last executing test programs:

1m0.744863668s ago: executing program 0 (id=571):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x7f, 0xa9, 0xfffffffffffffff7})
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[{0x10, 0x84, 0x4}], 0x10}, 0x20040004)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x1, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x800, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r3=>0x0, @multicast1}, &(0x7f0000000240)=0xc)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0xf)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r6, &(0x7f0000004dc0)={0x2020}, 0x2020)
ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x41703, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x27, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x909edde}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x16}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x0, 0x2, 0x7, 0x18, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x18, '\x00', r3, 0x25, r4, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xb, 0x7f, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r5, r6, r8, 0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x4, 0xa, 0x2}, {0x3, 0x2, 0x10}, {0x4, 0x1, 0xe, 0x4}, {0x4, 0x1, 0x7, 0xb}, {0x6, 0x67d, 0xa, 0xb}, {0x2, 0x9, 0x10, 0x9}, {0x2, 0x800004, 0x8000001, 0xf03e6ce8b924874e}, {0x4, 0x5, 0xf, 0xa}], 0x10, 0xf51}, 0x94)

59.22797144s ago: executing program 0 (id=574):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x598, 0x30, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{0x534, 0x1, [@m_skbmod={0x74, 0x13, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x9a85, 0x6, 0xd, 0x54}, 0xd}}]}, {0x21, 0x6, "90e3b7d8879cea2f8ba55766497a380a1c32c8afebdee9564440e8e978"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x94, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}]}, {0x45, 0x6, "3ee43d0e72ad4c341ddf30e8d07bf7743e064dd3b377c84bc037d47680c356711aab96eaca0f6753a9bf31d09e7478547fd459b009f8176a1ad45212c79bbb621c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xc0, 0x6, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x89, 0x6, "28904742a2b51a4e6f2b55fffd22301d425f2d28ae347713f12d5e9d46744689d7244aa1e1798221c6fea6678406396010ad012306fa172e78b016517a3b33ff8e4dbceca5393ff2f20217e03bad25174cdcacbab222f6fae4694bb64a5e824a789a71325857cbaedaf53c78a8f319d1f4a5a6d3fcf76c109e802871bebdd8878f67e0d0fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_xt={0x288, 0x2, 0x0, 0x0, {{0x7}, {0x228, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xdc, 0x6, {0x8, 'mangle\x00', 0x1, 0x400, "924afd90481778605e5f2eea7e9b5c04463edda7fc3d55507fbb202af5581a2a9b6cbf84937d5b5b99224943dc2bcf48307222234e206443e7b60f42e6cc29cfccde7cd129c30694675168d30e7790ec823422759d53bef4ccf18da882d3f69cc05e149fc53d0908571b014c83c03373f2b4f88514eaf1399749eb52929f6f95c22b4e5b966efcaf792ca542e97927db6a0bf58117bf49dc0f1029cd4677e30c199233c3e2d04dcd8c08cddd9bbdd3c088cc"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x91, 0x6, {0x1, 'filter\x00', 0xa8, 0xa, "79bb29b7134cbd5ac13564109f8304db55b6d971f07f5bd31dfc7fa8028873d10b040681e0e655e8f6a79a16960d85d2f2121865b9263f9732ad28476130da57a32985e82fb8be0628683412cbd043119145a0ef05f5abd4132e52af2bf90e9b9ec2b1847f5128"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x51, 0x6, {0x1, 'nat\x00', 0x4, 0xe8a, "b4b2f0c030d77f49da74c818059136acd6cf59d496bbc2e7029dd388fcc931f43e7a16858cbb5d"}}, @TCA_IPT_HOOK={0x8}]}, {0x39, 0x6, "e953316a0817b23401a80a38be5e445969116bb7d8a70a6ca771182dea4760bd84d166ef5161aa40d193cb19d0e4b1399cded9c961"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x61, 0x6, "fc36f826477e680902707b500274a2f49e6484c516c92a312bf3f7e0fe9f13d1e603fa1fec7f14a3befd3b9bfd433fa9785c200feb22d8abb4fddd608fdcd2ed246c8853dfa66b7129ce9a97e141313bf5296f7f579de41474ff8c1979"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x50, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x11, 0x6, "4c348867e4883997691793f67a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x50, 0x1, [@m_ctinfo={0x4c, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x1e, 0x6, "007c0bda1c2d40b853b4df622006243a2aed0b14626178023dc9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}]}, 0x598}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1e8}, {&(0x7f0000000000)=""/108, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/52, 0x14}, {&(0x7f00000007c0)=""/152, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}, 0x400}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

58.935908159s ago: executing program 0 (id=575):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_TUPLE_REPLY={0x4}]}, 0x38}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x0, 0x0)

51.793581079s ago: executing program 0 (id=585):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
statx(0xffffffffffffffff, &(0x7f0000000280)='.\x02\x00', 0x6000, 0x200, &(0x7f0000001240))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001340)=ANY=[@ANYRES8])
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400008bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x100000000, 0xffffffffffffffff, 0x17, {0x9, 0x80}, 0x2}, 0x1)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, 0x0, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a00fe80000000000000000000000000003bff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000fe8000000000000000000000000000bb3a0100000000000007080000000000008000000000000000"], 0x0)
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f00000000c0)=""/127, 0x7f)
getdents(0xffffffffffffffff, &(0x7f0000000300)=""/32, 0x20)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4008700e, 0x0)

50.025653626s ago: executing program 0 (id=590):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0x40)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = accept$unix(r4, &(0x7f0000000300), &(0x7f00000001c0)=0x6e)
sendmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x44008}}], 0x1, 0xc894)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000280)={[{@nodecompose}, {}, {@gid}, {@force}, {@umask={'umask', 0x3d, 0x18000000}}, {@gid}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x44, 0x701, &(0x7f0000000c00)="$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")
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r6, &(0x7f0000000100)=""/173, 0xad)

46.965496424s ago: executing program 0 (id=594):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224000100000000090400000103000000092100000001220200090581031b00000000"], 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000001180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x7c, 0x0, 0x0, 0xc7, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x6, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x2, 0x0, 0x0, 0x9, {[@mptcp=@remove_addr={0x1e, 0x48, 0xe, 0x0, "42e4d8d6c091d011474a169e84a26f2970174d459e000415b8ebe37caae6457c65f4ac8080d57c8677ece2246e2e2bc76a0b15892dc3074d25c60fe5f42b28919d2c50a740"}, @exp_fastopen={0xfe, 0x9, 0xf989, "25bd4f4c32"}]}}}}}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="ff", 0x1}], 0x1, 0x5405, 0x7ff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x2, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x240, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

30.885224462s ago: executing program 32 (id=594):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224000100000000090400000103000000092100000001220200090581031b00000000"], 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000001180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x7c, 0x0, 0x0, 0xc7, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x6, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x2, 0x0, 0x0, 0x9, {[@mptcp=@remove_addr={0x1e, 0x48, 0xe, 0x0, "42e4d8d6c091d011474a169e84a26f2970174d459e000415b8ebe37caae6457c65f4ac8080d57c8677ece2246e2e2bc76a0b15892dc3074d25c60fe5f42b28919d2c50a740"}, @exp_fastopen={0xfe, 0x9, 0xf989, "25bd4f4c32"}]}}}}}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000140)="ff", 0x1}], 0x1, 0x5405, 0x7ff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x2, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x240, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

27.700948929s ago: executing program 3 (id=621):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
statx(0xffffffffffffffff, &(0x7f0000000280)='.\x02\x00', 0x6000, 0x200, &(0x7f0000001240))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001340)=ANY=[@ANYRES8])
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400008bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x100000000, 0xffffffffffffffff, 0x17, {0x9, 0x80}, 0x2}, 0x1)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4)
syz_emit_ethernet(0x82, 0x0, 0x0)
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f00000000c0)=""/127, 0x7f)
getdents(0xffffffffffffffff, &(0x7f0000000300)=""/32, 0x20)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4008700e, 0x0)

22.853591123s ago: executing program 3 (id=625):
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x7f, 0xa9, 0xfffffffffffffff7})
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[{0x10, 0x84, 0x4}], 0x10}, 0x20040004)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0xf)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r4, &(0x7f0000004dc0)={0x2020}, 0x2020)
ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x588c0}, 0x40014)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r7, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x27, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x909edde}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x16}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x0, 0x2, 0x7, 0x18, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x18, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xb, 0x7f, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r3, r4, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x4, 0xa, 0x2}, {0x3, 0x2, 0x10}, {0x4, 0x1, 0xe, 0x4}, {0x4, 0x1, 0x7, 0xb}, {0x6, 0x67d, 0xa, 0xb}, {0x2, 0x9, 0x10, 0x9}, {0x2, 0x800004, 0x8000001, 0xf03e6ce8b924874e}, {0x4, 0x5, 0xf, 0xa}], 0x10, 0xf51}, 0x94)

