last executing test programs:

10.375130301s ago: executing program 0 (id=1074):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x40, 0x22, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}, 0x1, 0x4000000, 0x0, 0x801}, 0x0)

10.290500439s ago: executing program 0 (id=1075):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00', <r1=>0x0})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x804010, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r2, 0x81ff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r4, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000001c0012800990b65677db9efc260000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB="08001f0008000000"], 0x4c}, 0x1, 0xba01}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan4\x00'})

9.054938963s ago: executing program 0 (id=1080):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$befs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0xcf16, &(0x7f0000000040)=ANY=[], 0x0, 0x9e13, &(0x7f000001da80)="$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")

8.291111687s ago: executing program 4 (id=1083):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
socket$kcm(0x29, 0x2, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0)
socket(0x10, 0x3, 0x0)
capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

8.108594922s ago: executing program 0 (id=1084):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa000000a})
finit_module(r2, 0x0, 0x3)
setsockopt$sock_int(r0, 0x1, 0x11, &(0x7f0000000180)=0xfffffff7, 0x4)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
syz_usb_connect(0x5, 0x5ff, &(0x7f00000010c0)=ANY=[@ANYBLOB="12011001cbee2310300880007241010203010902ed0504020070000904aa"], 0x0)
recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000)
r5 = fcntl$dupfd(r4, 0x406, r4)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000010}, 0xc001)

7.764224743s ago: executing program 4 (id=1087):
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc811}, 0x4040040)
userfaultfd(0x1)
add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f000000f000/0x2000)=nil, 0x2000}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x42)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4ce261fabd43de556e8a0ecaa6f30a59535412da258d8dd7c2d82e7c3adc70c5697b4f571e8aec15b180f4b7123bc524518b856a91c0fe8a8a6fb6c06544a00bf44f9ac38e15d8035866f083c70c7f90e969d130fcae501a4e410ed7d54eae6f0ea36f6747a611a7f2779717052731c7", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r1 = gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r1, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x890)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000005000000280000002800000003000000010000000100000f03000000020000"], 0x0, 0x43, 0x0, 0x1, 0x5}, 0x28)
sched_setaffinity(0x0, 0xfffffffffffffd58, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
unshare(0x400)
bind$can_j1939(r4, 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x24044084, 0x0, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x64, 0x0)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x53, 0x4, 0x6a, @private1, @mcast2={0xff, 0x5}, 0x8, 0x40, 0x7d, 0x3ff}})
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)

7.048251872s ago: executing program 3 (id=1091):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcb3e)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4)
sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2})

6.839018299s ago: executing program 4 (id=1092):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
read$FUSE(0xffffffffffffffff, &(0x7f0000001f40)={0x2020}, 0x2020)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=<r3=>0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x5, 0x0, 0x0, 0x9bae, 0x40, r3})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @val=@tracing={0x0, 0x9}}, 0x20)
syz_emit_ethernet(0x2a, &(0x7f0000003000)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0x8}}}}}, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='cachefiles_ondemand_read\x00', r7, 0x0, 0x2}, 0x18)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)

6.215600108s ago: executing program 1 (id=1093):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcb3e)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4)
sendfile(r4, r4, &(0x7f0000000000)=0x1, 0x4)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2})
ioctl$TIOCGPGRP(r5, 0x5437, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x4c, 0x1e, 0x109, 0x102, 0x25dfdbfc, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "ab24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x2000c000)

6.163370029s ago: executing program 2 (id=1094):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @local}}}], 0x20}, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18)
connect$can_j1939(r3, &(0x7f0000000280)={0x1d, r4}, 0x7a)
sendmmsg(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000380)="3886ef14fe2c4fd262b92b04945cc168", 0x10}, {&(0x7f0000002640)="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", 0xde3}], 0x2}}], 0x1, 0x40000)

5.483031921s ago: executing program 4 (id=1095):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000ec"])
munmap(&(0x7f0000456000/0x2000)=nil, 0x2000)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.306890494s ago: executing program 3 (id=1096):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpid()
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000002080)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$eJzs3WuQXNV9IPBzu3s0Lz1GAgcZzGiQ0Ybg2BrxKj9SsZJN7BQQSi5SDmJlw4BGRLYkVHoEECSILHhRAS6cIpXg5ANxYXYxiosq2BiFMuGxEmtjq9h4qS1MrZ3F/uAtwqIKoKVcXs/W9NzT032779yenh4hid+vYG7fM6f/99xzT9++/9NX0wEAAID3hEN37Dx62em/+90/G3/71t/7h623hcFytbwvVhhKlze+Wy3kWOqtLK8us+PiV2/+xk9Hrv3t7zw68PV3Dm48a9MPf+eUa5/8wsUH7v/rZ95a9PgvXy2KG8fTudPryetJCH3fPvIXXzr4wmmTZcniyZ+lvSEsTZY9szQJ4fb6EKM/DyFsTFeWZ+I/9vb5myaXt93V21C+JFPPeH9vmzzOSQhhz9EbPhR+9Fvrb//+im/+Xc/+1/ZOV0n66sZTCIuvrn9+TwihP/1/UhxtcTwm6XJdCGGg7nkfLWjXB9to96TVmfK4fka6XJAuBwvixd+vzKyXMvWy61FPZjlQsL25ymtHp/WKLMysJ12KG+W1M5YvTZffSpfnzjJ+Od2HchJKSajUmr8lmR4joe64JSGpHsu+2nqpdmxDuv+Z9SSzXsqsl3sy+1XdbjrQyknSWB7rZcrj6biSlp9Vf65u4fK6x/X13h/L0hfqO9k6maCDTQ9q+1UV23VkhrYcC6W6c1Cr8tqBTw/GYFo2mCxres5EC/F3B9ffvaq84dlDQzntSB5N0vhJR/H3fG/pws8/sm939n29Fv/qUhq/1FH8H19y+I0r933tq7nx743xyx3FP++pgdcvee6Olbn9cyT2T6Wj+GOvPn/PilOv2Z/b/gdi/L6O4q89cLh30dGnns5t/2jsn/6O4r/yiU/95OGXnngtN36I8Qc6ir/hwPYv9w4fPSc3/tOxfwY7Gz9v7r/o5eHhn43kxX8xxl/UUfyH9vZ+/MEld12ce3zXxf4Z6ij+pWc/efvCo0+cmXfuTB7o1jsnwHvTKek11p3peqd55lzV5Qt/NVKZuuZbmP6/qJsbylx8ZvMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiG933ov376f3126PVKut6bPnilNLWM5QtCSPpDCDt3je3YtXnbdSNfuH73jm1jW0bGdo2Mb9u146aRC359ZMf49i1jN03+dvTD5089b1lIppbJmU3b7p2YmCgNNZbF7f3bs/f/aNVH//e/hDD6vh8MV3Lbv/r+rQ+e2uJnRrJ24pNbd1/2gwv/Nt2vobRdQy3aNTExMRFy2vV/rvjFg39+5KfnhDD6KzO16/lXfvMfGxpULZiOkyr1hqkG9SYDLdtRa3XanthflU2bt4yPzty/k88v5+zHv7v5tZ9vuvErv5jq377c/Wizf/vXTmwp/eX6S//fX94yVVDUrnfruE/2dzkn5mS74l7E9sX+60v7e3G6X4tz9quSs193fP/pl759+r639obRypsrmo910X71pAOgJ3l/W9uNWxhIljaU96X14xGPz1u9a+v21Ttv2vPhzVvHrhu/bnzbx9ZcsOai0QsvunB1dc9Xd3n/4/b/TZv7f2zG05I/3vut+LO98dTYrgWz7o/JdhX3R32L8l5/A5d/6b6P3f/cZVMFReeVWLt2PkmXA5PHeU2oG2/NfdVqv4qOTwhhpFU/vPHWxeG0/7H59qLzUP2Rqf+ZkaydeGHlv/7tR/9m+W9MFRyT83x9gzo8z9daPd2ean/1pcdj4jjt3970bNqbDLZs15oXnuu5+9C//EmtfQsWhBvHdu3asWbq58K0pQuTM1q2K1sa92tF9Wc5pN0SasO0xXid1BOm2pc9f8bq2V4dTH83mCxruV9Z8XcH19+9qrzh2UN5PZ08OrXF/rBoapl8IKfmlswTy7UGt9r+8fr6Kxofw5/+m8c/+/jfX9A0Ps6b+lm0X0nOfn3zpYfu+/pX/sPfd2+/Pv2bh4f+9X/+0aqpgmNwXglzOq+UpxpSa3XanqT+vHJeCEWvvxWh9X7kvv5Krfen6PWX3c50/dbxRjLrg6Hc0ev1vKcGXr/kuTtW5r5ej8z0eq3f2VsanlcueL0eL+9L2ddXUmlsx/y9vhoGSrJ24jt3nrL3mVvXnT5VUPR+Wavdalyf30b+kbNf/3jly8PXj/z7/96988Y3fv2xq344tvZPpwo6P+6xLd057n1p//bl9G+t1THvrO/fj1x7/ZaNU+VF/fzuXf+my4L8J55Kdt6054tjW7aM79jZ3n61+34at5Pt5U7fT+PZbVnBfpWa9mv+HrTTX+2+3mL7N3bcX42vt8GQdPS+sOd7Sxd+/pF9u4eanpVu6OpSGr/UUfwfX3L4jSv3fe2rufHvjfErHcUfe/X5e1aces3+3PgPJGn8vuL4i0NT/LUHDvcuOvrU07nxR2P7+ztq/yuf+NRPHn7piddy44cYf7Cz/n9z/0UvDw//LDf+i0m6nclrpBAee/v8TVPrSehJX2+xHT0N7QrZ9SSzXsqsl+vXS3EWId1AOUkay2O9tPysura08oc55fEqrG/51PKduB6yD2YuP96U6s79rcqLrlMBAE528fP/eA0aP/8fTy+U8mcaYNpc87DlOXFjHjY9n9P4GevyNH58fpwHHP5IGJ1c3jYydaE/288R4ushO88Zt3POBxtjtJyfOFC/ker2m+Y5i+bfV2bWY7um5ssrdXloqjmvqYQ25t+btzPz/Htm94s/zxq5s6lZI3XzVtnj15POmLW63yHT3spkhLzxkZ0Xi/dzDC8O66rba3N8ZO+jicchex9N3M7pmRNnp/fR5I2PoeZ+aGhXHB+x3gzjo9rk4s8jm49fmKF/p49f62jZ4zeL4903WX++P5/twrxhy1PasZs3nN/Pw46LeckW8Y/xvOTCpvjpC+x4nzeM5bGfKm3OJ342p7xb84nxdBHbdWSGthwL5hOBk1XM/+N7xGT+P3kB/n8z9YrylOxVY4yXe59Qzk3YRXlH8316Ax29j284sP3LvcNHz8m9znm63fv0tjesDRTc91PUj6sy64X9mDNBU5TvZbdT1O/Z+zIGw6KO+v2hvfd//MEld12c2+/rpt5Ii/v9voa1RQX9fgLkC63jyxdOpnyhOX6X7mMomj/Lz0fKtXbMSz6S3vg0X/nIH+SUzzYfGWh6UNuvquM3H5l+I23IR3qObbsAgBNHzP9rn5+l+f8/xwuL9DqiKG89N7Me4+XmrTnXJ3l56++nyxsz9QfTf1Ex2+vmS89+8vaFR584MzdveaDdPPQ/NawNFeahc8ubc/OIdd25Xzw3j6jlWXPLE3PbX8sT55an53xMW5enzy2Pzu2fWh7dOA9w3+HpTGOm+HEeIDd+bR6gi3nuL6crHbs8t2C+LrOxuNrufN2xzqMnS3oWN+5nY1480J08Ov3ns/OVR1+eUz7bPHqw6UFtv6qO3zy6sVweDQCcrGL+Hy/jqvl/bwjPxQr98cHcPmfPzQu6dN2e/XsgtfgvzkteOR2/S5//Fud98523zndeP9/zEif657/zPS80VP0DnvM1T/au3e86L3nxP9cetZ0XpxuVFwMAcDyL+X9M8+Pn/89l6s01P2nK33qmLiGn85MTLz+vr3cC5+dXhGOVn/eeyPn5iT7/Nb/3yZxc+f+0Dj8Xf2fiJM7/q22W/wMAnJBi/h//2WP8+3//JV3P/t36NvP0B7K38/oc3efoQZ7eRp7e5Xm2GL/+PoATeB6gPPd5gP5jfn98/3T9k2keoKonmAwAADgB9FQzpeZ/Z/+5dJn9d/Z5/y7/ypz67aqkl8fX7NoxPn7V7u0bx3aNX7Xt+o3jO6+6YcfmXbvGa9fOc8sbc/OWNG/sCZW0P1rXy+ZtS9K/h7Ak5+8hZOvHsGdUHzT/PYTsZvsL/o7A9PFrr715x680Q/1W4yPveOfF/8Oc+lHt+F/7R+ddtWnnVZu3bd61eWzL5j3jjfWGqv+Suv3vzYyfU87q+1IzP5qUZv/9nfHwzK0dpaZ29KT9kff97EmmHUvTlizN+/6DnHZ/97/9+R+fPfGLh0MYfV/5A3Pqv2TtxH++Yvz3dx36wfbJ9pdmbH+tZtquou8rzdaP+1PZcv3OXR/adP3ubdlvlOxMnM8o1dbn6b6G9OVfbnN+YkNO+Wz//X656cHxqe35CQAAGsTP/+P1bPz88CvpBVQsL8zTt03Vm+vnx7l5+mh7eXr2e8mK8vRs/bi/7ebpfXPM07PbL8rTW9Vvlafn5d158f8gp/5stT9OOrjPo5L2wyP7dueOk6vbGyfZ7zMoGifZ+rMdJ8kcx0l2+0XjpFX9VuMk77jnxf9MTv08ReOhUhsPc7svJ3c83NveePi1zHrReMjWn+14KM1xPGS3XzQeWtVvNR7yjm9z/MYJgu7M/04OjOq4GL/qhut3fLGu3nx//0VoviWjnfYtmH7u/H7/R6fa79/5ve9r7u0PYW21JK/98fOBBbNqf7v3lc29/UX9P4v7yhaHpvvKctv/4txmwtpv/6zuS7wt/q7d73fJyKve/PxjNV+bDrui+8+K5nHX55TPdh53QdOD45N5XHj3xPw/Xs3F/P+udNntj4FO/O9J6+D++3gO9j1m+f3f5nXMe+79PPuRu/dzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJNCb2V5dXnojp1HLzv9d7/7Z+Nv3/p7/7D1tl+9+Rs/Hbn2t7/z6MDX3zm48axNP/ydU6598gsXH7j/r595a9Hjv3y1MPBQ9Wfl3HS1L4Tk9SSEvm8f+YsvHXzhtMmyJIRQTob2hrA0WfbM0iQTYfTnIYSNtXY2/vKxt8/fNLm87a7ehvIlmSDZ/QqD5die+naGcGPhHnEC6kvH2Z6jN3wo/Oi31t/+/RXf/Lue/a/tna6S9NWNpxAWX13//J4QQn/6/6Q42pbHJ6fLdSGEgbrnfbSgXR9ss/2rc9bPSJcL0uVgQZz4+5WZ9VKmXnY96sks6/a1v2DTHclrR6f1iizMrGdPRnOV185YvjRdfitdnjvL+OX4fxJKSajUmr8lmR4joe64JSGpHsu+2nqpdmxDuv+Z9SSzXsqsl3sy+1XdbjrQyknSWB7rZcrj6biSlp9Vf65u4fKc8veny770hfpOXA/ZB1MGmx7U9qsqtuvIDG1J/cfWxZXiZ7ahVHcOalVeO/DpwRhMywaTZU3PmWgh/u7g+rtXlTc8e2gopx3Jo0kaP+ko/p7vLV34+Uf27V6eF//qUhq/1FH8H19y+I0r933tq7nx743xyx3FP++pgdcvee6Olbn9cyT2T6Wj+GOvPn/PilOv2Z/b/gdi/L6O4q89cLh30dGnns5t/2jsn/6O4r/yiU/95OGXnngtN36I8Qc6ir/hwPYv9w4fPSc3/tOxfwY7Gz9v7r/o5eHhn43kxX8xxl/UUfyH9t7/8QeX3HVx7vFdF/tnqKP4l5795O0Ljz5xZt65M3mgW++cAO9Np6TXWHem653mmXNVly/81Uhl6ppvYfr/om5uKGNyO4vnMT4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACenf7rlgs9d8cnPrK8kISQ5dSZaiL8rL1i7dqSD7Y69+vw9K069Zn992fIO4gAAAADFYh5eqpX0heXhhqQ/nNGyfpwjOCOuJY3l2TmEGCc7R9BpnFKLOKUO4pS71J5Kl+L0dCnOgi7F6e1SnL6COH2hvTj9M8SpTI6ANtszMGN72o8z2KU4C7sUZ1EmRKdxFnepPUu6FGdoxjjtj8OlXYqzrEtxTulSnFO7FOd9XYrzK12Kc1qX4mTnlGc7DhelNU/Pi1N9UC6MU0nKtV+0mk8/Ld3OmXPczmDBdhYVvR+3uZ3+NrfzwczzSrPcTl+b27lgjttJ2tzOr81xO6WC7cRxe2O2fXE7ca3N8X9Tl+Ls6VKcm7sU55YuxfmTLsX50y7FuTU0XpzONg5Au2L+P53vDYXeym+EgfSMk50FiPnuiurP5ve7vBNSjPeBTPmConjZRD0Tb8Vs25edQMjEW5kp72mIV6nlIzPE66uPtyrzy5n29xNrW7etPt65mfLeGeI17AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAP/dMsFn7vik59ZH5Iw+V9LEy3E35UXrF070sF2D66/e1V5w7OH6st6Kx0EAgAAAArFPLynVtIXeitrQm+yoKFeXzoP0Jeul4emlsOLw7rJZTJSqq4PJEtnfF4lfd7qXVu3r955054Pb946dt34dePbPrbmgjUXjV540YWrN23eMj469TOE3oJ4IYTq9MPOm/Z8cWzLlvEdO6cKs+1fnj5vebqepM8b/kgYnVzelrZ/WcH2Sk3bm78HxUcPAAAAAAAAAAAAAAAAAAAAAAD+P7v2GyJpXQcA/PvMzM6Mq5cb/hsP7xzOU6ys9FpDS9wHggT/HC5CzFqbHHmStHqH3onZpAepKUWgHBwXvujCJE1645+UyD8cGGYJ7XWESvmiXhRahoovQpnY3Xnm38442yS35/X5vJjnme/v+/t9f7+H4+D7zAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxa8/XJ2drU9Mx4EpEMyGn0kY3li2laHaHuV57c/oPS+nfO7IyVCiMsBAAAAAyV9eFjrUg5SoV85OPkxW8bomMg2n0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/2e+Pjlbm5qeOTqJSAbkNPrIxvLFNK2OUPfVtx7+7Evr1/+tM1YZYR0AAABguKwPz7Ui5ajEaTGWnLzQ+bei2buBtT3zl/LasnXWrTCv993BoLzTVph3xgrzPjYkb3PzenMAAADAh1/W/xdakYkoFdYs64ez/n9YX5/lndqTl29eq51J76u4kiQAAABgBbL+v9SKVKJUqLT69ZX2+xvaocWfzrP5w363z+af3pOXzR/2e/5lzavf6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgw2O+Pjlbm5qeyScRyYCcRh/ZWL6YptUR6m56avwfl+y/Y0NnrFQYYSEAAABgqKwPb7fe5SgVxmMsjl7s+9dfdN+jX3r08cmIWGrzi8W4ecuOHTdsWviMTVneOS/sH/v+c69/e1neOUufq3ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgAzNfn5ytTU3PHJVEJANyGn1kY/limlZHqPvK57/4lwcPPvFaZ6wywjoAAADAcFkf3u79y1GJYhTjxMVvnb3+glzP/EHvDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAjx43fvOUbW+bmtt7gZnVuGvmIw2Ab/+NN9s/pcNnPh/+mvNrbWN3/lwAAgA/eqZFE47900uWrvWsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBwMF+fnK1NTc+Uk4hkQE4jU2oHsrF8MU2rI9RNn3yxtOadp57pjFVGWAcAAAAYLuvD271/OSoxFmNxwuK3fu8EGgv9/8Qh3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwWJmvT87WpqZn1iQRyYCcRh/ZWL6YptUR6j6wa+/n7j/2exd3xkqFERYCAAAAhsr68GIrUo5S4eNRilOa3+e6JyT55rX/e4H2vO1d08ZXPK/eNS//fvOSQkRr3l09Jys0T7M0r5ytN7F0bdWrtuflmvOqHfMq0Spfbc1bfFi7u6qtGXK+5U8eAAAADp2s/y+1IhNRKpQ6+v+fNq9HNa+D+tzcod04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDYma9PztampmeSJCIZkNPoIxvLF9O0OkLdW3770WO++rO7d3bGKiOsAwAAAAyX9eHt3r8clVgXH4l1i31/THTnZ3n/rL17/73/+uuZEWefeGB9oXfZH2U3v37lwqd7PyJy3dm5iGOb9ZIB9X7z+3tv2th498GIs0/In7KsXrx/ve4l08Zjta2X7XjuwPYhDwcAAACOEFn/P9aKTESpcP3A/j/rvIf0/y2LDfixN+36xfHNz2ZH3jMjN9GslxtQ7wsbH/7z6ef9/fWF/n95vU+27j6997r7j+8quBTpkaSNqet2bj5w7r5cduql+vme+tlz+fK3Xvv3NTff8+5S/XKUm/G1PVtZqrb8s6d8pI253J6ZS9/bU++uXxhw/jt+98zBX629++2F+m+dOt6qf0b0q7908sLA+nFU2hi/4s7d5+/dv7m7fkRU+9V/4+2L46Q/Xnt77/nH42DXwp1PvvOz9wGkjRc2vLnvvPsqF3TXT3rqZ8//5wcf2P2Te777eFY/+1uRM0+LFdbP9dR//q7jdj172+Vru+vnBpz/6StfWr+t+p0/9J7/6q5VCwN3sfz8D531yFUvb0lv7R0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4sszXJ2drU9MzuSQiGZDT6CMbyxfTtDpC3VcvefGNK+/+8Q87Y5UR1gEAAACGy/rwdu9fjkoUoxjji33/Y7Wtl+147sD2mFgaTZrXwty2G3d84pptO6+/epV2DgAAAKzUq5cki/1/oRWZiFJhY4w1+/+p63ZuPnDuvlzW/+cWrklEXHPt3Nazo5X3/F3H7Xr2tsvXtt4TRCz+WUB5Ie8z7byLLnxx4s0/ff30vnmb2nkvbHhz33n3VS7I8qIz75xovZ946KxHrnp5S3pra3+deZ/62ra55uuJbN3xK+7cff7e/Ztz2XuM5nW8uW6WN5fbM3Ppe3vquYkoLYznm3nl5rkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOXm65OztanpmchHJANyGp2agWwsX0zT6gh1L934y9uPeeeJdZ2xUmGEhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+wAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhf36CY2j7OMA/jy7yZtNNmmT9gWjYppWRamHFgURvaioSCtS8FQpUm3tQRQEEaUeTKUVS1W8CFYvRVRQoxQq2FgsrZKK/4oXDyooVA9CKQY0S/Ggks0zm81kpxs3KiifDyxPnmdmvvObmWefzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL9KT9dwvT2x56Ha7Rfc/MkT904/fut7D+y67LE3fhjdduPHB/tePTu5ffWOr29aue3IfRsm9r90/JeBd3471Tb40dlmbepWQohnYgiV96eef3Ly0/NmxmIIoRwHx0IYiiuOD8VcwvpfQwjbG3XO33ho+qodM+2ufT3zxpfnQvLXFarlrJ5Zg/Pr5b+lkubZztojV4Rvb9i8+/NVb7/VPX56bG6XOLNPOc2nEJZtbT6+O4TQmz4zstk2nB2c2k0hhL6m465pU9fFi6x/XQi1XL/uwtT+L7XVNjnZ9jW5fim3X76f6c61fW3Ot1RFdbTdr7ez8/Xn+vnFaKkada5rPT6U2ndTu/ZP5pezTwylGLoa5d8f5+ZIaHpuMcT6s6w0+qXGsw3p+nP9mOuXcv1yd+666udNE60c4/zxbL/ceLYcd6Xx1c1rdQt3FIyfn9pK+qKezfoh/8es6oI/GtdVl9U1dY5a/gmlpjWo1XjjwaeHUU1j1bhiwTG/t5Btm9z89KXlLR+cGCyoIx6MKT92lL/zs6H+u97c+/BwUf7WUsovdZT/3caTP9259+UXC/Ofy/LLHeVfebTvzMYP96wpvD9TcyvIYvJj6mfb7j710TOr/n/PeKtnXc88kN3/Skf1Xz9xsmegdvRYYf3rs/vT21H+N9fd8v3rXx4+XZgfsvy+jvK3TDz4bM9I7fLC/GOzX4VqfYZ2MH9+Hr/6q5GRH0eL8r/I7v9Ai/zYNv+1sf3XvrJ834bC+bkpuz+DKX/hD9u58m+75Mju/trhi4rWznhgsb+wALSyMv2P9VTqt3vPPDRdavmeuVRN7wsvjHbN/gL1p8/AX3minJnzLPsb8wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YgQMSAAAAAEH/X7cjUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgqAAD//0wFDK4=")
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_procfs(0x0, 0x0)
getdents(r1, &(0x7f0000000000)=""/24, 0x18)
getdents64(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRESHEX=r0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="1d80", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="1000000000000000"], 0x64, 0x0)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x1, r5, 0x0, 0x4, 0xd})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r5, 0x0, 0xffffffffffffffff, 0xa3})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x1, r5, 0x0, 0x2000003, 0x5})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r5, 0x0, &(0x7f0000000480)="a9", 0x1, 0x8})
rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x24008894)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_buf(r6, 0x0, 0x11, &(0x7f00000002c0)=""/225, &(0x7f0000000100)=0xe1)

