: detected capacity change from 0 to 2048
[  125.872034][ T4739] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4739]
[  127.054634][ T4291] usb 5-1: USB disconnect, device number 2
[  127.128906][ T4737] EXT4-fs (loop3): failed to initialize system zone (-117)
[  127.364261][ T4741] xt_hashlimit: size too large, truncated to 1048576
[  127.370992][ T4741] xt_hashlimit: max too large, truncated to 1048576
[  127.377730][ T4741] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  127.391728][ T4737] EXT4-fs (loop3): mount failed
[  127.576767][ T4744] loop4: detected capacity change from 0 to 32768
[  127.885109][ T4749] xt_hashlimit: size too large, truncated to 1048576
[  127.891850][ T4749] xt_hashlimit: max too large, truncated to 1048576
[  127.898627][ T4749] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  128.692006][ T4753] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.80'.
[  128.701957][ T4753] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0
[  129.803985][ T4761] netlink: 2 bytes leftover after parsing attributes in process `syz.0.92'.
[  130.575742][ T4760] device syzkaller0 entered promiscuous mode
[  130.647971][ T4760] loop3: detected capacity change from 0 to 64
[  130.798368][ T4760] netlink: 44 bytes leftover after parsing attributes in process `syz.3.93'.
[  130.817281][ T4765] 9pnet: Insufficient options for proto=fd
[  130.859370][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.867433][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.078786][ T4767] loop0: detected capacity change from 0 to 32768
[  131.652747][ T4771] loop1: detected capacity change from 0 to 32768
[  131.681436][ T4774] loop2: detected capacity change from 0 to 1024
[  132.389598][ T4774] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  132.457886][ T4774] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.524480][ T4189] hfs: node 4:3 still has 1 user(s)!
[  132.549957][ T4774] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.99: lblock 3 mapped to illegal pblock 3 (length 3)
[  132.595836][ T4774] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  132.728084][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  132.735255][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  132.760828][ T4774] EXT4-fs (loop2): This should not happen!! Data will be lost
[  132.760828][ T4774] 
[  132.783082][ T4782] EXT4-fs error (device loop2): ext4_ext_remove_space:2944: inode #15: comm syz.2.99: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  132.960465][ T4784] loop1: detected capacity change from 0 to 32768
[  133.123547][ T4786] loop3: detected capacity change from 0 to 32768
[  134.782791][ T4782] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem
[  136.249195][ T4798] loop2: detected capacity change from 0 to 4096
[  136.743926][ T4798] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  136.860987][ T4798] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  136.903729][ T4798] ntfs3: loop2: Failed to load $MFT.
[  136.995673][ T4797] exFAT-fs (loop2): invalid fs_name
[  137.000974][ T4797] exFAT-fs (loop2): failed to read boot sector
[  137.007363][ T4797] exFAT-fs (loop2): failed to recognize exfat type
[  137.021093][ T4797] FAULT_INJECTION: forcing a failure.
[  137.021093][ T4797] name failslab, interval 1, probability 0, space 0, times 1
[  137.033848][ T4797] CPU: 1 PID: 4797 Comm: syz.2.105 Not tainted syzkaller #0
[  137.041179][ T4797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  137.051313][ T4797] Call Trace:
[  137.054622][ T4797]  <TASK>
[  137.057575][ T4797]  dump_stack_lvl+0x188/0x250
[  137.062347][ T4797]  ? show_regs_print_info+0x20/0x20
[  137.067563][ T4797]  ? load_image+0x410/0x410
[  137.072116][ T4797]  ? __might_sleep+0xf0/0xf0
[  137.076736][ T4797]  ? __lock_acquire+0x7d40/0x7d40
[  137.081776][ T4797]  should_fail+0x383/0x4b0
[  137.086354][ T4797]  should_failslab+0x5/0x20
[  137.090864][ T4797]  slab_pre_alloc_hook+0x51/0xc0
[  137.095837][ T4797]  ? sockfs_init_fs_context+0xa0/0xa0
[  137.101215][ T4797]  ? sock_alloc_inode+0x17/0xb0
[  137.106071][ T4797]  kmem_cache_alloc+0x3d/0x280
[  137.110843][ T4797]  ? sockfs_init_fs_context+0xa0/0xa0
[  137.116222][ T4797]  sock_alloc_inode+0x17/0xb0
[  137.120901][ T4797]  ? sockfs_init_fs_context+0xa0/0xa0
[  137.126279][ T4797]  new_inode_pseudo+0x5f/0x210
[  137.131053][ T4797]  do_accept+0x196/0x6f0
[  137.135308][ T4797]  ? alloc_fd+0x59e/0x650
[  137.139660][ T4797]  ? __ia32_sys_listen+0x60/0x60
[  137.144609][ T4797]  ? _raw_spin_unlock+0x24/0x40
[  137.149466][ T4797]  ? alloc_fd+0x59e/0x650
[  137.153828][ T4797]  __sys_accept4+0x103/0x170
[  137.158460][ T4797]  __x64_sys_accept+0x79/0x90
[  137.163169][ T4797]  do_syscall_64+0x4c/0xa0
[  137.167598][ T4797]  ? clear_bhb_loop+0x30/0x80
[  137.172286][ T4797]  ? clear_bhb_loop+0x30/0x80
[  137.177004][ T4797]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  137.182938][ T4797] RIP: 0033:0x7fa280e87559
[  137.187381][ T4797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.207078][ T4797] RSP: 002b:00007fa27f0bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  137.215504][ T4797] RAX: ffffffffffffffda RBX: 00007fa28110e090 RCX: 00007fa280e87559
[  137.224060][ T4797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  137.232052][ T4797] RBP: 00007fa27f0bd090 R08: 0000000000000000 R09: 0000000000000000
[  137.240126][ T4797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.248118][ T4797] R13: 00007fa28110e128 R14: 00007fa28110e090 R15: 00007fff0351bf98
[  137.256123][ T4797]  </TASK>
[  137.400347][ T4802] device-mapper: table: 248:3: cache: Device size larger than cached device
[  137.414555][ T4802] device-mapper: ioctl: error adding target to table
[  137.570698][ T4807] loop0: detected capacity change from 0 to 32768
[  138.327843][ T4811] xt_hashlimit: size too large, truncated to 1048576
[  138.334628][ T4811] xt_hashlimit: max too large, truncated to 1048576
[  138.341245][ T4811] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  139.065197][ T4822] loop4: detected capacity change from 0 to 32768
[  139.247323][ T4824] loop1: detected capacity change from 0 to 32768
[  139.844940][ T4830] loop2: detected capacity change from 0 to 64
[  139.942793][ T4832] device syzkaller0 entered promiscuous mode
[  139.956246][ T4832] loop3: detected capacity change from 0 to 64
[  140.183714][ T4826] netlink: 44 bytes leftover after parsing attributes in process `syz.2.112'.
[  140.319793][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.327272][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.416975][ T4834] netlink: 44 bytes leftover after parsing attributes in process `syz.3.104'.
[  140.871040][ T4839] loop4: detected capacity change from 0 to 1024
[  140.935975][ T4839] EXT4-fs (loop4): inline encryption not supported
[  140.945631][ T4839] EXT4-fs (loop4): inline encryption not supported
[  140.952209][ T4839] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  141.091189][ T4839] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  141.357381][ T4198] hfs: node 4:3 still has 1 user(s)!
[  141.602273][ T4847] loop0: detected capacity change from 0 to 4096
[  142.332328][ T4839] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,inlinecrypt,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none.
[  142.379577][ T4839] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.405098][ T4847] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  142.507055][ T4847] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  142.517979][ T4847] ntfs3: loop0: Failed to load $MFT.
[  142.526631][ T4189] hfs: node 4:3 still has 1 user(s)!
[  142.562188][ T4853] loop1: detected capacity change from 0 to 2048
[  142.596238][ T4844] exFAT-fs (loop0): invalid fs_name
[  142.601511][ T4844] exFAT-fs (loop0): failed to read boot sector
[  142.608379][ T4844] exFAT-fs (loop0): failed to recognize exfat type
[  142.838228][ T4853] EXT4-fs (loop1): failed to initialize system zone (-117)
[  142.907815][ T4853] EXT4-fs (loop1): mount failed
[  143.821209][ T4864] loop4: detected capacity change from 0 to 32768
[  145.233290][ T4878] netlink: 68 bytes leftover after parsing attributes in process `syz.3.123'.
[  145.282575][ T4879] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.116'.
[  145.291896][ T4879] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0
[  145.398629][ T4854] loop2: detected capacity change from 0 to 32768
[  146.214799][ T4881] loop3: detected capacity change from 0 to 32768
[  146.666827][ T4887] Zero length message leads to an empty skb
[  147.321948][ T4891] device syzkaller0 entered promiscuous mode
[  147.366570][ T4891] loop1: detected capacity change from 0 to 64
[  147.475956][ T4891] netlink: 44 bytes leftover after parsing attributes in process `syz.1.128'.
[  148.572734][ T4897] loop3: detected capacity change from 0 to 16
[  148.705006][ T4897] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  148.748337][ T4897] erofs: DAX unsupported by block device. Turning off DAX.
[  148.806818][ T4897] erofs: (device loop3): mounted with root inode @ nid 36.
[  149.370758][ T4192] hfs: node 4:3 still has 1 user(s)!
[  149.446073][ T4889] loop0: detected capacity change from 0 to 40427
[  149.491102][ T4889] F2FS-fs (loop0): invalid crc value
[  149.542389][ T4889] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  149.633140][ T4911] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  149.652610][ T4913] loop1: detected capacity change from 0 to 64
[  149.686053][ T4913] hfs: unable to locate alternate MDB
[  149.707570][ T4913] hfs: continuing without an alternate MDB
[  149.770158][ T4291] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  149.849512][ T4889] F2FS-fs (loop0): Start checkpoint disabled!
[  150.014810][ T4291] usb 3-1: Using ep0 maxpacket: 16
[  150.078644][ T4918] loop1: detected capacity change from 0 to 2048
[  150.085774][ T4889] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e7
[  150.201159][ T4920] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  150.584595][ T4918] EXT4-fs (loop1): failed to initialize system zone (-117)
[  150.684075][ T4918] EXT4-fs (loop1): mount failed
[  150.936947][ T4291] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 26, changing to 8
[  150.949570][ T4291] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  150.962928][ T4291] usb 3-1: config 0 interface 0 has no altsetting 0
[  150.982107][ T4291] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  151.075733][ T4921] loop4: detected capacity change from 0 to 64
[  151.097389][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.109736][ T4291] usb 3-1: config 0 descriptor??
[  151.189896][ T4921] netlink: 44 bytes leftover after parsing attributes in process `syz.4.137'.
[  151.253185][ T4921] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.260715][ T4921] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.418934][ T4195] hfs: node 4:3 still has 1 user(s)!
[  151.655109][ T4291] usbhid 3-1:0.0: can't add hid device: -71
[  151.662802][ T4291] usbhid: probe of 3-1:0.0 failed with error -71
[  151.777096][ T4291] usb 3-1: USB disconnect, device number 3
[  152.571885][ T4944] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.135'.
[  152.581619][ T4944] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0
[  152.800340][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  153.695428][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  153.733322][ T1108] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  153.822164][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.352101][ T4965] loop4: detected capacity change from 0 to 32768
[  154.823524][ T4971] loop2: detected capacity change from 0 to 256
[  154.991428][ T4939] autofs4:pid:4939:autofs_fill_super: called with bogus options
[  155.172844][ T4974] netlink: 2 bytes leftover after parsing attributes in process `syz.0.150'.
[  155.905872][ T1108] qmi_wwan: probe of 4-1:1.0 failed with error -22
[  155.949434][ T1108] usb 4-1: USB disconnect, device number 2
[  156.116264][ T4198] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  156.176878][ T4198] FAT-fs (loop2): Filesystem has been set read-only
[  156.185112][ T4198] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  156.341169][ T4981] netlink: 2 bytes leftover after parsing attributes in process `syz.0.161'.
[  157.107242][ T4198] syz-executor (4198) used greatest stack depth: 20528 bytes left
[  157.858987][ T4393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.967078][ T4393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.018801][ T4393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.210762][ T4995] loop3: detected capacity change from 0 to 32768
[  158.223246][ T4998] x_tables: duplicate underflow at hook 1
[  158.379566][ T4992] loop4: detected capacity change from 0 to 32768
[  158.411834][ T4997] bond0: option slaves: interface -b does not exist!
[  159.010380][ T4393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.061629][ T5008] device-mapper: table: 248:4: integrity: Unknown tag size
[  159.069621][ T5008] device-mapper: ioctl: error adding target to table
[  159.244853][ T4291] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[  159.248456][ T5012] rxe_eth0 speed is unknown, defaulting to 1000
[  159.722021][ T5025] netlink: 2 bytes leftover after parsing attributes in process `syz.4.166'.
[  160.345456][ T5027] netlink: 48 bytes leftover after parsing attributes in process `syz.3.168'.
[  160.434981][ T4291] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping
[  160.444021][ T4291] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.457925][ T4291] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  160.467841][ T4291] usb 1-1: config 1 has no interface number 1
[  160.715264][ T4291] usb 1-1: string descriptor 0 read error: -22
[  160.730392][ T4291] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  160.881827][ T4291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.194332][ T4265] Bluetooth: hci4: command 0x0409 tx timeout
[  161.378722][ T5003] udc-core: couldn't find an available UDC or it's busy
[  161.398472][ T4291] usb 1-1: MIDIStreaming interface descriptor not found
[  161.417977][ T5003] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  161.438038][ T5048] bond0: option slaves: interface -b does not exist!
[  161.592904][ T5051] netlink: 120 bytes leftover after parsing attributes in process `syz.1.175'.
[  161.690136][ T5049] loop3: detected capacity change from 0 to 32768
[  161.722975][ T4291] snd-usb-audio: probe of 1-1:1.2 failed with error -16
[  161.797546][ T4291] usb 1-1: USB disconnect, device number 3
[  162.362072][ T5059] loop4: detected capacity change from 0 to 32768
[  162.927734][ T5012] chnl_net:caif_netlink_parms(): no params data found
[  163.182599][ T5075] loop3: detected capacity change from 0 to 512
[  163.404952][ T5076] loop1: detected capacity change from 0 to 32768
[  163.411788][   T21] Bluetooth: hci4: command 0x041b tx timeout
[  163.829826][ T5067] loop0: detected capacity change from 0 to 32768
[  163.802649][ T5012] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.866556][ T5012] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.875879][ T5012] device bridge_slave_0 entered promiscuous mode
[  163.996455][ T5012] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.003556][ T5012] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.071725][ T5012] device bridge_slave_1 entered promiscuous mode
[  164.145798][ T5086] loop3: detected capacity change from 0 to 128
[  164.241386][ T5086] befs: (loop3): No write support. Marking filesystem read-only
[  164.246038][ T1326] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  164.335740][ T5086] befs: (loop3): invalid magic header
[  164.349266][ T5012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.416676][ T5012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.616664][ T1326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.742591][ T1326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.885286][ T5102] FAULT_INJECTION: forcing a failure.