21.010838684s ago: executing program 3 (id=629):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x7f, 0xa9, 0xfffffffffffffff7})
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[{0x10, 0x84, 0x4}], 0x10}, 0x20040004)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x1, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x800, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0xf)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r5, &(0x7f0000004dc0)={0x2020}, 0x2020)
ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x588c0}, 0x40014)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r8, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x27, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x909edde}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x16}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x0, 0x2, 0x7, 0x18, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x18, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xb, 0x7f, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r4, r5, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x4, 0xa, 0x2}, {0x3, 0x2, 0x10}, {0x4, 0x1, 0xe, 0x4}, {0x4, 0x1, 0x7, 0xb}, {0x6, 0x67d, 0xa, 0xb}, {0x2, 0x9, 0x10, 0x9}, {0x2, 0x800004, 0x8000001, 0xf03e6ce8b924874e}, {0x4, 0x5, 0xf, 0xa}], 0x10, 0xf51}, 0x94)

20.200584645s ago: executing program 2 (id=630):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setuid(0xee00)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ffffffdd40000000000000730a00fe000000007704000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@multiplanar_overlay={0x1, 0x6, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x4, 0x4, 0x1, 0x5, "8400d5e4"}, 0x248, 0x3, {0x0}, 0x80000000})

15.497685141s ago: executing program 2 (id=635):
r0 = getpid()
prlimit64(r0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @remote}]}, 0x0)
read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8)
r2 = socket$inet(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000000414010029bd700001000000080023"], 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018)

14.824161873s ago: executing program 3 (id=637):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000240)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[], 0x1, 0x5558, &(0x7f0000000a00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2000004c, &(0x7f00000004c0)=ANY=[@ANYBLOB='utf8,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c696f636861727365743d6d616363726f617469616e2c6e616d65636173653d312c616c6c6f775f7574696d653d3030303030303030303030372c756d61736b3d30303030303030303030303030303030303030303232362c0000000000000000d74bdc68"], 0x1, 0x14f7, &(0x7f0000002a80)="$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")
mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/udp\x00')
lseek(r4, 0x10000000005, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x74, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @initial, {0x7, 0xf}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, @tdls_chsw_resp={0xc, 0x6, {0x56, {0x65, 0x12, {@initial, @broadcast}}, {0x68, 0x4, {0x5, 0x60d}}}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f00000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b839994fb484510bef2e488fbac2fe6faaf75e5cc4815bd2051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dcab772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f015d885b4b8ffc0fa3f880287c862137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7fc6edc76600000000826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000000000000000000000000000000000250d623b48a29e330900b8c552202407804f1ba1817256caf1090b71f2928ed030f3c8194cc3cbf48e2f4c9248c4c00a32d4873da3b7d66b1ce6f72aab16c923b16c4bfdbb24fb17bd198139c21c46065c6922fd705e670d0b5d6d495a773b872e8f88"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ9nkZy+57znnPtDcntJTp5bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6//+fOazNzEEVr5zIlACAEzZ2///efdW1akQtqsWf1dKnAgCA0+qJp595dGkl4vFGYyZi7c3N5mYzHhrWL12Ol6ITq3EuZuNmRH6h0H2o9B4vXFxZPtdoNHbip7loRsRUP7GZXyksZb38eizEbMz187uXGqlXzi58srK80OiJiN2d3vixVtlsTsfZ/vjfn43V4YVH0UnvKeLiyvL5Rr+D5lqRvxOxN7xv0Z3/fMzGt88Pukmp+ATjyvKVhWLSw/zNZj0uDfbCgXdAAAAAAAAAAAAAAAAAAAAAAADgtsw3BuYG6+ek7nO+Us78/IT63vo4eX5/faC9fH2gVE+R0m+vPdB8K4t96wONrs+zaSFBAAAAAAAAAAAAAAAAAAAAGNjYqkWr01ld39jabpcLO+sbW1MR0Y28/PVHX5yJ8Ta3KFTzIeoRgyEa/WG3262UFY1TFjGennUHLyIffDqYcblNfbAVE6dRP7iq0/nfPT++O4zcnRU9/zlsk8XkDcxK03h4pOe1/+dTOs6OGhTOlyP18dGvppRKkTfK6VeeHe8wKhHV4x+47fZUHNwmdQtfXXvxzmLvtz5Pufvun33y6jvv/9JudbojR+8I1tY3bqZ2q1I0Pt5u6e7qIlKJvFApnwnVw9L39kda2Xe/PnXX298cbfRUjrzaPZ9H2mT55nw8ml7LC91pjlSdGaZP9zeiszo94eS/VeE2jukd7332YUo//HzkIYamxl42Kn/Pqw8AAAAAAAAAAAAAAAAAAFBW+q54X//LvtOHZT342MnPDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+OcPf/y8V9nZjJDIo7I5FBoU/diZk1VfXNyJq//ZmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH/dXAAAA//+g5Vir")
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000003c0)={{0x2, 0x1}, 'port0\x00', 0x2d, 0x0, 0x8, 0xfffffffb, 0x9, 0x9cd, 0x1, 0x0, 0x1, 0xff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)

14.778118206s ago: executing program 1 (id=638):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)

13.929926376s ago: executing program 1 (id=640):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fchdir(0xffffffffffffffff)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0x2020)

12.874457066s ago: executing program 1 (id=641):
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffef2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3868000001020103000000000000000002000009240001800c000280050001000f0000001400018008000100e000000208000200ac1e0001"], 0x38}, 0x1, 0x0, 0x0, 0x24001800}, 0x804)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5})
creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='mnt\x00', 0x1, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}], [{@pcr={'pcr', 0x3d, 0x38}}, {@fowner_eq}, {@uid_lt}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r4, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast2, 0xb}, 0x1c)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)

12.034118944s ago: executing program 1 (id=642):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
chdir(0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000001180))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0xd0009411, &(0x7f0000000380)={{}, 0x500, 0x0, 0xffffffffffffffff, 0x1})
fcntl$setsig(0xffffffffffffffff, 0xa, 0x33)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8c0)

11.317781261s ago: executing program 5 (id=643):
r0 = getpid()
r1 = creat(0x0, 0x12)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4, 0x20})
fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x0, 0x1, 0x208, 0xc, r0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480))
openat$random(0xffffffffffffff9c, &(0x7f0000000600), 0x208040, 0x0)
r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2da, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x200000, 0x0, 0x20, 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, 0x0)

11.218846722s ago: executing program 3 (id=645):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0)
prctl$PR_SET_NAME(0x4, 0x0)
r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xaf61, 0x3ff, 0x0, 0x1, 0x4007, r4})
migrate_pages(r4, 0x2000000000009, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001240)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000000000000000200008900fb5495080003009f878851aa573e918797d5fdc0a262fa3369a78a73628491f29400"/69, @ANYBLOB="20001d801c00008006000500c000000005000c000200000005000b0000000000"], 0x3c}}, 0x4)
prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='\x00')

10.254243342s ago: executing program 3 (id=646):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8)
r1 = socket$inet(0x2, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001540)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20040824)

9.510878407s ago: executing program 5 (id=647):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c91c20d6d6bc97fce5d251a4e8a0000005aed010000000000000000000000000008000180436a2ce7"], 0x1c}}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, <r5=>0x0}, 0xffffff0c)
write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x22905a40, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x189082, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)=0x20000)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00005dc000/0x3000)=nil, 0x3000}, 0x4})
mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil)
write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x2b, 0x8, 0x11482080, 0x4, 0x6, 0x5, 0x5, 0x0, 0x0, 0x8, 0x6}}, 0x50)
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

9.388884157s ago: executing program 4 (id=648):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x7f, 0xa9, 0xfffffffffffffff7})
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[{0x10, 0x84, 0x4}], 0x10}, 0x20040004)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x1, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x800, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r3=>0x0, @multicast1}, &(0x7f0000000240)=0xc)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0xf)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r6, &(0x7f0000004dc0)={0x2020}, 0x2020)
ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x41703, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r9, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x27, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x909edde}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x16}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x0, 0x2, 0x7, 0x18, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x18, '\x00', r3, 0x25, r4, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xb, 0x7f, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r5, r6, r8, 0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x4, 0xa, 0x2}, {0x3, 0x2, 0x10}, {0x4, 0x1, 0xe, 0x4}, {0x4, 0x1, 0x7, 0xb}, {0x6, 0x67d, 0xa, 0xb}, {0x2, 0x9, 0x10, 0x9}, {0x2, 0x800004, 0x8000001, 0xf03e6ce8b924874e}, {0x4, 0x5, 0xf, 0xa}], 0x10, 0xf51}, 0x94)

8.148596983s ago: executing program 4 (id=649):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c91c20d6d6bc97fce5d251a4e8a0000005aed010000000000000000000000000008000180436a2ce7"], 0x1c}}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil)