5.291639179s ago: executing program 1 (id=1097):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0)
ftruncate(r1, 0x3)
syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/34, 0x22}, 0x6e1}], 0x1, 0x20, 0x0)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa1c0000000000119078000000000000000000004e200008907800"/42], 0x0)

5.241411742s ago: executing program 2 (id=1098):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
socket$kcm(0x29, 0x2, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0)
socket(0x10, 0x3, 0x0)
capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5.153930147s ago: executing program 4 (id=1099):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, <r2=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x5, 0x4})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000780)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x9, 0x8, 0x5, 0x0, r2})
sendmsg$NFT_BATCH(r1, &(0x7f0000000dc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x51c}, 0x1, 0x0, 0x0, 0x4048010}, 0x40004)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r5=>0x0, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000e00), 0x20400, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})
ppoll(&(0x7f00000000c0)=[{r6, 0x2004}], 0x1, 0x0, 0x0, 0x0)
io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)

4.718853835s ago: executing program 0 (id=1100):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000380), &(0x7f0000000040)=@udp=r1}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00')
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000280)="74df6637f0fe74cbc32b049ea15e3caa96b66e9ea8fd80e17812960d260f497077ddf85c2794cf50e91b62b35cf4961fe20c0a7080aad6dcfecffcb2bade508ada6116e4882d4cb2d929b14efda404c5e65407e54385a2b287510a845537f1861be15aabf79554ee394e3a01dd1cb2f26d477e5e1a35a9bb8cf770628acb64ccd6f55566d6472263", 0x88}, {&(0x7f0000000580)="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", 0xf00}], 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="2e67676765420f21d2f26466440f35c74424003c000000c7442402ad7d9c79ff1c2426460f01d166baf80cb8a0b4f888ef66bafc0c66b8007066ef3665a00bae00000000000066baa000ed362665470fc75a00b9800000c00f3235008000000f300f2219", 0x64}], 0x1, 0xa, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0xaaaab01, 0x23, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]})
socket$key(0xf, 0x3, 0x2)
close_range(r10, 0xffffffffffffffff, 0x0)

4.285718577s ago: executing program 3 (id=1101):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000730a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1a, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000)

4.150666363s ago: executing program 1 (id=1102):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x4f, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3, 0x2}}}}]}]}, 0x48}}, 0x0)
socket$kcm(0x29, 0x7, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
flistxattr(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0)

2.509534788s ago: executing program 2 (id=1103):
add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffa)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xffffffffffffffff}}, './file0\x00'})
r1 = fsmount(r0, 0x0, 0x80)
r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'net_prio'}, {0x2d, 'cpuacct'}, {0x2d, 'net_prio'}, {0x2b, 'rlimit'}, {0x2d, 'hugetlb'}, {0x2b, 'rlimit'}, {0x0, 'rlimit'}, {0x2b, 'cpuacct'}, {0x2b, 'io'}]}, 0x4b)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000007c0), 0x880, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r4, 0x0, 0x6, 0x80000000})
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000980)={0x30})
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pwritev(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000000)="0100000014", 0x5}], 0x24, 0xff, 0x10001)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
unshare(0x8d7607a4a216d227)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f00000002c0)={@id={0x2, 0x0, @d}, 0x40, 0x0, '\x00', @b})
pread64(r6, &(0x7f0000001300)=""/4118, 0x1016, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

2.383207907s ago: executing program 1 (id=1104):
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000040))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x1}, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
lseek(r5, 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, &(0x7f0000002140))
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)
time(0x0)

2.382573588s ago: executing program 2 (id=1105):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r2, 0x0, 0x40000100)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'})
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000040))
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709001000000000000001001f0005000700000000d7080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000ffff00000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)

1.442002811s ago: executing program 0 (id=1106):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcb3e)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4)
sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2})

1.440725314s ago: executing program 1 (id=1107):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x4000002)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000340)="034f1c97dd7c78aa"})
write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) (fail_nth: 15)

1.033193488s ago: executing program 1 (id=1108):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @local}, 0x20)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaa"], 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0xb, &(0x7f0000000180)=[{0xa3, 0x0, 0x2, 0x7fff0000}, {0x0, 0x40, 0x9, 0x8}, {0x100, 0x1, 0x81, 0x1}, {0x6, 0x1, 0x8, 0x2}, {0x4d, 0x8, 0x9, 0x80000000}]})
getpid()
write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
umount2(0x0, 0x2)
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="810000000000"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x18}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xd7}, 0x0, 0x0, 0x0})
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$EVIOCGMASK(r7, 0x80015b12, 0x0)

1.031575912s ago: executing program 2 (id=1109):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa)

658.814659ms ago: executing program 3 (id=1110):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x1, &(0x7f0000000080)=ANY=[]) (async)
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000), 0x8) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
io_uring_setup(0x2c4c, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x8) (async)
openat$autofs(0xffffffffffffff9c, 0x0, 0x541200, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f000001aa40)=""/102400, 0x19000)

532.318535ms ago: executing program 4 (id=1111):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f00000006c0)={0x50, 0x0, r8, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101, 0x0)
dup2(r9, r7)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r9, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

395.223798ms ago: executing program 3 (id=1112):
syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)

238.576037ms ago: executing program 3 (id=1113):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x400c004)
openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0)
sendto$packet(r3, &(0x7f00000002c0), 0x0, 0x830, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r7, r7, 0x0, 0x200000)

0s ago: executing program 2 (id=1114):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
epoll_create(0x6)
r2 = semget$private(0x0, 0x207, 0x0)
semtimedop(r2, 0x0, 0x0, 0x0)
unshare(0x22020600)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x0, 0x0)
lseek(r3, 0x5, 0x3)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10)
finit_module(r4, 0x0, 0x7)
r5 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000100)=0x5, 0x4)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x894}, 0xc008080)
fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x1})
io_uring_register$IORING_REGISTER_FILES(r5, 0x20, &(0x7f0000000000)=[r5], 0x1)

kernel console output (not intermixed with test programs):