[  164.885286][ T5102] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  164.948504][ T1326] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  165.133292][ T5102] CPU: 0 PID: 5102 Comm: syz.4.185 Not tainted syzkaller #0
[  165.140650][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  165.150739][ T5102] Call Trace:
[  165.154053][ T5102]  <TASK>
[  165.157008][ T5102]  dump_stack_lvl+0x188/0x250
[  165.161725][ T5102]  ? show_regs_print_info+0x20/0x20
[  165.166992][ T5102]  ? load_image+0x410/0x410
[  165.171650][ T5102]  ? __lock_acquire+0x7d40/0x7d40
[  165.176723][ T5102]  should_fail+0x383/0x4b0
[  165.181189][ T5102]  _copy_from_iter+0x234/0x1160
[  165.186086][ T5102]  ? __lock_acquire+0x7d40/0x7d40
[  165.191150][ T5102]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  165.196560][ T5102]  ? __virt_addr_valid+0x3c6/0x470
[  165.201710][ T5102]  ? __phys_addr_symbol+0x2b/0x70
[  165.206778][ T5102]  ? __check_object_size+0x30c/0x410
[  165.212100][ T5102]  netlink_sendmsg+0x758/0xbe0
[  165.216905][ T5102]  ? netlink_getsockopt+0x570/0x570
[  165.222132][ T5102]  ? aa_sock_msg_perm+0x94/0x150
[  165.227120][ T5102]  ? apparmor_socket_sendmsg+0x88/0x230
[  165.232725][ T5102]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  165.238053][ T5102]  ? security_socket_sendmsg+0x7c/0xa0
[  165.243543][ T5102]  ? netlink_getsockopt+0x570/0x570
[  165.248780][ T5102]  ____sys_sendmsg+0x5be/0x8f0
[  165.253604][ T5102]  ? __sys_sendmsg_sock+0x30/0x30
[  165.258667][ T5102]  ? import_iovec+0x6f/0xa0
[  165.263229][ T5102]  ___sys_sendmsg+0x236/0x2e0
[  165.268041][ T5102]  ? __sys_sendmsg+0x290/0x290
[  165.272874][ T5102]  __se_sys_sendmsg+0x1b7/0x2a0
[  165.277763][ T5102]  ? __x64_sys_sendmsg+0x80/0x80
[  165.282914][ T5102]  ? syscall_enter_from_user_mode+0x2a/0x70
[  165.288852][ T5102]  do_syscall_64+0x4c/0xa0
[  165.293306][ T5102]  ? clear_bhb_loop+0x30/0x80
[  165.298010][ T5102]  ? clear_bhb_loop+0x30/0x80
[  165.302725][ T5102]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.308659][ T5102] RIP: 0033:0x7fb13298f559
[  165.313209][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.332840][ T5102] RSP: 002b:00007fb130be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.341458][ T5102] RAX: ffffffffffffffda RBX: 00007fb132c15fa0 RCX: 00007fb13298f559
[  165.349461][ T5102] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000003
[  165.357460][ T5102] RBP: 00007fb130be6090 R08: 0000000000000000 R09: 0000000000000000
[  165.365465][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.373460][ T5102] R13: 00007fb132c16038 R14: 00007fb132c15fa0 R15: 00007ffc0fae5ed8
[  165.381505][ T5102]  </TASK>
[  165.434699][   T21] Bluetooth: hci4: command 0x040f tx timeout
[  165.447892][ T1326] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  165.497659][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.571104][ T1326] usb 1-1: config 0 descriptor??
[  165.611873][ T5012] team0: Port device team_slave_0 added
[  165.662046][ T5112] loop4: detected capacity change from 0 to 64
[  165.718314][ T5112] hfs: filesystem is marked locked, mounting read-only.
[  165.789426][ T5012] team0: Port device team_slave_1 added
[  165.864955][ T1326] usbhid 1-1:0.0: can't add hid device: -71
[  165.871005][ T1326] usbhid: probe of 1-1:0.0 failed with error -71
[  166.041889][ T5125] loop1: detected capacity change from 0 to 32768
[  166.070131][ T5012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.077619][ T1326] usb 1-1: USB disconnect, device number 4
[  166.096306][ T5012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.122306][    C1] vkms_vblank_simulate: vblank timer overrun
[  166.188930][ T5012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.540589][ T5012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.548699][ T5012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.607200][ T5012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.514281][   T21] Bluetooth: hci4: command 0x0419 tx timeout
[  168.058307][ T5139] netlink: 200 bytes leftover after parsing attributes in process `syz.0.193'.
[  170.033789][ T5151] loop0: detected capacity change from 0 to 32768
[  170.061876][ T5012] device hsr_slave_0 entered promiscuous mode
[  170.070609][ T5154] xt_hashlimit: size too large, truncated to 1048576
[  170.077846][ T5154] xt_hashlimit: max too large, truncated to 1048576
[  170.084963][ T5154] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  170.557430][ T5012] device hsr_slave_1 entered promiscuous mode
[  170.622954][ T5012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.655409][ T5012] Cannot create hsr debugfs directory
[  170.796298][ T5159] loop4: detected capacity change from 0 to 4096
[  170.850811][ T4393] device hsr_slave_0 left promiscuous mode
[  170.868310][ T4393] device hsr_slave_1 left promiscuous mode
[  170.898120][ T5159] EXT4-fs (loop4): bad block size 16384
[  170.916433][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.924061][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.969103][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.994858][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.016735][ T4393] device bridge_slave_1 left promiscuous mode
[  171.037294][ T4393] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.103364][ T4393] device bridge_slave_0 left promiscuous mode
[  171.130665][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.350975][ T5168] loop4: detected capacity change from 0 to 32768
[  171.387421][ T4393] device veth1_macvtap left promiscuous mode
[  171.395928][ T4393] device veth0_macvtap left promiscuous mode
[  171.404571][ T4393] device veth1_vlan left promiscuous mode
[  171.417829][ T4393] device veth0_vlan left promiscuous mode
[  172.037956][ T5180] loop1: detected capacity change from 0 to 1764
[  172.710940][ T5197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.203'.
[  172.793709][ T4393] team0 (unregistering): Port device team_slave_1 removed
[  172.843094][ T4393] team0 (unregistering): Port device team_slave_0 removed
[  173.059294][ T4393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.077687][ T4393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.787526][ T4393] bond0 (unregistering): Released all slaves
[  173.910698][ T5194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.204'.
[  173.965042][ T1349] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  174.194615][ T5210] loop4: detected capacity change from 0 to 32768
[  174.550157][ T5012] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  174.582472][ T5012] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  174.621463][ T5012] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  174.678512][ T5012] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  174.691390][ T5216] xt_hashlimit: size too large, truncated to 1048576
[  174.698759][ T5216] xt_hashlimit: max too large, truncated to 1048576
[  174.705922][ T5216] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  174.714859][ T1349] usb 1-1: unable to get BOS descriptor or descriptor too short
[  174.795288][ T1349] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 75, changing to 7
[  174.851799][ T5209] loop3: detected capacity change from 0 to 4096
[  174.939161][ T5209] ntfs: (device loop3): load_attribute_list(): Cannot read attribute list since runlist is missing.
[  174.955204][ T5209] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to load attribute list attribute.
[  174.995345][ T1349] usb 1-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40
[  175.024058][ T5012] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.024470][ T5209] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  175.032596][ T1349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.076490][ T5209] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  175.125888][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  175.140921][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  175.179495][ T1349] usb 1-1: Product: syz
[  175.187387][ T5209] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  175.215591][ T5012] 8021q: adding VLAN 0 to HW filter on device team0
[  175.230694][ T1349] usb 1-1: Manufacturer: syz
[  175.267129][ T1349] usb 1-1: SerialNumber: syz
[  175.285557][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  175.309885][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  175.326664][ T5209] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  175.418420][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.425693][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.438186][ T5209] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to lookup $DATA attribute.
[  175.456164][ T1349] usb 1-1: can't set config #1, error -71
[  175.493303][ T1349] usb 1-1: USB disconnect, device number 5
[  175.504385][ T5209] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x3 as bad.  Run chkdsk.
[  175.548570][ T5209] ntfs: (device loop3): load_system_files(): Failed to load $Volume.
[  175.573603][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  175.594453][ T5209] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files.
[  175.649679][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  175.679166][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  175.721454][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.728808][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.798900][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  175.810901][ T5230] snd_dummy snd_dummy.0: control 3:0:99:syz1:6 is already present
[  176.049367][ T5234] loop1: detected capacity change from 0 to 32768
[  176.283891][ T5236] netlink: 68 bytes leftover after parsing attributes in process `syz.0.214'.
[  176.298402][ T5012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  176.309801][ T5012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  176.336221][ T5239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'.
[  176.388592][ T5239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.826206][ T5239] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.884864][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  176.893893][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  176.944901][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  176.969457][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  176.995824][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  177.029741][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.081901][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.105429][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  177.132359][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  177.203504][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.225858][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  177.244132][ T5262] capability: warning: `syz.1.217' uses deprecated v2 capabilities in a way that may be insecure
[  177.349995][ T5267] netlink: 220 bytes leftover after parsing attributes in process `syz.3.219'.
[  177.546233][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  177.553710][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  177.821571][ T5012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.449486][ T5276] loop3: detected capacity change from 0 to 4096
[  178.721196][ T5276] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  178.828427][ T5292] xt_hashlimit: size too large, truncated to 1048576
[  178.836315][ T5292] xt_hashlimit: max too large, truncated to 1048576
[  178.844240][ T5292] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  178.869955][ T5276] ntfs3: loop3: Failed to load $Extend.
[  179.119879][ T5296] loop0: detected capacity change from 0 to 512
[  179.381021][ T5301] loop1: detected capacity change from 0 to 32768
[  179.455474][ T5296] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  180.042677][ T5296] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,data_err=ignore,discard,,errors=continue. Quota mode: writeback.
[  180.058237][ T5296] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  180.218282][ T5315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.226'.
[  180.345415][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.385404][ T5296] __quota_error: 1 callbacks suppressed
[  180.385423][ T5296] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present
[  180.407508][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.416618][ T5314] autofs4:pid:5314:autofs_fill_super: called with bogus options
[  180.462776][ T5321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.230'.
[  180.484101][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.553568][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.606931][ T5012] device veth0_vlan entered promiscuous mode
[  180.636218][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.674935][ T5296] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  180.687195][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.739264][ T5012] device veth1_vlan entered promiscuous mode
[  180.764749][ T5296] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.226: Failed to acquire dquot type 1
[  180.910605][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  180.935325][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  180.962632][ T5326] loop3: detected capacity change from 0 to 2048
[  181.004769][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.038177][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.087964][ T5012] device veth0_macvtap entered promiscuous mode
[  181.108347][ T5012] device veth1_macvtap entered promiscuous mode
[  181.356532][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  182.102169][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  182.142668][ T5326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.231768][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.301272][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.361387][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.482032][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.502649][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.519722][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.531048][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.757067][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.820085][ T5012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.887153][ T5352] netlink: 68 bytes leftover after parsing attributes in process `syz.4.236'.
[  183.147230][ T5326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'.
[  183.172971][ T5347] netlink: 2 bytes leftover after parsing attributes in process `syz.1.235'.
[  183.287017][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'.
[  183.314450][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  183.369513][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  183.676172][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.175364][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.246624][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.287781][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.339964][ T5012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.371457][ T5012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.436268][ T5012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.463031][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  184.477454][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  184.513873][ T5370] netlink: 200 bytes leftover after parsing attributes in process `syz.1.242'.
[  184.535259][ T5012] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.544019][ T5012] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.610126][ T5012] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.638825][ T5012] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.896967][ T5375] loop0: detected capacity change from 0 to 4096
[  184.904337][ T4266] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  185.224407][ T4266] usb 4-1: too many configurations: 33, using maximum allowed: 8
[  185.529547][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.580491][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.606632][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  185.760095][ T5375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.243'.
[  185.815830][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.833957][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.873574][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  185.985636][ T5384] loop1: detected capacity change from 0 to 4096
[  186.037819][ T5384] ntfs: (device loop1): load_attribute_list(): Cannot read attribute list since runlist is missing.
[  186.066274][ T5388] snd_dummy snd_dummy.0: control 3:0:99:syz1:6 is already present
[  186.086165][ T5384] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to load attribute list attribute.
[  186.110644][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'.
[  186.134319][ T5384] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  186.152756][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.192874][   T26] audit: type=1326 audit(1792941136.400:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.0.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaba185559 code=0x0
[  186.224896][ T5384] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  186.267345][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.276626][ T5384] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  186.330590][ T5384] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  186.379904][ T5384] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to lookup $DATA attribute.
[  186.398383][ T5398] loop5: detected capacity change from 0 to 64
[  186.420721][ T5384] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x3 as bad.  Run chkdsk.
[  186.470647][ T5384] ntfs: (device loop1): load_system_files(): Failed to load $Volume.
[  186.694499][ T4266] usb 4-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8
[  186.703700][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.805105][ T5405] netlink: 2 bytes leftover after parsing attributes in process `syz.4.248'.
[  186.876675][ T4266] usb 4-1: Product: syz
[  187.040297][ T4266] usb 4-1: Manufacturer: syz
[  187.171784][ T4266] usb 4-1: SerialNumber: syz
[  187.470806][ T4266] usb 4-1: config 0 descriptor??
[  187.537371][ T4266] go7007-loader 4-1:0.0: can't handle multiple config
[  187.559687][ T4266] go7007-loader 4-1:0.0: probe failed
[  187.583627][ T5411] FAULT_INJECTION: forcing a failure.
[  187.583627][ T5411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.604852][ T5411] CPU: 0 PID: 5411 Comm: syz.0.250 Not tainted syzkaller #0
[  187.612241][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  187.622338][ T5411] Call Trace:
[  187.625655][ T5411]  <TASK>
[  187.628614][ T5411]  dump_stack_lvl+0x188/0x250
[  187.633360][ T5411]  ? show_regs_print_info+0x20/0x20
[  187.638597][ T5411]  ? load_image+0x410/0x410
[  187.643174][ T5411]  ? __lock_acquire+0x7d40/0x7d40
[  187.648251][ T5411]  should_fail+0x383/0x4b0
[  187.652726][ T5411]  _copy_from_user+0x2e/0x170
[  187.657439][ T5411]  __se_sys_memfd_create+0x189/0x450
[  187.662775][ T5411]  ? __x64_sys_memfd_create+0x60/0x60
[  187.668201][ T5411]  ? lockdep_hardirqs_on+0x94/0x140
[  187.673457][ T5411]  do_syscall_64+0x4c/0xa0
[  187.678010][ T5411]  ? clear_bhb_loop+0x30/0x80
[  187.682744][ T5411]  ? clear_bhb_loop+0x30/0x80
[  187.687516][ T5411]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  187.693472][ T5411] RIP: 0033:0x7fdaba185559
[  187.697945][ T5411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.717599][ T5411] RSP: 002b:00007fdab83dbe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  187.726070][ T5411] RAX: ffffffffffffffda RBX: 00000000000000c2 RCX: 00007fdaba185559
[  187.734075][ T5411] RDX: 00007fdab83dbee0 RSI: 0000000000000000 RDI: 00007fdaba21cd00
[  187.742112][ T5411] RBP: 0000200000000140 R08: 00000000ffffffff R09: 0000000000000000
[  187.750184][ T5411] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000000c0
[  187.758201][ T5411] R13: 00007fdab83dbee0 R14: 00007fdab83dbea0 R15: 0000200000000100
[  187.766262][ T5411]  </TASK>
[  187.790061][ T4264] usb 4-1: USB disconnect, device number 3
[  188.037951][ T5421] loop3: detected capacity change from 0 to 64
[  188.871174][ T5408] nvme nvme0: rdma connection establishment failed (-512)
[  189.674940][ T4266] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  189.867632][ T5445] loop3: detected capacity change from 0 to 1024
[  190.110400][ T4266] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.131034][ T4266] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  190.234498][ T4266] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  190.234560][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  190.234584][ T4266] usb 2-1: SerialNumber: syz
[  190.557699][ T4266] usb 2-1: 0:2 : does not exist
[  190.657682][ T5470] netlink: 2 bytes leftover after parsing attributes in process `syz.3.263'.