7.957170133s ago: executing program 5 (id=650):
r0 = getpid()
r1 = creat(0x0, 0x12)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4, 0x20})
fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x0, 0x1, 0x208, 0xc, r0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480))
openat$random(0xffffffffffffff9c, &(0x7f0000000600), 0x208040, 0x0)
r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2da, &(0x7f0000000340)="$eJzs3U9r02AYAPCnf9Z1Q9zO4qHgRS9DPXspMkEsDCY9qBcLU5BNhO5SBaFfwYv4ATz5kTz4IXYaeKikydZu7RyMNNmf3w+yPcmzvXkS0rw5vG/69u7H3Z1P++9Hv39Es9mKejQjDiPWoxq1SFWSH82juBHThrUTq7EcAMBlt73da5+VGxZbCrmoz2zp99u9pbnPZt1fBRUFAAAAAAAAAABAzmbH/8dw7vj/iKieHP8/DowRBICr53/j/7ke+v12bzV9fjs1W9P4fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA89RitjUajB7fS1SSeLI1YK7s+ACB/h9P9/fHyd5TR/wPANTS//58sZdcHAORvqv+POKf/r5VXJgCQo5evXr9odzqb261WM+JgOOgOuunvNP/seWfzYWtsPSKq6daDwaBbO84/SvOtSatJfilWs/zjuflG3L+X5pPc063Oqfxy7BRzCgAAAAAAAAAAAAAAAAAAAKB0G0cv9Unn92cm8/s3Nra+//lwPP9/Kp9G2fsBqnFqfv/Xn/W4Uz9v78t5HQYAAAAAAAAAAAAAAAAAAABcafufv+z29vbe9YsJKhGRb8u1iBgH9WxLLfddTAWLazkJmjEOKjGTakTEhVtOTvr8VJK5aM3f0iDiIv/+5E3EuX9c2V2JmdRK8RftYoOV7JN4Weq5nV0tZ90xGsXdnAAAAAAAAAAAAAAAAAAA4IaZzP4tuxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKM/k+/8XF5R9jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDN8C8AAP//WY11Gg==")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x200000, 0x0, 0x20, 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='attr\x00')
getdents(r4, &(0x7f0000000140)=""/72, 0x48)
getdents(r4, 0xffffffffffffffff, 0x5a)
io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f0000000040)={0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r8 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r8, 0x29, 0x1a, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')

7.809951415s ago: executing program 4 (id=651):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
statx(0xffffffffffffffff, &(0x7f0000000280)='.\x02\x00', 0x6000, 0x200, &(0x7f0000001240))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001340)=ANY=[@ANYRES8])
io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400008bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000040)={0x100000000, 0xffffffffffffffff, 0x17, {0x9, 0x80}, 0x2}, 0x1)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4)
syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f00000000c0)=""/127, 0x7f)
getdents(0xffffffffffffffff, &(0x7f0000000300)=""/32, 0x20)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4008700e, 0x0)

6.666587321s ago: executing program 1 (id=652):
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5, 0x0, 0x1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
fcntl$getown(r0, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x5, 0x9, 0x3e26c3d8, 0x20028, r0, 0x4000002, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x8}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', 0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052004fe90000eeffffff00001c00000025cedd3455c49cbf6ee40f68b8084c87a253ccb00ca60ca19290a6589d097ddd30b6af1feaf00b5cee5dae667d7ae2e6fc0ae4308095c42b868d652a20d972e92cd8eed37a6971bcc4d447d978616161efdbd3312cd95a222919ce2ba1399f10c699c4abcc4f90ad1a18721cc7d5f7fe87d4c12f8f04a8a31d495519d614c86b4dca36d1"], 0x14}}, 0x0)

5.405055922s ago: executing program 1 (id=653):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r0, &(0x7f0000000100)=""/173, 0xad)

4.835250936s ago: executing program 4 (id=654):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x7f, 0xa9, 0xfffffffffffffff7})
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[{0x10, 0x84, 0x4}], 0x10}, 0x20040004)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r3=>0x0, @multicast1}, &(0x7f0000000240)=0xc)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0xf)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r6, &(0x7f0000004dc0)={0x2020}, 0x2020)
ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x588c0}, 0x40014)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x41703, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r10, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x27, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x909edde}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x16}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x0, 0x2, 0x7, 0x18, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x18, '\x00', r3, 0x25, r4, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xb, 0x7f, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r5, r6, r8, 0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x4, 0xa, 0x2}, {0x3, 0x2, 0x10}, {0x4, 0x1, 0xe, 0x4}, {0x4, 0x1, 0x7, 0xb}, {0x6, 0x67d, 0xa, 0xb}, {0x2, 0x9, 0x10, 0x9}, {0x2, 0x800004, 0x8000001, 0xf03e6ce8b924874e}, {0x4, 0x5, 0xf, 0xa}], 0x10, 0xf51}, 0x94)

4.799934468s ago: executing program 2 (id=655):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000002c0), &(0x7f0000000340)=0x4)

4.028855392s ago: executing program 2 (id=656):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x32}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x64, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x30, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @device_a, @broadcast, @random="9fd958fab21e", {0x5, 0x3}}, 0x4000, 0x5, @device_b, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xc40)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)

3.792725708s ago: executing program 5 (id=657):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_io_uring_setup(0x2523, 0x0, &(0x7f00000000c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0xc000884, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1)
write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000007c0)=ANY=[], 0xffe0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x23, 0x0, 0x6, 0x40, @local, @loopback, 0x8, 0x8088, 0x7f, 0x7}})
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000340)={0x80, 0x6, 0x303, 0x1, 0x0, 0x80000000, 0x0})

3.610534533s ago: executing program 4 (id=658):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x6ea4599e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x8)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x53, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0'}, 0xb)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0xc, 0x9, 0xfff, 0x5c95239c, 0x5, 0x3bf, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x0, 0x400, 0x195, 0x6, 0x0, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]})
write$tun(0xffffffffffffffff, 0x0, 0x8f)

2.638512773s ago: executing program 5 (id=659):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c91c20d6d6bc97fce5d251a4e8a0000005aed010000000000000000000000000008000180436a2ce7"], 0x1c}}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, <r5=>0x0}, 0xffffff0c)
write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x22905a40, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x189082, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)=0x20000)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00005dc000/0x3000)=nil, 0x3000}, 0x4})
ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000010300)={{&(0x7f0000451000/0x4000)=nil, 0x4000}, 0x1})
write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x2b, 0x8, 0x11482080, 0x4, 0x6, 0x5, 0x5, 0x0, 0x0, 0x8, 0x6}}, 0x50)
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

1.994697679s ago: executing program 2 (id=660):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/13], 0x50)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_pidfd_open(0x0, 0x0)
setns(r5, 0x24020000)
socket$kcm(0x11, 0xa, 0x300)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xf, &(0x7f0000ffb000/0x3000)=nil)

1.33483178s ago: executing program 4 (id=661):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x3, 0x7f, 0xa9, 0xfffffffffffffff7})
read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[{0x10, 0x84, 0x4}], 0x10}, 0x20040004)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x1, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x800, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r3=>0x0, @multicast1}, &(0x7f0000000240)=0xc)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0xf)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r6, &(0x7f0000004dc0)={0x2020}, 0x2020)
ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r9, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x27, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x909edde}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x16}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x0, 0x2, 0x7, 0x18, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x84}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x18, '\x00', r3, 0x25, r4, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xb, 0x7f, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r5, r6, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x4, 0xa, 0x2}, {0x3, 0x2, 0x10}, {0x4, 0x1, 0xe, 0x4}, {0x4, 0x1, 0x7, 0xb}, {0x6, 0x67d, 0xa, 0xb}, {0x2, 0x9, 0x10, 0x9}, {0x2, 0x800004, 0x8000001, 0xf03e6ce8b924874e}, {0x4, 0x5, 0xf, 0xa}], 0x10, 0xf51}, 0x94)

192.196838ms ago: executing program 2 (id=662):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
bpf$OBJ_PIN_MAP(0x9, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
munlockall()
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x69, 0x3, 0x8, 0xa, 0xffffff81, 0x8100})

0s ago: executing program 5 (id=663):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
chdir(0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000001180))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0xd0009411, &(0x7f0000000380)={{}, 0x500, 0x0, 0xffffffffffffffff, 0x1})
fcntl$setsig(0xffffffffffffffff, 0xa, 0x33)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8c0)

kernel console output (not intermixed with test programs):