32004][ T7366] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  219.339900][ T7366] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  219.348383][ T7366] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  219.356217][ T7366] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  220.100750][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.397'.
[  220.193639][ T5873] usb 3-1: config 0 has an invalid interface number: 236 but max is 0
[  220.400668][ T5873] usb 3-1: config 0 has no interface number 0
[  220.407931][ T5873] usb 3-1: config 0 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  220.422643][ T5873] usb 3-1: config 0 interface 236 has no altsetting 0
[  220.431689][ T5873] usb 3-1: config 0 has an invalid interface number: 236 but max is 0
[  220.454997][ T5873] usb 3-1: config 0 has no interface number 0
[  220.470095][ T5873] usb 3-1: config 0 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  220.487431][ T5873] usb 3-1: config 0 interface 236 has no altsetting 0
[  220.985500][ T5873] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  221.083544][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.153817][ T5873] usb 3-1: Product: syz
[  221.167473][ T5873] usb 3-1: Manufacturer: syz
[  221.194025][ T5873] usb 3-1: SerialNumber: syz
[  221.208766][ T7385] trusted_key: encrypted_key: insufficient parameters specified
[  221.224525][ T5873] usb 3-1: config 0 descriptor??
[  221.373494][ T5873] ti_usb_3410_5052 3-1:0.236: TI USB 5052 2 port adapter converter detected
[  221.384209][ T5873] ti_usb_3410_5052 3-1:0.236: missing endpoints
[  221.679235][  T898] usb 3-1: USB disconnect, device number 12
[  221.706102][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.404'.
[  223.088648][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'.
[  223.516888][ T7408] netlink: 'syz.2.409': attribute type 9 has an invalid length.
[  223.524723][ T7408] netlink: 'syz.2.409': attribute type 7 has an invalid length.
[  223.532374][ T7408] netlink: 'syz.2.409': attribute type 8 has an invalid length.
[  223.958633][ T7413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.407'.
[  223.999721][ T7411] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  224.007569][ T7411] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  224.016132][ T7411] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  224.024029][ T7411] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  224.864611][ T7419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  226.273464][   T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  226.502383][   T10] usb 4-1: config 0 has an invalid interface number: 236 but max is 0
[  226.521570][   T10] usb 4-1: config 0 has no interface number 0
[  226.527915][   T10] usb 4-1: config 0 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  226.563332][   T10] usb 4-1: config 0 interface 236 has no altsetting 0
[  226.581836][   T10] usb 4-1: config 0 has an invalid interface number: 236 but max is 0
[  226.590287][   T10] usb 4-1: config 0 has no interface number 0
[  226.603871][   T10] usb 4-1: config 0 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  226.630335][   T10] usb 4-1: config 0 interface 236 has no altsetting 0
[  226.645978][   T10] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  226.657083][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.664276][ T7444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  226.692670][   T10] usb 4-1: Product: syz
[  226.702790][   T10] usb 4-1: Manufacturer: syz
[  226.712940][   T10] usb 4-1: SerialNumber: syz
[  226.739376][   T10] usb 4-1: config 0 descriptor??
[  226.756387][  T875] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  226.759525][   T10] ti_usb_3410_5052 4-1:0.236: TI USB 5052 2 port adapter converter detected
[  226.788258][   T10] ti_usb_3410_5052 4-1:0.236: missing endpoints
[  226.910159][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'.
[  226.953390][  T875] usb 1-1: Using ep0 maxpacket: 16
[  226.965176][  T875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  226.990840][  T875] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  227.012169][  T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.038376][  T875] usb 1-1: config 0 descriptor??
[  227.506951][ T7457] netlink: 'syz.2.423': attribute type 9 has an invalid length.
[  227.514706][ T7457] netlink: 'syz.2.423': attribute type 7 has an invalid length.
[  227.522361][ T7457] netlink: 'syz.2.423': attribute type 8 has an invalid length.
[  227.568489][ T7454] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  227.576334][ T7454] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  227.585161][   T10] usb 4-1: USB disconnect, device number 5
[  227.585243][ T7454] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  227.599172][ T7454] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  227.809945][  T875] logitech 0003:046D:C24F.0002: item fetching failed at offset 2/5
[  227.832960][  T875] logitech 0003:046D:C24F.0002: parse failed
[  227.843063][  T875] logitech 0003:046D:C24F.0002: probe with driver logitech failed with error -22
[  228.188295][ T5863] Bluetooth: hci1: unexpected event for opcode 0x0411
[  228.308008][   T30] audit: type=1804 audit(1758571883.017:3): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.425" name="/newroot/78/file0" dev="tmpfs" ino=437 res=1 errno=0
[  228.389782][   T10] usb 1-1: USB disconnect, device number 5
[  229.331491][ T7470] netlink: 'syz.2.427': attribute type 39 has an invalid length.
[  229.574872][ T7478] NILFS (loop1): device size too small
[  230.886010][ T7497] hfsplus: unable to find HFS+ superblock
[  231.078970][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.159160][   T30] audit: type=1804 audit(1758571885.897:4): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.438" name="/newroot/84/file0" dev="tmpfs" ino=470 res=1 errno=0
[  233.681237][   T30] audit: type=1804 audit(1758571888.417:5): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.449" name="/newroot/88/file0" dev="tmpfs" ino=492 res=1 errno=0
[  233.794736][ T7546] syz_tun: entered allmulticast mode
[  234.453587][ T7534] syz_tun: left allmulticast mode
[  234.551986][ T5863] Bluetooth: hci3: command 0x0406 tx timeout
[  236.056923][ T5863] Bluetooth: hci1: unexpected event for opcode 0x2064
[  236.437225][ T7561] FAULT_INJECTION: forcing a failure.
[  236.437225][ T7561] name failslab, interval 1, probability 0, space 0, times 0
[  236.458651][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.1.453 Not tainted syzkaller #0 PREEMPT(full) 
[  236.458673][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  236.458682][ T7561] Call Trace:
[  236.458689][ T7561]  <TASK>
[  236.458697][ T7561]  dump_stack_lvl+0x189/0x250
[  236.458722][ T7561]  ? __pfx____ratelimit+0x10/0x10
[  236.458750][ T7561]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.458770][ T7561]  ? __pfx__printk+0x10/0x10
[  236.458797][ T7561]  ? __pfx___might_resched+0x10/0x10
[  236.458819][ T7561]  ? fs_reclaim_acquire+0x7d/0x100
[  236.458841][ T7561]  should_fail_ex+0x414/0x560
[  236.458868][ T7561]  should_failslab+0xa8/0x100
[  236.458887][ T7561]  __kmalloc_cache_noprof+0x6f/0x6f0
[  236.458910][ T7561]  ? ovl_init_fs_context+0xa0/0x530
[  236.458935][ T7561]  ovl_init_fs_context+0xa0/0x530
[  236.458965][ T7561]  alloc_fs_context+0x651/0x7d0
[  236.458991][ T7561]  do_new_mount+0x172/0x9e0
[  236.459006][ T7561]  ? apparmor_capable+0x137/0x1b0
[  236.459025][ T7561]  ? security_capable+0x7e/0x2e0
[  236.459044][ T7561]  ? __pfx_do_new_mount+0x10/0x10
[  236.459060][ T7561]  ? ns_capable+0x8a/0xf0
[  236.459084][ T7561]  ? path_mount+0x61c/0xfe0
[  236.459098][ T7561]  ? kmem_cache_free+0x19b/0x690
[  236.459131][ T7561]  __se_sys_mount+0x313/0x410
[  236.459154][ T7561]  ? __pfx___se_sys_mount+0x10/0x10
[  236.459175][ T7561]  ? do_syscall_64+0xbe/0xfa0
[  236.459192][ T7561]  ? __x64_sys_mount+0x20/0xc0
[  236.459211][ T7561]  do_syscall_64+0xfa/0xfa0
[  236.459228][ T7561]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.459246][ T7561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.459262][ T7561]  ? clear_bhb_loop+0x60/0xb0
[  236.459283][ T7561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.459298][ T7561] RIP: 0033:0x7f437f18eec9
[  236.459313][ T7561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.459327][ T7561] RSP: 002b:00007f437ffd3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  236.459345][ T7561] RAX: ffffffffffffffda RBX: 00007f437f3e5fa0 RCX: 00007f437f18eec9
[  236.459357][ T7561] RDX: 0000200000000040 RSI: 0000200000000280 RDI: 0000000000000000
[  236.459368][ T7561] RBP: 00007f437ffd3090 R08: 00002000000024c0 R09: 0000000000000000
[  236.459379][ T7561] R10: 0000000000200008 R11: 0000000000000246 R12: 0000000000000002
[  236.459388][ T7561] R13: 00007f437f3e6038 R14: 00007f437f3e5fa0 R15: 00007ffd748b1098
[  236.459418][ T7561]  </TASK>
[  236.812848][ T7568] FAULT_INJECTION: forcing a failure.
[  236.812848][ T7568] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  236.833152][ T7568] CPU: 1 UID: 0 PID: 7568 Comm: syz.1.455 Not tainted syzkaller #0 PREEMPT(full) 
[  236.833175][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  236.833184][ T7568] Call Trace:
[  236.833191][ T7568]  <TASK>
[  236.833198][ T7568]  dump_stack_lvl+0x189/0x250
[  236.833224][ T7568]  ? __pfx____ratelimit+0x10/0x10
[  236.833248][ T7568]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.833264][ T7568]  ? __pfx__printk+0x10/0x10
[  236.833282][ T7568]  ? __might_fault+0xb0/0x130
[  236.833311][ T7568]  should_fail_ex+0x414/0x560
[  236.833336][ T7568]  _copy_from_user+0x2d/0xb0
[  236.833354][ T7568]  ___sys_sendmsg+0x158/0x2a0
[  236.833377][ T7568]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.833430][ T7568]  ? __fget_files+0x2a/0x420
[  236.833445][ T7568]  ? __fget_files+0x3a0/0x420
[  236.833472][ T7568]  __x64_sys_sendmsg+0x19b/0x260
[  236.833495][ T7568]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  236.833525][ T7568]  ? __pfx_ksys_write+0x10/0x10
[  236.833551][ T7568]  ? do_syscall_64+0xbe/0xfa0
[  236.833574][ T7568]  do_syscall_64+0xfa/0xfa0
[  236.833590][ T7568]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.833609][ T7568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.833625][ T7568]  ? clear_bhb_loop+0x60/0xb0
[  236.833645][ T7568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.833661][ T7568] RIP: 0033:0x7f437f18eec9
[  236.833676][ T7568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.833698][ T7568] RSP: 002b:00007f437ffd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.833716][ T7568] RAX: ffffffffffffffda RBX: 00007f437f3e5fa0 RCX: 00007f437f18eec9
[  236.833728][ T7568] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003
[  236.833738][ T7568] RBP: 00007f437ffd3090 R08: 0000000000000000 R09: 0000000000000000
[  236.833748][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.833758][ T7568] R13: 00007f437f3e6038 R14: 00007f437f3e5fa0 R15: 00007ffd748b1098
[  236.833786][ T7568]  </TASK>
[  237.154629][ T7574] FAULT_INJECTION: forcing a failure.
[  237.154629][ T7574] name failslab, interval 1, probability 0, space 0, times 0
[  237.188779][ T7574] CPU: 1 UID: 0 PID: 7574 Comm: syz.4.458 Not tainted syzkaller #0 PREEMPT(full) 
[  237.188803][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  237.188813][ T7574] Call Trace:
[  237.188820][ T7574]  <TASK>
[  237.188828][ T7574]  dump_stack_lvl+0x189/0x250
[  237.188853][ T7574]  ? __pfx____ratelimit+0x10/0x10
[  237.188870][ T7574]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.188888][ T7574]  ? __pfx__printk+0x10/0x10
[  237.188913][ T7574]  ? __pfx___might_resched+0x10/0x10
[  237.188933][ T7574]  ? fs_reclaim_acquire+0x7d/0x100
[  237.188953][ T7574]  should_fail_ex+0x414/0x560
[  237.188979][ T7574]  should_failslab+0xa8/0x100
[  237.188999][ T7574]  __kmalloc_noprof+0xcb/0x7f0
[  237.189019][ T7574]  ? tomoyo_encode+0x28b/0x550
[  237.189037][ T7574]  ? tomoyo_mount_permission+0x27a/0x970
[  237.189061][ T7574]  tomoyo_encode+0x28b/0x550
[  237.189084][ T7574]  ? tomoyo_mount_permission+0x27a/0x970
[  237.189103][ T7574]  tomoyo_mount_permission+0x331/0x970
[  237.189129][ T7574]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  237.189206][ T7574]  security_sb_mount+0xec/0x350
[  237.189231][ T7574]  path_mount+0xbc/0xfe0
[  237.189245][ T7574]  ? user_path_at+0x44/0x60
[  237.189262][ T7574]  ? kmem_cache_free+0x19b/0x690
[  237.189296][ T7574]  __se_sys_mount+0x313/0x410
[  237.189320][ T7574]  ? __pfx___se_sys_mount+0x10/0x10
[  237.189341][ T7574]  ? do_syscall_64+0xbe/0xfa0
[  237.189357][ T7574]  ? __x64_sys_mount+0x20/0xc0
[  237.189376][ T7574]  do_syscall_64+0xfa/0xfa0
[  237.189392][ T7574]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.189409][ T7574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.189425][ T7574]  ? clear_bhb_loop+0x60/0xb0
[  237.189445][ T7574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.189460][ T7574] RIP: 0033:0x7fe7abb8eec9
[  237.189475][ T7574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.189488][ T7574] RSP: 002b:00007fe7ac9b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  237.189505][ T7574] RAX: ffffffffffffffda RBX: 00007fe7abde5fa0 RCX: 00007fe7abb8eec9
[  237.189517][ T7574] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000
[  237.189527][ T7574] RBP: 00007fe7ac9b4090 R08: 00002000000001c0 R09: 0000000000000000
[  237.189538][ T7574] R10: 0000000000084022 R11: 0000000000000246 R12: 0000000000000001
[  237.189548][ T7574] R13: 00007fe7abde6038 R14: 00007fe7abde5fa0 R15: 00007ffcbbd79dd8
[  237.189578][ T7574]  </TASK>
[  237.508044][   T30] audit: type=1804 audit(1758571892.227:6): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.461" name="/newroot/93/file0" dev="tmpfs" ino=520 res=1 errno=0
[  238.469002][ T7596] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  238.531023][ T7596] EXT4-fs (loop2): unable to read superblock
[  238.808382][ T7596] ext4: Bad value for 'barrier'
[  238.846257][ T7602] netlink: 'syz.3.467': attribute type 1 has an invalid length.
[  238.920236][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.466'.
[  238.948973][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.491116][ T7613] lo speed is unknown, defaulting to 1000
[  241.599825][ T7628] befs: (loop1): No write support. Marking filesystem read-only
[  241.607861][ T7628] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  241.917565][ T7613] lo speed is unknown, defaulting to 1000
[  242.401594][ T7635] netlink: 'syz.3.475': attribute type 9 has an invalid length.
[  242.410321][ T7635] netlink: 'syz.3.475': attribute type 7 has an invalid length.
[  242.418480][ T7635] netlink: 'syz.3.475': attribute type 8 has an invalid length.
[  242.895611][ T7640] vivid-004: disconnect
[  242.902769][ T7640] vivid-004: reconnect
[  243.669258][   T10] kernel write not supported for file /307/clear_refs (pid: 10 comm: kworker/0:1)
[  243.988921][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.481'.
[  244.145890][   T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  244.909022][   T10] usb 4-1: config 0 has an invalid interface number: 236 but max is 0
[  244.963385][   T10] usb 4-1: config 0 has no interface number 0
[  244.985224][   T10] usb 4-1: config 0 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  245.066844][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.099409][   T10] usb 4-1: config 0 interface 236 has no altsetting 0
[  245.176332][   T10] usb 4-1: config 0 has an invalid interface number: 236 but max is 0
[  245.247668][   T10] usb 4-1: config 0 has no interface number 0
[  245.341837][   T10] usb 4-1: config 0 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  245.538585][   T10] usb 4-1: config 0 interface 236 has no altsetting 0
[  245.750711][   T10] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  245.912846][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.979040][   T10] usb 4-1: Product: syz
[  245.997060][   T24] kernel write not supported for file /294/clear_refs (pid: 24 comm: kworker/1:0)
[  246.011190][   T10] usb 4-1: Manufacturer: syz
[  246.050538][   T10] usb 4-1: SerialNumber: syz
[  246.079982][   T10] usb 4-1: config 0 descriptor??
[  246.303481][ T7671] netlink: 'syz.0.487': attribute type 9 has an invalid length.
[  246.312315][ T7671] netlink: 'syz.0.487': attribute type 7 has an invalid length.
[  246.321832][ T7671] netlink: 'syz.0.487': attribute type 8 has an invalid length.
[  246.577535][   T10] ti_usb_3410_5052 4-1:0.236: TI USB 5052 2 port adapter converter detected
[  246.611482][   T10] ti_usb_3410_5052 4-1:0.236: missing endpoints
[  246.722583][ T7679] vivid-004: disconnect
[  246.728653][ T7679] vivid-004: reconnect
[  247.551842][ T7682] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  247.561576][ T7682] EXT4-fs (loop4): unable to read superblock
[  247.714960][ T7682] ext4: Bad value for 'barrier'
[  247.729983][   T10] usb 4-1: USB disconnect, device number 6
[  247.933839][  T875] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  248.376506][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.490'.
[  248.475099][ T7691] netlink: 'syz.1.493': attribute type 10 has an invalid length.
[  248.543349][  T875] usb 1-1: Using ep0 maxpacket: 16
[  248.747188][  T875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  248.767643][  T875] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  248.785504][  T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.854267][  T875] usb 1-1: config 0 descriptor??
[  248.975807][ T7703] vivid-003: disconnect
[  249.922029][ T7700] vivid-003: reconnect
[  250.011678][  T875] logitech 0003:046D:C24F.0003: item fetching failed at offset 2/5
[  250.049606][  T875] logitech 0003:046D:C24F.0003: parse failed
[  250.082200][  T875] logitech 0003:046D:C24F.0003: probe with driver logitech failed with error -22
[  250.867861][ T5863] Bluetooth: hci1: unexpected event for opcode 0x0411
[  251.319582][  T875] usb 1-1: USB disconnect, device number 6
[  251.386363][   T30] audit: type=1804 audit(1758571906.107:7): pid=7716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.501" name="/newroot/118/file0" dev="tmpfs" ino=657 res=1 errno=0
[  251.531210][ T7719] vivid-001: disconnect
[  251.537347][ T7719] vivid-001: reconnect
[  255.636400][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  255.642738][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  256.634243][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  256.830970][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  256.844215][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  256.883995][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  256.910577][   T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  256.944056][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.968447][   T10] usb 1-1: Product: syz
[  256.987354][   T10] usb 1-1: Manufacturer: syz
[  256.993731][   T10] usb 1-1: SerialNumber: syz
[  257.024833][   T10] usb 1-1: config 0 descriptor??
[  257.034013][  T898] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  257.195782][ T7780] pim6reg: entered allmulticast mode
[  257.203545][ T7780] pim6reg: left allmulticast mode
[  257.273378][  T898] usb 2-1: Using ep0 maxpacket: 32
[  257.278862][   T10] adutux 1-1:0.0: ADU208  now attached to /dev/usb/adutux0
[  257.295563][  T898] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  257.318173][   T10] usb 1-1: USB disconnect, device number 7
[  257.331142][  T898] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  257.363449][ T7780] delete_channel: no stack
[  257.369617][  T898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.403081][  T898] usb 2-1: Product: syz
[  257.418504][  T898] usb 2-1: Manufacturer: syz
[  257.425833][  T898] usb 2-1: SerialNumber: syz
[  257.439884][  T898] usb 2-1: config 0 descriptor??
[  257.452187][ T7771] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  257.490026][  T898] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7