[  191.224589][ T4266] usb 2-1: USB disconnect, device number 4
[  191.354032][ T4338] Bluetooth: hci1: command 0x0406 tx timeout
[  191.388977][ T4338] Bluetooth: hci2: command 0x0406 tx timeout
[  191.414760][ T5474] FAULT_INJECTION: forcing a failure.
[  191.414760][ T5474] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  191.444832][ T5474] CPU: 0 PID: 5474 Comm: syz.1.265 Not tainted syzkaller #0
[  191.445625][ T4338] Bluetooth: hci3: command 0x0406 tx timeout
[  191.452208][ T5474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  191.452223][ T5474] Call Trace:
[  191.452232][ T5474]  <TASK>
[  191.452240][ T5474]  dump_stack_lvl+0x188/0x250
[  191.452273][ T5474]  ? show_regs_print_info+0x20/0x20
[  191.484731][ T5474]  ? load_image+0x410/0x410
[  191.489386][ T5474]  ? __lock_acquire+0x7d40/0x7d40
[  191.494462][ T5474]  should_fail+0x383/0x4b0
[  191.498920][ T5474]  _copy_from_user+0x2e/0x170
[  191.503622][ T5474]  __copy_msghdr_from_user+0xc9/0x630
[  191.509101][ T5474]  ? verify_lock_unused+0x140/0x140
[  191.514350][ T5474]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  191.519666][ T5474]  ___sys_sendmsg+0x19a/0x2e0
[  191.524453][ T5474]  ? __sys_sendmsg+0x290/0x290
[  191.529260][ T5474]  __se_sys_sendmsg+0x1b7/0x2a0
[  191.534235][ T5474]  ? __x64_sys_sendmsg+0x80/0x80
[  191.539182][ T5474]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  191.545275][ T5474]  ? lockdep_hardirqs_on+0x94/0x140
[  191.550497][ T5474]  do_syscall_64+0x4c/0xa0
[  191.554955][ T5474]  ? clear_bhb_loop+0x30/0x80
[  191.559646][ T5474]  ? clear_bhb_loop+0x30/0x80
[  191.564354][ T5474]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  191.570272][ T5474] RIP: 0033:0x7fdc4282e559
[  191.574796][ T5474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.594410][ T5474] RSP: 002b:00007fdc40a85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.602842][ T5474] RAX: ffffffffffffffda RBX: 00007fdc42ab4fa0 RCX: 00007fdc4282e559
[  191.610938][ T5474] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[  191.619009][ T5474] RBP: 00007fdc40a85090 R08: 0000000000000000 R09: 0000000000000000
[  191.627102][ T5474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.635091][ T5474] R13: 00007fdc42ab5038 R14: 00007fdc42ab4fa0 R15: 00007ffc100e40e8
[  191.643110][ T5474]  </TASK>
[  191.735478][ T4453] udevd[4453]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.839866][ T5482] FAULT_INJECTION: forcing a failure.
[  191.839866][ T5482] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  191.875202][ T5482] CPU: 0 PID: 5482 Comm: syz.0.268 Not tainted syzkaller #0
[  191.882562][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  191.892660][ T5482] Call Trace:
[  191.896031][ T5482]  <TASK>
[  191.899031][ T5482]  dump_stack_lvl+0x188/0x250
[  191.903758][ T5482]  ? show_regs_print_info+0x20/0x20
[  191.909006][ T5482]  ? load_image+0x410/0x410
[  191.913670][ T5482]  ? __lock_acquire+0x7d40/0x7d40
[  191.918020][ T5480] loop3: detected capacity change from 0 to 256
[  191.918749][ T5482]  ? alloc_pages+0x452/0x560
[  191.918786][ T5482]  should_fail+0x383/0x4b0
[  191.934069][ T5482]  _copy_from_iter+0x234/0x1160
[  191.938966][ T5482]  ? __lock_acquire+0x7d40/0x7d40
[  191.944032][ T5482]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  191.949439][ T5482]  ? __virt_addr_valid+0x3c6/0x470
[  191.954593][ T5482]  ? __check_object_size+0x30c/0x410
[  191.959931][ T5482]  skb_copy_datagram_from_iter+0xf1/0x6c0
[  191.965711][ T5482]  ? __might_sleep+0xf0/0xf0
[  191.970340][ T5482]  ? apparmor_socket_getpeersec_dgram+0x5/0x10
[  191.976541][ T5482]  ? skb_put+0x10e/0x200
[  191.980826][ T5482]  unix_stream_sendmsg+0x678/0xc90
[  191.985993][ T5482]  ? unix_show_fdinfo+0xa0/0xa0
[  191.990889][ T5482]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  191.997356][ T5482]  ? apparmor_socket_sendmsg+0x173/0x230
[  192.003066][ T5482]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  192.008389][ T5482]  ? security_socket_sendmsg+0x7c/0xa0
[  192.013880][ T5482]  ? unix_show_fdinfo+0xa0/0xa0
[  192.018758][ T5482]  ____sys_sendmsg+0x5be/0x8f0
[  192.023660][ T5482]  ? __sys_sendmsg_sock+0x30/0x30
[  192.028723][ T5482]  ? import_iovec+0x6f/0xa0
[  192.033254][ T5482]  ___sys_sendmsg+0x236/0x2e0
[  192.037956][ T5482]  ? __sys_sendmsg+0x290/0x290
[  192.042765][ T5482]  __se_sys_sendmsg+0x1b7/0x2a0
[  192.047630][ T5482]  ? __x64_sys_sendmsg+0x80/0x80
[  192.052632][ T5482]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  192.058739][ T5482]  ? lockdep_hardirqs_on+0x94/0x140
[  192.063961][ T5482]  do_syscall_64+0x4c/0xa0
[  192.068400][ T5482]  ? clear_bhb_loop+0x30/0x80
[  192.073212][ T5482]  ? clear_bhb_loop+0x30/0x80
[  192.077908][ T5482]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  192.083825][ T5482] RIP: 0033:0x7fdaba185559
[  192.088263][ T5482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.107972][ T5482] RSP: 002b:00007fdab83dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.116415][ T5482] RAX: ffffffffffffffda RBX: 00007fdaba40bfa0 RCX: 00007fdaba185559
[  192.124406][ T5482] RDX: 0000000020040054 RSI: 0000200000000580 RDI: 0000000000000003
[  192.133258][ T5482] RBP: 00007fdab83dc090 R08: 0000000000000000 R09: 0000000000000000
[  192.141255][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.149248][ T5482] R13: 00007fdaba40c038 R14: 00007fdaba40bfa0 R15: 00007fffa8160ab8
[  192.157252][ T5482]  </TASK>
[  192.198690][ T5485] device syzkaller0 entered promiscuous mode
[  192.552407][ T5491] loop1: detected capacity change from 0 to 32768
[  193.043440][ T5494] loop5: detected capacity change from 0 to 1024
[  193.500503][ T5498] loop3: detected capacity change from 0 to 2048
[  193.926580][ T5498] trusted_key: encrypted_key: insufficient parameters specified
[  194.101494][ T5498] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  194.176933][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  194.183309][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  194.225543][ T5498] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[  194.338094][ T5506] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  194.351365][ T5506] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[  195.132068][ T5532] device veth0 entered promiscuous mode
[  195.148174][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'.
[  195.186821][ T5535] syz.1.281 uses obsolete (PF_INET,SOCK_PACKET)
[  195.206744][ T5536] loop4: detected capacity change from 0 to 512
[  195.225615][ T5536] EXT4-fs (loop4): Ignoring removed oldalloc option
[  195.234339][ T4338] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  195.244551][ T5536] EXT4-fs (loop4): filesystem is read-only
[  195.284809][ T4328] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  195.293004][ T5536] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  195.325306][ T5536] EXT4-fs (loop4): filesystem is read-only
[  195.332466][ T5536] EXT4-fs (loop4): orphan cleanup on readonly fs
[  195.342476][ T5536] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.280: bg 0: block 64: padding at end of block bitmap is not set
[  195.364478][ T5536] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  195.390932][ T5536] EXT4-fs (loop4): 1 orphan inode deleted
[  195.411162][ T5536] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noauto_da_alloc,auto_da_alloc=0x0000000000000000,stripe=0x0000000000000004,bsdgroups,noblock_validity,minixdf,min_batch_time=0x0000000000000004,dioread_lock,nolazytime,oldalloc,usrquota,,errors=continue. Quota mode: writeback.
[  195.464326][ T4338] usb 4-1: device descriptor read/64, error -71
[  195.625817][ T1326] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  195.647682][ T5552] device-mapper: table: 248:6: cache: Device size larger than cached device
[  195.666797][ T5552] device-mapper: ioctl: error adding target to table
[  195.684986][ T4328] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024
[  195.711966][ T4328] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  195.750961][ T5557] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  195.774403][ T4338] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  195.885810][ T4328] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  195.931668][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.985082][ T1326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.035807][ T1326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  196.047843][ T4328] usb 1-1: Product: syz
[  196.096814][ T4328] usb 1-1: Manufacturer: syz
[  196.143533][ T1326] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  196.159151][ T4328] usb 1-1: SerialNumber: syz
[  196.348468][ T5525] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  196.495107][ T1326] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  196.515575][ T1326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.523651][ T1326] usb 2-1: Product: syz
[  196.531101][ T1326] usb 2-1: Manufacturer: syz
[  196.537313][ T1326] usb 2-1: SerialNumber: syz
[  196.596150][ T1326] cdc_ncm 2-1:1.0: skipping garbage
[  196.610102][ T1326] usb 2-1: selecting invalid altsetting 1
[  196.635055][ T4328] usb 1-1: Limiting number of CPorts to U8_MAX
[  196.660088][ T4338] usb 4-1: device descriptor read/64, error -71
[  196.785009][ T4338] usb usb4-port1: attempt power cycle
[  197.035014][ T1326] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  197.041104][ T1326] cdc_ncm 2-1:1.0: bind() failure
[  197.100360][ T5586] netlink: 68 bytes leftover after parsing attributes in process `syz.4.297'.
[  197.204248][ T4338] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  197.335308][ T4338] usb 4-1: device descriptor read/8, error -71
[  197.614612][ T4338] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  197.755473][ T4338] usb 4-1: device descriptor read/8, error -71
[  197.823350][ T5588] udc-core: couldn't find an available UDC or it's busy
[  197.849862][ T5588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  197.895413][ T4338] usb usb4-port1: unable to enumerate USB device
[  197.927634][ T1326] usb 2-1: USB disconnect, device number 5
[  198.054770][    C0] greybus greybus1: 0/0:0: error sending response 0x01: -71
[  198.235565][ T5596] loop3: detected capacity change from 0 to 32768
[  199.134417][ T4393] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x14 failed: -71
[  199.134745][ T1326] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  199.217400][ T4393] greybus 1-svc: failed to get rail count: -71
[  199.234205][    C0] greybus greybus1: 0/0:0: error sending response 0x02: -71
[  199.242520][ T4694] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x10 failed: -71
[  199.263820][ T4694] greybus 1-svc: power mode change failed on AP to switch link: -71
[  199.404294][ T1326] usb 2-1: Using ep0 maxpacket: 16
[  199.597656][ T4338] usb 1-1: USB disconnect, device number 6
[  199.614789][    C0] usb 1-1: failed to resubmit arpc in-urb: -19
[  199.621061][    C0] usb 1-1: failed to resubmit arpc in-urb: -19
[  199.644982][ T1326] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  199.668150][ T1326] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  199.695250][ T4338] usb 1-1: failed to send ARPC request 4: -19
[  199.713394][ T4338] usb 1-1: failed to execute ARPC: -19
[  199.719467][ T4338] usb 1-1: failed to flush cport 0: -19
[  199.729525][ T4338] greybus greybus1: 0/0:0: failed to flush host cport: -19
[  199.747877][ T4338] usb 1-1: failed to send ARPC request 2: -19
[  199.758646][ T4338] usb 1-1: failed to execute ARPC: -19
[  199.770330][ T5624] loop3: detected capacity change from 0 to 128
[  199.774309][ T4338] usb 1-1: failed to quiesce cport 0: -19 (0)
[  199.788717][ T1326] usb 2-1: config 0 interface 0 has no altsetting 0
[  199.794387][ T4338] greybus greybus1: 0/0:0: failed to quiesce host cport: -19
[  199.813457][ T4338] usb 1-1: failed to send ARPC request 3: -19
[  199.819765][ T4338] usb 1-1: failed to execute ARPC: -19
[  199.821808][ T1326] usb 2-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.00
[  199.834329][ T4338] usb 1-1: failed to clear cport 0: -19
[  199.846885][ T5622] xt_hashlimit: size too large, truncated to 1048576
[  199.853744][ T5622] xt_hashlimit: max too large, truncated to 1048576
[  199.861066][ T5622] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  199.870504][ T4338] greybus greybus1: 0/0:0: failed to clear host cport: -19
[  199.963313][ T1326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.982781][ T5624] EXT4-fs (loop3): Ignoring removed oldalloc option
[  199.995620][ T5624] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5
[  199.995620][ T5624] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  199.995620][ T5624] 
[  200.028400][ T1326] usb 2-1: config 0 descriptor??
[  200.048280][ T5624] EXT4-fs (loop3): Ignoring removed nobh option
[  200.066002][ T5624] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  200.119377][ T5624] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[  200.351500][ T5634] loop5: detected capacity change from 0 to 256
[  200.384378][ T1326] usbhid 2-1:0.0: can't add hid device: -71
[  200.402244][ T1326] usbhid: probe of 2-1:0.0 failed with error -71
[  200.411342][ T1326] usb 2-1: USB disconnect, device number 6
[  200.534502][ T4338] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  200.780870][ T5645] netlink: 68 bytes leftover after parsing attributes in process `syz.0.310'.