rom the interface descriptor's value: 37
[  246.044917][ T7214] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  246.084726][  T974] usb 6-1: config 129 interface 135 has no altsetting 0
[  246.127498][  T974] usb 6-1: config 129 interface 5 has no altsetting 0
[  246.212124][  T974] usb 6-1: string descriptor 0 read error: -22
[  246.230297][  T974] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  246.292014][  T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.472309][  T974] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  246.507031][  T974] usb 6-1: MIDIStreaming interface descriptor not found
[  246.733307][ T5966] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  246.755179][  T974] usb 6-1: USB disconnect, device number 8
[  247.006847][ T5966] usb 4-1: device descriptor read/64, error -71
[  247.275332][ T5966] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  247.433856][ T5966] usb 4-1: device descriptor read/64, error -71
[  247.593542][ T5966] usb usb4-port1: attempt power cycle
[  247.697694][ T7238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'.
[  248.143236][ T5966] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  248.174068][ T5966] usb 4-1: device descriptor read/8, error -71
[  248.424232][ T6464] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  248.554119][ T5966] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  248.827545][ T6464] usb 6-1: unable to get BOS descriptor or descriptor too short
[  248.833302][ T5966] usb 4-1: device descriptor read/8, error -71
[  248.868522][ T6464] usb 6-1: not running at top speed; connect to a high speed hub
[  248.883441][ T6464] usb 6-1: no configurations
[  248.888124][ T6464] usb 6-1: can't read configurations, error -22
[  249.013647][ T5966] usb usb4-port1: unable to enumerate USB device
[  249.064674][ T6464] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  249.242717][ T7251] loop4: detected capacity change from 0 to 4096
[  249.277294][ T6464] usb 6-1: unable to get BOS descriptor or descriptor too short
[  249.306474][ T7251] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  249.319561][ T6464] usb 6-1: not running at top speed; connect to a high speed hub
[  249.332931][ T6464] usb 6-1: no configurations
[  249.360732][ T6464] usb 6-1: can't read configurations, error -22
[  249.398739][ T6464] usb usb6-port1: attempt power cycle
[  249.437232][ T7251] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  249.464660][ T7251] ntfs3(loop4): Failed to load $Extend (-22).
[  249.483238][ T7251] ntfs3(loop4): Failed to initialize $Extend.
[  249.789207][ T6464] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  249.809334][ T7263] loop3: detected capacity change from 0 to 256
[  249.850315][ T7261] netlink: 56 bytes leftover after parsing attributes in process `syz.4.343'.
[  249.863781][ T6464] usb 6-1: unable to get BOS descriptor or descriptor too short
[  249.887593][ T7263] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  249.907704][ T6464] usb 6-1: not running at top speed; connect to a high speed hub
[  249.909900][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'.
[  249.940762][ T6464] usb 6-1: no configurations
[  249.946843][ T6464] usb 6-1: can't read configurations, error -22
[  249.993349][ T7261] netlink: 31 bytes leftover after parsing attributes in process `syz.4.343'.
[  250.002891][ T7261] netlink: 'syz.4.343': attribute type 3 has an invalid length.
[  250.011125][ T7261] netlink: 31 bytes leftover after parsing attributes in process `syz.4.343'.
[  250.103252][ T6464] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  250.146871][ T6464] usb 6-1: unable to get BOS descriptor or descriptor too short
[  250.165844][ T6464] usb 6-1: not running at top speed; connect to a high speed hub
[  250.195587][ T6464] usb 6-1: no configurations
[  250.215763][ T6464] usb 6-1: can't read configurations, error -22
[  250.239299][ T6464] usb usb6-port1: unable to enumerate USB device
[  250.780701][ T7267] binder: 7266:7267 unknown command 0
[  250.797720][ T7267] binder: 7266:7267 ioctl c0306201 200000000080 returned -22
[  250.858769][ T7262] loop2: detected capacity change from 0 to 32768
[  250.880420][ T7262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.345 (7262)
[  251.474267][ T7262] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.683986][ T7262] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  251.718811][ T5953] IPVS: starting estimator thread 0...
[  251.813560][ T7277] IPVS: using max 32 ests per chain, 76800 per kthread
[  252.243978][ T7262] BTRFS info (device loop2): enabling ssd optimizations
[  252.444698][  T974] IPVS: starting estimator thread 0...
[  252.635978][ T7262] BTRFS info (device loop2): enabling free space tree
[  252.754224][ T7298] IPVS: using max 25 ests per chain, 60000 per kthread
[  252.767593][ T7303] binder: 7302:7303 unknown command 0
[  252.791148][ T7303] binder: 7302:7303 ioctl c0306201 200000000080 returned -22
[  252.819803][ T7303] FAULT_INJECTION: forcing a failure.
[  252.819803][ T7303] name failslab, interval 1, probability 0, space 0, times 0
[  252.842275][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.5.353 Not tainted syzkaller #0 PREEMPT(full) 
[  252.842308][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  252.842323][ T7303] Call Trace:
[  252.842333][ T7303]  <TASK>
[  252.842344][ T7303]  dump_stack_lvl+0x189/0x250
[  252.842379][ T7303]  ? __pfx____ratelimit+0x10/0x10
[  252.842407][ T7303]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.842438][ T7303]  ? __pfx__printk+0x10/0x10
[  252.842475][ T7303]  ? __pfx___might_resched+0x10/0x10
[  252.842499][ T7303]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.842542][ T7303]  should_fail_ex+0x414/0x560
[  252.842586][ T7303]  should_failslab+0xa8/0x100
[  252.842626][ T7303]  __kmalloc_noprof+0xcb/0x4f0
[  252.842659][ T7303]  ? tomoyo_encode+0x28b/0x550
[  252.842691][ T7303]  tomoyo_encode+0x28b/0x550
[  252.842724][ T7303]  tomoyo_realpath_from_path+0x58d/0x5d0
[  252.842774][ T7303]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  252.842810][ T7303]  tomoyo_path_number_perm+0x1e8/0x5a0
[  252.842850][ T7303]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  252.842893][ T7303]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.842933][ T7303]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.842959][ T7303]  ? __lock_acquire+0xab9/0xd20
[  252.843020][ T7303]  ? __fget_files+0x2a/0x420
[  252.843049][ T7303]  ? __fget_files+0x2a/0x420
[  252.843068][ T7303]  ? __fget_files+0x3a0/0x420
[  252.843089][ T7303]  ? __fget_files+0x2a/0x420
[  252.843117][ T7303]  security_file_ioctl+0xcb/0x2d0
[  252.843155][ T7303]  __se_sys_ioctl+0x47/0x170
[  252.843190][ T7303]  do_syscall_64+0xfa/0x3b0
[  252.843216][ T7303]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.843241][ T7303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.843264][ T7303]  ? srso_alias_return_thunk+0x5/0xfbef5
[  252.843292][ T7303]  ? exc_page_fault+0x9f/0xf0
[  252.843318][ T7303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.843341][ T7303] RIP: 0033:0x7fc48ab8eec9
[  252.843363][ T7303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.843383][ T7303] RSP: 002b:00007fc488df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  252.843411][ T7303] RAX: ffffffffffffffda RBX: 00007fc48ade5fa0 RCX: 00007fc48ab8eec9
[  252.843429][ T7303] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003
[  252.843446][ T7303] RBP: 00007fc488df6090 R08: 0000000000000000 R09: 0000000000000000
[  252.843461][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.843476][ T7303] R13: 00007fc48ade6038 R14: 00007fc48ade5fa0 R15: 00007ffe63766f08
[  252.843515][ T7303]  </TASK>
[  253.283303][ T7303] ERROR: Out of memory at tomoyo_realpath_from_path.
[  253.308186][ T5864] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  253.333179][ T5966] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  253.634943][ T5966] usb 1-1: device descriptor read/64, error -71
[  254.114580][ T5966] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  255.109466][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.116044][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  255.118847][ T7315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.355'.
[  255.252870][ T7317] loop5: detected capacity change from 0 to 128
[  255.273163][ T5966] usb 1-1: device descriptor read/64, error -71
[  255.298032][ T7317] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  255.666129][ T5966] usb usb1-port1: attempt power cycle
[  255.675928][ T7311] uprobe: syz.1.358:7311 failed to unregister, leaking uprobe
[  255.718234][ T7319] fuse: Unknown parameter 'fû'
[  255.734611][ T7317] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  256.158820][ T7328] fuse: Bad value for 'fd'
[  256.212066][ T7329] loop4: detected capacity change from 0 to 128
[  256.531841][ T7329] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  256.647965][ T7329] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  256.683108][ T7342] fuse: blksize only supported for fuseblk
[  256.853727][ T7338] loop5: detected capacity change from 0 to 40427
[  256.875535][ T7338] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  256.884671][ T7338] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  256.935379][ T7338] F2FS-fs (loop5): invalid crc value
[  257.028943][ T7338] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  257.048730][ T7338] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  257.058395][ T7338] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  258.103240][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  258.743636][    T9] usb 5-1: Using ep0 maxpacket: 16
[  258.761985][    T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  258.781998][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20
[  258.849264][    T9] usb 5-1: SerialNumber: syz
[  258.868887][    T9] usb 5-1: config 0 descriptor??
[  258.935216][    T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  258.979452][    T9] usb 5-1: Detected FT232A
[  259.028815][    T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  259.831015][ T5876] usb 5-1: USB disconnect, device number 9
[  259.907730][ T5876] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  259.935640][ T7362] loop5: detected capacity change from 0 to 2048
[  259.959843][ T5876] ftdi_sio 5-1:0.0: device disconnected
[  259.971941][ T7362] udf: Unknown parameter 'u'
[  260.191844][ T7366] FAULT_INJECTION: forcing a failure.
[  260.191844][ T7366] name failslab, interval 1, probability 0, space 0, times 0