[  257.996022][ T7784] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  258.039900][ T7784] EXT4-fs (loop1): unable to read superblock
[  258.181813][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'.
[  259.280721][   T24] usb 2-1: USB disconnect, device number 4
[  259.280819][    C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  259.651833][   T30] audit: type=1804 audit(1758571914.387:8): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.526" name="/newroot/109/file0" dev="tmpfs" ino=604 res=1 errno=0
[  259.953421][ T7808] netlink: 'syz.2.527': attribute type 10 has an invalid length.
[  260.220173][ T7808] team0: Port device dummy0 added
[  260.295278][  T898] kernel write not supported for file /snd/seq (pid: 898 comm: kworker/0:2)
[  263.792848][ T7849] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  263.827312][ T7849] EXT4-fs (loop3): unable to read superblock
[  263.861670][ T7849] ext4: Bad value for 'barrier'
[  263.922304][ T7850] nfs: Unknown parameter 'ntext'
[  263.954309][ T7858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.538'.
[  264.639679][ T7868] capability: warning: `syz.0.543' uses 32-bit capabilities (legacy support in use)
[  264.666164][ T7869] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  264.713772][ T7869] EXT4-fs (loop2): unable to read superblock
[  264.748526][ T7866] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.785220][ T7869] netlink: 'syz.2.542': attribute type 5 has an invalid length.
[  264.785895][ T7866] FAT-fs (loop2): unable to read boot sector
[  265.014074][   T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  265.193438][   T43] usb 5-1: Using ep0 maxpacket: 32
[  265.208985][   T43] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  265.225884][   T43] usb 5-1: config 0 has no interface number 0
[  265.383759][   T43] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  265.392835][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.401494][   T43] usb 5-1: Product: syz
[  265.406187][   T43] usb 5-1: Manufacturer: syz
[  267.093350][   T43] usb 5-1: SerialNumber: syz
[  267.111478][   T43] usb 5-1: config 0 descriptor??
[  267.144230][   T43] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  267.250119][ T7900] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  267.259727][ T7900] MINIX-fs: unable to read superblock
[  268.042775][   T43] usb 5-1: qt2_attach - failed to power on unit: -71
[  268.059377][   T43] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[  268.110363][ T7905] futex_wake_op: syz.0.553 tries to shift op by -1; fix this program
[  268.299587][   T43] usb 5-1: USB disconnect, device number 5
[  269.120651][ T7909] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  269.130844][ T7909] EXT4-fs (loop2): unable to read superblock
[  269.524802][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'.
[  270.723486][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  270.968685][ T7936] vivid-002: disconnect
[  270.974148][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  270.986207][ T7936] vivid-002: reconnect
[  271.356663][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.714308][   T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30
[  271.891310][   T10] usb 1-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217
[  271.980899][   T10] usb 1-1: config 1 interface 1 has no altsetting 0
[  272.335334][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.565'.
[  272.606299][ T7956] 9pnet_fd: Insufficient options for proto=fd
[  273.125692][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  273.141862][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.167337][   T10] usb 1-1: Product: syz
[  273.190131][ T5863] Bluetooth: hci0: unexpected event for opcode 0x0411
[  273.207896][   T10] usb 1-1: can't set config #1, error -71
[  273.252135][   T10] usb 1-1: USB disconnect, device number 8
[  273.821076][ T7987] input: syz1 as /devices/virtual/input/input9
[  273.883838][ T7989] FAULT_INJECTION: forcing a failure.
[  273.883838][ T7989] name failslab, interval 1, probability 0, space 0, times 0
[  273.951456][ T7993] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  273.965986][ T7989] CPU: 0 UID: 0 PID: 7989 Comm: syz.2.577 Not tainted syzkaller #0 PREEMPT(full) 
[  273.966010][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  273.966030][ T7989] Call Trace:
[  273.966037][ T7989]  <TASK>
[  273.966045][ T7989]  dump_stack_lvl+0x189/0x250
[  273.966070][ T7989]  ? __pfx____ratelimit+0x10/0x10
[  273.966090][ T7989]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.966109][ T7989]  ? __pfx__printk+0x10/0x10
[  273.966135][ T7989]  ? __pfx___might_resched+0x10/0x10
[  273.966157][ T7989]  ? fs_reclaim_acquire+0x7d/0x100
[  273.966179][ T7989]  should_fail_ex+0x414/0x560
[  273.966207][ T7989]  should_failslab+0xa8/0x100
[  273.966227][ T7989]  kmem_cache_alloc_node_noprof+0x77/0x710
[  273.966251][ T7989]  ? __alloc_skb+0x112/0x2d0
[  273.966274][ T7989]  __alloc_skb+0x112/0x2d0
[  273.966296][ T7989]  alloc_uevent_skb+0x7d/0x230
[  273.966324][ T7989]  kobject_uevent_net_broadcast+0x2fa/0x560
[  273.966353][ T7989]  kobject_uevent_env+0x55b/0x8c0
[  273.966387][ T7989]  led_trigger_set+0x71c/0x950
[  273.966408][ T7989]  ? down_write+0x162/0x1f0
[  273.966429][ T7989]  ? __pfx_led_trigger_set+0x10/0x10
[  273.966445][ T7989]  ? __pfx___mutex_lock+0x10/0x10
[  273.966473][ T7989]  led_classdev_unregister+0xa8/0x280
[  273.966500][ T7989]  input_leds_disconnect+0xba/0x180
[  273.966532][ T7989]  __input_unregister_device+0x3a3/0x640
[  273.966557][ T7989]  input_unregister_device+0x9b/0x100
[  273.966579][ T7989]  uinput_destroy_device+0x6c1/0x8c0
[  273.966608][ T7989]  uinput_ioctl_handler+0x758/0x1570
[  273.966635][ T7989]  ? __pfx_uinput_ioctl_handler+0x10/0x10
[  273.966676][ T7989]  ? __fget_files+0x2a/0x420
[  273.966698][ T7989]  ? bpf_lsm_file_ioctl+0x9/0x20
[  273.966717][ T7989]  ? __pfx_uinput_ioctl+0x10/0x10
[  273.966740][ T7989]  __se_sys_ioctl+0xfc/0x170
[  273.966764][ T7989]  do_syscall_64+0xfa/0xfa0
[  273.966782][ T7989]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.966800][ T7989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.966817][ T7989]  ? clear_bhb_loop+0x60/0xb0
[  273.966837][ T7989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.966853][ T7989] RIP: 0033:0x7f6ceb38eec9
[  273.966868][ T7989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.966882][ T7989] RSP: 002b:00007f6cec1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  273.966899][ T7989] RAX: ffffffffffffffda RBX: 00007f6ceb5e6090 RCX: 00007f6ceb38eec9
[  273.966912][ T7989] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003
[  273.966922][ T7989] RBP: 00007f6cec1c3090 R08: 0000000000000000 R09: 0000000000000000
[  273.966932][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.966941][ T7989] R13: 00007f6ceb5e6128 R14: 00007f6ceb5e6090 R15: 00007ffca3932e48
[  273.966973][ T7989]  </TASK>
[  275.855181][   T30] audit: type=1804 audit(1758571930.597:9): pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.581" name="/newroot/100/file0" dev="tmpfs" ino=547 res=1 errno=0
[  275.885876][ T8012] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  275.903224][ T8012] ref_ctr increment failed for inode: 0x223 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807e6a4b40
[  278.411729][ T7997] uprobe: syz.3.581:7997 failed to unregister, leaking uprobe
[  278.837963][ T8037] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  278.840125][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.847776][ T8037] EXT4-fs (loop2): unable to read superblock
[  278.984280][ T5986] kernel write not supported for file /390/clear_refs (pid: 5986 comm: kworker/1:7)
[  278.995974][ T8037] ext4: Bad value for 'barrier'
[  279.079758][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'.
[  279.788257][ T8053] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  281.298936][ T8069] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  281.393429][ T8069] EXT4-fs (loop3): unable to read superblock
[  281.420673][ T8069] ext4: Bad value for 'barrier'
[  281.676534][ T8075] gfs2: not a GFS2 filesystem
[  281.932722][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'.
[  282.388828][ T8089] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 0, id = 0
[  282.806161][ T8095] netlink: 'syz.0.605': attribute type 39 has an invalid length.
[  283.743697][  T875] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  284.157163][ T8112] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  284.166733][ T8112] bcachefs (/dev/loop2): error reading default superblock: IO error: -5
[  284.176251][ T8112] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  284.185684][ T8112] bcachefs (/dev/loop2): error reading superblock: IO error: -5
[  284.193542][ T8112] bcachefs: bch2_fs_get_tree() error: EIO
[  284.234392][  T875] usb 2-1: config 0 has no interfaces?
[  284.519351][  T875] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  284.606884][  T875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.696919][  T875] usb 2-1: Product: syz
[  284.746894][  T875] usb 2-1: Manufacturer: syz
[  284.752232][  T875] usb 2-1: SerialNumber: syz
[  284.799580][  T875] usb 2-1: config 0 descriptor??
[  285.113331][  T898] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  285.895477][   T30] audit: type=1326 audit(1758571940.627:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.1.608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f437f18eec9 code=0x0
[  285.921295][  T898] usb 4-1: Using ep0 maxpacket: 8
[  285.928189][  T898] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  285.940949][  T898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  285.979246][  T898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  286.109722][   T10] usb 2-1: USB disconnect, device number 5
[  286.124865][  T898] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  286.143213][  T898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.171541][  T898] usb 4-1: Product: syz
[  286.180529][  T898] usb 4-1: Manufacturer: syz
[  286.188798][  T898] usb 4-1: SerialNumber: syz
[  286.212246][  T898] usb 4-1: config 0 descriptor??
[  286.233737][  T898] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  286.436995][ T8138] befs: (loop0): No write support. Marking filesystem read-only
[  286.444894][ T8138] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  286.656491][   T10] usb 4-1: USB disconnect, device number 7
[  288.741715][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  289.463962][   T10] usb 1-1: Using ep0 maxpacket: 32
[  289.489790][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  289.614840][   T10] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  289.772600][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.194272][ T8176] netlink: 'syz.1.631': attribute type 39 has an invalid length.
[  290.483689][   T10] usb 1-1: Product: syz
[  290.487920][   T10] usb 1-1: Manufacturer: syz
[  290.494000][   T10] usb 1-1: SerialNumber: syz
[  290.604788][   T10] usb 1-1: config 0 descriptor??
[  290.642408][ T8159] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  290.672799][   T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10
[  291.102314][   T43] usb 1-1: USB disconnect, device number 9
[  291.102382][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  294.195254][ T8212] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  294.751318][ T8216] netlink: 'syz.1.644': attribute type 9 has an invalid length.
[  294.759653][ T8216] netlink: 'syz.1.644': attribute type 7 has an invalid length.
[  294.767666][ T8216] netlink: 'syz.1.644': attribute type 8 has an invalid length.
[  294.801794][ T8212] EXT4-fs (loop4): unable to read superblock
[  296.551304][   T43] kernel write not supported for file /429/clear_refs (pid: 43 comm: kworker/1:1)
[  296.960881][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.652'.
[  298.502089][   T10] kernel write not supported for file /434/clear_refs (pid: 10 comm: kworker/0:1)
[  300.707351][ T8278] netlink: 'syz.4.659': attribute type 9 has an invalid length.
[  300.715225][ T8278] netlink: 'syz.4.659': attribute type 7 has an invalid length.
[  300.722869][ T8278] netlink: 'syz.4.659': attribute type 8 has an invalid length.
[  300.945193][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'.
[  301.215126][   T43] kernel write not supported for file /444/clear_refs (pid: 43 comm: kworker/1:1)
[  301.237306][ T8290] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  301.293210][ T8290] FAT-fs (loop4): unable to read boot sector
[  301.324423][ T8290] program syz.4.665 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  301.569069][ T8299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.664'.
[  302.672875][ T8311] netlink: 'syz.0.668': attribute type 9 has an invalid length.
[  302.680711][ T8311] netlink: 'syz.0.668': attribute type 7 has an invalid length.
[  302.688489][ T8311] netlink: 'syz.0.668': attribute type 8 has an invalid length.
[  304.209333][ T8333] EXT4-fs: Ignoring removed nobh option
[  304.216069][ T8333] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1
[  304.225670][ T8333] EXT4-fs (loop0): unable to read superblock
[  304.273859][ T5873] kernel write not supported for file /449/clear_refs (pid: 5873 comm: kworker/0:4)
[  304.323603][  T898] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  304.443760][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  304.495161][  T898] usb 5-1: Using ep0 maxpacket: 8
[  304.505077][  T898] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  304.534334][  T898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  304.571358][  T898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  304.693608][   T10] usb 4-1: Using ep0 maxpacket: 8
[  304.793600][  T898] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  304.818226][  T898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.830776][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  304.883848][  T898] usb 5-1: Product: syz
[  304.888048][  T898] usb 5-1: Manufacturer: syz
[  304.892650][  T898] usb 5-1: SerialNumber: syz
[  304.899477][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  304.913055][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  304.927602][  T898] usb 5-1: config 0 descriptor??
[  304.941209][  T898] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  304.957154][   T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  304.977448][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.994534][   T10] usb 4-1: Product: syz
[  304.997943][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'.
[  305.024189][   T10] usb 4-1: Manufacturer: syz
[  305.049232][   T10] usb 4-1: SerialNumber: syz
[  305.121702][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'.
[  305.413352][   T10] usb 4-1: config 0 descriptor??
[  305.421338][  T898] usb 5-1: USB disconnect, device number 6
[  305.460981][   T10] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  305.560945][ T8355] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  305.592725][ T8355] EXT4-fs (loop1): unable to read superblock
[  305.616827][ T8355] ext4: Bad value for 'barrier'
[  305.771920][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.685'.
[  306.114198][   T10] usb 4-1: USB disconnect, device number 8
[  306.219447][ T8363] tmpfs: Cannot retroactively limit inodes
[  306.709631][ T8372] vivid-001: disconnect
[  306.714333][ T8372] vivid-001: reconnect
[  306.835189][ T8380] FAULT_INJECTION: forcing a failure.
[  306.835189][ T8380] name failslab, interval 1, probability 0, space 0, times 0
[  306.847958][ T8380] CPU: 1 UID: 0 PID: 8380 Comm: syz.1.691 Not tainted syzkaller #0 PREEMPT(full) 
[  306.847979][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  306.847989][ T8380] Call Trace:
[  306.847996][ T8380]  <TASK>
[  306.848003][ T8380]  dump_stack_lvl+0x189/0x250
[  306.848034][ T8380]  ? __pfx____ratelimit+0x10/0x10
[  306.848054][ T8380]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.848073][ T8380]  ? __pfx__printk+0x10/0x10
[  306.848095][ T8380]  ? __lock_acquire+0xab9/0xd20
[  306.848128][ T8380]  should_fail_ex+0x414/0x560
[  306.848154][ T8380]  should_failslab+0xa8/0x100
[  306.848172][ T8380]  __kmalloc_cache_noprof+0x6f/0x6f0
[  306.848195][ T8380]  ? proc_thread_self_get_link+0xfd/0x1a0
[  306.848213][ T8380]  ? __task_pid_nr_ns+0x3ac/0x490
[  306.848231][ T8380]  proc_thread_self_get_link+0xfd/0x1a0
[  306.848247][ T8380]  ? __pfx_proc_thread_self_get_link+0x10/0x10
[  306.848264][ T8380]  pick_link+0x67c/0xe80
[  306.848286][ T8380]  step_into+0xbc9/0xe80
[  306.848301][ T8380]  ? read_word_at_a_time+0x16/0x20
[  306.848324][ T8380]  ? __pfx_step_into+0x10/0x10
[  306.848338][ T8380]  ? lookup_fast+0x168/0x5b0
[  306.848353][ T8380]  ? inode_permission+0x149/0x470
[  306.848365][ T8380]  ? __asan_memcpy+0x40/0x70
[  306.848385][ T8380]  link_path_walk+0x77b/0xea0
[  306.848412][ T8380]  path_openat+0x28c/0x3830
[  306.848442][ T8380]  ? __pfx___schedule+0x10/0x10
[  306.848466][ T8380]  ? __pfx_path_openat+0x10/0x10
[  306.848497][ T8380]  do_filp_open+0x1fa/0x410
[  306.848511][ T8380]  ? __lock_acquire+0xab9/0xd20
[  306.848529][ T8380]  ? __pfx_do_filp_open+0x10/0x10
[  306.848562][ T8380]  ? _raw_spin_unlock+0x28/0x50
[  306.848574][ T8380]  ? alloc_fd+0x64c/0x6c0
[  306.848596][ T8380]  do_sys_openat2+0x121/0x1c0
[  306.848613][ T8380]  ? __pfx_do_sys_openat2+0x10/0x10
[  306.848631][ T8380]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  306.848644][ T8380]  ? ksys_write+0x1e1/0x250
[  306.848667][ T8380]  __x64_sys_openat+0x138/0x170
[  306.848686][ T8380]  do_syscall_64+0xfa/0xfa0
[  306.848701][ T8380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.848713][ T8380]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  306.848724][ T8380]  ? clear_bhb_loop+0x60/0xb0
[  306.848740][ T8380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.848752][ T8380] RIP: 0033:0x7f437f18d710
[  306.848764][ T8380] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  306.848774][ T8380] RSP: 002b:00007f437ff90f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  306.848788][ T8380] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f437f18d710
[  306.848797][ T8380] RDX: 0000000000000002 RSI: 00007f437ff90fa0 RDI: 00000000ffffff9c
[  306.848805][ T8380] RBP: 00007f437ff90fa0 R08: 0000000000000000 R09: 0000000000000000
[  306.848813][ T8380] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  306.848820][ T8380] R13: 00007f437f3e6218 R14: 00007f437f3e6180 R15: 00007ffd748b1098
[  306.848843][ T8380]  </TASK>
[  307.141368][    C1] vkms_vblank_simulate: vblank timer overrun
[  309.066166][ T8375] netlink: 'syz.4.690': attribute type 10 has an invalid length.
[  309.077484][ T8377] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  309.121932][ T8377] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  309.150332][ T8377] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  309.159881][ T8377] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  309.192953][ T8375] 8021q: adding VLAN 0 to HW filter on device team0
[  309.204164][ T8377] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  309.210516][ T8377] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  309.224585][ T8377] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  309.232877][ T8377] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  309.262984][ T8377] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  309.277037][ T8377] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  309.288032][ T8375] bond0: (slave team0): Enslaving as an active interface with an up link
[  309.359853][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'.
[  309.374286][ T8377] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  309.627821][ T8396] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  309.653939][ T8396] EXT4-fs (loop2): unable to read superblock
[  309.712434][ T8396] ext4: Bad value for 'barrier'