[  201.707609][ T5649] loop0: detected capacity change from 0 to 32768
[  201.824444][ T4338] usb 4-1: not running at top speed; connect to a high speed hub
[  201.874972][ T1326] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  202.514468][ T4338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  202.538377][ T4338] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  202.547586][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.615590][ T5624] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  202.636461][ T4338] cyberjack 4-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  202.645607][ T1326] usb 6-1: device descriptor read/64, error -71
[  202.694996][ T4338] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  202.798691][ T4338] usb 4-1: USB disconnect, device number 8
[  202.879169][ T4338] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  202.896295][ T4338] cyberjack 4-1:1.0: device disconnected
[  202.914968][ T1326] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  203.114951][ T1326] usb 6-1: device descriptor read/64, error -71
[  203.143305][ T5667] loop3: detected capacity change from 0 to 64
[  203.237820][ T1326] usb usb6-port1: attempt power cycle
[  203.815538][ T5672] udc-core: couldn't find an available UDC or it's busy
[  203.822599][ T5672] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  203.943465][ T5680] loop0: detected capacity change from 0 to 1024
[  204.082309][ T5685] loop5: detected capacity change from 0 to 256
[  204.242877][ T5683] loop3: detected capacity change from 0 to 32768
[  204.250471][ T4295] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  204.368534][ T5691] netlink: 68 bytes leftover after parsing attributes in process `syz.4.322'.
[  205.270505][ T4295] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 8
[  205.317066][ T4295] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  205.337953][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.404796][ T5670] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  205.465194][ T5696] device syzkaller0 entered promiscuous mode
[  205.480064][ T5700] loop0: detected capacity change from 0 to 256
[  205.490998][ T5696] loop4: detected capacity change from 0 to 64
[  205.583077][ T5696] netlink: 44 bytes leftover after parsing attributes in process `syz.4.323'.
[  205.756568][ T5703] loop5: detected capacity change from 0 to 32768
[  206.354377][ T4295] usb 2-1: string descriptor 0 read error: -71
[  206.465028][ T4295] usb 2-1: USB disconnect, device number 7
[  206.630022][ T4195] hfs: node 4:3 still has 1 user(s)!
[  206.651792][ T5717] netlink: 68 bytes leftover after parsing attributes in process `syz.1.327'.
[  206.735583][ T4515] udevd[4515]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.985377][ T5731] xt_hashlimit: size too large, truncated to 1048576
[  207.992121][ T5731] xt_hashlimit: max too large, truncated to 1048576
[  207.998821][ T5731] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  208.285000][ T5143] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  208.694356][ T5143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.695364][ T5738] loop3: detected capacity change from 0 to 32768
[  208.739093][ T5143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.796854][ T5738] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  208.806125][ T5738] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  208.894581][ T5143] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  209.058769][ T5738] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  209.122728][ T5143] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  209.161816][ T5742] xt_hashlimit: size too large, truncated to 1048576
[  209.169089][ T5742] xt_hashlimit: max too large, truncated to 1048576
[  209.180719][ T5143] usb 5-1: Manufacturer: syz
[  209.237476][ T5143] usb 5-1: config 0 descriptor??
[  209.292761][ T4338] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  209.348475][ T4338] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  209.821000][ T4338] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 472ms
[  209.973109][ T5752] netlink: 68 bytes leftover after parsing attributes in process `syz.5.334'.
[  209.984104][ T4338] gfs2: fsid=syz:syz.0: jid=0: Done
[  210.778282][ T5738] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  210.889523][ T5757] loop5: detected capacity change from 0 to 1024
[  210.979398][ T5143] input: syz Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input6
[  211.129213][ T5143] input: syz Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input7
[  211.195796][ T5143] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0
[  211.239289][ T5143] usb 5-1: USB disconnect, device number 3
[  211.740031][ T5768] FAULT_INJECTION: forcing a failure.
[  211.740031][ T5768] name failslab, interval 1, probability 0, space 0, times 0
[  211.740061][ T5768] CPU: 1 PID: 5768 Comm: syz.5.337 Not tainted syzkaller #0
[  211.740080][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  211.740091][ T5768] Call Trace:
[  211.740097][ T5768]  <TASK>
[  211.740105][ T5768]  dump_stack_lvl+0x188/0x250
[  211.740133][ T5768]  ? show_regs_print_info+0x20/0x20
[  211.740155][ T5768]  ? load_image+0x410/0x410
[  211.740181][ T5768]  ? __might_sleep+0xf0/0xf0
[  211.740203][ T5768]  ? __lock_acquire+0x7d40/0x7d40
[  211.740230][ T5768]  should_fail+0x383/0x4b0
[  211.740257][ T5768]  should_failslab+0x5/0x20
[  211.740286][ T5768]  slab_pre_alloc_hook+0x51/0xc0
[  211.740307][ T5768]  ? security_inode_alloc+0x30/0x110
[  211.740329][ T5768]  kmem_cache_alloc+0x3d/0x280
[  211.740352][ T5768]  security_inode_alloc+0x30/0x110
[  211.740374][ T5768]  inode_init_always+0x8e5/0xc90
[  211.740401][ T5768]  new_inode_pseudo+0x8e/0x210
[  211.740425][ T5768]  __sock_create+0x128/0x910
[  211.740459][ T5768]  __sys_socket+0xe2/0x170
[  211.740487][ T5768]  __x64_sys_socket+0x76/0x80
[  211.740512][ T5768]  do_syscall_64+0x4c/0xa0
[  211.740529][ T5768]  ? clear_bhb_loop+0x30/0x80
[  211.740550][ T5768]  ? clear_bhb_loop+0x30/0x80
[  211.740572][ T5768]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  211.740592][ T5768] RIP: 0033:0x7f699b42e559
[  211.740610][ T5768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.740627][ T5768] RSP: 002b:00007f6999643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  211.740651][ T5768] RAX: ffffffffffffffda RBX: 00007f699b6b5180 RCX: 00007f699b42e559
[  211.740667][ T5768] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000040000000015
[  211.740680][ T5768] RBP: 00007f699b4c5b20 R08: 0000000000000000 R09: 0000000000000000
[  211.740694][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.740707][ T5768] R13: 00007f699b6b5218 R14: 00007f699b6b5180 R15: 00007ffd1e162e18
[  211.740751][ T5768]  </TASK>
[  211.740776][ T5768] socket: no more sockets
[  211.849263][ T5775] netlink: 68 bytes leftover after parsing attributes in process `syz.1.339'.
[  212.712756][ T5762] fido_id[5762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  212.717161][ T5773] device syzkaller0 entered promiscuous mode
[  212.731952][ T5773] loop4: detected capacity change from 0 to 64
[  212.955904][ T5773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.340'.
[  213.180462][ T4195] hfs: node 4:3 still has 1 user(s)!
[  213.309032][ T5793] loop3: detected capacity change from 0 to 256
[  213.323056][ T5797] loop4: detected capacity change from 0 to 64
[  213.341500][ T5796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.346'.
[  213.367377][ T5800] loop1: detected capacity change from 0 to 512
[  213.774000][ T5809] loop3: detected capacity change from 0 to 1024
[  214.683769][ T4258] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  214.934640][ T5824] netlink: 68 bytes leftover after parsing attributes in process `syz.4.352'.
[  215.800889][ T5832] device syzkaller0 entered promiscuous mode
[  215.818316][ T5796] loop0: detected capacity change from 0 to 32768
[  215.825444][ T4258] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024
[  215.848218][ T4258] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  215.848245][ T5832] loop4: detected capacity change from 0 to 64
[  215.907793][ T5840] loop3: detected capacity change from 0 to 256
[  215.990632][ T5796] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.346 (5796)
[  216.029571][ T5832] netlink: 44 bytes leftover after parsing attributes in process `syz.4.355'.
[  216.038905][ T4258] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  216.038938][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.038959][ T4258] usb 2-1: Product: syz
[  216.038976][ T4258] usb 2-1: Manufacturer: syz
[  216.038993][ T4258] usb 2-1: SerialNumber: syz
[  216.074703][ T5805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  216.814901][ T4258] usb 2-1: Limiting number of CPorts to U8_MAX
[  216.861760][ T5796] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  216.868703][ T5852] loop5: detected capacity change from 0 to 256
[  216.897438][ T5796] BTRFS info (device loop0): setting nodatacow, compression disabled
[  216.906509][ T5796] BTRFS info (device loop0): setting datasum, datacow enabled
[  216.925710][ T5796] BTRFS info (device loop0): force clearing of disk cache
[  216.941142][ T5796] BTRFS info (device loop0): turning on sync discard
[  216.951863][ T5796] BTRFS error (device loop0): unrecognized mount option 'fragment=metadata'
[  216.973926][ T5796] BTRFS error (device loop0): open_ctree failed: -22
[  217.002373][ T4195] hfs: node 4:3 still has 1 user(s)!
[  217.172900][ T5858] binder: BINDER_SET_CONTEXT_MGR already set
[  217.349686][ T5858] binder: 5857:5858 ioctl 4018620d 200000000280 returned -16
[  217.365670][ T5859] loop3: detected capacity change from 0 to 32768
[  217.412412][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  217.412428][   T26] audit: type=1400 audit(1700000021.920:8): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=5857 comm="syz.4.360" name="f/o" offset=66
[  217.792492][ T5805] udc-core: couldn't find an available UDC or it's busy
[  217.856541][ T5805] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  217.894249][    C0] greybus greybus1: 0/0:0: error sending response 0x01: -71
[  218.009673][ T5883] loop5: detected capacity change from 0 to 512
[  218.046193][ T5887] loop4: detected capacity change from 0 to 1024
[  218.122344][ T5889] netlink: 68 bytes leftover after parsing attributes in process `syz.3.365'.
[  218.480282][ T5104] greybus greybus1: 0/0:0: synchronous operation id 0x0002 of type 0x14 failed: -71
[  218.737449][ T5104] greybus 1-svc: failed to get rail count: -71
[  218.864543][ T4461] greybus greybus1: 0/0:0: synchronous operation id 0x0003 of type 0x10 failed: -71
[  218.904751][    C0] greybus greybus1: 0/0:0: error sending response 0x02: -71
[  218.943873][ T4461] greybus 1-svc: power mode change failed on AP to switch link: -71
[  219.420668][ T4328] usb 2-1: USB disconnect, device number 8
[  219.427260][    C0] usb 2-1: failed to resubmit arpc in-urb: -19
[  219.427340][    C0] usb 2-1: failed to resubmit arpc in-urb: -19
[  219.427367][    C0] usb 2-1: failed to resubmit in-urb: -19
[  219.427391][    C0] usb 2-1: failed to resubmit in-urb: -19
[  219.427416][    C0] usb 2-1: failed to resubmit in-urb: -19
[  219.427440][    C0] usb 2-1: failed to resubmit in-urb: -19
[  219.618721][ T5896] loop3: detected capacity change from 0 to 32768
[  220.084750][ T4328] usb 2-1: failed to send ARPC request 4: -19
[  220.090944][ T4328] usb 2-1: failed to execute ARPC: -19
[  220.097529][ T4328] usb 2-1: failed to flush cport 0: -19
[  220.103162][ T4328] greybus greybus1: 0/0:0: failed to flush host cport: -19
[  220.111449][ T4328] usb 2-1: failed to send ARPC request 2: -19
[  220.118441][ T4328] usb 2-1: failed to execute ARPC: -19
[  220.124060][ T4328] usb 2-1: failed to quiesce cport 0: -19 (0)
[  220.133125][ T4328] greybus greybus1: 0/0:0: failed to quiesce host cport: -19
[  220.146194][ T4328] usb 2-1: failed to send ARPC request 3: -19
[  220.152629][ T4328] usb 2-1: failed to execute ARPC: -19
[  220.160443][ T4328] usb 2-1: failed to clear cport 0: -19
[  220.167981][ T4328] greybus greybus1: 0/0:0: failed to clear host cport: -19
[  220.186390][ T5908] netlink: 68 bytes leftover after parsing attributes in process `syz.1.370'.
[  220.872037][ T5911] loop0: detected capacity change from 0 to 128
[  220.942032][ T5911] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  220.974304][ T5916] loop1: detected capacity change from 0 to 64
[  221.015278][ T5912] device syzkaller0 entered promiscuous mode
[  221.037761][ T5911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.136538][ T5912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.372'.
[  221.420522][ T5911] netlink: 'syz.0.371': attribute type 10 has an invalid length.
[  221.882230][ T4192] hfs: node 4:3 still has 1 user(s)!
[  222.403602][ T5938] loop0: detected capacity change from 0 to 512
[  222.455104][ T5941] loop4: detected capacity change from 0 to 512
[  222.588225][ T5946] netlink: 68 bytes leftover after parsing attributes in process `syz.1.379'.
[  223.305231][ T5922] loop3: detected capacity change from 0 to 32768
[  223.374212][ T5938] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  223.383299][ T5938] EXT4-fs (loop0): orphan cleanup on readonly fs
[  223.394715][ T5938] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.378: bad orphan inode 13
[  223.443378][ T5922] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.374 (5922)
[  223.493511][ T5938] ext4_test_bit(bit=12, block=4) = 1
[  223.493814][ T5922] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  223.514080][ T5938] is_bad_inode(inode)=0
[  223.548563][ T5938] NEXT_ORPHAN(inode)=0
[  223.552741][ T5938] max_ino=32
[  223.559990][ T5949] loop5: detected capacity change from 0 to 4096
[  223.566205][ T5922] BTRFS info (device loop3): setting nodatacow, compression disabled
[  223.602978][ T5938] i_nlink=1
[  223.620393][ T5938] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  223.631328][ T5922] BTRFS info (device loop3): disabling tree log
[  223.663136][ T5949] ntfs3: loop5: ino=0, Correct links count -> 1.
[  223.675293][ T5922] BTRFS info (device loop3): enabling ssd optimizations
[  223.702761][ T5922] BTRFS info (device loop3): turning on sync discard
[  223.742737][ T5922] BTRFS info (device loop3): using spread ssd allocation scheme
[  223.790664][ T5922] BTRFS info (device loop3): allowing degraded mounts
[  223.810906][ T5922] BTRFS info (device loop3): using free space tree
[  223.881307][ T5922] BTRFS info (device loop3): has skinny extents
[  223.936587][ T5949] ntfs3: loop5: MFT: r=0, expect seq=1 instead of 0!
[  223.963000][ T5949] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  223.979563][ T5949] ntfs3: loop5: Failed to load $MFT.
[  224.518127][ T5951] loop1: detected capacity change from 0 to 32768
[  224.648536][ T5951] (syz.1.382,5951,1):ocfs2_fill_super:1177 ERROR: status = -22
[  224.697812][ T5992] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  224.829412][ T5922] BTRFS error (device loop3): open_ctree failed: -12
[  224.836484][ T4453] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4453)
[  225.222479][ T6011] loop5: detected capacity change from 0 to 32768
[  225.323104][ T6013] loop0: detected capacity change from 0 to 4096
[  225.614115][ T6031] loop1: detected capacity change from 0 to 4096
[  225.673721][ T6020] device syzkaller0 entered promiscuous mode
[  225.752872][ T6031] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  225.768808][ T6020] netlink: 44 bytes leftover after parsing attributes in process `syz.0.389'.
[  225.778846][ T6031] ntfs3: loop1: Failed to load $BadClus.
[  225.822334][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.829861][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.108014][ T6041] loop3: detected capacity change from 0 to 512
[  226.214795][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.5.391'.
[  226.437156][ T6050] FAULT_INJECTION: forcing a failure.