[  260.205441][ T7366] CPU: 0 UID: 0 PID: 7366 Comm: syz.0.372 Not tainted syzkaller #0 PREEMPT(full) 
[  260.205478][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  260.205494][ T7366] Call Trace:
[  260.205504][ T7366]  <TASK>
[  260.205514][ T7366]  dump_stack_lvl+0x189/0x250
[  260.205552][ T7366]  ? __pfx____ratelimit+0x10/0x10
[  260.205581][ T7366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.205611][ T7366]  ? __pfx__printk+0x10/0x10
[  260.205650][ T7366]  ? lowpan_control_write+0x2b0/0x6c0
[  260.205689][ T7366]  should_fail_ex+0x414/0x560
[  260.205734][ T7366]  should_failslab+0xa8/0x100
[  260.205783][ T7366]  __kmalloc_cache_noprof+0x70/0x3d0
[  260.205818][ T7366]  ? l2cap_chan_create+0x50/0x760
[  260.205858][ T7366]  l2cap_chan_create+0x50/0x760
[  260.205895][ T7366]  lowpan_control_write+0x360/0x6c0
[  260.205927][ T7366]  ? __pfx_lowpan_control_write+0x10/0x10
[  260.205963][ T7366]  ? __pfx___debugfs_file_get+0x10/0x10
[  260.205991][ T7366]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.206019][ T7366]  ? rcu_read_lock_any_held+0xb3/0x120
[  260.206048][ T7366]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  260.206083][ T7366]  full_proxy_write+0x127/0x1f0
[  260.206112][ T7366]  ? __pfx_full_proxy_write+0x10/0x10
[  260.206141][ T7366]  vfs_write+0x27e/0xb30
[  260.206186][ T7366]  ? __pfx_vfs_write+0x10/0x10
[  260.206222][ T7366]  ? __fget_files+0x2a/0x420
[  260.206249][ T7366]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.206278][ T7366]  ? __fget_files+0x3a0/0x420
[  260.206299][ T7366]  ? __fget_files+0x2a/0x420
[  260.206325][ T7366]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.206359][ T7366]  ksys_write+0x145/0x250
[  260.206395][ T7366]  ? __pfx_ksys_write+0x10/0x10
[  260.206425][ T7366]  ? rcu_is_watching+0x15/0xb0
[  260.206458][ T7366]  ? do_syscall_64+0xbe/0x3b0
[  260.206491][ T7366]  do_syscall_64+0xfa/0x3b0
[  260.206518][ T7366]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.206544][ T7366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.206567][ T7366]  ? srso_alias_return_thunk+0x5/0xfbef5
[  260.206594][ T7366]  ? exc_page_fault+0x9f/0xf0
[  260.206622][ T7366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.206646][ T7366] RIP: 0033:0x7f4cdfb8eec9
[  260.206667][ T7366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.206689][ T7366] RSP: 002b:00007f4cdddd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  260.206715][ T7366] RAX: ffffffffffffffda RBX: 00007f4cdfde6180 RCX: 00007f4cdfb8eec9
[  260.206733][ T7366] RDX: 000000000000001b RSI: 0000200000000200 RDI: 000000000000000a
[  260.206749][ T7366] RBP: 00007f4cdddd6090 R08: 0000000000000000 R09: 0000000000000000
[  260.206770][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.206785][ T7366] R13: 00007f4cdfde6218 R14: 00007f4cdfde6180 R15: 00007fff4a099878
[  260.206825][ T7366]  </TASK>
[  260.492348][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.167460][ T5868] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  261.197811][ T7373] loop0: detected capacity change from 0 to 128
[  261.273495][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  261.443266][    T9] usb 2-1: device descriptor read/64, error -71
[  261.753413][ T7379] loop4: detected capacity change from 0 to 40427
[  261.833251][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  261.881129][ T7379] F2FS-fs (loop4): invalid crc value
[  262.177980][ T7384] loop2: detected capacity change from 0 to 40427
[  262.198995][ T7384] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  262.208651][ T7384] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  262.211176][ T7379] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  262.228133][ T7379] F2FS-fs (loop4): Start checkpoint disabled!
[  262.243886][    T9] usb 2-1: device descriptor read/64, error -71
[  262.250519][ T7379] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  262.285868][ T7384] F2FS-fs (loop2): invalid crc value
[  262.358895][ T7384] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  262.369726][ T7384] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  262.376834][ T7384] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  262.385439][    T9] usb usb2-port1: attempt power cycle
[  262.563714][  T974] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  262.915178][ T7379] netlink: 56 bytes leftover after parsing attributes in process `syz.4.378'.
[  263.214493][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  263.266202][  T974] usb 1-1: unable to get BOS descriptor or descriptor too short
[  263.273925][    T9] usb 2-1: device descriptor read/8, error -71
[  263.285216][ T3539] kworker/u8:8: attempt to access beyond end of device
[  263.285216][ T3539] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  263.315891][  T974] usb 1-1: not running at top speed; connect to a high speed hub
[  263.345095][  T974] usb 1-1: config 129 has an invalid interface number: 135 but max is 0
[  263.364310][ T3539] CPU: 1 UID: 0 PID: 3539 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  263.364342][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  263.364359][ T3539] Workqueue: writeback wb_workfn (flush-7:4)
[  263.364396][ T3539] Call Trace:
[  263.364405][ T3539]  <TASK>
[  263.364415][ T3539]  dump_stack_lvl+0x189/0x250
[  263.364452][ T3539]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.364482][ T3539]  ? __pfx_queue_work_on+0x10/0x10
[  263.364507][ T3539]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  263.364548][ T3539]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  263.364601][ T3539]  f2fs_handle_critical_error+0x37c/0x540
[  263.364647][ T3539]  f2fs_write_end_io+0x886/0xb60
[  263.364694][ T3539]  __submit_merged_bio+0x27a/0x6a0
[  263.364738][ T3539]  __submit_merged_write_cond+0x255/0x530
[  263.364783][ T3539]  f2fs_write_data_pages+0x261d/0x3000
[  263.364847][ T3539]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  263.364960][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.364993][ T3539]  ? f2fs_write_meta_pages+0x357/0x450
[  263.365033][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.365060][ T3539]  ? __lock_acquire+0xab9/0xd20
[  263.365102][ T3539]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  263.365129][ T3539]  do_writepages+0x32e/0x550
[  263.365168][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.365196][ T3539]  ? reacquire_held_locks+0x127/0x1d0
[  263.365221][ T3539]  ? writeback_sb_inodes+0x384/0x1010
[  263.365265][ T3539]  __writeback_single_inode+0x145/0xff0
[  263.365298][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.365325][ T3539]  ? do_raw_spin_unlock+0x122/0x240
[  263.365362][ T3539]  writeback_sb_inodes+0x6c7/0x1010
[  263.365426][ T3539]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  263.365507][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.365535][ T3539]  ? rcu_is_watching+0x15/0xb0
[  263.365560][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.365597][ T3539]  wb_writeback+0x43b/0xaf0
[  263.365639][ T3539]  ? queue_io+0x381/0x590
[  263.365675][ T3539]  ? __pfx_wb_writeback+0x10/0x10
[  263.365717][ T3539]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.365763][ T3539]  wb_workfn+0x409/0xef0
[  263.365808][ T3539]  ? __pfx_wb_workfn+0x10/0x10
[  263.365839][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.365866][ T3539]  ? __lock_acquire+0xab9/0xd20
[  263.365916][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.365947][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.365979][ T3539]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.366022][ T3539]  ? process_scheduled_works+0x9ef/0x17b0
[  263.366046][ T3539]  ? process_scheduled_works+0x9ef/0x17b0
[  263.366072][ T3539]  process_scheduled_works+0xae1/0x17b0
[  263.366133][ T3539]  ? __pfx_process_scheduled_works+0x10/0x10
[  263.366167][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.366205][ T3539]  worker_thread+0x8a0/0xda0
[  263.366262][ T3539]  kthread+0x711/0x8a0
[  263.366298][ T3539]  ? __pfx_worker_thread+0x10/0x10
[  263.366323][ T3539]  ? __pfx_kthread+0x10/0x10
[  263.366350][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.366383][ T3539]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.366420][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  263.366446][ T3539]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.366471][ T3539]  ? __pfx_kthread+0x10/0x10
[  263.366503][ T3539]  ret_from_fork+0x439/0x7d0
[  263.366533][ T3539]  ? __pfx_ret_from_fork+0x10/0x10
[  263.366566][ T3539]  ? __switch_to_asm+0x39/0x70
[  263.366598][ T3539]  ? __switch_to_asm+0x33/0x70
[  263.366629][ T3539]  ? __pfx_kthread+0x10/0x10
[  263.366661][ T3539]  ret_from_fork_asm+0x1a/0x30
[  263.366714][ T3539]  </TASK>
[  263.366723][ T3539] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  263.724283][  T974] usb 1-1: config 129 has an invalid interface number: 5 but max is 0
[  263.732449][  T974] usb 1-1: config 129 descriptor has 1 excess byte, ignoring
[  263.752209][  T974] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  263.763692][  T974] usb 1-1: config 129 has no interface number 0
[  263.770032][  T974] usb 1-1: config 129 has no interface number 1
[  263.776447][  T974] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  263.862617][  T974] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  263.890110][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  263.893275][  T974] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  263.931436][  T974] usb 1-1: config 129 interface 135 has no altsetting 0
[  263.931578][    T9] usb 2-1: device descriptor read/8, error -71
[  263.992210][  T974] usb 1-1: config 129 interface 5 has no altsetting 0
[  264.056419][  T974] usb 1-1: string descriptor 0 read error: -22
[  264.062846][  T974] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  264.113595][    T9] usb usb2-port1: unable to enumerate USB device
[  264.125143][  T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.282709][  T974] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  264.312389][  T974] usb 1-1: MIDIStreaming interface descriptor not found
[  264.376422][ T7396] FAULT_INJECTION: forcing a failure.
[  264.376422][ T7396] name failslab, interval 1, probability 0, space 0, times 0
[  264.513866][ T7396] CPU: 0 UID: 0 PID: 7396 Comm: syz.2.381 Not tainted syzkaller #0 PREEMPT(full) 
[  264.513906][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  264.513921][ T7396] Call Trace:
[  264.513930][ T7396]  <TASK>
[  264.513940][ T7396]  dump_stack_lvl+0x189/0x250