[  309.938175][ T8398] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  309.947640][ T8398] bcachefs (/dev/loop3): error reading default superblock: IO error: -5
[  309.956046][ T8398] I/O error, dev loop3, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  309.965435][ T8398] bcachefs (/dev/loop3): error reading superblock: IO error: -5
[  309.973487][ T8398] bcachefs: bch2_fs_get_tree() error: EIO
[  310.147299][ T8401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'.
[  310.760133][ T8409] netlink: 'syz.1.700': attribute type 4 has an invalid length.
[  310.902106][ T8415] EXT4-fs: Ignoring removed nomblk_io_submit option
[  310.910219][ T5985] lo speed is unknown, defaulting to 1000
[  310.932758][ T5985] 3yz0: Port: 1 Link DOWN
[  310.959951][ T8415] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  311.177873][ T5863] Bluetooth: hci0: command 0x0406 tx timeout
[  311.224598][ T5863] Bluetooth: hci2: command 0x0406 tx timeout
[  311.225441][ T5183] Bluetooth: hci1: command 0x0406 tx timeout
[  311.230380][ T8415] EXT4-fs (loop2): unable to read superblock
[  311.309763][ T5183] Bluetooth: hci3: command 0x0406 tx timeout
[  311.309774][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout
[  312.060754][ T8415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.702'.
[  312.835567][ T8431] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  312.866186][   T10] kernel write not supported for file /469/clear_refs (pid: 10 comm: kworker/0:1)
[  313.234575][ T5863] Bluetooth: hci0: command 0x0406 tx timeout
[  313.318257][ T5863] Bluetooth: hci2: command 0x0406 tx timeout
[  313.327754][ T5183] Bluetooth: hci1: command 0x0406 tx timeout
[  313.424996][ T5183] Bluetooth: hci3: command 0x0406 tx timeout
[  313.431212][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout
[  314.110192][ T8451] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  314.142115][ T8447] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  314.153324][ T8447] bcachefs (/dev/loop2): error reading default superblock: IO error: -5
[  314.161712][ T8447] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  314.173382][ T8447] bcachefs (/dev/loop2): error reading superblock: IO error: -5
[  314.181147][ T8447] bcachefs: bch2_fs_get_tree() error: EIO
[  314.189011][ T8451] EXT4-fs (loop4): unable to read superblock
[  314.333306][   T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  314.468073][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.713'.
[  314.503557][   T43] usb 4-1: Using ep0 maxpacket: 16
[  314.593006][   T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  314.613369][   T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  314.974045][   T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  315.010344][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.031856][   T43] usb 4-1: Product: syz
[  315.463614][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout
[  315.904255][   T43] usb 4-1: Manufacturer: syz
[  315.908884][   T43] usb 4-1: SerialNumber: syz
[  316.132511][   T43] usb 4-1: 0:2 : does not exist
[  316.224754][   T43] usb 4-1: USB disconnect, device number 9
[  316.439614][ T8480] vivid-000: disconnect
[  316.444522][ T8480] vivid-000: reconnect
[  317.541229][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  317.657436][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.683454][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  318.153769][   T10] usb 1-1: Using ep0 maxpacket: 8
[  318.160761][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  318.336349][ T8489] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  318.345983][ T8489] bcachefs (/dev/loop3): error reading default superblock: IO error: -5
[  318.354447][ T8489] I/O error, dev loop3, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  318.363946][ T8489] bcachefs (/dev/loop3): error reading superblock: IO error: -5
[  318.371879][ T8489] bcachefs: bch2_fs_get_tree() error: EIO
[  318.392686][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  318.536113][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  318.565451][   T10] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  318.591335][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.618659][   T10] usb 1-1: Product: syz
[  318.630252][   T10] usb 1-1: Manufacturer: syz
[  318.641344][   T10] usb 1-1: SerialNumber: syz
[  318.662117][   T10] usb 1-1: config 0 descriptor??
[  318.672573][   T10] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  319.656906][  T898] usb 1-1: USB disconnect, device number 10
[  319.745862][ T5985] kernel write not supported for file /490/clear_refs (pid: 5985 comm: kworker/1:6)
[  320.009465][ T8521] fuse: Unknown parameter 'group_i00000000000000000000'
[  321.984931][   T43] kernel write not supported for file /495/clear_refs (pid: 43 comm: kworker/1:1)
[  322.509051][ T8548] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  322.518538][ T8548] bcachefs (/dev/loop1): error reading default superblock: IO error: -5
[  322.527001][ T8548] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  322.536444][ T8548] bcachefs (/dev/loop1): error reading superblock: IO error: -5
[  322.544656][ T8548] bcachefs: bch2_fs_get_tree() error: EIO
[  325.223805][ T5863] Bluetooth: hci3: command 0x0406 tx timeout
[  325.444885][ T8571] hfsplus: unable to find HFS+ superblock
[  325.461467][ T8581] befs: (loop2): No write support. Marking filesystem read-only
[  325.481531][ T8581] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.532576][ T8594] netlink: 'syz.3.753': attribute type 9 has an invalid length.
[  328.540795][ T8594] netlink: 'syz.3.753': attribute type 7 has an invalid length.
[  328.548555][ T8594] netlink: 'syz.3.753': attribute type 8 has an invalid length.
[  329.254613][ T8602] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  329.333697][ T8602] EXT4-fs (loop3): unable to read superblock
[  329.781735][ T8602] ext4: Bad value for 'barrier'
[  330.065975][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.755'.
[  330.552198][ T8617] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  331.605127][ T8628] netlink: 'syz.3.761': attribute type 39 has an invalid length.
[  331.675464][ T8630] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  331.877119][ T8630] EXT4-fs (loop4): unable to read superblock
[  333.193488][  T875] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  333.445457][   T30] audit: type=1326 audit(1758571988.187:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.0.766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb59e78eec9 code=0x0
[  333.494086][  T875] usb 3-1: device descriptor read/64, error -71
[  333.824271][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  335.120166][ T8648] JFS: discard option not supported on device
[  335.129003][ T8648] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  335.135245][  T875] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  335.148617][ T8648] I/O error, dev loop1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  335.159055][ T8648] Mount JFS Failure: -5
[  335.164318][ T8648] jfs_mount failed w/return code = -5
[  335.845573][   T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  335.854421][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  335.873741][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  335.884901][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  335.916708][   T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  335.925917][   T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  335.942827][   T10] usb 1-1: Product: syz
[  335.947294][   T10] usb 1-1: Manufacturer: syz
[  335.971050][ T8641] syz.4.762 (8641) used greatest stack depth: 16544 bytes left
[  335.992746][   T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  336.182603][ T8662] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  337.043561][ T8662] EXT4-fs (loop2): unable to read superblock
[  337.172820][ T8662] ext4: Bad value for 'barrier'
[  337.540748][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.771'.
[  338.636091][   T43] kernel write not supported for file /565/clear_refs (pid: 43 comm: kworker/1:1)
[  338.683804][   T10] usb 1-1: USB disconnect, device number 11
[  339.383048][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  339.563503][   T10] usb 1-1: device descriptor read/64, error -71
[  339.583979][ T8699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.782'.
[  339.924063][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  340.074084][   T10] usb 1-1: device descriptor read/64, error -71
[  340.106479][ T8707] hfsplus: unable to find HFS+ superblock
[  340.215941][   T10] usb usb1-port1: attempt power cycle
[  340.538832][ T8711] netlink: 'syz.4.783': attribute type 39 has an invalid length.
[  341.873631][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  342.048266][ T8721] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  342.081128][ T8721] EXT4-fs (loop1): unable to read superblock
[  342.093678][   T10] usb 1-1: device not accepting address 14, error -71
[  342.329327][ T8727] netlink: 'syz.4.788': attribute type 9 has an invalid length.
[  342.339668][ T8727] netlink: 'syz.4.788': attribute type 7 has an invalid length.
[  342.348670][ T8727] netlink: 'syz.4.788': attribute type 8 has an invalid length.
[  342.551874][ T8721] ext4: Bad value for 'barrier'
[  342.632107][ T8729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'.
[  342.918115][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  343.010269][   T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  343.022199][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.093973][   T10] usb 1-1: Product: syz
[  343.098175][   T10] usb 1-1: Manufacturer: syz
[  343.102773][   T10] usb 1-1: SerialNumber: syz
[  344.430124][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.509701][   T30] audit: type=1804 audit(1758571999.247:12): pid=8741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.792" name="/newroot/156/file0" dev="tmpfs" ino=847 res=1 errno=0
[  344.986069][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.242420][   T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: b2:77:20:f9:51:fc
[  346.622755][   T10] rtl8150 1-1:1.0: eth1: rtl8150 is detected
[  346.831887][   T10] usb 1-1: USB disconnect, device number 15
[  347.827519][ T5873] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  347.989376][ T8767] netlink: 'syz.0.799': attribute type 39 has an invalid length.
[  348.159585][ T5873] usb 2-1: Using ep0 maxpacket: 32
[  348.197689][ T5873] usb 2-1: config 4 has an invalid interface number: 128 but max is 0
[  348.219675][ T5873] usb 2-1: config 4 has no interface number 0
[  348.257190][ T5873] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.952218][ T8780] JFS: discard option not supported on device
[  349.960383][ T8780] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  349.970785][ T8780] I/O error, dev loop3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  349.980630][ T8780] Mount JFS Failure: -5
[  349.985870][ T8780] jfs_mount failed w/return code = -5
[  350.302292][ T5183] Bluetooth: hci0: command 0x0406 tx timeout
[  350.324333][ T5873] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.733291][ T5873] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  350.742512][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.801631][ T5873] usb 2-1: can't set config #4, error -71
[  350.811477][ T5873] usb 2-1: USB disconnect, device number 6
[  351.124807][ T8789] FAULT_INJECTION: forcing a failure.
[  351.124807][ T8789] name failslab, interval 1, probability 0, space 0, times 0
[  351.124970][ T8789] CPU: 0 UID: 0 PID: 8789 Comm: syz.2.808 Not tainted syzkaller #0 PREEMPT(full) 
[  351.124990][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  351.124999][ T8789] Call Trace:
[  351.125007][ T8789]  <TASK>
[  351.125014][ T8789]  dump_stack_lvl+0x189/0x250
[  351.125036][ T8789]  ? __pfx____ratelimit+0x10/0x10
[  351.125054][ T8789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  351.125072][ T8789]  ? __pfx__printk+0x10/0x10
[  351.125100][ T8789]  ? __pfx___might_resched+0x10/0x10
[  351.125129][ T8789]  ? fs_reclaim_acquire+0x7d/0x100
[  351.125149][ T8789]  should_fail_ex+0x414/0x560
[  351.125176][ T8789]  should_failslab+0xa8/0x100
[  351.125195][ T8789]  __kmalloc_cache_noprof+0x6f/0x6f0
[  351.125218][ T8789]  ? omfs_init_fs_context+0x54/0x270
[  351.125241][ T8789]  ? __pfx_omfs_init_fs_context+0x10/0x10
[  351.125268][ T8789]  omfs_init_fs_context+0x54/0x270
[  351.125294][ T8789]  alloc_fs_context+0x651/0x7d0
[  351.125322][ T8789]  do_new_mount+0x172/0x9e0
[  351.125343][ T8789]  ? security_capable+0x7e/0x2e0
[  351.125361][ T8789]  ? __pfx_do_new_mount+0x10/0x10
[  351.125376][ T8789]  ? ns_capable+0x8a/0xf0
[  351.125400][ T8789]  ? path_mount+0x61c/0xfe0
[  351.125413][ T8789]  ? kmem_cache_free+0x19b/0x690
[  351.125447][ T8789]  __se_sys_mount+0x313/0x410
[  351.125462][ T8789]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.125485][ T8789]  ? __pfx___se_sys_mount+0x10/0x10
[  351.125504][ T8789]  ? __x64_sys_mount+0x20/0xc0
[  351.125521][ T8789]  do_syscall_64+0xfa/0xfa0
[  351.125539][ T8789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.125551][ T8789]  ? asm_sysvec_call_function_single+0x1a/0x20
[  351.125565][ T8789]  ? clear_bhb_loop+0x60/0xb0
[  351.125583][ T8789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.125597][ T8789] RIP: 0033:0x7f6ceb38eec9
[  351.125611][ T8789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.125624][ T8789] RSP: 002b:00007f6cec1c3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  351.125642][ T8789] RAX: ffffffffffffffda RBX: 00007f6ceb5e6090 RCX: 00007f6ceb38eec9
[  351.125654][ T8789] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00002000000000c0
[  351.125666][ T8789] RBP: 00007f6cec1c3090 R08: 0000000000000000 R09: 0000000000000000
[  351.125676][ T8789] R10: 0000000000218000 R11: 0000000000000246 R12: 0000000000000002
[  351.125685][ T8789] R13: 00007f6ceb5e6128 R14: 00007f6ceb5e6090 R15: 00007ffca3932e48
[  351.125716][ T8789]  </TASK>
[  351.540792][ T5873] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  351.660318][ T8795] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  351.710787][ T5873] usb 2-1: Using ep0 maxpacket: 8
[  351.717758][ T5873] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  351.717787][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.725209][ T5873] usb 2-1: config 0 descriptor??
[  352.230962][ T8791] tty tty4: ldisc open failed (-12), clearing slot 3
[  352.792751][ T8810] syz.3.814 (8810) used obsolete PPPIOCDETACH ioctl
[  352.879705][ T8812] pimreg: entered allmulticast mode
[  352.934054][ T8812] pimreg: left allmulticast mode
[  353.316376][   T30] audit: type=1326 audit(1758572008.057:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20358eec9 code=0x7ffc0000
[  353.660083][   T30] audit: type=1326 audit(1758572008.117:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20358eec9 code=0x7ffc0000
[  353.708767][   T30] audit: type=1326 audit(1758572008.157:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fb20358eec9 code=0x7ffc0000
[  353.731557][   T30] audit: type=1326 audit(1758572008.157:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20358eec9 code=0x7ffc0000
[  353.754726][   T30] audit: type=1326 audit(1758572008.157:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20358eec9 code=0x7ffc0000
[  353.777448][   T30] audit: type=1326 audit(1758572008.157:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb20358eec9 code=0x7ffc0000
[  353.857139][   T30] audit: type=1326 audit(1758572008.167:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20358eec9 code=0x7ffc0000
[  353.880181][   T30] audit: type=1326 audit(1758572008.167:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20358eec9 code=0x7ffc0000
[  353.997309][   T30] audit: type=1326 audit(1758572008.167:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb20358eec9 code=0x7ffc0000
[  354.021713][   T30] audit: type=1326 audit(1758572008.197:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20358eec9 code=0x7ffc0000
[  354.939681][ T5873] usb 2-1: string descriptor 0 read error: -71
[  354.970251][ T5873] uvcvideo 2-1:0.0: Found UVC 0.00 device <unnamed> (2833:0201)
[  355.001468][ T5873] uvcvideo 2-1:0.0: No valid video chain found.
[  355.043696][ T5873] usb 2-1: USB disconnect, device number 7
[  355.200347][ T5183] Bluetooth: hci4: unexpected event for opcode 0x2062
[  356.280009][ T8869] FAULT_INJECTION: forcing a failure.
[  356.280009][ T8869] name failslab, interval 1, probability 0, space 0, times 0
[  356.293462][ T8869] CPU: 1 UID: 0 PID: 8869 Comm: syz.3.830 Not tainted syzkaller #0 PREEMPT(full) 
[  356.293486][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  356.293496][ T8869] Call Trace:
[  356.293503][ T8869]  <TASK>
[  356.293511][ T8869]  dump_stack_lvl+0x189/0x250
[  356.293537][ T8869]  ? __pfx____ratelimit+0x10/0x10
[  356.293556][ T8869]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.293577][ T8869]  ? __pfx__printk+0x10/0x10
[  356.293605][ T8869]  ? __pfx___might_resched+0x10/0x10
[  356.293633][ T8869]  should_fail_ex+0x414/0x560
[  356.293660][ T8869]  should_failslab+0xa8/0x100
[  356.293681][ T8869]  __kmalloc_cache_noprof+0x6f/0x6f0
[  356.293705][ T8869]  ? check_ctrlrecip+0x213/0xcc0
[  356.293726][ T8869]  ? alloc_async+0x4d/0xc0
[  356.293748][ T8869]  alloc_async+0x4d/0xc0
[  356.293765][ T8869]  proc_do_submiturb+0xb1a/0x37c0
[  356.293798][ T8869]  ? proc_do_submiturb+0x2340/0x37c0
[  356.293824][ T8869]  proc_submiturb+0x10e/0x160
[  356.293849][ T8869]  ? __pfx_proc_submiturb+0x10/0x10
[  356.293892][ T8869]  usbdev_ioctl+0x10d8/0x20b0
[  356.293918][ T8869]  ? __fget_files+0x2a/0x420
[  356.293936][ T8869]  ? __pfx_usbdev_ioctl+0x10/0x10
[  356.293955][ T8869]  ? __fget_files+0x3a0/0x420
[  356.293970][ T8869]  ? __fget_files+0x2a/0x420
[  356.293989][ T8869]  ? bpf_lsm_file_ioctl+0x9/0x20
[  356.294009][ T8869]  ? __pfx_usbdev_ioctl+0x10/0x10
[  356.294030][ T8869]  __se_sys_ioctl+0xfc/0x170
[  356.294054][ T8869]  do_syscall_64+0xfa/0xfa0
[  356.294076][ T8869]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.294100][ T8869]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  356.294115][ T8869]  ? clear_bhb_loop+0x60/0xb0
[  356.294136][ T8869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.294153][ T8869] RIP: 0033:0x7fb20358eec9
[  356.294168][ T8869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.294183][ T8869] RSP: 002b:00007fb204383038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  356.294202][ T8869] RAX: ffffffffffffffda RBX: 00007fb2037e5fa0 RCX: 00007fb20358eec9
[  356.294214][ T8869] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000006
[  356.294225][ T8869] RBP: 00007fb204383090 R08: 0000000000000000 R09: 0000000000000000
[  356.294236][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.294246][ T8869] R13: 00007fb2037e6038 R14: 00007fb2037e5fa0 R15: 00007ffd3eab8998
[  356.294299][ T8869]  </TASK>
[  356.295756][ T8869] sctp: [Deprecated]: syz.3.830 (pid 8869) Use of struct sctp_assoc_value in delayed_ack socket option.
[  356.295756][ T8869] Use struct sctp_sack_info instead
[  356.403049][ T8872] 9pnet_fd: Insufficient options for proto=fd
[  357.044504][ T8876] lo speed is unknown, defaulting to 1000
[  357.544184][ T8881] netlink: 'syz.1.833': attribute type 9 has an invalid length.
[  357.551864][ T8881] netlink: 'syz.1.833': attribute type 7 has an invalid length.
[  357.559572][ T8881] netlink: 'syz.1.833': attribute type 8 has an invalid length.
[  357.945580][ T5183] Bluetooth: hci3: unexpected event for opcode 0x2062
[  358.066205][ T8894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.836'.
[  358.223122][ T8876] lo speed is unknown, defaulting to 1000
[  358.875593][ T8914] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.887935][ T8914] MINIX-fs: unable to read superblock
[  359.176348][ T8915] /dev/sg0: Can't lookup blockdev