[  226.437156][ T6050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.503260][ T6050] CPU: 0 PID: 6050 Comm: syz.0.394 Not tainted syzkaller #0
[  226.510619][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  226.520804][ T6050] Call Trace:
[  226.524122][ T6050]  <TASK>
[  226.527090][ T6050]  dump_stack_lvl+0x188/0x250
[  226.531817][ T6050]  ? show_regs_print_info+0x20/0x20
[  226.537242][ T6050]  ? load_image+0x410/0x410
[  226.541796][ T6050]  ? __lock_acquire+0x7d40/0x7d40
[  226.546887][ T6050]  should_fail+0x383/0x4b0
[  226.551357][ T6050]  _copy_from_user+0x2e/0x170
[  226.556082][ T6050]  ___sys_recvmsg+0x173/0x5c0
[  226.560808][ T6050]  ? __sys_recvmsg+0x280/0x280
[  226.565633][ T6050]  ? __lock_acquire+0x7d40/0x7d40
[  226.570746][ T6050]  ? __might_fault+0xb3/0x110
[  226.575473][ T6050]  do_recvmmsg+0x360/0x7f0
[  226.579942][ T6050]  ? __sys_recvmmsg+0x290/0x290
[  226.584853][ T6050]  ? __context_tracking_exit+0x4c/0x80
[  226.590402][ T6050]  ? __lock_acquire+0x7d40/0x7d40
[  226.595483][ T6050]  __x64_sys_recvmmsg+0x195/0x250
[  226.600595][ T6050]  ? do_recvmmsg+0x7f0/0x7f0
[  226.605257][ T6050]  ? lockdep_hardirqs_on+0x94/0x140
[  226.610502][ T6050]  do_syscall_64+0x4c/0xa0
[  226.614960][ T6050]  ? clear_bhb_loop+0x30/0x80
[  226.619681][ T6050]  ? clear_bhb_loop+0x30/0x80
[  226.624405][ T6050]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  226.630335][ T6050] RIP: 0033:0x7fdaba185559
[  226.634790][ T6050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.654533][ T6050] RSP: 002b:00007fdab83dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  226.662999][ T6050] RAX: ffffffffffffffda RBX: 00007fdaba40bfa0 RCX: 00007fdaba185559
[  226.671013][ T6050] RDX: 0000000000000600 RSI: 0000200000000a00 RDI: 0000000000000004
[  226.679031][ T6050] RBP: 00007fdab83dc090 R08: 0000000000000000 R09: 0000000000000000
[  226.687061][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.695074][ T6050] R13: 00007fdaba40c038 R14: 00007fdaba40bfa0 R15: 00007fffa8160ab8
[  226.703101][ T6050]  </TASK>
[  226.907862][ T6058] xt_hashlimit: size too large, truncated to 1048576
[  226.915258][ T6058] xt_hashlimit: max too large, truncated to 1048576
[  226.922033][ T6058] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  227.514526][ T6002] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  228.302646][ T6039] loop1: detected capacity change from 0 to 32768
[  228.586868][ T6079] loop5: detected capacity change from 0 to 32768
[  228.646780][ T6002] usb 1-1: Using ep0 maxpacket: 16
[  228.698302][ T6039] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  228.825105][ T6002] usb 1-1: unable to get BOS descriptor or descriptor too short
[  229.026636][ T6088] loop4: detected capacity change from 0 to 512
[  229.234438][ T6002] usb 1-1: config 9 has an invalid interface number: 8 but max is 0
[  229.242515][ T6002] usb 1-1: config 9 has no interface number 0
[  229.249930][ T6002] usb 1-1: config 9 interface 8 has no altsetting 0
[  229.332412][ T6088] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.403: bad orphan inode 13
[  229.426693][ T6002] usb 1-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04
[  229.439438][ T6088] ext4_test_bit(bit=12, block=4) = 1
[  229.454801][ T6002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.480802][ T6088] is_bad_inode(inode)=0
[  229.488430][ T4192] ocfs2: Unmounting device (7,1) on (node local)
[  229.495681][ T6088] NEXT_ORPHAN(inode)=0
[  229.499908][ T6088] max_ino=32
[  229.504178][ T6002] usb 1-1: Product: syz
[  229.511126][ T6002] usb 1-1: Manufacturer: syz
[  229.523661][ T6002] usb 1-1: SerialNumber: syz
[  229.523665][ T6088] i_nlink=1
[  229.553692][ T6088] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  229.678247][ T6100] loop3: detected capacity change from 0 to 4096
[  229.738016][ T6100] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  229.770962][ T6100] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  229.844483][ T6100] EXT4-fs (loop3): Test dummy encryption mode enabled
[  229.901264][ T6065] udc-core: couldn't find an available UDC or it's busy
[  229.924586][ T6100] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,mblk_io_submit,nodioread_nolock,test_dummy_encryption,auto_da_alloc=0x000000000000006e,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  229.967927][ T6065] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  230.484245][ T6115] loop1: detected capacity change from 0 to 64
[  230.651092][ T6112] device syzkaller0 entered promiscuous mode
[  230.813542][ T6100] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  230.937072][ T6112] netlink: 44 bytes leftover after parsing attributes in process `syz.1.406'.
[  231.202740][ T6100] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  231.311563][ T6002] go7007: probe of 1-1:9.8 failed with error -12
[  231.388539][ T6002] usb 1-1: USB disconnect, device number 7
[  231.556819][ T6100] CIFS: Attempting to mount \\127.0.0.1\share
[  231.689318][ T6131] CIFS: VFS: Invalid response size 0 for command 0
[  231.706211][ T6131] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1
[  231.718097][ T6131] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  231.802625][ T6100] CIFS: VFS: Could not allocate crypto cmac(aes)
[  231.838047][ T4192] hfs: node 4:3 still has 1 user(s)!
[  231.853105][ T6100] CIFS: VFS: cifs_mount failed w/return code = -112
[  232.236117][ T6142] loop5: detected capacity change from 0 to 32768
[  232.245031][ T6146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.418'.
[  232.286391][ T6147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.418'.
[  232.306239][ T6146] device-mapper: table: 248:7: cache: Invalid data block size
[  232.313941][ T6146] device-mapper: ioctl: error adding target to table
[  232.339520][ T6150] loop0: detected capacity change from 0 to 512
[  232.742699][ T6159] loop1: detected capacity change from 0 to 256
[  232.889444][ T6163] loop3: detected capacity change from 0 to 128
[  232.937551][ T6163] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  233.055452][ T6163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  233.266632][ T6169] loop4: detected capacity change from 0 to 2048
[  233.291651][ T6163] netlink: 'syz.3.424': attribute type 10 has an invalid length.
[  233.367245][ T6179] xt_hashlimit: size too large, truncated to 1048576
[  233.374228][ T6179] xt_hashlimit: max too large, truncated to 1048576
[  233.380943][ T6179] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  234.145096][ T6181] netlink: 68 bytes leftover after parsing attributes in process `syz.1.426'.
[  234.597986][ T6169] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  234.630546][ T4518] udevd[4518]: incorrect nilfs2 checksum on /dev/loop4
[  234.896161][ T6195] loop0: detected capacity change from 0 to 32768
[  234.959618][ T6199] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s)
[  235.038375][ T6200] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.064295][ T4295] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  235.331935][ T6169] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  235.344793][ T4295] usb 4-1: Using ep0 maxpacket: 16
[  235.370085][ T6203] block device autoloading is deprecated and will be removed.
[  235.457559][ T6169] Remounting filesystem read-only
[  235.480583][ T6211] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  235.504582][ T4295] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 26, changing to 8
[  235.558593][ T4295] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  235.621438][ T6169] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  235.739204][ T4295] usb 4-1: config 0 interface 0 has no altsetting 0
[  235.746065][ T4295] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  235.755292][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.766936][ T4295] usb 4-1: config 0 descriptor??
[  236.117213][ T6196] udc-core: couldn't find an available UDC or it's busy
[  236.303310][ T6196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  236.446127][ T6196] udc-core: couldn't find an available UDC or it's busy
[  236.494870][ T6196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  236.531179][ T6220] loop1: detected capacity change from 0 to 1024
[  236.806793][ T4295] zeroplus 0003:0C12:0005.0002: bogus close delimiter
[  236.813655][ T4295] zeroplus 0003:0C12:0005.0002: item 0 4 2 10 parsing failed
[  237.547624][ T6227] udc-core: couldn't find an available UDC or it's busy
[  237.557892][ T6226] xt_hashlimit: size too large, truncated to 1048576
[  237.565767][ T6226] xt_hashlimit: max too large, truncated to 1048576
[  237.572643][ T6226] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  237.584282][ T6227] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  237.592345][ T4295] zeroplus 0003:0C12:0005.0002: parse failed
[  237.598948][ T4295] zeroplus: probe of 0003:0C12:0005.0002 failed with error -22
[  237.619570][ T4295] usb 4-1: USB disconnect, device number 9
[  237.979186][ T6242] loop5: detected capacity change from 0 to 8
[  238.438134][ T6244] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  238.456994][    C1] vkms_vblank_simulate: vblank timer overrun
[  238.817109][ T6248] loop3: detected capacity change from 0 to 4096
[  238.979498][ T6252] loop5: detected capacity change from 0 to 32768
[  240.022288][ T6259] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.421641][ T6265] loop0: detected capacity change from 0 to 32768
[  240.473246][ T6270] loop4: detected capacity change from 0 to 1024
[  241.583501][ T6277] loop1: detected capacity change from 0 to 512
[  241.894512][ T6279] device syzkaller0 entered promiscuous mode
[  241.947684][ T6281] loop4: detected capacity change from 0 to 64
[  242.004017][ T6287] loop5: detected capacity change from 0 to 256
[  242.101780][ T6284] device syzkaller0 entered promiscuous mode
[  242.127035][ T6280] netlink: 44 bytes leftover after parsing attributes in process `syz.4.457'.
[  242.490415][ T6284] loop3: detected capacity change from 0 to 64
[  243.027100][ T6284] netlink: 44 bytes leftover after parsing attributes in process `syz.3.458'.
[  243.061909][ T4195] hfs: node 4:3 still has 1 user(s)!
[  243.780515][ T4189] hfs: node 4:3 still has 1 user(s)!
[  244.500380][ T6316] loop3: detected capacity change from 0 to 32768
[  245.088434][ T6321] loop4: detected capacity change from 0 to 128
[  245.101564][ T6317] loop1: detected capacity change from 0 to 2048
[  245.370610][ T6325] loop0: detected capacity change from 0 to 512
[  245.425860][ T6321] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  245.467272][ T6321] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  245.852131][ T6334] netlink: 68 bytes leftover after parsing attributes in process `syz.0.472'.
[  247.579825][ T6342] loop4: detected capacity change from 0 to 64
[  248.467225][ T6342] netlink: 44 bytes leftover after parsing attributes in process `syz.4.474'.
[  248.779422][ T4195] hfs: node 4:3 still has 1 user(s)!
[  248.997119][ T6360] netlink: 2 bytes leftover after parsing attributes in process `syz.1.480'.
[  249.501896][ T6359] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s)
[  249.897027][ T6362] loop4: detected capacity change from 0 to 32768
[  249.942826][ T6359] loop3: detected capacity change from 0 to 512
[  250.276582][ T6368] loop1: detected capacity change from 0 to 512
[  250.541755][ T6376] FAULT_INJECTION: forcing a failure.
[  250.541755][ T6376] name failslab, interval 1, probability 0, space 0, times 0
[  250.541806][ T6376] CPU: 1 PID: 6376 Comm: syz.4.484 Not tainted syzkaller #0
[  250.541829][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  250.541849][ T6376] Call Trace:
[  250.541856][ T6376]  <TASK>
[  250.541865][ T6376]  dump_stack_lvl+0x188/0x250
[  250.541899][ T6376]  ? show_regs_print_info+0x20/0x20
[  250.541926][ T6376]  ? load_image+0x410/0x410
[  250.541953][ T6376]  ? __might_sleep+0xf0/0xf0
[  250.541977][ T6376]  ? __lock_acquire+0x7d40/0x7d40
[  250.542007][ T6376]  should_fail+0x383/0x4b0
[  250.542046][ T6376]  should_failslab+0x5/0x20
[  250.542068][ T6376]  slab_pre_alloc_hook+0x51/0xc0
[  250.542091][ T6376]  ? security_inode_alloc+0x30/0x110
[  250.542116][ T6376]  kmem_cache_alloc+0x3d/0x280
[  250.542143][ T6376]  security_inode_alloc+0x30/0x110
[  250.542168][ T6376]  inode_init_always+0x8e5/0xc90
[  250.542197][ T6376]  new_inode_pseudo+0x8e/0x210
[  250.542224][ T6376]  __sock_create+0x128/0x910
[  250.542260][ T6376]  __sys_socket+0xe2/0x170
[  250.542289][ T6376]  __x64_sys_socket+0x76/0x80
[  250.542317][ T6376]  do_syscall_64+0x4c/0xa0
[  250.542336][ T6376]  ? clear_bhb_loop+0x30/0x80
[  250.542357][ T6376]  ? clear_bhb_loop+0x30/0x80
[  250.542381][ T6376]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  250.542404][ T6376] RIP: 0033:0x7fb13298f559
[  250.542423][ T6376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.542448][ T6376] RSP: 002b:00007fb130bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  250.542474][ T6376] RAX: ffffffffffffffda RBX: 00007fb132c16090 RCX: 00007fb13298f559
[  250.542491][ T6376] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000040000000015
[  250.542506][ T6376] RBP: 00007fb132a26b20 R08: 0000000000000000 R09: 0000000000000000
[  250.542520][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.542534][ T6376] R13: 00007fb132c16128 R14: 00007fb132c16090 R15: 00007ffc0fae5ed8
[  250.542566][ T6376]  </TASK>
[  250.542586][ T6376] socket: no more sockets
[  250.635657][ T6354] loop0: detected capacity change from 0 to 32768
[  250.716431][ T6354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.479 (6354)
[  250.945366][   T26] audit: type=1800 audit(1700000055.451:9): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.477" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0
[  250.995299][ T6354] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  250.995648][ T6354] BTRFS warning (device loop0): excessive commit interval 3581
[  250.995681][ T6354] BTRFS info (device loop0): force zlib compression, level 3
[  250.995732][ T6354] BTRFS info (device loop0): metadata ratio 107050
[  250.995751][ T6354] BTRFS info (device loop0): turning on flush-on-commit
[  250.995796][ T6354] BTRFS info (device loop0): max_inline at 4096
[  250.995819][ T6354] BTRFS info (device loop0): using free space tree
[  250.995836][ T6354] BTRFS info (device loop0): has skinny extents
[  251.006585][ T6372] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  251.006656][ T6372] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4
[  251.006679][ T6372] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s
[  251.053791][ T6372] syz.5.477 (6372) used greatest stack depth: 18656 bytes left
[  252.246993][ T6354] BTRFS error (device loop0): open_ctree failed: -12
[  252.554370][ T6420] xt_hashlimit: size too large, truncated to 1048576
[  252.561159][ T6420] xt_hashlimit: max too large, truncated to 1048576
[  252.567926][ T6420] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  254.232677][ T6426] loop1: detected capacity change from 0 to 64
[  254.273194][ T6436] loop4: detected capacity change from 0 to 512
[  254.332688][ T6426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.491'.
[  254.642874][ T6447] loop3: detected capacity change from 0 to 32768
[  254.686308][ T6436] loop4: detected capacity change from 0 to 512
[  254.704035][ T4192] hfs: node 4:3 still has 1 user(s)!