[  264.513976][ T7396]  ? __pfx____ratelimit+0x10/0x10
[  264.514002][ T7396]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.514032][ T7396]  ? __pfx__printk+0x10/0x10
[  264.514073][ T7396]  ? __pfx___might_resched+0x10/0x10
[  264.514106][ T7396]  should_fail_ex+0x414/0x560
[  264.514153][ T7396]  should_failslab+0xa8/0x100
[  264.514194][ T7396]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  264.514226][ T7396]  ? __alloc_skb+0x112/0x2d0
[  264.514259][ T7396]  __alloc_skb+0x112/0x2d0
[  264.514295][ T7396]  netlink_sendmsg+0x5c6/0xb30
[  264.514332][ T7396]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.514362][ T7396]  ? srso_alias_return_thunk+0x5/0xfbef5
[  264.514389][ T7396]  ? aa_sock_msg_perm+0xf1/0x1d0
[  264.514415][ T7396]  ? srso_alias_return_thunk+0x5/0xfbef5
[  264.514447][ T7396]  ? srso_alias_return_thunk+0x5/0xfbef5
[  264.514473][ T7396]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.514501][ T7396]  __sock_sendmsg+0x21c/0x270
[  264.514541][ T7396]  ____sys_sendmsg+0x505/0x830
[  264.514579][ T7396]  ? __pfx_____sys_sendmsg+0x10/0x10
[  264.514623][ T7396]  ? srso_alias_return_thunk+0x5/0xfbef5
[  264.514649][ T7396]  ? import_iovec+0x74/0xa0
[  264.514685][ T7396]  ___sys_sendmsg+0x21f/0x2a0
[  264.514719][ T7396]  ? __pfx____sys_sendmsg+0x10/0x10
[  264.514767][ T7396]  ? srso_alias_return_thunk+0x5/0xfbef5
[  264.514833][ T7396]  ? __fget_files+0x2a/0x420
[  264.514854][ T7396]  ? srso_alias_return_thunk+0x5/0xfbef5
[  264.514880][ T7396]  ? __fget_files+0x3a0/0x420
[  264.514914][ T7396]  __x64_sys_sendmsg+0x19b/0x260
[  264.514949][ T7396]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  264.514995][ T7396]  ? __pfx_ksys_write+0x10/0x10
[  264.515024][ T7396]  ? rcu_is_watching+0x15/0xb0
[  264.515056][ T7396]  ? do_syscall_64+0xbe/0x3b0
[  264.515089][ T7396]  do_syscall_64+0xfa/0x3b0
[  264.515115][ T7396]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.515144][ T7396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.515166][ T7396]  ? srso_alias_return_thunk+0x5/0xfbef5
[  264.515196][ T7396]  ? exc_page_fault+0x9f/0xf0
[  264.515223][ T7396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.515246][ T7396] RIP: 0033:0x7fc82618eec9
[  264.515269][ T7396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.515289][ T7396] RSP: 002b:00007fc826f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.515319][ T7396] RAX: ffffffffffffffda RBX: 00007fc8263e5fa0 RCX: 00007fc82618eec9
[  264.515339][ T7396] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003
[  264.515355][ T7396] RBP: 00007fc826f76090 R08: 0000000000000000 R09: 0000000000000000
[  264.515370][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.515384][ T7396] R13: 00007fc8263e6038 R14: 00007fc8263e5fa0 R15: 00007ffc71e2a968
[  264.515421][ T7396]  </TASK>
[  264.898690][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  264.953302][  T974] usb 1-1: USB disconnect, device number 13
[  265.053144][    T9] usb 2-1: Using ep0 maxpacket: 8
[  265.060551][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  265.071113][    T9] usb 2-1: config 9 has an invalid interface number: 5 but max is 0
[  265.083318][    T9] usb 2-1: config 9 has no interface number 0
[  265.089447][    T9] usb 2-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87
[  265.103193][    T9] usb 2-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  265.113247][    T9] usb 2-1: config 9 interface 5 has no altsetting 0
[  265.127368][    T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  265.136463][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.144508][    T9] usb 2-1: Product: syz
[  265.148662][    T9] usb 2-1: Manufacturer: syz
[  265.163135][    T9] usb 2-1: SerialNumber: syz
[  265.713520][ T7394] loop1: detected capacity change from 0 to 128
[  265.884576][    T9] usb 2-1: USB disconnect, device number 14
[  265.926539][ T7406] loop0: detected capacity change from 0 to 512
[  265.956816][ T7408] loop4: detected capacity change from 0 to 256
[  265.964122][ T7406] msdos: Unknown parameter '/dev/snd/controlC#'
[  266.031258][ T7408] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  266.057319][ T6312] udevd[6312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  266.081289][ T7414] loop3: detected capacity change from 0 to 256
[  266.140650][ T7414] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  266.585294][ T7426] loop1: detected capacity change from 0 to 128
[  266.658461][ T7423] loop5: detected capacity change from 0 to 2048
[  266.730248][ T7426] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  266.763215][    T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  266.777271][ T7423] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[  266.812482][ T7424] loop4: detected capacity change from 0 to 2048
[  266.825676][ T7426] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  267.135500][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  267.423660][ T7424] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2)
[  267.633746][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  267.954857][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  268.240616][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.589063][ T7420] loop2: detected capacity change from 0 to 128
[  268.638989][ T7420] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  268.778013][   T30] audit: type=1800 audit(1758564818.645:60): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.389" name="file1" dev="loop2" ino=1048619 res=0 errno=0
[  268.813332][    T9] usb 3-1: usb_control_msg returned -32
[  268.847367][    T9] usbtmc 3-1:16.0: can't read capabilities
[  268.853273][ T5993] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  268.924036][  T974] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  269.003237][ T5993] usb 2-1: Using ep0 maxpacket: 32
[  269.022804][ T5993] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  269.076007][ T5993] usb 2-1: config 0 has no interface number 0
[  269.115162][ T5993] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  269.149995][  T974] usb 5-1: Using ep0 maxpacket: 16
[  269.170301][ T5993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.195922][  T974] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  269.207005][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.229889][ T5993] usb 2-1: Product: syz
[  269.241706][ T5993] usb 2-1: Manufacturer: syz
[  269.247042][  T974] usb 5-1: Product: syz
[  269.251293][  T974] usb 5-1: Manufacturer: syz
[  269.257522][ T5993] usb 2-1: SerialNumber: syz
[  269.278879][ T5993] usb 2-1: config 0 descriptor??
[  269.288016][  T974] usb 5-1: SerialNumber: syz
[  269.315376][ T5993] smsc95xx v2.0.0
[  269.340675][  T974] usb 5-1: config 0 descriptor??
[  270.215466][ T7449] loop0: detected capacity change from 0 to 1024
[  271.043916][  T974] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  271.096213][    T9] usb 3-1: USB disconnect, device number 7
[  271.252833][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.312325][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.410824][ T7440] No control pipe specified
[  271.440437][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.462446][ T7451] loop5: detected capacity change from 0 to 1024
[  271.491485][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.506782][ T7451] EXT4-fs: Ignoring removed orlov option
[  271.520505][ T5993] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  271.577565][ T5993] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  271.592121][ T6232] hfsplus: b-tree write err: -5, ino 4
[  271.604370][ T7451] EXT4-fs: Ignoring removed nomblk_io_submit option
[  271.613214][  T974] usb 5-1: clie_3_5_startup: get interface number bad return length: 0
[  271.642999][  T974] visor 5-1:0.0: probe with driver visor failed with error -5
[  271.735505][ T7451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.032046][ T5876] usb 5-1: USB disconnect, device number 10
[  272.862297][ T5993] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  272.960471][ T5993] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  273.085975][ T5993] usb 2-1: USB disconnect, device number 15
[  273.173278][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  273.299450][ T5865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.548128][    T9] usb 3-1: Using ep0 maxpacket: 8
[  273.568550][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  274.364432][    T9] usb 3-1: config 9 has an invalid interface number: 5 but max is 0
[  274.372469][    T9] usb 3-1: config 9 has no interface number 0
[  274.385332][    T9] usb 3-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87
[  274.398810][    T9] usb 3-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  274.409060][    T9] usb 3-1: config 9 interface 5 has no altsetting 0
[  274.419626][    T9] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  274.433246][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.441453][    T9] usb 3-1: Product: syz
[  274.446229][    T9] usb 3-1: Manufacturer: syz
[  274.450882][    T9] usb 3-1: SerialNumber: syz
[  274.666472][ T7476] loop4: detected capacity change from 0 to 64
[  274.678510][ T7476] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  274.724988][ T7467] loop2: detected capacity change from 0 to 128
[  276.355197][ T7485] loop1: detected capacity change from 0 to 40427
[  276.433412][ T7485] F2FS-fs (loop1): invalid crc value
[  276.763107][ T7485] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  276.785875][ T7485] F2FS-fs (loop1): Start checkpoint disabled!
[  277.460744][    T9] usb 3-1: USB disconnect, device number 8
[  278.001572][ T7485] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  278.447886][ T7485] netlink: 56 bytes leftover after parsing attributes in process `syz.1.411'.
[  278.688896][ T7504] syz.5.415 uses obsolete (PF_INET,SOCK_PACKET)
[  278.828487][   T36] kworker/u8:2: attempt to access beyond end of device
[  278.828487][   T36] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  278.910364][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  278.910398][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  278.910415][   T36] Workqueue: writeback wb_workfn (flush-7:1)
[  278.910452][   T36] Call Trace:
[  278.910461][   T36]  <TASK>
[  278.910471][   T36]  dump_stack_lvl+0x189/0x250
[  278.910507][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.910536][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  278.910566][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  278.910607][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  278.910659][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  278.910705][   T36]  f2fs_write_end_io+0x886/0xb60