[  359.272968][ T5183] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  359.283029][ T5183] Bluetooth: hci4: Injecting HCI hardware error event
[  359.297785][ T5183] Bluetooth: hci4: hardware error 0x00
[  360.529123][ T8928] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  360.584563][ T8928] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  360.591044][ T8928] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  360.622471][ T8928] comedi comedi3: 8255: I/O port conflict (0xf,4)
[  360.630568][ T8928] comedi comedi3: 8255: I/O port conflict (0x800007,4)
[  360.653389][ T8928] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  360.680340][ T8928] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  360.693367][ T8928] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  360.710106][ T8928] comedi comedi3: 8255: I/O port conflict (0xffffffff80000001,4)
[  360.713305][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  360.713322][   T30] audit: type=1804 audit(1758572015.437:55): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.846" name="/newroot/174/file0" dev="tmpfs" ino=948 res=1 errno=0
[  360.734275][ T8928] comedi comedi3: 8255: I/O port conflict (0xffffffffffffbffd,4)
[  360.783374][ T8928] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  361.383402][ T5183] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  361.847554][ T8957] ieee802154 phy0 wpan0: encryption failed: -22
[  361.886751][ T8960] ieee802154 phy0 wpan0: encryption failed: -22
[  362.023552][ T5183] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  362.033727][ T5183] Bluetooth: hci3: Injecting HCI hardware error event
[  362.043751][ T5863] Bluetooth: hci3: hardware error 0x00
[  362.344457][   T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  362.455478][ T8971] vivid-000: disconnect
[  362.460943][ T8967] vivid-004: disconnect
[  362.466505][ T8967] vivid-004: reconnect
[  362.471579][ T8971] vivid-000: reconnect
[  362.796026][   T43] usb 4-1: Using ep0 maxpacket: 32
[  362.833766][   T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  362.859463][   T43] usb 4-1: config 0 has no interface number 0
[  362.869644][   T43] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  362.890823][   T43] usb 4-1: config 0 interface 1 has no altsetting 0
[  362.902960][   T43] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  362.934127][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.950763][   T43] usb 4-1: Product: syz
[  362.961147][   T43] usb 4-1: Manufacturer: syz
[  362.976526][   T43] usb 4-1: SerialNumber: syz
[  363.000419][   T43] usb 4-1: config 0 descriptor??
[  363.407380][ T8989] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  363.416886][ T8989] bcachefs (/dev/loop1): error reading default superblock: IO error: -5
[  363.425649][ T8989] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  363.435094][ T8989] bcachefs (/dev/loop1): error reading superblock: IO error: -5
[  363.442805][ T8989] bcachefs: bch2_fs_get_tree() error: EIO
[  363.476190][   T43] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  363.598512][   T43] cx231xx 4-1:0.1: Failed to read PCB config
[  363.607084][   T43] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71
[  363.619686][   T43] usb 4-1: USB disconnect, device number 10
[  363.643556][ T8995] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  363.652939][ T8995] FAT-fs (loop0): unable to read boot sector
[  364.125198][ T5863] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  364.209692][ T8993] ntfs3: Unknown parameter '����'
[  364.237018][ T8993] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  364.336381][ T5863] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  364.464304][ T5863] Bluetooth: hci2: unexpected event for opcode 0x2062
[  364.746613][ T9015] vivid-001: disconnect
[  365.148038][ T9001] vivid-001: reconnect
[  365.643684][ T9028] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  365.653159][ T9028] bcachefs (/dev/loop2): error reading default superblock: IO error: -5
[  365.661627][ T9028] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  365.671072][ T9028] bcachefs (/dev/loop2): error reading superblock: IO error: -5
[  365.679208][ T9028] bcachefs: bch2_fs_get_tree() error: EIO
[  365.687390][ T9031] hfsplus: unable to find HFS+ superblock
[  365.926939][   T30] audit: type=1326 audit(1758572020.657:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7abb8eec9 code=0x7ffc0000
[  365.973777][   T30] audit: type=1326 audit(1758572020.687:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7abb8eec9 code=0x7ffc0000
[  365.997104][   T30] audit: type=1326 audit(1758572020.697:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe7abb8eec9 code=0x7ffc0000
[  366.467866][   T30] audit: type=1326 audit(1758572020.697:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7abb8eec9 code=0x7ffc0000
[  366.490597][   T30] audit: type=1326 audit(1758572020.697:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe7abb8eec9 code=0x7ffc0000
[  366.516893][   T30] audit: type=1326 audit(1758572020.717:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7abb8eec9 code=0x7ffc0000
[  366.574069][   T30] audit: type=1326 audit(1758572020.717:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7abb8eec9 code=0x7ffc0000
[  366.608100][ T9046] msdos: Unknown parameter ''
[  366.664686][   T30] audit: type=1326 audit(1758572020.717:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe7abb8eec9 code=0x7ffc0000
[  366.723384][   T30] audit: type=1326 audit(1758572020.717:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7abb8eec9 code=0x7ffc0000
[  366.756648][ T9044] ntfs3: Unknown parameter '����'
[  366.784624][ T9044] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  366.802737][   T30] audit: type=1326 audit(1758572020.717:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fe7abb8eec9 code=0x7ffc0000
[  366.820743][ T9046] ntfs3(loop2): try to read out of volume at offset 0x0
[  367.099156][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  367.325052][ T5873] usb 5-1: Using ep0 maxpacket: 8
[  367.345962][ T5873] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  367.363290][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.428371][ T5873] pvrusb2: Hardware description: Terratec Grabster AV400
[  367.463339][ T5873] pvrusb2: **********
[  367.474691][ T5873] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  367.493889][ T5873] pvrusb2: Important functionality might not be entirely working.
[  367.511915][ T5873] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  367.538672][ T9060] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  367.548228][ T5873] pvrusb2: **********
[  367.557634][ T9060] EXT4-fs (loop0): unable to read superblock
[  367.765271][ T2344] pvrusb2: Invalid write control endpoint
[  367.808311][ T9060] ext4: Bad value for 'barrier'
[  367.888127][ T9064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.883'.
[  368.285674][ T2344] pvrusb2: Invalid write control endpoint
[  368.346492][ T9047] CUSE: unknown device info "�KJ�H+��ۤ2Lh��nL�1�`�Cc��n�����8���0���(�3նi��>f���_ٮ,��
�<�_e�F��"
[  368.352391][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  368.369076][ T9047] CUSE: unknown device info "3�ܟ�,��̘�"
[  368.383384][ T9047] CUSE: unknown device info "J���2SZ�� !e/��������J�+-n��a4����D�|G$��5O~�q	��
[  368.383384][ T9047] f����z��X�SA�x��j��T�ǔ��w���xR�ɐQ��(hҏj	p�VdY0��|M?2J��I�v�^
R�@��"
[  368.415624][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  368.431673][ T9070] block nbd3: Attempted send on invalid socket
[  368.438256][ T9070] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  368.454906][ T9071] vivid-000: disconnect
[  368.459442][ T9071] vivid-000: reconnect
[  368.718186][ T9070] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-glock/__��"_�z#�˱1�
[  368.731195][ T5863] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  368.740238][ T5863] Bluetooth: hci2: Injecting HCI hardware error event
[  368.748618][ T5863] Bluetooth: hci2: hardware error 0x00
[  368.775430][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  368.809947][ T2344] pvrusb2: Device being rendered inoperable
[  368.818631][ T9034] pvrusb2: Attempted to execute control transfer when device not ok
[  368.833012][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  368.833383][ T9047] CUSE: unknown device info "!To�}ݝ&|L+U��o��ϲ���"��FstV�:׌E�gJ�����<@c�����4�T�M�M|�����"
[  368.840435][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  368.867424][ T2344] pvrusb2: Attached sub-driver cx25840
[  368.867636][ T9070] gfs2: can't find protocol dlm
[  368.873062][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  368.888171][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  368.993460][ T9047] CUSE: DEVNAME unspecified
[  369.856792][ T9091] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  369.866462][ T9091] bcachefs (/dev/loop1): error reading default superblock: IO error: -5
[  369.874892][ T9091] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  369.887439][ T9091] bcachefs (/dev/loop1): error reading superblock: IO error: -5
[  369.895286][ T9091] bcachefs: bch2_fs_get_tree() error: EIO
[  369.994968][ T5873] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  370.244490][   T43] usb 5-1: USB disconnect, device number 7
[  370.701218][ T9103] erofs (device loop0): cannot find valid erofs superblock
[  370.810309][ T5873] usb 3-1: Using ep0 maxpacket: 16
[  370.824347][ T5863] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  370.876159][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.896230][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  370.927020][ T5873] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  371.233053][   T30] kauditd_printk_skb: 53 callbacks suppressed
[  371.233066][   T30] audit: type=1804 audit(1758572025.967:119): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.896" name="/newroot/188/file0" dev="tmpfs" ino=1030 res=1 errno=0
[  371.262012][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.284867][ T5873] usb 3-1: config 0 descriptor??
[  371.714908][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  371.718603][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.752511][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.898206][ T5873] usbhid 3-1:0.0: can't add hid device: -71
[  371.904937][ T5873] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  371.960963][ T5873] usb 3-1: USB disconnect, device number 15
[  371.975880][ T9117] netlink: 'syz.0.898': attribute type 39 has an invalid length.
[  371.986675][   T10] usb 2-1: config 4 has an invalid interface number: 95 but max is 0
[  372.007220][   T10] usb 2-1: config 4 has no interface number 0
[  372.031051][   T10] usb 2-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  372.045388][   T10] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  372.057475][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.066022][   T10] usb 2-1: Product: syz
[  372.070357][   T10] usb 2-1: Manufacturer: syz
[  372.078129][   T10] usb 2-1: SerialNumber: syz
[  372.087679][ T9115] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  372.173368][ T6009] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  372.283333][ T5985] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  372.308581][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  372.318318][   T10] usb 2-1: MIDIStreaming interface descriptor not found
[  372.328808][ T6009] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  372.345605][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.385688][ T6009] usb 4-1: config 0 descriptor??
[  372.396357][   T10] usb 2-1: USB disconnect, device number 8
[  372.450360][ T5985] usb 5-1: Using ep0 maxpacket: 32
[  372.467207][ T5985] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  372.479910][ T5985] usb 5-1: config 0 has no interface number 0
[  372.493064][ T5985] usb 5-1: config 0 interface 184 has no altsetting 0
[  372.510063][ T5985] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  372.521321][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.530556][ T5985] usb 5-1: Product: syz
[  372.535208][ T5985] usb 5-1: Manufacturer: syz
[  372.544271][ T5985] usb 5-1: SerialNumber: syz
[  372.566193][ T5985] usb 5-1: config 0 descriptor??
[  372.580444][ T5985] smsc75xx v1.0.0
[  372.606623][ T6009] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  372.692054][ T9135] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.701577][ T9135] FAT-fs (loop2): unable to read boot sector
[  372.807640][ T6009] [drm:udl_init] *ERROR* Selecting channel failed
[  372.884492][ T6009] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  372.894535][ T6009] [drm] Initialized udl on minor 2
[  372.906247][ T6009] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  372.929576][ T6009] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  372.950545][ T5873] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  372.975921][ T5873] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  372.989366][ T6009] usb 4-1: USB disconnect, device number 11
[  373.257235][ T5985] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  373.268729][ T5985] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  373.280737][ T9139] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  373.851003][ T9145] netlink: 'syz.3.907': attribute type 9 has an invalid length.
[  373.854462][ T9144] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  373.858715][ T9145] netlink: 'syz.3.907': attribute type 7 has an invalid length.
[  373.868209][ T9144] bcachefs (/dev/loop0): error reading default superblock: IO error: -5
[  373.878715][ T9145] netlink: 'syz.3.907': attribute type 8 has an invalid length.
[  373.884857][ T9144] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  373.901906][ T9144] bcachefs (/dev/loop0): error reading superblock: IO error: -5
[  373.909865][ T9144] bcachefs: bch2_fs_get_tree() error: EIO
[  374.139484][   T30] audit: type=1804 audit(1758572028.877:120): pid=9148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.908" name="/newroot/188/file0" dev="tmpfs" ino=1026 res=1 errno=0
[  374.812461][ T5985] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  374.823573][ T5985] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  374.833544][ T5985] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  374.844159][ T5985] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  374.858712][ T5985] usb 5-1: USB disconnect, device number 8
[  374.874259][ T6009] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  374.983656][ T5873] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  375.025484][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.035411][ T6009] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  375.044506][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.055585][ T6009] usb 3-1: config 0 descriptor??
[  375.135895][ T5873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  375.146721][ T5873] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  375.156914][ T5873] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  375.166361][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  375.175244][ T5873] usb 1-1: SerialNumber: syz
[  375.575284][ T9166] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  375.641211][ T6009] logitech-djreceiver 0003:046D:C71F.0004: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0
[  376.127175][   T10] usb 3-1: USB disconnect, device number 16
[  376.210200][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'.
[  376.512827][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.918'.
[  377.019130][ T9189] netlink: 'syz.2.920': attribute type 9 has an invalid length.
[  377.026952][ T9189] netlink: 'syz.2.920': attribute type 7 has an invalid length.
[  377.035693][ T9189] netlink: 'syz.2.920': attribute type 8 has an invalid length.
[  377.835229][ T9193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.921'.
[  377.865018][ T5873] usb 1-1: 0:2 : does not exist
[  377.938499][ T5873] usb 1-1: USB disconnect, device number 16
[  378.003893][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'.
[  378.036144][ T9203] netlink: 44 bytes leftover after parsing attributes in process `syz.4.926'.
[  378.059591][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  378.101267][ T9197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.923'.
[  378.153139][ T9206] fuse: Bad value for 'fd'
[  378.223314][   T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  378.507818][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.514378][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  378.566632][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  378.576876][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  378.592812][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  378.603775][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.830894][   T10] usb 3-1: usb_control_msg returned -32
[  378.838120][   T10] usbtmc 3-1:16.0: can't read capabilities
[  380.369254][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.936'.
[  380.498720][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[  380.563156][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.938'.
[  380.563295][   T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  380.786491][   T43] usb 2-1: Using ep0 maxpacket: 16
[  380.836641][   T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  380.934339][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  381.052956][   T43] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  381.165299][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.247940][   T43] usb 2-1: Product: syz
[  381.288960][   T43] usb 2-1: Manufacturer: syz
[  381.340537][   T43] usb 2-1: SerialNumber: syz
[  381.478253][   T43] usb 2-1: config 0 descriptor??
[  381.487560][   T10] usb 3-1: USB disconnect, device number 17
[  381.672866][   T43] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  381.702588][   T43] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  381.748784][ T9257] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  381.762146][ T9257] MINIX-fs: unable to read superblock
[  381.895917][ T5873] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  382.717160][   T43] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  382.734182][ T5873] usb 1-1: Using ep0 maxpacket: 32
[  382.748891][   T43] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  382.752461][ T5873] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.796902][ T5873] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  382.815957][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  382.838798][ T5873] usb 1-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3
[  382.849337][ T5873] usb 1-1: Product: syz
[  382.854614][ T5873] usb 1-1: Manufacturer: syz
[  382.859390][ T5873] usb 1-1: SerialNumber: syz
[  383.078145][ T9253] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  383.710222][ T9253] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  383.929030][   T43] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  383.936162][   T43] em28xx 2-1:0.0: No AC97 audio processor
[  383.939829][ T5873] cdc_ncm 1-1:1.0: failed to get mac address
[  384.002320][ T5873] cdc_ncm 1-1:1.0: bind() failure
[  384.045874][ T5873] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  384.064629][   T10] usb 2-1: USB disconnect, device number 9
[  384.071801][   T10] em28xx 2-1:0.0: Disconnecting em28xx
[  384.092765][ T5873] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  384.108037][   T10] em28xx 2-1:0.0: Freeing device
[  384.136490][ T5873] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  384.191321][ T5873] usb 1-1: USB disconnect, device number 17
[  384.229775][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'.
[  386.573299][  T875] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  386.766959][ T9301] netlink: 'syz.4.954': attribute type 39 has an invalid length.