[  255.560772][ T6451] loop1: detected capacity change from 0 to 512
[  255.608042][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  255.614487][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  255.680494][ T6424] loop0: detected capacity change from 0 to 32768
[  256.788481][ T6462] loop5: detected capacity change from 0 to 64
[  256.942770][ T6462] MINIX-fs: mounting file system with errors, running fsck is recommended
[  257.034505][ T6462] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  257.055478][ T6462] FAULT_INJECTION: forcing a failure.
[  257.055478][ T6462] name failslab, interval 1, probability 0, space 0, times 0
[  257.084232][ T6462] CPU: 1 PID: 6462 Comm: syz.5.500 Not tainted syzkaller #0
[  257.091590][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  257.101680][ T6462] Call Trace:
[  257.104988][ T6462]  <TASK>
[  257.107949][ T6462]  dump_stack_lvl+0x188/0x250
[  257.112777][ T6462]  ? show_regs_print_info+0x20/0x20
[  257.118018][ T6462]  ? load_image+0x410/0x410
[  257.122563][ T6462]  ? __might_sleep+0xf0/0xf0
[  257.127349][ T6462]  ? __lock_acquire+0x7d40/0x7d40
[  257.132415][ T6462]  should_fail+0x383/0x4b0
[  257.136881][ T6462]  should_failslab+0x5/0x20
[  257.141418][ T6462]  slab_pre_alloc_hook+0x51/0xc0
[  257.146415][ T6462]  ? getname_flags+0xb7/0x4f0
[  257.151123][ T6462]  kmem_cache_alloc+0x3d/0x280
[  257.155925][ T6462]  getname_flags+0xb7/0x4f0
[  257.160469][ T6462]  __x64_sys_mkdirat+0x78/0x90
[  257.165265][ T6462]  do_syscall_64+0x4c/0xa0
[  257.169708][ T6462]  ? clear_bhb_loop+0x30/0x80
[  257.174419][ T6462]  ? clear_bhb_loop+0x30/0x80
[  257.179223][ T6462]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  257.185170][ T6462] RIP: 0033:0x7f699b42d3c7
[  257.189617][ T6462] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.209263][ T6462] RSP: 002b:00007f6999684e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  257.217717][ T6462] RAX: ffffffffffffffda RBX: 00007f6999684ee0 RCX: 00007f699b42d3c7
[  257.225729][ T6462] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: 00000000ffffff9c
[  257.234175][ T6462] RBP: 0000200000000300 R08: 0000200000001640 R09: 0000000000000000
[  257.242182][ T6462] R10: 0000200000000300 R11: 0000000000000246 R12: 00002000000003c0
[  257.250195][ T6462] R13: 00007f6999684ea0 R14: 0000000000000000 R15: 0000200000000400
[  257.258227][ T6462]  </TASK>
[  257.328860][ T6458] loop1: detected capacity change from 0 to 32768
[  257.359662][ T6458] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.499 (6458)
[  257.395662][ T6458] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  257.407576][ T6458] BTRFS warning (device loop1): excessive commit interval 3581
[  257.418394][ T6458] BTRFS info (device loop1): force zlib compression, level 3
[  257.427693][ T6458] BTRFS info (device loop1): metadata ratio 107050
[  257.436815][ T6458] BTRFS info (device loop1): turning on flush-on-commit
[  257.444981][ T6458] BTRFS info (device loop1): max_inline at 4096
[  257.452058][ T6458] BTRFS info (device loop1): using free space tree
[  257.469193][ T6458] BTRFS info (device loop1): has skinny extents
[  258.559225][ T6481] netlink: 68 bytes leftover after parsing attributes in process `syz.3.503'.
[  258.663132][ T6482] xt_hashlimit: size too large, truncated to 1048576
[  258.669891][ T6482] xt_hashlimit: max too large, truncated to 1048576
[  258.676520][ T6482] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  259.259799][ T6503] loop4: detected capacity change from 0 to 64
[  259.358339][ T6503] netlink: 44 bytes leftover after parsing attributes in process `syz.4.506'.
[  259.443011][ T6458] BTRFS error (device loop1): open_ctree failed: -12
[  259.474839][ T6407] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  259.656183][ T4195] hfs: node 4:3 still has 1 user(s)!
[  259.832278][ T6505] loop5: detected capacity change from 0 to 32768
[  259.883253][ T4453] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4453)
[  260.004976][ T6407] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024
[  260.146597][ T6407] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  260.314986][ T6407] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  260.332203][ T6407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.376552][ T6517] loop4: detected capacity change from 0 to 8
[  260.382999][ T6407] usb 1-1: Product: syz
[  260.394158][ T6407] usb 1-1: Manufacturer: syz
[  260.398811][ T6407] usb 1-1: SerialNumber: syz
[  260.645617][ T6501] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  261.498206][ T6521] netlink: 2 bytes leftover after parsing attributes in process `syz.1.511'.
[  261.868993][ T6407] usb 1-1: Cannot retrieve CPort count: -110
[  261.878985][ T6407] usb 1-1: Cannot retrieve CPort count: -110
[  261.890457][ T6407] es2_ap_driver: probe of 1-1:1.0 failed with error -110
[  261.980757][ T6528] loop4: detected capacity change from 0 to 4096
[  262.007587][ T6531] capability: warning: `syz.1.516' uses 32-bit capabilities (legacy support in use)
[  262.020775][ T6528] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  262.036783][ T6528] ntfs3: loop4: Failed to load $Extend.
[  262.785779][ T6536] loop5: detected capacity change from 0 to 2048
[  262.913699][ T6536] EXT4-fs (loop5): failed to initialize system zone (-117)
[  262.924934][ T6536] EXT4-fs (loop5): mount failed
[  263.159708][ T6544] netlink: 68 bytes leftover after parsing attributes in process `syz.4.519'.
[  263.534440][ T6546] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.518'.
[  263.543875][ T6546] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0
[  263.789286][ T6004] usb 1-1: USB disconnect, device number 8
[  264.104755][ T6555] loop0: detected capacity change from 0 to 32768
[  264.119156][ T6554] loop5: detected capacity change from 0 to 512
[  264.630400][ T6576] netlink: 68 bytes leftover after parsing attributes in process `syz.3.526'.
[  265.484829][ T6590] netlink: 68 bytes leftover after parsing attributes in process `syz.0.527'.
[  266.361588][ T6588] loop3: detected capacity change from 0 to 2048
[  266.407982][ T6597] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  266.424323][ T6004] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  266.526162][ T6588] EXT4-fs (loop3): failed to initialize system zone (-117)
[  266.539350][ T6588] EXT4-fs (loop3): mount failed
[  267.143143][ T6610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.535'.
[  267.304733][ T6615] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.531'.
[  267.314830][ T6615] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0
[  267.365901][    C0] hrtimer: interrupt took 57805 ns
[  267.734395][ T6004] usb 6-1: device descriptor read/all, error -71
[  267.896978][ T6619] loop0: detected capacity change from 0 to 40427
[  268.063669][ T6620] loop1: detected capacity change from 0 to 32768
[  268.097457][ T6624] loop5: detected capacity change from 0 to 512
[  268.150053][ T6627] loop3: detected capacity change from 0 to 4096
[  268.248918][ T6619] F2FS-fs (loop0): invalid crc value
[  268.312677][ T6619] F2FS-fs (loop0): Found nat_bits in checkpoint
[  268.390622][ T6619] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  268.440665][ T6634] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.452483][ T6627] FAULT_INJECTION: forcing a failure.
[  268.452483][ T6627] name failslab, interval 1, probability 0, space 0, times 0
[  268.465985][ T6627] CPU: 1 PID: 6627 Comm: syz.3.541 Not tainted syzkaller #0
[  268.473373][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  268.483524][ T6627] Call Trace:
[  268.486809][ T6627]  <TASK>
[  268.489740][ T6627]  dump_stack_lvl+0x188/0x250
[  268.494427][ T6627]  ? show_regs_print_info+0x20/0x20
[  268.499735][ T6627]  ? load_image+0x410/0x410
[  268.504260][ T6627]  ? __might_sleep+0xf0/0xf0
[  268.508887][ T6627]  ? __lock_acquire+0x7d40/0x7d40
[  268.513938][ T6627]  should_fail+0x383/0x4b0
[  268.518561][ T6627]  should_failslab+0x5/0x20
[  268.523081][ T6627]  slab_pre_alloc_hook+0x51/0xc0
[  268.528037][ T6627]  __kmalloc+0x6b/0x340
[  268.532302][ T6627]  ? tomoyo_encode+0x28a/0x550
[  268.537090][ T6627]  tomoyo_encode+0x28a/0x550
[  268.541705][ T6627]  tomoyo_realpath_from_path+0x5a2/0x5e0
[  268.547391][ T6627]  tomoyo_path_number_perm+0x251/0x6b0
[  268.552871][ T6627]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  268.558359][ T6627]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  268.564375][ T6627]  ? __d_lookup_rcu+0x652/0x720
[  268.569242][ T6627]  ? __lock_acquire+0x7d40/0x7d40
[  268.574308][ T6627]  ? __rwlock_init+0x140/0x140
[  268.579107][ T6627]  ? d_set_d_op+0xe5/0x370
[  268.583644][ T6627]  tomoyo_path_mknod+0x147/0x190
[  268.588614][ T6627]  ? d_alloc_parallel+0x1215/0x1320
[  268.593854][ T6627]  ? tomoyo_path_symlink+0xf0/0xf0
[  268.598989][ T6627]  ? hook_path_mknod+0xea/0x1b0
[  268.603858][ T6627]  security_path_mknod+0xec/0x140
[  268.608902][ T6627]  path_openat+0xba5/0x2fb0
[  268.613462][ T6627]  ? do_filp_open+0x400/0x400
[  268.618259][ T6627]  do_filp_open+0x1df/0x400
[  268.622787][ T6627]  ? vfs_tmpfile+0x300/0x300
[  268.627409][ T6627]  ? _raw_spin_unlock+0x24/0x40
[  268.632282][ T6627]  ? alloc_fd+0x59e/0x650
[  268.636638][ T6627]  do_sys_openat2+0x14b/0x500
[  268.641343][ T6627]  ? __lock_acquire+0x7d40/0x7d40
[  268.646388][ T6627]  ? do_sys_open+0xe0/0xe0
[  268.650838][ T6627]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  268.656844][ T6627]  ? lock_chain_count+0x20/0x20
[  268.661739][ T6627]  __x64_sys_openat+0x135/0x160
[  268.666614][ T6627]  do_syscall_64+0x4c/0xa0
[  268.671045][ T6627]  ? clear_bhb_loop+0x30/0x80
[  268.675755][ T6627]  ? clear_bhb_loop+0x30/0x80
[  268.680462][ T6627]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  268.686377][ T6627] RIP: 0033:0x7f90085c1559
[  268.690910][ T6627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.710550][ T6627] RSP: 002b:00007f9006818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  268.719040][ T6627] RAX: ffffffffffffffda RBX: 00007f9008847fa0 RCX: 00007f90085c1559
[  268.727037][ T6627] RDX: 0000000000040942 RSI: 0000200000000200 RDI: ffffffffffffff9c
[  268.735028][ T6627] RBP: 00007f9006818090 R08: 0000000000000000 R09: 0000000000000000
[  268.743012][ T6627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.750995][ T6627] R13: 00007f9008848038 R14: 00007f9008847fa0 R15: 00007ffd9f64b858
[  268.758996][ T6627]  </TASK>
[  268.763321][ T6627] ERROR: Out of memory at tomoyo_realpath_from_path.
[  269.202068][ T6638] attempt to access beyond end of device
[  269.202068][ T6638] loop0: rw=2049, want=45104, limit=40427
[  269.240857][ T6638] attempt to access beyond end of device
[  269.240857][ T6638] loop0: rw=2049, want=45144, limit=40427
[  269.254423][ T6638] attempt to access beyond end of device
[  269.254423][ T6638] loop0: rw=2049, want=45104, limit=40427
[  269.910504][ T4194] attempt to access beyond end of device
[  269.910504][ T4194] loop0: rw=2049, want=45152, limit=40427
[  269.987299][ T6645] loop3: detected capacity change from 0 to 512
[  271.150632][ T6645] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  271.263980][ T6645] EXT4-fs (loop3): 1 truncate cleaned up
[  271.484217][ T6645] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  271.596619][ T6663] xt_hashlimit: size too large, truncated to 1048576
[  271.603438][ T6663] xt_hashlimit: max too large, truncated to 1048576
[  271.610177][ T6663] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  272.538314][ T6669] loop1: detected capacity change from 0 to 2048
[  272.962941][ T6669] EXT4-fs (loop1): failed to initialize system zone (-117)
[  273.127806][ T6669] EXT4-fs (loop1): mount failed
[  273.662691][ T6666] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.549'.
[  273.672081][ T6666] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0
[  273.918976][ T6684] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.543'.
[  276.914680][ T6719] syz.1.565 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  277.867920][ T6739] input: syz1 as /devices/virtual/input/input9
[  278.207718][ T6754] netlink: 'syz.5.580': attribute type 1 has an invalid length.
[  278.228652][ T6754] netlink: 'syz.5.580': attribute type 1 has an invalid length.
[  278.817850][ T6761] FAULT_INJECTION: forcing a failure.
[  278.817850][ T6761] name failslab, interval 1, probability 0, space 0, times 0
[  278.837704][ T6763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.583'.
[  278.845358][ T6761] CPU: 0 PID: 6761 Comm: syz.4.582 Not tainted syzkaller #0
[  278.853910][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  278.864003][ T6761] Call Trace:
[  278.867347][ T6761]  <TASK>
[  278.870314][ T6761]  dump_stack_lvl+0x188/0x250
[  278.875035][ T6761]  ? show_regs_print_info+0x20/0x20
[  278.880277][ T6761]  ? load_image+0x410/0x410
[  278.884841][ T6761]  ? __might_sleep+0xf0/0xf0
[  278.889469][ T6761]  ? __lock_acquire+0x7d40/0x7d40
[  278.894542][ T6761]  should_fail+0x383/0x4b0
[  278.899002][ T6761]  should_failslab+0x5/0x20
[  278.903543][ T6761]  slab_pre_alloc_hook+0x51/0xc0
[  278.908515][ T6761]  ? getname_flags+0xb7/0x4f0
[  278.913228][ T6761]  kmem_cache_alloc+0x3d/0x280
[  278.918032][ T6761]  getname_flags+0xb7/0x4f0
[  278.922582][ T6761]  user_path_at_empty+0x2a/0x190
[  278.927560][ T6761]  __se_sys_mount+0x2a4/0x3d0
[  278.932280][ T6761]  ? __x64_sys_mount+0xc0/0xc0
[  278.937089][ T6761]  ? lockdep_hardirqs_on+0x94/0x140
[  278.942323][ T6761]  ? __x64_sys_mount+0x1c/0xc0
[  278.947123][ T6761]  do_syscall_64+0x4c/0xa0
[  278.951590][ T6761]  ? clear_bhb_loop+0x30/0x80
[  278.956305][ T6761]  ? clear_bhb_loop+0x30/0x80
[  278.961023][ T6761]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  278.966961][ T6761] RIP: 0033:0x7fb13298f559
[  278.971434][ T6761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  278.991075][ T6761] RSP: 002b:00007fb130be6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  278.999536][ T6761] RAX: ffffffffffffffda RBX: 00007fb132c15fa0 RCX: 00007fb13298f559
[  279.007556][ T6761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  279.015684][ T6761] RBP: 00007fb132a26b20 R08: 0000000000000000 R09: 0000000000000000
[  279.023701][ T6761] R10: 0000000000024002 R11: 0000000000000246 R12: 0000000000000000
[  279.031717][ T6761] R13: 00007fb132c16038 R14: 00007fb132c15fa0 R15: 00007ffc0fae5ed8
[  279.039748][ T6761]  </TASK>
[  279.911679][ T6783] sctp: [Deprecated]: syz.0.590 (pid 6783) Use of int in max_burst socket option.