[  278.910752][   T36]  __submit_merged_bio+0x27a/0x6a0
[  278.910803][   T36]  __submit_merged_write_cond+0x255/0x530
[  278.910847][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  278.910910][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  278.911022][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.911053][   T36]  ? f2fs_write_meta_pages+0x357/0x450
[  278.911087][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.911114][   T36]  ? __lock_acquire+0xab9/0xd20
[  278.911155][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  278.911181][   T36]  do_writepages+0x32e/0x550
[  278.911220][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.911247][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  278.911271][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  278.911313][   T36]  __writeback_single_inode+0x145/0xff0
[  278.911345][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.911372][   T36]  ? do_raw_spin_unlock+0x122/0x240
[  278.911408][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  278.911470][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  278.911550][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.911577][   T36]  ? rcu_is_watching+0x15/0xb0
[  278.911602][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.911641][   T36]  wb_writeback+0x43b/0xaf0
[  278.911682][   T36]  ? queue_io+0x381/0x590
[  278.911717][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  278.911760][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.911813][   T36]  wb_workfn+0x409/0xef0
[  278.911858][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  278.911889][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.911915][   T36]  ? __lock_acquire+0xab9/0xd20
[  278.911964][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.911994][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.912025][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.912061][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  278.912084][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  278.912110][   T36]  process_scheduled_works+0xae1/0x17b0
[  278.912169][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  278.912201][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.912239][   T36]  worker_thread+0x8a0/0xda0
[  278.912297][   T36]  kthread+0x711/0x8a0
[  278.912333][   T36]  ? __pfx_worker_thread+0x10/0x10
[  278.912357][   T36]  ? __pfx_kthread+0x10/0x10
[  278.912383][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.912415][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.912451][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  278.912477][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.912501][   T36]  ? __pfx_kthread+0x10/0x10
[  278.912532][   T36]  ret_from_fork+0x439/0x7d0
[  278.912562][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  278.912595][   T36]  ? __switch_to_asm+0x39/0x70
[  278.912625][   T36]  ? __switch_to_asm+0x33/0x70
[  278.912656][   T36]  ? __pfx_kthread+0x10/0x10
[  278.912688][   T36]  ret_from_fork_asm+0x1a/0x30
[  278.912739][   T36]  </TASK>
[  279.256642][   T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  280.564113][ T7520] loop3: detected capacity change from 0 to 1024
[  281.780162][ T7527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.423'.
[  282.333376][   T36] hfsplus: b-tree write err: -5, ino 4
[  282.354244][ T7531] FAULT_INJECTION: forcing a failure.
[  282.354244][ T7531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.435264][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.2.425 Not tainted syzkaller #0 PREEMPT(full) 
[  282.435301][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  282.435318][ T7531] Call Trace:
[  282.435328][ T7531]  <TASK>
[  282.435340][ T7531]  dump_stack_lvl+0x189/0x250
[  282.435381][ T7531]  ? __pfx____ratelimit+0x10/0x10
[  282.435410][ T7531]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.435440][ T7531]  ? __pfx__printk+0x10/0x10
[  282.435479][ T7531]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.435526][ T7531]  should_fail_ex+0x414/0x560
[  282.435577][ T7531]  _copy_from_user+0x2d/0xb0
[  282.435613][ T7531]  ___sys_recvmsg+0x12e/0x510
[  282.435657][ T7531]  ? __pfx____sys_recvmsg+0x10/0x10
[  282.435721][ T7531]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.435748][ T7531]  ? __fget_files+0x3a0/0x420
[  282.435779][ T7531]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.435812][ T7531]  do_recvmmsg+0x307/0x770
[  282.435856][ T7531]  ? __pfx_do_recvmmsg+0x10/0x10
[  282.435905][ T7531]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.435933][ T7531]  ? _copy_from_user+0x94/0xb0
[  282.435985][ T7531]  __x64_sys_recvmmsg+0x1af/0x240
[  282.436030][ T7531]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  282.436062][ T7531]  ? rcu_is_watching+0x15/0xb0
[  282.436097][ T7531]  ? do_syscall_64+0xbe/0x3b0
[  282.436131][ T7531]  do_syscall_64+0xfa/0x3b0
[  282.436157][ T7531]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.436184][ T7531]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.436207][ T7531]  ? srso_alias_return_thunk+0x5/0xfbef5
[  282.436235][ T7531]  ? exc_page_fault+0x9f/0xf0
[  282.436263][ T7531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.436286][ T7531] RIP: 0033:0x7fc82618eec9
[  282.436308][ T7531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.436330][ T7531] RSP: 002b:00007fc826f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  282.436357][ T7531] RAX: ffffffffffffffda RBX: 00007fc8263e5fa0 RCX: 00007fc82618eec9
[  282.436376][ T7531] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  282.436393][ T7531] RBP: 00007fc826f76090 R08: 0000200000003700 R09: 0000000000000000
[  282.436410][ T7531] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001
[  282.436426][ T7531] R13: 00007fc8263e6038 R14: 00007fc8263e5fa0 R15: 00007ffc71e2a968
[  282.436465][ T7531]  </TASK>
[  283.279568][ T7537] loop0: detected capacity change from 0 to 128
[  283.287433][ T7537] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  283.374877][ T7537] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  283.863909][ T7540] libceph: resolve '4.4' (ret=-3): failed
[  284.284261][ T7549] loop5: detected capacity change from 0 to 40427
[  284.615864][ T7546] loop1: detected capacity change from 0 to 40427
[  284.638018][ T7546] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  284.645815][ T7546] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  284.737375][ T7546] F2FS-fs (loop1): invalid crc value
[  284.738510][ T7549] F2FS-fs (loop5): invalid crc value
[  284.817033][ T7549] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  284.826690][ T7549] F2FS-fs (loop5): Start checkpoint disabled!
[  284.845081][ T7549] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  284.935697][ T7546] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  284.948322][ T7546] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  284.958838][ T7546] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  285.564559][   T30] audit: type=1800 audit(1758564835.155:61): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.419" name="file1" dev="loop1" ino=10 res=0 errno=0
[  286.018322][ T7549] netlink: 56 bytes leftover after parsing attributes in process `syz.5.431'.
[  287.284567][   T12] kworker/u8:0: attempt to access beyond end of device
[  287.284567][   T12] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  287.316217][ T7564] loop4: detected capacity change from 0 to 2048
[  287.392918][ T7564] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  287.412474][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  287.412507][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  287.412524][   T12] Workqueue: writeback wb_workfn (flush-7:5)
[  287.412562][   T12] Call Trace:
[  287.412571][   T12]  <TASK>
[  287.412582][   T12]  dump_stack_lvl+0x189/0x250
[  287.412618][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.412648][   T12]  ? __pfx_queue_work_on+0x10/0x10
[  287.412674][   T12]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  287.412714][   T12]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  287.412767][   T12]  f2fs_handle_critical_error+0x37c/0x540
[  287.412813][   T12]  f2fs_write_end_io+0x886/0xb60
[  287.412865][   T12]  __submit_merged_bio+0x27a/0x6a0
[  287.412910][   T12]  __submit_merged_write_cond+0x255/0x530
[  287.412956][   T12]  f2fs_write_data_pages+0x261d/0x3000
[  287.413029][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  287.413144][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.413177][   T12]  ? f2fs_write_meta_pages+0x357/0x450
[  287.413212][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.413238][   T12]  ? __lock_acquire+0xab9/0xd20
[  287.413280][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  287.413306][   T12]  do_writepages+0x32e/0x550
[  287.413345][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.413372][   T12]  ? reacquire_held_locks+0x127/0x1d0
[  287.413396][   T12]  ? writeback_sb_inodes+0x384/0x1010
[  287.413439][   T12]  __writeback_single_inode+0x145/0xff0
[  287.413471][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.413498][   T12]  ? do_raw_spin_unlock+0x122/0x240
[  287.413535][   T12]  writeback_sb_inodes+0x6c7/0x1010
[  287.413599][   T12]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  287.413681][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.413708][   T12]  ? rcu_is_watching+0x15/0xb0
[  287.413733][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.413771][   T12]  wb_writeback+0x43b/0xaf0
[  287.413813][   T12]  ? queue_io+0x381/0x590
[  287.413848][   T12]  ? __pfx_wb_writeback+0x10/0x10
[  287.413890][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.413935][   T12]  wb_workfn+0x409/0xef0
[  287.413980][   T12]  ? __pfx_wb_workfn+0x10/0x10
[  287.414015][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.414042][   T12]  ? __lock_acquire+0xab9/0xd20
[  287.414091][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.414123][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.414155][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.414191][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  287.414215][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  287.414242][   T12]  process_scheduled_works+0xae1/0x17b0
[  287.414303][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  287.414337][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.414375][   T12]  worker_thread+0x8a0/0xda0