[  386.876668][  T875] usb 3-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  387.251260][  T875] usb 3-1: config 1 interface 0 altsetting 108 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  387.453399][  T875] usb 3-1: config 1 interface 0 has no altsetting 0
[  387.471228][  T875] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.40
[  387.600483][ T9302] befs: (loop0): No write support. Marking filesystem read-only
[  387.608394][ T9302] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  387.886368][  T875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.896877][  T875] usb 3-1: Product: syz
[  387.903492][  T875] usb 3-1: Manufacturer: syz
[  387.908338][  T875] usb 3-1: SerialNumber: syz
[  387.922927][ T9293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  388.134732][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.202435][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.263064][  T875] usbhid 3-1:1.0: can't add hid device: -71
[  388.285633][  T875] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  388.327290][  T875] usb 3-1: USB disconnect, device number 18
[  388.739651][ T9334] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  388.787335][ T9334] FAT-fs (loop4): unable to read boot sector
[  389.319700][ T9345] erofs (device loop2): cannot find valid erofs superblock
[  390.562681][ T9366] vivid-002: disconnect
[  390.571926][ T9366] vivid-002: reconnect
[  391.235872][ T9371] kvm: requested 82133 ns i8254 timer period limited to 200000 ns
[  391.253842][ T9371] kvm: requested 191923 ns i8254 timer period limited to 200000 ns
[  391.263901][ T9371] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  391.272072][ T9371] kvm: requested 166781 ns i8254 timer period limited to 200000 ns
[  391.278304][ T5985] kernel write not supported for file /691/clear_refs (pid: 5985 comm: kworker/1:6)
[  391.304503][ T9371] kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[  391.353789][ T9371] kvm: requested 65371 ns i8254 timer period limited to 200000 ns
[  391.373669][ T9371] kvm: requested 25142 ns i8254 timer period limited to 200000 ns
[  391.422239][ T9371] kvm: requested 23466 ns i8254 timer period limited to 200000 ns
[  391.454255][ T9371] kvm: requested 25980 ns i8254 timer period limited to 200000 ns
[  392.564598][   T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  392.680939][ T9396] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  392.692012][ T9396] EXT4-fs (loop0): unable to read superblock
[  392.725318][   T10] usb 5-1: config 1 has an invalid interface number: 128 but max is 1
[  392.740408][ T9396] ext4: Bad value for 'barrier'
[  392.749267][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  392.760900][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  392.771537][   T10] usb 5-1: config 1 has no interface number 0
[  392.782462][   T10] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  392.795017][   T10] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.865909][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  392.881086][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.889483][   T10] usb 5-1: Product: syz
[  392.894866][   T10] usb 5-1: Manufacturer: syz
[  392.971884][   T10] usb 5-1: SerialNumber: syz
[  393.010013][ T9397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.983'.
[  393.283603][   T10] cdc_wdm 5-1:1.128: skipping garbage
[  393.295421][   T10] cdc_wdm 5-1:1.128: cdc-wdm0: USB WDM device
[  393.314540][   T10] cdc_wdm 5-1:1.128: Unknown control protocol
[  393.549581][ T9406] fuse: Bad value for 'user_id'
[  393.564225][ T9406] fuse: Bad value for 'user_id'
[  393.575352][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'.
[  393.616806][ T9408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'.
[  393.813361][   T30] audit: type=1804 audit(1758572048.417:121): pid=9410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.987" name="/newroot/176/file0" dev="tmpfs" ino=953 res=1 errno=0
[  397.977087][   T10] kernel write not supported for file /703/clear_refs (pid: 10 comm: kworker/0:1)
[  398.585444][   T43] usb 5-1: USB disconnect, device number 9
[  398.706110][ T9429] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  398.740843][   T30] audit: type=1326 audit(1758572053.477:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9428 comm="syz.3.992" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb20358eec9 code=0x0
[  398.774475][ T9429] EXT4-fs (loop0): unable to read superblock
[  398.815484][ T9429] ext4: Bad value for 'barrier'
[  401.695194][ T9448] JFS: discard option not supported on device
[  401.702471][ T9448] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.713942][ T9448] I/O error, dev loop1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  401.725021][ T9448] Mount JFS Failure: -5
[  401.729255][ T9448] jfs_mount failed w/return code = -5
[  402.163053][ T9433] netlink: 'syz.4.994': attribute type 39 has an invalid length.
[  402.989600][ T5873] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  403.585102][ T9461] vivid-004: disconnect
[  403.593897][ T5873] usb 4-1: Using ep0 maxpacket: 32
[  403.601738][ T9461] vivid-004: reconnect
[  403.735434][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  403.820520][ T5873] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  403.841453][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.851510][ T5873] usb 4-1: Product: syz
[  404.063160][ T5873] usb 4-1: Manufacturer: syz
[  404.068054][ T5873] usb 4-1: SerialNumber: syz
[  404.115444][ T5873] usb 4-1: config 0 descriptor??
[  404.644296][ T9451] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  404.659549][ T5873] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[  404.937632][ T9473] 9pnet_fd: Insufficient options for proto=fd
[  405.036005][ T9477] FAULT_INJECTION: forcing a failure.
[  405.036005][ T9477] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  405.089824][ T5873] usb 4-1: USB disconnect, device number 12
[  405.096994][    C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  405.161566][ T9477] CPU: 1 UID: 0 PID: 9477 Comm: syz.1.1006 Not tainted syzkaller #0 PREEMPT(full) 
[  405.161591][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  405.161606][ T9477] Call Trace:
[  405.161613][ T9477]  <TASK>
[  405.161621][ T9477]  dump_stack_lvl+0x189/0x250
[  405.161648][ T9477]  ? __pfx____ratelimit+0x10/0x10
[  405.161669][ T9477]  ? __pfx_dump_stack_lvl+0x10/0x10
[  405.161688][ T9477]  ? __pfx__printk+0x10/0x10
[  405.161709][ T9477]  ? __might_fault+0xb0/0x130
[  405.161744][ T9477]  should_fail_ex+0x414/0x560
[  405.161774][ T9477]  _copy_from_user+0x2d/0xb0
[  405.161793][ T9477]  drm_ioctl+0x58a/0xb10
[  405.161820][ T9477]  ? __pfx_drm_mode_getfb+0x10/0x10
[  405.161842][ T9477]  ? __pfx_drm_ioctl+0x10/0x10
[  405.161876][ T9477]  ? __fget_files+0x3a0/0x420
[  405.161893][ T9477]  ? __fget_files+0x2a/0x420
[  405.161912][ T9477]  ? bpf_lsm_file_ioctl+0x9/0x20
[  405.161932][ T9477]  ? __pfx_drm_ioctl+0x10/0x10
[  405.161954][ T9477]  __se_sys_ioctl+0xfc/0x170
[  405.161978][ T9477]  do_syscall_64+0xfa/0xfa0
[  405.161999][ T9477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.162015][ T9477]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  405.162031][ T9477]  ? clear_bhb_loop+0x60/0xb0
[  405.162051][ T9477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.162072][ T9477] RIP: 0033:0x7f437f18eec9
[  405.162087][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.162103][ T9477] RSP: 002b:00007f437ffd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  405.162120][ T9477] RAX: ffffffffffffffda RBX: 00007f437f3e5fa0 RCX: 00007f437f18eec9
[  405.162132][ T9477] RDX: 0000200000000080 RSI: 00000000c01c64ad RDI: 0000000000000005
[  405.162143][ T9477] RBP: 00007f437ffd3090 R08: 0000000000000000 R09: 0000000000000000
[  405.162154][ T9477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.162164][ T9477] R13: 00007f437f3e6038 R14: 00007f437f3e5fa0 R15: 00007ffd748b1098
[  405.162193][ T9477]  </TASK>
[  405.896893][  T875] kernel write not supported for file /721/clear_refs (pid: 875 comm: kworker/1:2)
[  406.557174][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'.
[  406.601705][ T9500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'.
[  406.767549][ T9505] FAULT_INJECTION: forcing a failure.
[  406.767549][ T9505] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  407.016731][ T9505] CPU: 1 UID: 0 PID: 9505 Comm: syz.4.1015 Not tainted syzkaller #0 PREEMPT(full) 
[  407.016755][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  407.016765][ T9505] Call Trace:
[  407.016772][ T9505]  <TASK>
[  407.016779][ T9505]  dump_stack_lvl+0x189/0x250
[  407.016804][ T9505]  ? __pfx____ratelimit+0x10/0x10
[  407.016821][ T9505]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.016839][ T9505]  ? __pfx__printk+0x10/0x10
[  407.016860][ T9505]  ? __might_fault+0xb0/0x130
[  407.016893][ T9505]  should_fail_ex+0x414/0x560
[  407.016919][ T9505]  _copy_from_user+0x2d/0xb0
[  407.016937][ T9505]  __sys_bpf+0x1ed/0x870
[  407.016960][ T9505]  ? __pfx___sys_bpf+0x10/0x10
[  407.016992][ T9505]  ? ksys_write+0x22a/0x250
[  407.017017][ T9505]  ? __pfx_ksys_write+0x10/0x10
[  407.017045][ T9505]  __x64_sys_bpf+0x7c/0x90
[  407.017064][ T9505]  do_syscall_64+0xfa/0xfa0
[  407.017082][ T9505]  ? lockdep_hardirqs_on+0x9c/0x150
[  407.017100][ T9505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.017117][ T9505]  ? clear_bhb_loop+0x60/0xb0
[  407.017136][ T9505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.017149][ T9505] RIP: 0033:0x7fe7abb8eec9
[  407.017161][ T9505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.017173][ T9505] RSP: 002b:00007fe7ac9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  407.017188][ T9505] RAX: ffffffffffffffda RBX: 00007fe7abde5fa0 RCX: 00007fe7abb8eec9
[  407.017198][ T9505] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 000000000000001c
[  407.017206][ T9505] RBP: 00007fe7ac9b4090 R08: 0000000000000000 R09: 0000000000000000
[  407.017214][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.017222][ T9505] R13: 00007fe7abde6038 R14: 00007fe7abde5fa0 R15: 00007ffcbbd79dd8
[  407.017253][ T9505]  </TASK>
[  407.514958][ T5863] Bluetooth: hci1: unexpected event for opcode 0x2062
[  408.504904][ T9530] FAULT_INJECTION: forcing a failure.
[  408.504904][ T9530] name failslab, interval 1, probability 0, space 0, times 0
[  408.521345][ T9530] CPU: 0 UID: 0 PID: 9530 Comm: syz.1.1021 Not tainted syzkaller #0 PREEMPT(full) 
[  408.521368][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  408.521378][ T9530] Call Trace:
[  408.521385][ T9530]  <TASK>
[  408.521393][ T9530]  dump_stack_lvl+0x189/0x250
[  408.521419][ T9530]  ? __pfx____ratelimit+0x10/0x10
[  408.521438][ T9530]  ? __pfx_dump_stack_lvl+0x10/0x10
[  408.521458][ T9530]  ? __pfx__printk+0x10/0x10
[  408.521486][ T9530]  ? __pfx___might_resched+0x10/0x10
[  408.521508][ T9530]  ? fs_reclaim_acquire+0x7d/0x100
[  408.521530][ T9530]  should_fail_ex+0x414/0x560
[  408.521555][ T9530]  should_failslab+0xa8/0x100
[  408.521575][ T9530]  kmem_cache_alloc_node_noprof+0x77/0x710
[  408.521598][ T9530]  ? __alloc_skb+0x112/0x2d0
[  408.521623][ T9530]  __alloc_skb+0x112/0x2d0
[  408.521644][ T9530]  tipc_msg_build+0x13b/0xcf0
[  408.521671][ T9530]  ? tipc_node_find+0xb3/0x480
[  408.521689][ T9530]  ? __pfx_tipc_msg_build+0x10/0x10
[  408.521726][ T9530]  __tipc_sendmsg+0x1715/0x2960
[  408.521756][ T9530]  ? process_measurement+0x72d/0x1a40
[  408.521778][ T9530]  ? __pfx___tipc_sendmsg+0x10/0x10
[  408.521801][ T9530]  ? aa_label_sk_perm+0x4cd/0x630
[  408.521830][ T9530]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  408.521881][ T9530]  ? __lock_acquire+0xab9/0xd20
[  408.521917][ T9530]  ? __local_bh_enable_ip+0x12d/0x1c0
[  408.521940][ T9530]  ? lockdep_hardirqs_on+0x9c/0x150
[  408.521960][ T9530]  ? __pfx_woken_wake_function+0x10/0x10
[  408.521980][ T9530]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  408.522013][ T9530]  tipc_sendmsg+0x55/0x70
[  408.522031][ T9530]  ? __pfx_tipc_sendmsg+0x10/0x10
[  408.522050][ T9530]  __sock_sendmsg+0x21c/0x270
[  408.522076][ T9530]  ____sys_sendmsg+0x52d/0x830
[  408.522102][ T9530]  ? __pfx_____sys_sendmsg+0x10/0x10
[  408.522132][ T9530]  ? import_iovec+0x74/0xa0
[  408.522153][ T9530]  ___sys_sendmsg+0x21f/0x2a0
[  408.522176][ T9530]  ? __pfx____sys_sendmsg+0x10/0x10
[  408.522240][ T9530]  ? __might_fault+0xb0/0x130
[  408.522268][ T9530]  __sys_sendmmsg+0x227/0x430
[  408.522294][ T9530]  ? __pfx___sys_sendmmsg+0x10/0x10
[  408.522329][ T9530]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  408.522368][ T9530]  ? ksys_write+0x22a/0x250
[  408.522394][ T9530]  ? __pfx_ksys_write+0x10/0x10
[  408.522422][ T9530]  __x64_sys_sendmmsg+0xa0/0xc0
[  408.522445][ T9530]  do_syscall_64+0xfa/0xfa0
[  408.522463][ T9530]  ? lockdep_hardirqs_on+0x9c/0x150
[  408.522482][ T9530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.522498][ T9530]  ? clear_bhb_loop+0x60/0xb0
[  408.522519][ T9530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.522535][ T9530] RIP: 0033:0x7f437f18eec9
[  408.522551][ T9530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.522565][ T9530] RSP: 002b:00007f437ff91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  408.522584][ T9530] RAX: ffffffffffffffda RBX: 00007f437f3e6180 RCX: 00007f437f18eec9
[  408.522596][ T9530] RDX: 0400000000000203 RSI: 0000200000004400 RDI: 0000000000000006
[  408.522607][ T9530] RBP: 00007f437ff91090 R08: 0000000000000000 R09: 0000000000000000
[  408.522618][ T9530] R10: 00000000000101d0 R11: 0000000000000246 R12: 0000000000000001
[  408.522628][ T9530] R13: 00007f437f3e6218 R14: 00007f437f3e6180 R15: 00007ffd748b1098
[  408.522659][ T9530]  </TASK>
[  408.849447][    C0] vkms_vblank_simulate: vblank timer overrun
[  409.178366][ T9532] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  409.188857][ T9532] bcachefs (/dev/loop2): error reading default superblock: IO error: -5
[  409.197280][ T9532] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  409.206711][ T9532] bcachefs (/dev/loop2): error reading superblock: IO error: -5
[  409.214459][ T9532] bcachefs: bch2_fs_get_tree() error: EIO
[  409.975430][ T9542] syz_tun: left allmulticast mode
[  409.991111][ T9544] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  410.020834][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1027'.
[  410.037799][   T30] audit: type=1326 audit(1758572832.965:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.0.1026" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb59e78eec9 code=0x0
[  410.462306][   T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  411.523377][ T5863] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  411.532349][ T5863] Bluetooth: hci1: Injecting HCI hardware error event
[  411.541287][ T5863] Bluetooth: hci1: hardware error 0x00
[  411.827346][   T43] usb 5-1: config 0 has an invalid interface number: 104 but max is 0
[  411.996188][   T43] usb 5-1: config 0 has no interface number 0
[  412.003423][   T43] usb 5-1: config 0 interface 104 has no altsetting 0
[  412.030622][   T43] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9
[  412.081296][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.126083][   T43] usb 5-1: Product: syz
[  412.243669][   T43] usb 5-1: Manufacturer: syz
[  412.248401][   T43] usb 5-1: SerialNumber: syz
[  412.267639][   T43] usb 5-1: config 0 descriptor??
[  412.294976][   T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  413.132169][   T43] gspca_vc032x: reg_r err -71
[  413.137463][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.143267][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.148794][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.167661][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.172981][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.178432][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.183731][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.235999][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'.
[  413.244907][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.244924][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.244934][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.244942][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.244951][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.244960][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.244968][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.244976][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.244984][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.244992][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.245001][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  413.510627][   T43] gspca_vc032x: Unknown sensor...
[  413.517895][   T43] vc032x 5-1:0.104: probe with driver vc032x failed with error -22
[  413.518248][ T5863] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  413.534303][   T43] usb 5-1: USB disconnect, device number 10
[  414.549299][ T9579] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  414.559322][ T9579] bcachefs (/dev/loop2): error reading default superblock: IO error: -5
[  414.567680][ T9579] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  414.577127][ T9579] bcachefs (/dev/loop2): error reading superblock: IO error: -5
[  414.584844][ T9579] bcachefs: bch2_fs_get_tree() error: EIO
[  416.752073][ T9588] JFS: discard option not supported on device
[  416.759305][ T9588] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  416.769756][ T9588] I/O error, dev loop1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  416.779735][ T9588] Mount JFS Failure: -5
[  416.783954][ T9588] jfs_mount failed w/return code = -5
[  417.663504][ T9594] befs: (loop2): No write support. Marking filesystem read-only
[  417.671436][ T9594] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  419.339148][   T30] audit: type=1804 audit(1758573610.594:124): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1047" name="/newroot/220/file0" dev="tmpfs" ino=1207 res=1 errno=0
[  419.527269][ T9591] JFS: discard option not supported on device
[  419.535854][ T9591] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  419.546441][ T9591] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  419.556300][ T9591] Mount JFS Failure: -5
[  419.561613][ T9591] jfs_mount failed w/return code = -5
[  420.346283][ T9616] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  420.355808][ T9616] bcachefs (/dev/loop0): error reading default superblock: IO error: -5
[  420.365440][ T9616] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  420.377153][ T9616] bcachefs (/dev/loop0): error reading superblock: IO error: -5
[  420.385008][ T9616] bcachefs: bch2_fs_get_tree() error: EIO
[  420.428860][  T875] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  420.608721][   T30] audit: type=1804 audit(1758573612.074:125): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1055" name="/newroot/218/file0" dev="tmpfs" ino=1185 res=1 errno=0
[  420.637235][  T875] usb 5-1: Using ep0 maxpacket: 8
[  420.728830][  T875] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f
[  420.808351][  T875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.844425][  T875] usb 5-1: Product: syz
[  420.853857][  T875] usb 5-1: Manufacturer: syz
[  420.869139][  T875] usb 5-1: SerialNumber: syz
[  420.941044][  T875] usb 5-1: config 0 descriptor??
[  420.971702][  T875]  (null): radio-mr800 - initialization failed
[  421.000227][  T875] radio-mr800 5-1:0.0: probe with driver radio-mr800 failed with error -22
[  421.026204][  T875] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  421.149422][ T5985] usb 5-1: USB disconnect, device number 11
[  421.317773][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'.
[  421.502868][ T9638] mmap: syz.3.1058 (9638) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  421.561450][ T9618] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  421.572177][ T9618] bcachefs (/dev/loop1): error reading default superblock: IO error: -5