[  279.911679][ T6783] Use struct sctp_assoc_value instead
[  283.884923][ T6801] ubi0: attaching mtd0
[  283.893081][ T6801] ubi0: scanning is finished
[  283.897857][ T6801] ubi0: empty MTD device detected
[  285.312994][ T6801] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  285.320605][ T6801] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  285.328278][ T6801] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  285.335312][ T6801] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  285.342736][ T6801] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  285.349597][ T6801] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  285.357690][ T6801] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2265670543
[  285.367766][ T6801] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  285.381064][ T6004] Bluetooth: hci4: command 0x0406 tx timeout
[  285.382247][ T6810] ubi0: background thread "ubi_bgt0d" started, PID 6810
[  287.322871][ T6829] input: syz0 as /devices/virtual/input/input10
[  290.958811][ T6881] batman_adv: batadv0: Adding interface: macvtap1
[  290.978036][ T6881] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.015823][ T6881] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  291.195383][ T6893] netlink: 'syz.0.629': attribute type 10 has an invalid length.
[  291.233814][ T6893] netlink: 2 bytes leftover after parsing attributes in process `syz.0.629'.
[  291.242780][ T6893] device hsr0 entered promiscuous mode
[  291.253666][ T6893] bridge0: port 3(hsr0) entered blocking state
[  291.267511][ T6893] bridge0: port 3(hsr0) entered disabled state
[  291.277199][ T6899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.632'.
[  295.169444][ T6922] program syz.4.641 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  295.896665][ T5986] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  297.590112][ T6936] xt_hashlimit: max too large, truncated to 1048576
[  297.794742][ T6942] FAULT_INJECTION: forcing a failure.
[  297.794742][ T6942] name failslab, interval 1, probability 0, space 0, times 0
[  297.839848][ T6942] CPU: 0 PID: 6942 Comm: syz.3.650 Not tainted syzkaller #0
[  297.847211][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  297.857297][ T6942] Call Trace:
[  297.860606][ T6942]  <TASK>
[  297.863564][ T6942]  dump_stack_lvl+0x188/0x250
[  297.868317][ T6942]  ? show_regs_print_info+0x20/0x20
[  297.873548][ T6942]  ? load_image+0x410/0x410
[  297.878087][ T6942]  ? __might_sleep+0xf0/0xf0
[  297.882727][ T6942]  ? __lock_acquire+0x7d40/0x7d40
[  297.887799][ T6942]  should_fail+0x383/0x4b0
[  297.892255][ T6942]  should_failslab+0x5/0x20
[  297.896877][ T6942]  slab_pre_alloc_hook+0x51/0xc0
[  297.901859][ T6942]  ? __kernfs_new_node+0xe3/0x6b0
[  297.906921][ T6942]  kmem_cache_alloc+0x3d/0x280
[  297.911733][ T6942]  __kernfs_new_node+0xe3/0x6b0
[  297.916628][ T6942]  ? __lock_acquire+0x7d40/0x7d40
[  297.921707][ T6942]  ? kernfs_new_node+0x250/0x250
[  297.926734][ T6942]  ? kernfs_activate+0x1eb/0x210
[  297.931724][ T6942]  kernfs_new_node+0x148/0x250
[  297.936531][ T6942]  __kernfs_create_file+0x47/0x2e0
[  297.941685][ T6942]  sysfs_add_file_mode_ns+0x2d2/0x390
[  297.947110][ T6942]  internal_create_group+0x492/0xd00
[  297.952449][ T6942]  ? sysfs_create_group+0x20/0x20
[  297.957531][ T6942]  ? kernfs_add_one+0x564/0x6c0
[  297.962426][ T6942]  sysfs_create_groups+0x55/0x120
[  297.967505][ T6942]  device_add_attrs+0x82/0x690
[  297.972309][ T6942]  device_add+0x677/0x1050
[  297.976765][ T6942]  netdev_register_kobject+0x184/0x320
[  297.982269][ T6942]  register_netdevice+0x10e8/0x1720
[  297.987536][ T6942]  ? netif_stacked_transfer_operstate+0x200/0x200
[  297.994074][ T6942]  ? validate_linkmsg+0x3db/0x4c0
[  297.999244][ T6942]  ? rtnl_create_link+0x85f/0xa90
[  298.004300][ T6942]  ? batadv_softif_validate+0x70/0x70
[  298.009713][ T6942]  rtnl_newlink+0x139e/0x1920
[  298.014440][ T6942]  ? rtnl_setlink+0x500/0x500
[  298.019140][ T6942]  ? mark_lock+0x94/0x320
[  298.023512][ T6942]  ? __lock_acquire+0x13b3/0x7d40
[  298.028682][ T6942]  ? rtnetlink_rcv_msg+0x79f/0xf10
[  298.033878][ T6942]  ? rtnl_setlink+0x500/0x500
[  298.038590][ T6942]  rtnetlink_rcv_msg+0x7f1/0xf10
[  298.043567][ T6942]  ? lock_chain_count+0x20/0x20
[  298.048455][ T6942]  ? rtnetlink_bind+0x80/0x80
[  298.053170][ T6942]  ? __local_bh_enable_ip+0x136/0x1c0
[  298.058577][ T6942]  ? lockdep_hardirqs_on+0x94/0x140
[  298.063811][ T6942]  ? __local_bh_enable_ip+0x136/0x1c0
[  298.069219][ T6942]  ? _local_bh_enable+0xa0/0xa0
[  298.074120][ T6942]  ? __dev_queue_xmit+0x1b64/0x2e50
[  298.079373][ T6942]  ? dev_queue_xmit+0x20/0x20
[  298.084100][ T6942]  ? memcpy+0x3c/0x60
[  298.088219][ T6942]  ? __copy_skb_header+0x3ba/0x4f0
[  298.093378][ T6942]  netlink_rcv_skb+0x1e9/0x430
[  298.098182][ T6942]  ? rtnetlink_bind+0x80/0x80
[  298.102894][ T6942]  ? netlink_ack+0xb10/0xb10
[  298.107556][ T6942]  netlink_unicast+0x78f/0x940
[  298.112455][ T6942]  netlink_sendmsg+0x8ba/0xbe0
[  298.117261][ T6942]  ? netlink_getsockopt+0x570/0x570
[  298.122494][ T6942]  ? aa_sock_msg_perm+0x94/0x150
[  298.127469][ T6942]  ? apparmor_socket_sendmsg+0x173/0x230
[  298.133135][ T6942]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  298.138455][ T6942]  ? security_socket_sendmsg+0x7c/0xa0
[  298.143954][ T6942]  ? netlink_getsockopt+0x570/0x570
[  298.149276][ T6942]  ____sys_sendmsg+0x5be/0x8f0
[  298.154175][ T6942]  ? __sys_sendmsg_sock+0x30/0x30
[  298.159245][ T6942]  ? import_iovec+0x6f/0xa0
[  298.163871][ T6942]  ___sys_sendmsg+0x236/0x2e0
[  298.168585][ T6942]  ? __sys_sendmsg+0x290/0x290
[  298.173444][ T6942]  __se_sys_sendmsg+0x1b7/0x2a0
[  298.178417][ T6942]  ? __x64_sys_sendmsg+0x80/0x80
[  298.183381][ T6942]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  298.189418][ T6942]  ? lockdep_hardirqs_on+0x94/0x140
[  298.194669][ T6942]  do_syscall_64+0x4c/0xa0
[  298.199129][ T6942]  ? clear_bhb_loop+0x30/0x80
[  298.203841][ T6942]  ? clear_bhb_loop+0x30/0x80
[  298.208567][ T6942]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  298.214496][ T6942] RIP: 0033:0x7f90085c1559
[  298.218959][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.238688][ T6942] RSP: 002b:00007f9006818028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.247161][ T6942] RAX: ffffffffffffffda RBX: 00007f9008847fa0 RCX: 00007f90085c1559
[  298.255201][ T6942] RDX: 0000000020000840 RSI: 0000200000000480 RDI: 0000000000000005
[  298.263247][ T6942] RBP: 00007f9008658b20 R08: 0000000000000000 R09: 0000000000000000
[  298.271397][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.279409][ T6942] R13: 00007f9008848038 R14: 00007f9008847fa0 R15: 00007ffd9f64b858
[  298.287443][ T6942]  </TASK>
[  298.656050][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'.
[  298.782261][ T6954] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  298.843153][ T6954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  299.330692][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'.
[  299.477421][ T6993] FAULT_INJECTION: forcing a failure.
[  299.477421][ T6993] name failslab, interval 1, probability 0, space 0, times 0
[  299.491411][ T6993] CPU: 0 PID: 6993 Comm: syz.4.672 Not tainted syzkaller #0
[  299.498764][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  299.508869][ T6993] Call Trace:
[  299.512187][ T6993]  <TASK>
[  299.515155][ T6993]  dump_stack_lvl+0x188/0x250
[  299.519879][ T6993]  ? show_regs_print_info+0x20/0x20
[  299.525120][ T6993]  ? load_image+0x410/0x410
[  299.529676][ T6993]  ? __might_sleep+0xf0/0xf0
[  299.534310][ T6993]  ? __lock_acquire+0x7d40/0x7d40
[  299.539814][ T6993]  should_fail+0x383/0x4b0
[  299.544278][ T6993]  should_failslab+0x5/0x20
[  299.548803][ T6993]  slab_pre_alloc_hook+0x51/0xc0
[  299.553769][ T6993]  ? proc_net_ns_init+0x4a/0x380
[  299.558743][ T6993]  kmem_cache_alloc+0x3d/0x280
[  299.563545][ T6993]  proc_net_ns_init+0x4a/0x380
[  299.568349][ T6993]  ops_init+0x360/0x5f0
[  299.572541][ T6993]  setup_net+0x39e/0xa10
[  299.576809][ T6993]  ? copy_net_ns+0x5b0/0x5b0
[  299.581424][ T6993]  ? copy_net_ns+0x324/0x5b0
[  299.586032][ T6993]  ? down_read_killable+0x1ce/0x340
[  299.591254][ T6993]  copy_net_ns+0x33e/0x5b0
[  299.595691][ T6993]  create_new_namespaces+0x3ce/0x700
[  299.601021][ T6993]  unshare_nsproxy_namespaces+0x116/0x160
[  299.606769][ T6993]  ksys_unshare+0x4f6/0x8e0
[  299.611293][ T6993]  ? __lock_acquire+0x7d40/0x7d40
[  299.616346][ T6993]  ? sighand_ctor+0x40/0x40
[  299.620882][ T6993]  ? lock_chain_count+0x20/0x20
[  299.625756][ T6993]  ? syscall_enter_from_user_mode+0x21/0x70
[  299.631688][ T6993]  __x64_sys_unshare+0x34/0x40
[  299.636483][ T6993]  do_syscall_64+0x4c/0xa0
[  299.640937][ T6993]  ? clear_bhb_loop+0x30/0x80
[  299.645735][ T6993]  ? clear_bhb_loop+0x30/0x80
[  299.650566][ T6993]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  299.656517][ T6993] RIP: 0033:0x7fb13298f559
[  299.660969][ T6993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.680595][ T6993] RSP: 002b:00007fb130be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  299.689033][ T6993] RAX: ffffffffffffffda RBX: 00007fb132c15fa0 RCX: 00007fb13298f559
[  299.697027][ T6993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  299.705020][ T6993] RBP: 00007fb132a26b20 R08: 0000000000000000 R09: 0000000000000000
[  299.713014][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  299.721094][ T6993] R13: 00007fb132c16038 R14: 00007fb132c15fa0 R15: 00007ffc0fae5ed8
[  299.729253][ T6993]  </TASK>
[  299.732377][    C0] vkms_vblank_simulate: vblank timer overrun
[  305.113516][ T7043] FAULT_INJECTION: forcing a failure.
[  305.113516][ T7043] name failslab, interval 1, probability 0, space 0, times 0
[  305.130029][ T7043] CPU: 0 PID: 7043 Comm: syz.3.685 Not tainted syzkaller #0
[  305.137386][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  305.147583][ T7043] Call Trace:
[  305.150895][ T7043]  <TASK>
[  305.153850][ T7043]  dump_stack_lvl+0x188/0x250
[  305.158574][ T7043]  ? show_regs_print_info+0x20/0x20
[  305.163810][ T7043]  ? load_image+0x410/0x410
[  305.168396][ T7043]  ? __might_sleep+0xf0/0xf0
[  305.173022][ T7043]  ? __lock_acquire+0x7d40/0x7d40
[  305.178094][ T7043]  should_fail+0x383/0x4b0
[  305.182558][ T7043]  should_failslab+0x5/0x20
[  305.187094][ T7043]  slab_pre_alloc_hook+0x51/0xc0
[  305.192072][ T7043]  ? __d_alloc+0x27/0x6d0
[  305.196441][ T7043]  kmem_cache_alloc+0x3d/0x280
[  305.201252][ T7043]  __d_alloc+0x27/0x6d0
[  305.205442][ T7043]  ? d_alloc_pseudo+0xe/0x70
[  305.210062][ T7043]  d_alloc_pseudo+0x19/0x70
[  305.214606][ T7043]  alloc_file_pseudo+0xe0/0x200
[  305.219496][ T7043]  ? alloc_empty_file_noaccount+0x80/0x80
[  305.225274][ T7043]  ? alloc_fd+0x59e/0x650
[  305.229664][ T7043]  sock_alloc_file+0xb3/0x240
[  305.234389][ T7043]  __sys_socket+0x11d/0x170
[  305.238946][ T7043]  __x64_sys_socket+0x76/0x80
[  305.243666][ T7043]  do_syscall_64+0x4c/0xa0
[  305.248132][ T7043]  ? clear_bhb_loop+0x30/0x80
[  305.252849][ T7043]  ? clear_bhb_loop+0x30/0x80
[  305.257565][ T7043]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  305.263497][ T7043] RIP: 0033:0x7f90085c1559
[  305.267950][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.287596][ T7043] RSP: 002b:00007f90067f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  305.296084][ T7043] RAX: ffffffffffffffda RBX: 00007f9008848090 RCX: 00007f90085c1559
[  305.304110][ T7043] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  305.312123][ T7043] RBP: 00007f9008658b20 R08: 0000000000000000 R09: 0000000000000000
[  305.320131][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.328137][ T7043] R13: 00007f9008848128 R14: 00007f9008848090 R15: 00007ffd9f64b858
[  305.336166][ T7043]  </TASK>
[  306.314066][ T7057] No source specified
[  306.422449][ T7059] device vlan2 entered promiscuous mode
[  306.481281][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'.