[  421.582338][ T9618] I/O error, dev loop1, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  421.592874][ T9618] bcachefs (/dev/loop1): error reading superblock: IO error: -5
[  421.603838][ T9618] bcachefs: bch2_fs_get_tree() error: EIO
[  421.692926][ T9644] fuse: Bad value for 'fd'
[  425.051041][ T5873] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  425.560192][ T5873] usb 5-1: Using ep0 maxpacket: 32
[  425.622140][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  425.680588][ T5873] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  425.709789][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.758504][ T5873] usb 5-1: Product: syz
[  425.776777][ T5873] usb 5-1: Manufacturer: syz
[  425.786477][ T5873] usb 5-1: SerialNumber: syz
[  425.827737][ T5873] usb 5-1: config 0 descriptor??
[  425.855337][ T9658] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  425.888067][ T5873] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14
[  426.085012][ T9673] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  426.094556][ T9673] bcachefs (/dev/loop0): error reading default superblock: IO error: -5
[  426.103020][ T9673] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  426.112501][ T9673] bcachefs (/dev/loop0): error reading superblock: IO error: -5
[  426.120285][ T9673] bcachefs: bch2_fs_get_tree() error: EIO
[  426.172536][ T5873] usb 5-1: USB disconnect, device number 12
[  426.178678][    C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  426.349786][ T5915] udevd[5915]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  430.103243][ T9702] netlink: 'syz.3.1072': attribute type 9 has an invalid length.
[  430.110986][ T9702] netlink: 'syz.3.1072': attribute type 7 has an invalid length.
[  430.119107][ T9702] netlink: 'syz.3.1072': attribute type 8 has an invalid length.
[  430.400222][ T9708] EXT4-fs: Ignoring removed i_version option
[  430.428006][ T9708] EXT4-fs: inline encryption not supported
[  430.434962][ T9708] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  430.446804][ T9708] EXT4-fs (loop0): unable to read superblock
[  430.802222][ T9708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1075'.
[  431.079030][ T9722] FAULT_INJECTION: forcing a failure.
[  431.079030][ T9722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  431.092266][ T9722] CPU: 1 UID: 0 PID: 9722 Comm: syz.3.1077 Not tainted syzkaller #0 PREEMPT(full) 
[  431.092289][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  431.092300][ T9722] Call Trace:
[  431.092307][ T9722]  <TASK>
[  431.092316][ T9722]  dump_stack_lvl+0x189/0x250
[  431.092345][ T9722]  ? __pfx____ratelimit+0x10/0x10
[  431.092365][ T9722]  ? __pfx_dump_stack_lvl+0x10/0x10
[  431.092384][ T9722]  ? __pfx__printk+0x10/0x10
[  431.092407][ T9722]  ? __might_fault+0xb0/0x130
[  431.092441][ T9722]  should_fail_ex+0x414/0x560
[  431.092468][ T9722]  _copy_from_user+0x2d/0xb0
[  431.092487][ T9722]  restore_altstack+0x9d/0x4b0
[  431.092507][ T9722]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  431.092530][ T9722]  ? __pfx_restore_altstack+0x10/0x10
[  431.092554][ T9722]  ? _raw_spin_unlock_irq+0x23/0x50
[  431.092583][ T9722]  ? lockdep_hardirqs_on+0x9c/0x150
[  431.092605][ T9722]  __ia32_sys_rt_sigreturn+0x281/0x860
[  431.092637][ T9722]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  431.092657][ T9722]  ? rcu_is_watching+0x15/0xb0
[  431.092681][ T9722]  ? trace_irq_disable+0x37/0x110
[  431.092702][ T9722]  ? preempt_schedule_irq+0xde/0x150
[  431.092720][ T9722]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  431.092746][ T9722]  ? irqentry_exit+0x74/0x90
[  431.092764][ T9722]  ? lockdep_hardirqs_on+0x9c/0x150
[  431.092800][ T9722]  do_syscall_64+0xfa/0xfa0
[  431.092818][ T9722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.092832][ T9722]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  431.092848][ T9722]  ? clear_bhb_loop+0x60/0xb0
[  431.092868][ T9722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.092884][ T9722] RIP: 0033:0x7fb20352af79
[  431.092899][ T9722] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  431.092913][ T9722] RSP: 002b:00007fb204340a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  431.092931][ T9722] RAX: ffffffffffffffda RBX: 00007fb2037e6180 RCX: 00007fb20352af79
[  431.092944][ T9722] RDX: 00007fb204340a80 RSI: 00007fb204340bb0 RDI: 0000000000000021
[  431.092955][ T9722] RBP: 00007fb204341090 R08: 0000000000000000 R09: 0000000000000000
[  431.092966][ T9722] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[  431.092976][ T9722] R13: 00007fb2037e6218 R14: 00007fb2037e6180 R15: 00007ffd3eab8998
[  431.093007][ T9722]  </TASK>
[  431.380081][ T5873] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  431.821432][ T9726] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  431.826547][ T5873] usb 2-1: Using ep0 maxpacket: 16
[  431.830957][ T9726] bcachefs (/dev/loop2): error reading default superblock: IO error: -5
[  431.844400][ T9726] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  431.853847][ T9726] bcachefs (/dev/loop2): error reading superblock: IO error: -5
[  431.861690][ T9726] bcachefs: bch2_fs_get_tree() error: EIO
[  431.870600][ T9729] befs: (loop0): No write support. Marking filesystem read-only
[  431.878506][ T9729] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  431.898363][ T5873] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.955729][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0
[  431.972315][ T5873] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  431.991737][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.013746][ T5873] usb 2-1: config 0 descriptor??
[  432.041941][ T9731] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  432.503877][ T5873] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  432.628135][ T9743] erofs (device loop3): cannot find valid erofs superblock
[  432.679012][ T9745] netlink: 'syz.2.1086': attribute type 5 has an invalid length.
[  432.906593][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'.
[  432.923703][ T9757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1087'.
[  433.092535][  T875] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  433.483554][  T875] usb 1-1: Using ep0 maxpacket: 16
[  433.522737][  T875] usb 1-1: config 2 has an invalid interface number: 170 but max is 3
[  433.644512][  T875] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  433.669248][  T875] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 4
[  434.137605][  T875] usb 1-1: config 2 has no interface number 0
[  434.151620][  T875] usb 1-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=41.72
[  434.163960][  T875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.177425][  T875] usb 1-1: Product: syz
[  434.193815][  T875] usb 1-1: Manufacturer: syz
[  434.206375][  T875] usb 1-1: SerialNumber: syz
[  434.237374][  T875] kl5kusb105 1-1:2.170: KL5KUSB105D / PalmConnect converter detected
[  434.252987][  T875] usb 1-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  434.320907][  T875] usb 2-1: USB disconnect, device number 10
[  434.527649][ T9780] netlink: 'syz.1.1093': attribute type 9 has an invalid length.
[  434.535485][ T9780] netlink: 'syz.1.1093': attribute type 7 has an invalid length.
[  434.543331][ T9780] netlink: 'syz.1.1093': attribute type 8 has an invalid length.
[  435.219911][ T9785] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  435.489879][ T5985] usb 1-1: USB disconnect, device number 18
[  435.610622][ T9789] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  435.620612][ T9789] bcachefs (/dev/loop3): error reading default superblock: IO error: -5
[  435.629039][ T9789] I/O error, dev loop3, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1
[  435.638481][ T9789] bcachefs (/dev/loop3): error reading superblock: IO error: -5
[  435.646684][ T9789] bcachefs: bch2_fs_get_tree() error: EIO
[  435.772119][ T5985] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  435.805588][ T5985] kl5kusb105 1-1:2.170: device disconnected
[  437.777105][ T5985] kernel write not supported for file /724/clear_refs (pid: 5985 comm: kworker/1:6)
[  438.344968][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  438.351477][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  438.909418][ T5985] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  439.064483][ T5985] usb 4-1: Using ep0 maxpacket: 32
[  439.074069][ T5985] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  439.118070][ T5985] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  439.141832][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.158302][ T9824] FAULT_INJECTION: forcing a failure.
[  439.158302][ T9824] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  439.196877][ T5985] usb 4-1: Product: syz
[  439.197957][ T9824] CPU: 0 UID: 0 PID: 9824 Comm: syz.1.1107 Not tainted syzkaller #0 PREEMPT(full) 
[  439.197981][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  439.197992][ T9824] Call Trace:
[  439.197999][ T9824]  <TASK>
[  439.198007][ T9824]  dump_stack_lvl+0x189/0x250
[  439.198033][ T9824]  ? __pfx____ratelimit+0x10/0x10
[  439.198052][ T9824]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.198070][ T9824]  ? __pfx__printk+0x10/0x10
[  439.198091][ T9824]  ? __might_fault+0xb0/0x130
[  439.198125][ T9824]  should_fail_ex+0x414/0x560
[  439.198150][ T9824]  _copy_from_user+0x2d/0xb0
[  439.198168][ T9824]  input_event_from_user+0xb2/0x280
[  439.198190][ T9824]  ? __pfx_input_event_from_user+0x10/0x10
[  439.198220][ T9824]  ? input_inject_event+0xb6/0x340
[  439.198238][ T9824]  evdev_write+0x2a6/0x480
[  439.198262][ T9824]  ? __pfx_evdev_write+0x10/0x10
[  439.198283][ T9824]  ? bpf_lsm_file_permission+0x9/0x20
[  439.198301][ T9824]  ? security_file_permission+0x75/0x290
[  439.198320][ T9824]  ? rw_verify_area+0x255/0x4d0
[  439.198340][ T9824]  ? __lock_acquire+0xab9/0xd20
[  439.198358][ T9824]  ? __pfx_evdev_write+0x10/0x10
[  439.198379][ T9824]  vfs_write+0x27e/0xb30
[  439.198410][ T9824]  ? __pfx_vfs_write+0x10/0x10
[  439.198434][ T9824]  ? __fget_files+0x2a/0x420
[  439.198452][ T9824]  ? __fget_files+0x2a/0x420
[  439.198466][ T9824]  ? __fget_files+0x3a0/0x420
[  439.198480][ T9824]  ? __fget_files+0x2a/0x420
[  439.198511][ T9824]  ksys_write+0x145/0x250
[  439.198535][ T9824]  ? __pfx_ksys_write+0x10/0x10
[  439.198560][ T9824]  ? do_syscall_64+0xbe/0xfa0
[  439.198583][ T9824]  do_syscall_64+0xfa/0xfa0
[  439.198599][ T9824]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.198617][ T9824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.198633][ T9824]  ? clear_bhb_loop+0x60/0xb0
[  439.198652][ T9824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.198666][ T9824] RIP: 0033:0x7f437f18eec9
[  439.198685][ T9824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  439.198699][ T9824] RSP: 002b:00007f437ffd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  439.198717][ T9824] RAX: ffffffffffffffda RBX: 00007f437f3e5fa0 RCX: 00007f437f18eec9
[  439.198729][ T9824] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003
[  439.198739][ T9824] RBP: 00007f437ffd3090 R08: 0000000000000000 R09: 0000000000000000
[  439.198749][ T9824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  439.198759][ T9824] R13: 00007f437f3e6038 R14: 00007f437f3e5fa0 R15: 00007ffd748b1098
[  439.198789][ T9824]  </TASK>
[  439.827308][ T5985] usb 4-1: Manufacturer: syz
[  439.831952][ T5985] usb 4-1: SerialNumber: syz
[  439.849113][ T9832] EXT4-fs: Ignoring removed nobh option
[  439.855160][ T9832] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  439.866179][ T5985] usb 4-1: config 0 descriptor??
[  439.878414][ T5985] usb 4-1: can't set config #0, error -71
[  439.916488][ T9832] EXT4-fs (loop1): unable to read superblock
[  439.946361][ T5985] usb 4-1: USB disconnect, device number 13
[  440.079043][ T9835] kAFS: No cell specified
[  440.255171][  T875] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  440.417043][  T875] usb 2-1: Using ep0 maxpacket: 8
[  440.441749][  T875] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  440.459116][  T875] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  440.557667][  T875] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  440.574092][  T875] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  440.584221][  T875] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  440.597412][  T875] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  440.606639][  T875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.634664][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'.
[  440.662549][ T9849] fuse: Invalid rootmode
[  440.926953][  T875] usb 2-1: usb_control_msg returned -32
[  441.336025][  T875] usbtmc 2-1:16.0: can't read capabilities
[  441.466227][ T9854] ------------[ cut here ]------------
[  441.471724][ T9854] WARNING: kernel/nstree.c:115 at __ns_tree_remove+0x28d/0x330, CPU#0: syz.2.1114/9854
[  441.481815][ T9854] Modules linked in:
[  441.485758][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.2.1114 Not tainted syzkaller #0 PREEMPT(full) 
[  441.495203][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  441.505647][ T9854] RIP: 0010:__ns_tree_remove+0x28d/0x330
[  441.511365][ T9854] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 92 f9 09 e8 54 f5 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 46 f5 31 00 90 0f 0b 90 e9 ee fd ff ff
[  441.531665][ T9854] RSP: 0018:ffffc9000c8c7aa8 EFLAGS: 00010287
[  441.538390][ T9854] RAX: ffffffff818de3cc RBX: ffff88807db83820 RCX: 0000000000080000
[  441.547046][ T9854] RDX: ffffc9000d2ab000 RSI: 00000000000019cb RDI: 00000000000019cc
[  441.555255][ T9854] RBP: dffffc0000000000 R08: ffffffff8e1efb53 R09: 1ffffffff1c3df6a
[  441.563628][ T9854] R10: dffffc0000000000 R11: fffffbfff1c3df6b R12: ffff88807db83820
[  441.571670][ T9854] R13: 1ffff1100fb70703 R14: ffff88807db83800 R15: ffffffff8e1ea3c0
[  441.579820][ T9854] FS:  00007f6cec1c36c0(0000) GS:ffff8881259e7000(0000) knlGS:0000000000000000
[  441.588740][ T9854] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  441.595716][ T9854] CR2: 000000110c3b4e47 CR3: 0000000058202000 CR4: 00000000003526f0
[  441.603762][ T9854] Call Trace:
[  441.607035][ T9854]  <TASK>
[  441.610117][ T9854]  ? dec_ucount+0x15c/0x180
[  441.614618][ T9854]  free_mnt_ns+0xd1/0x110
[  441.619390][ T9854]  namespace_unlock+0x529/0x760
[  441.624239][ T9854]  ? clone_mnt+0xba/0x9a0
[  441.628656][ T9854]  ? __pfx_namespace_unlock+0x10/0x10
[  441.635112][ T9854]  ? alloc_mnt_ns+0x2fc/0x3d0
[  441.640924][ T9854]  copy_mnt_ns+0x6e0/0x870
[  441.645367][ T9854]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  441.651584][ T9854]  ? create_new_namespaces+0x31/0x720
[  441.657059][ T9854]  create_new_namespaces+0xd1/0x720
[  441.662264][ T9854]  ? bpf_lsm_capable+0x9/0x20
[  441.667179][ T9854]  ? security_capable+0x7e/0x2e0
[  441.672131][ T9854]  unshare_nsproxy_namespaces+0x11c/0x170
[  441.678247][ T9854]  ksys_unshare+0x4c8/0x8c0
[  441.682754][ T9854]  ? __pfx_ksys_unshare+0x10/0x10
[  441.687856][ T9854]  __x64_sys_unshare+0x38/0x50
[  441.692615][ T9854]  do_syscall_64+0xfa/0xfa0
[  441.697311][ T9854]  ? lockdep_hardirqs_on+0x9c/0x150
[  441.702505][ T9854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.708955][ T9854]  ? clear_bhb_loop+0x60/0xb0
[  441.713693][ T9854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.719576][ T9854] RIP: 0033:0x7f6ceb38eec9
[  441.724160][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  441.744778][ T9854] RSP: 002b:00007f6cec1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  441.754099][ T9854] RAX: ffffffffffffffda RBX: 00007f6ceb5e6090 RCX: 00007f6ceb38eec9
[  441.762312][ T9854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[  441.770711][ T9854] RBP: 00007f6ceb411f91 R08: 0000000000000000 R09: 0000000000000000
[  441.778710][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  441.786742][ T9854] R13: 00007f6ceb5e6128 R14: 00007f6ceb5e6090 R15: 00007ffca3932e48
[  441.794885][ T9854]  </TASK>
[  441.797905][ T9854] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  441.805168][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.2.1114 Not tainted syzkaller #0 PREEMPT(full) 
[  441.814432][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  441.824473][ T9854] Call Trace:
[  441.827742][ T9854]  <TASK>
[  441.830660][ T9854]  dump_stack_lvl+0x99/0x250
[  441.835235][ T9854]  ? __asan_memcpy+0x40/0x70
[  441.839810][ T9854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  441.844997][ T9854]  ? __pfx__printk+0x10/0x10
[  441.849579][ T9854]  vpanic+0x237/0x6d0
[  441.853548][ T9854]  ? __pfx_vpanic+0x10/0x10
[  441.858031][ T9854]  ? is_bpf_text_address+0x292/0x2b0
[  441.863303][ T9854]  ? is_bpf_text_address+0x26/0x2b0
[  441.868489][ T9854]  panic+0xb9/0xc0
[  441.872195][ T9854]  ? __pfx_panic+0x10/0x10
[  441.876620][ T9854]  __warn+0x334/0x4c0
[  441.880607][ T9854]  ? __ns_tree_remove+0x28d/0x330
[  441.885720][ T9854]  ? __ns_tree_remove+0x28d/0x330
[  441.890733][ T9854]  report_bug+0x2be/0x4f0
[  441.895052][ T9854]  ? __ns_tree_remove+0x28d/0x330
[  441.900066][ T9854]  ? __ns_tree_remove+0x28d/0x330
[  441.905076][ T9854]  ? __ns_tree_remove+0x28f/0x330
[  441.910085][ T9854]  handle_bug+0x84/0x160
[  441.914315][ T9854]  exc_invalid_op+0x1a/0x50
[  441.918800][ T9854]  asm_exc_invalid_op+0x1a/0x20
[  441.923633][ T9854] RIP: 0010:__ns_tree_remove+0x28d/0x330
[  441.929256][ T9854] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 92 f9 09 e8 54 f5 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 46 f5 31 00 90 0f 0b 90 e9 ee fd ff ff
[  441.948850][ T9854] RSP: 0018:ffffc9000c8c7aa8 EFLAGS: 00010287
[  441.954907][ T9854] RAX: ffffffff818de3cc RBX: ffff88807db83820 RCX: 0000000000080000
[  441.962862][ T9854] RDX: ffffc9000d2ab000 RSI: 00000000000019cb RDI: 00000000000019cc
[  441.970839][ T9854] RBP: dffffc0000000000 R08: ffffffff8e1efb53 R09: 1ffffffff1c3df6a
[  441.978792][ T9854] R10: dffffc0000000000 R11: fffffbfff1c3df6b R12: ffff88807db83820
[  441.986747][ T9854] R13: 1ffff1100fb70703 R14: ffff88807db83800 R15: ffffffff8e1ea3c0
[  441.994794][ T9854]  ? __ns_tree_remove+0x28c/0x330
[  441.999813][ T9854]  ? __ns_tree_remove+0x28c/0x330
[  442.004819][ T9854]  ? dec_ucount+0x15c/0x180
[  442.009309][ T9854]  free_mnt_ns+0xd1/0x110
[  442.013647][ T9854]  namespace_unlock+0x529/0x760
[  442.018476][ T9854]  ? clone_mnt+0xba/0x9a0
[  442.022810][ T9854]  ? __pfx_namespace_unlock+0x10/0x10
[  442.028177][ T9854]  ? alloc_mnt_ns+0x2fc/0x3d0
[  442.032841][ T9854]  copy_mnt_ns+0x6e0/0x870
[  442.037247][ T9854]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  442.042604][ T9854]  ? create_new_namespaces+0x31/0x720
[  442.047967][ T9854]  create_new_namespaces+0xd1/0x720
[  442.053150][ T9854]  ? bpf_lsm_capable+0x9/0x20
[  442.057811][ T9854]  ? security_capable+0x7e/0x2e0
[  442.062759][ T9854]  unshare_nsproxy_namespaces+0x11c/0x170
[  442.068511][ T9854]  ksys_unshare+0x4c8/0x8c0
[  442.072998][ T9854]  ? __pfx_ksys_unshare+0x10/0x10
[  442.078010][ T9854]  __x64_sys_unshare+0x38/0x50
[  442.082752][ T9854]  do_syscall_64+0xfa/0xfa0
[  442.087246][ T9854]  ? lockdep_hardirqs_on+0x9c/0x150
[  442.092425][ T9854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.098492][ T9854]  ? clear_bhb_loop+0x60/0xb0
[  442.103158][ T9854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.109066][ T9854] RIP: 0033:0x7f6ceb38eec9
[  442.113467][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.133057][ T9854] RSP: 002b:00007f6cec1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  442.141462][ T9854] RAX: ffffffffffffffda RBX: 00007f6ceb5e6090 RCX: 00007f6ceb38eec9
[  442.149416][ T9854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600
[  442.157369][ T9854] RBP: 00007f6ceb411f91 R08: 0000000000000000 R09: 0000000000000000
[  442.165327][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  442.173279][ T9854] R13: 00007f6ceb5e6128 R14: 00007f6ceb5e6090 R15: 00007ffca3932e48
[  442.181270][ T9854]  </TASK>
[  442.184544][ T9854] Kernel Offset: disabled
[  442.188856][ T9854] Rebooting in 86400 seconds..