[  306.535456][ T7059] device hsr_slave_0 left promiscuous mode
[  306.655343][ T7067] netlink: 256 bytes leftover after parsing attributes in process `syz.5.693'.
[  306.677663][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.694'.
[  306.687260][ T7069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.694'.
[  306.709520][ T7067] netlink: 64 bytes leftover after parsing attributes in process `syz.5.693'.
[  307.748891][ T7080] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  309.061747][ T7088] gadgetfs: bound to dummy_udc driver
[  309.397758][ T5994] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  309.505962][    C1] gadgetfs: connected
[  309.539487][ T5994] gadgetfs: disconnected
[  309.863905][ T7081] gadgetfs: suspended from state 2
[  309.961436][ T7094] netlink: 'syz.3.702': attribute type 19 has an invalid length.
[  309.969227][ T7094] netlink: 'syz.3.702': attribute type 28 has an invalid length.
[  309.993707][ T5994] usb 1-1: device descriptor read/all, error -71
[  313.968352][ T7123] crypto_alloc_aead failed rc=-4
[  314.389471][ T5994] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  314.626921][ T5994] usb 1-1: device descriptor read/64, error -71
[  314.942456][ T6409] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  315.379269][ T5994] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  316.018436][ T5994] usb 1-1: device descriptor read/64, error -71
[  316.320725][ T5994] usb usb1-port1: attempt power cycle
[  316.775775][ T7185] o2net: Error -99 while binding socket at 127.0.0.1:7
[  317.429062][ T6409] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  318.015406][ T6409] usb 2-1: config 179 has no interface number 0
[  318.052172][ T6409] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF is Bulk; changing to Interrupt
[  318.105714][ T6409] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  318.174562][ T6409] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  318.237872][ T6409] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8
[  318.309295][ T6409] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  318.415462][ T6409] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  318.424586][ T6409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.508818][ T7210] md: personality for level  is not loaded!
[  318.519411][ T7210] md: md3 stopped.
[  318.567861][ T6409] usb 2-1: can't set config #179, error -71
[  318.614961][ T6409] usb 2-1: USB disconnect, device number 9
[  320.327927][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  320.334393][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  322.668867][ T7249] nvme_fcloop: unknown parameter or missing value 'ww'
[  322.885539][ T5986] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  323.690202][ T5994] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  325.516672][ T5986] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  325.539008][ T5986] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  325.560070][ T5986] usb 2-1: config 0 interface 0 has no altsetting 0
[  325.566761][ T5986] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  325.582820][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.616564][ T5994] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  325.636877][ T5986] usb 2-1: config 0 descriptor??
[  325.645121][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.671133][ T5994] usb 6-1: config 0 descriptor??
[  325.720887][ T5994] cp210x 6-1:0.0: cp210x converter detected
[  325.821738][ T7264] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.904779][ T4338] Bluetooth: hci2: command 0x0406 tx timeout
[  325.936295][ T5994] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[  325.944025][ T5986] usbhid 2-1:0.0: can't add hid device: -71
[  325.955703][ T5986] usbhid: probe of 2-1:0.0 failed with error -71
[  325.963966][ T5994] cp210x 6-1:0.0: querying part number failed
[  326.025241][ T5994] usb 6-1: cp210x converter now attached to ttyUSB0
[  326.139025][ T5986] usb 2-1: USB disconnect, device number 10
[  326.200151][ T5994] usb 6-1: USB disconnect, device number 7
[  326.487734][ T5994] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  326.721535][ T5994] cp210x 6-1:0.0: device disconnected
[  328.636167][ T7284] netlink: 'syz.4.758': attribute type 24 has an invalid length.
[  328.644622][ T7284] netlink: 'syz.4.758': attribute type 1 has an invalid length.
[  328.652933][ T7284] netlink: 228 bytes leftover after parsing attributes in process `syz.4.758'.
[  329.246862][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'.
[  334.386953][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'.
[  335.392039][ T7313] netlink: 'syz.4.767': attribute type 1 has an invalid length.
[  335.400549][ T7313] netlink: 244 bytes leftover after parsing attributes in process `syz.4.767'.
[  340.257171][ T7342] netlink: 104 bytes leftover after parsing attributes in process `syz.1.764'.
[  340.385700][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'.
[  340.529590][ T7350] ==================================================================
[  340.529691][ T7350] BUG: KASAN: vmalloc-out-of-bounds in bitfill_aligned+0x316/0x730
[  340.529717][ T7350] Write of size 8 at addr ffffc90004628000 by task syz.0.778/7350
[  340.529730][ T7350] 
[  340.529736][ T7350] CPU: 1 PID: 7350 Comm: syz.0.778 Not tainted syzkaller #0
[  340.529751][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  340.529761][ T7350] Call Trace:
[  340.529771][ T7350]  <TASK>
[  340.529778][ T7350]  dump_stack_lvl+0x188/0x250
[  340.529801][ T7350]  ? show_regs_print_info+0x20/0x20
[  340.529818][ T7350]  ? _printk+0xda/0x130
[  340.529834][ T7350]  ? bitfill_aligned+0x316/0x730
[  340.529856][ T7350]  ? load_image+0x410/0x410
[  340.529872][ T7350]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  340.529889][ T7350]  ? memset+0x1e/0x40
[  340.529907][ T7350]  print_address_description+0x60/0x2d0
[  340.529928][ T7350]  ? bitfill_aligned+0x316/0x730
[  340.529945][ T7350]  kasan_report+0xdf/0x130
[  340.529964][ T7350]  ? bitfill_aligned+0x316/0x730
[  340.529985][ T7350]  bitfill_aligned+0x316/0x730
[  340.530007][ T7350]  ? bitfill_aligned_rev+0x4d0/0x4d0
[  340.530031][ T7350]  sys_fillrect+0x600/0x800
[  340.530056][ T7350]  drm_fb_helper_sys_fillrect+0x2e/0x510
[  340.530074][ T7350]  ? drm_fbdev_fb_fillrect+0x184/0x200
[  340.530094][ T7350]  bit_clear+0x15f/0x1f0
[  340.530112][ T7350]  ? bit_bmove+0x210/0x210
[  340.530138][ T7350]  ? bit_bmove+0x210/0x210
[  340.530154][ T7350]  __fbcon_clear+0x596/0xa30
[  340.530182][ T7350]  fbcon_scroll+0x3a6/0x690
[  340.530203][ T7350]  con_scroll+0x50e/0x7a0
[  340.530226][ T7350]  ? atomic_notifier_call_chain+0x260/0x280
[  340.530249][ T7350]  do_con_write+0x27ee/0x6c40
[  340.530277][ T7350]  ? __up_console_sem+0x15f/0x1a0
[  340.530323][ T7350]  ? vt_resize+0xc0/0xc0
[  340.530343][ T7350]  ? is_console_locked+0x5/0x10
[  340.530357][ T7350]  ? complement_pos+0x486/0x900
[  340.530384][ T7350]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  340.530400][ T7350]  ? __msecs_to_jiffies+0x1a/0x40
[  340.530429][ T7350]  con_write+0x1f/0x40
[  340.530447][ T7350]  do_output_char+0x58a/0x960
[  340.530462][ T7350]  ? mutex_lock_io_nested+0x60/0x60
[  340.530484][ T7350]  __process_echoes+0x2a2/0x8f0
[  340.530509][ T7350]  n_tty_receive_buf_common+0x5edd/0x65b0
[  340.530568][ T7350]  paste_selection+0x351/0x4e0
[  340.530588][ T7350]  ? set_selection_kernel+0x17a0/0x17a0
[  340.530605][ T7350]  ? sched_dynamic_update+0x210/0x210
[  340.530627][ T7350]  ? __might_fault+0xb3/0x110
[  340.530646][ T7350]  ? tioclinux+0x222/0x3e0
[  340.530665][ T7350]  vt_ioctl+0x441/0x1ca0
[  340.530684][ T7350]  ? __vt_event_wait+0x260/0x260
[  340.530714][ T7350]  ? tty_jobctrl_ioctl+0x164/0xae0
[  340.530736][ T7350]  tty_ioctl+0x848/0xc30
[  340.530752][ T7350]  ? security_file_ioctl+0x7c/0xa0
[  340.530770][ T7350]  ? tty_get_icount+0xa0/0xa0
[  340.530789][ T7350]  __se_sys_ioctl+0xfa/0x170
[  340.530807][ T7350]  do_syscall_64+0x4c/0xa0
[  340.530821][ T7350]  ? clear_bhb_loop+0x30/0x80
[  340.530837][ T7350]  ? clear_bhb_loop+0x30/0x80
[  340.530854][ T7350]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  340.530871][ T7350] RIP: 0033:0x7fdaba185559
[  340.530885][ T7350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.530900][ T7350] RSP: 002b:00007fdab83dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  340.530918][ T7350] RAX: ffffffffffffffda RBX: 00007fdaba40bfa0 RCX: 00007fdaba185559
[  340.530930][ T7350] RDX: 000020000000a800 RSI: 000000000000541c RDI: 0000000000000003
[  340.530940][ T7350] RBP: 00007fdaba21cb20 R08: 0000000000000000 R09: 0000000000000000
[  340.530951][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  340.530961][ T7350] R13: 00007fdaba40c038 R14: 00007fdaba40bfa0 R15: 00007fffa8160ab8
[  340.530985][ T7350]  </TASK>
[  340.530991][ T7350] 
[  340.530994][ T7350] 
[  340.530997][ T7350] Memory state around the buggy address:
[  340.531006][ T7350]  ffffc90004627f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  340.531022][ T7350]  ffffc90004627f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  340.531032][ T7350] >ffffc90004628000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  340.531041][ T7350]                    ^
[  340.531048][ T7350]  ffffc90004628080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  340.531058][ T7350]  ffffc90004628100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  340.531066][ T7350] ==================================================================
[  340.531072][ T7350] Disabling lock debugging due to kernel taint
[  340.547528][ T7350] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  340.547546][ T7350] CPU: 1 PID: 7350 Comm: syz.0.778 Tainted: G    B             syzkaller #0
[  340.547572][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  340.547585][ T7350] Call Trace:
[  340.547592][ T7350]  <TASK>
[  340.547600][ T7350]  dump_stack_lvl+0x188/0x250
[  340.547632][ T7350]  ? show_regs_print_info+0x20/0x20
[  340.547657][ T7350]  ? load_image+0x410/0x410
[  340.547684][ T7350]  panic+0x2f8/0x850
[  340.547705][ T7350]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  340.547729][ T7350]  ? bpf_jit_dump+0xd0/0xd0
[  340.547753][ T7350]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  340.547775][ T7350]  ? _raw_spin_unlock+0x40/0x40
[  340.547795][ T7350]  ? bitfill_aligned+0x316/0x730
[  340.547819][ T7350]  check_panic_on_warn+0x80/0xa0
[  340.547843][ T7350]  ? bitfill_aligned+0x316/0x730
[  340.547865][ T7350]  end_report+0x6d/0xf0
[  340.547887][ T7350]  kasan_report+0x102/0x130
[  340.547909][ T7350]  ? bitfill_aligned+0x316/0x730
[  340.547933][ T7350]  bitfill_aligned+0x316/0x730
[  340.547957][ T7350]  ? bitfill_aligned_rev+0x4d0/0x4d0
[  340.547979][ T7350]  sys_fillrect+0x600/0x800
[  340.548006][ T7350]  drm_fb_helper_sys_fillrect+0x2e/0x510
[  340.548043][ T7350]  ? drm_fbdev_fb_fillrect+0x184/0x200
[  340.548068][ T7350]  bit_clear+0x15f/0x1f0
[  340.548089][ T7350]  ? bit_bmove+0x210/0x210
[  340.548115][ T7350]  ? bit_bmove+0x210/0x210
[  340.548134][ T7350]  __fbcon_clear+0x596/0xa30
[  340.548161][ T7350]  fbcon_scroll+0x3a6/0x690
[  340.548184][ T7350]  con_scroll+0x50e/0x7a0
[  340.548211][ T7350]  ? atomic_notifier_call_chain+0x260/0x280
[  340.548237][ T7350]  do_con_write+0x27ee/0x6c40
[  340.548267][ T7350]  ? __up_console_sem+0x15f/0x1a0
[  340.548304][ T7350]  ? vt_resize+0xc0/0xc0
[  340.548327][ T7350]  ? is_console_locked+0x5/0x10
[  340.548346][ T7350]  ? complement_pos+0x486/0x900
[  340.548372][ T7350]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  340.548392][ T7350]  ? __msecs_to_jiffies+0x1a/0x40
[  340.548421][ T7350]  con_write+0x1f/0x40
[  340.548445][ T7350]  do_output_char+0x58a/0x960
[  340.548464][ T7350]  ? mutex_lock_io_nested+0x60/0x60
[  340.548489][ T7350]  __process_echoes+0x2a2/0x8f0
[  340.548514][ T7350]  n_tty_receive_buf_common+0x5edd/0x65b0
[  340.548563][ T7350]  paste_selection+0x351/0x4e0
[  340.548586][ T7350]  ? set_selection_kernel+0x17a0/0x17a0
[  340.548608][ T7350]  ? sched_dynamic_update+0x210/0x210
[  340.548635][ T7350]  ? __might_fault+0xb3/0x110
[  340.548657][ T7350]  ? tioclinux+0x222/0x3e0
[  340.548680][ T7350]  vt_ioctl+0x441/0x1ca0
[  340.548701][ T7350]  ? __vt_event_wait+0x260/0x260
[  340.548728][ T7350]  ? tty_jobctrl_ioctl+0x164/0xae0
[  340.548752][ T7350]  tty_ioctl+0x848/0xc30
[  340.548774][ T7350]  ? security_file_ioctl+0x7c/0xa0
[  340.548797][ T7350]  ? tty_get_icount+0xa0/0xa0
[  340.548820][ T7350]  __se_sys_ioctl+0xfa/0x170
[  340.548841][ T7350]  do_syscall_64+0x4c/0xa0
[  340.548860][ T7350]  ? clear_bhb_loop+0x30/0x80
[  340.548880][ T7350]  ? clear_bhb_loop+0x30/0x80
[  340.548901][ T7350]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  340.548922][ T7350] RIP: 0033:0x7fdaba185559
[  340.548940][ T7350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.548959][ T7350] RSP: 002b:00007fdab83dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  340.548982][ T7350] RAX: ffffffffffffffda RBX: 00007fdaba40bfa0 RCX: 00007fdaba185559
[  340.548998][ T7350] RDX: 000020000000a800 RSI: 000000000000541c RDI: 0000000000000003
[  340.549018][ T7350] RBP: 00007fdaba21cb20 R08: 0000000000000000 R09: 0000000000000000
[  340.549032][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  340.549046][ T7350] R13: 00007fdaba40c038 R14: 00007fdaba40bfa0 R15: 00007fffa8160ab8
[  340.549070][ T7350]  </TASK>
[  340.549199][ T7350] Kernel Offset: disabled
[  341.366503][ T7350] Rebooting in 86400 seconds..