[  287.414432][   T12]  kthread+0x711/0x8a0
[  287.414467][   T12]  ? __pfx_worker_thread+0x10/0x10
[  287.414491][   T12]  ? __pfx_kthread+0x10/0x10
[  287.414517][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.414550][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.414585][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.414612][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.414636][   T12]  ? __pfx_kthread+0x10/0x10
[  287.414669][   T12]  ret_from_fork+0x439/0x7d0
[  287.414698][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  287.414732][   T12]  ? __switch_to_asm+0x39/0x70
[  287.414762][   T12]  ? __switch_to_asm+0x33/0x70
[  287.414792][   T12]  ? __pfx_kthread+0x10/0x10
[  287.414825][   T12]  ret_from_fork_asm+0x1a/0x30
[  287.414878][   T12]  </TASK>
[  287.419378][ T7569] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  287.483251][   T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  287.849071][ T7573] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  287.873581][ T6312] udevd[6312]: incorrect nilfs2 checksum on /dev/loop4
[  288.036588][ T7564] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  288.791559][ T7564] Remounting filesystem read-only
[  289.311699][ T7579] loop0: detected capacity change from 0 to 40427
[  289.327809][ T7579] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  289.335628][ T7579] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  289.925603][ T7579] F2FS-fs (loop0): invalid crc value
[  290.002503][ T7579] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  290.039168][ T7579] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  290.046398][ T7579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  290.823192][ T7597] FAULT_INJECTION: forcing a failure.
[  290.823192][ T7597] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  290.836449][ T7597] CPU: 1 UID: 0 PID: 7597 Comm: syz.1.442 Not tainted syzkaller #0 PREEMPT(full) 
[  290.836483][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  290.836498][ T7597] Call Trace:
[  290.836510][ T7597]  <TASK>
[  290.836521][ T7597]  dump_stack_lvl+0x189/0x250
[  290.836557][ T7597]  ? __pfx____ratelimit+0x10/0x10
[  290.836584][ T7597]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.836614][ T7597]  ? __pfx__printk+0x10/0x10
[  290.836649][ T7597]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.836696][ T7597]  should_fail_ex+0x414/0x560
[  290.836740][ T7597]  _copy_to_iter+0x404/0x1790
[  290.836768][ T7597]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  290.836811][ T7597]  ? __pfx__copy_to_iter+0x10/0x10
[  290.836847][ T7597]  ? seq_read_iter+0x1c8/0xe10
[  290.836888][ T7597]  seq_read_iter+0x2e4/0xe10
[  290.836924][ T7597]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.836957][ T7597]  ? __asan_memset+0x22/0x50
[  290.837004][ T7597]  seq_read+0x369/0x480
[  290.837045][ T7597]  ? __pfx_seq_read+0x10/0x10
[  290.837074][ T7597]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.837123][ T7597]  ? __pfx_seq_read+0x10/0x10
[  290.837149][ T7597]  proc_reg_read+0x1e9/0x2e0
[  290.837188][ T7597]  vfs_readv+0x5aa/0x850
[  290.837214][ T7597]  ? __pfx_proc_reg_read+0x10/0x10
[  290.837249][ T7597]  ? __pfx_vfs_readv+0x10/0x10
[  290.837287][ T7597]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.837319][ T7597]  ? __fget_files+0x2a/0x420
[  290.837345][ T7597]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.837373][ T7597]  ? __fget_files+0x3a0/0x420
[  290.837393][ T7597]  ? __fget_files+0x2a/0x420
[  290.837419][ T7597]  ? srso_alias_return_thunk+0x5/0xfbef5
[  290.837453][ T7597]  __x64_sys_preadv+0x197/0x2a0
[  290.837494][ T7597]  ? __pfx___x64_sys_preadv+0x10/0x10
[  290.837538][ T7597]  ? do_syscall_64+0xbe/0x3b0
[  290.837570][ T7597]  do_syscall_64+0xfa/0x3b0
[  290.837599][ T7597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.837622][ T7597]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  290.837653][ T7597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.837677][ T7597] RIP: 0033:0x7f075498eec9
[  290.837698][ T7597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.837719][ T7597] RSP: 002b:00007f07558be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  290.837745][ T7597] RAX: ffffffffffffffda RBX: 00007f0754be6180 RCX: 00007f075498eec9
[  290.837761][ T7597] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005
[  290.837777][ T7597] RBP: 00007f07558be090 R08: 0000000000000003 R09: 0000000000000000
[  290.837793][ T7597] R10: 0000000000003ab3 R11: 0000000000000246 R12: 0000000000000001
[  290.837808][ T7597] R13: 00007f0754be6218 R14: 00007f0754be6180 R15: 00007ffd12e36ce8
[  290.837847][ T7597]  </TASK>
[  291.826932][ T7602] loop1: detected capacity change from 0 to 256
[  291.908714][ T7602] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  294.512516][ T7632] loop2: detected capacity change from 0 to 256
[  294.610848][ T7632] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  294.638919][ T7634] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  294.718717][ T7634] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  294.987534][ T7634] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  295.921484][ T7640] loop1: detected capacity change from 0 to 4096
[  295.931664][ T7640] ntfs3: Unknown parameter 'discardRÀéNdows_names'
[  296.280605][ T7634] comedi comedi3: 8255: I/O port conflict (0x401,4)
[  296.290780][ T7634] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  296.300603][ T7634] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  296.310632][ T7634] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  296.320588][ T7634] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  296.330588][ T7634] comedi comedi3: 8255: I/O port conflict (0x3bf,4)
[  296.340646][ T7634] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  296.360568][ T7634] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[  296.370584][ T7634] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  296.380611][ T7634] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  297.137329][ T7650] loop2: detected capacity change from 0 to 512
[  297.171228][ T7650] msdos: Unknown parameter '/dev/snd/controlC#'
[  297.223186][    T9] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  297.256071][ T7653] loop3: detected capacity change from 0 to 512
[  297.293752][ T7653] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  297.333242][ T5953] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  297.372025][ T7653] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.455: iget: bogus i_mode (5)
[  297.398524][ T7653] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.455: couldn't read orphan inode 15 (err -117)
[  297.416953][ T7653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.461477][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  297.513321][ T7653] ext2 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.549366][    T9] usb 2-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  297.573008][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short
[  297.609145][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  297.628646][ T5953] usb 6-1: not running at top speed; connect to a high speed hub
[  297.651974][    T9] usb 2-1: string descriptor 0 read error: -22
[  297.920971][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40
[  297.935891][ T5953] usb 6-1: config 129 has an invalid interface number: 135 but max is 0
[  298.111287][ T5953] usb 6-1: config 129 has an invalid interface number: 5 but max is 0
[  298.138169][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.243992][ T5953] usb 6-1: config 129 descriptor has 1 excess byte, ignoring
[  298.263248][ T5953] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  298.299786][ T7647] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  298.327595][ T5953] usb 6-1: config 129 has no interface number 0
[  298.341086][ T7667] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.455: Directory hole found for htree leaf block 0
[  298.360096][    T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6
[  298.383668][ T5953] usb 6-1: config 129 has no interface number 1
[  298.421541][ T5953] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  298.468133][ T5953] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  298.497436][ T7671] loop0: detected capacity change from 0 to 64
[  298.543594][ T5953] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  298.571079][ T5214] bcm5974 2-1:1.0: could not read from device
[  298.572584][ T7671] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  298.604235][ T5953] usb 6-1: config 129 interface 135 has no altsetting 0
[  298.631105][ T5953] usb 6-1: config 129 interface 5 has no altsetting 0
[  298.646330][ T5214] bcm5974 2-1:1.0: could not read from device
[  298.653623][ T5953] usb 6-1: string descriptor 0 read error: -22
[  298.685641][ T5953] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  298.705771][    T9] usb 2-1: USB disconnect, device number 16
[  298.735136][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.786704][ T5214] bcm5974 2-1:1.0: could not read from device
[  301.973581][ T5953] usb 6-1: can't set config #129, error -71
[  301.987815][ T5953] usb 6-1: USB disconnect, device number 13
[  302.006134][ T6104] bcm5974 2-1:1.0: could not read from device
[  302.111588][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.198943][ T6104] udevd[6104]: Error opening device "/dev/input/event4": No such file or directory
[  302.287880][ T6104] udevd[6104]: Unable to EVIOCGABS device "/dev/input/event4"
[  302.329532][ T6104] udevd[6104]: Unable to EVIOCGABS device "/dev/input/event4"
[  302.365921][ T6104] udevd[6104]: Unable to EVIOCGABS device "/dev/input/event4"
[  302.406932][ T6104] udevd[6104]: Unable to EVIOCGABS device "/dev/input/event4"
[  302.743338][ T5993] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  302.784219][ T7693] loop3: detected capacity change from 0 to 40427
[  302.796859][ T7693] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  302.804696][ T7693] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  302.815905][ T7693] F2FS-fs (loop3): invalid crc value
[  302.899593][ T7693] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  302.925335][ T7693] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  302.932447][ T7693] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  302.953410][ T5993] usb 5-1: device descriptor read/64, error -71
[  303.036872][ T7702] loop1: detected capacity change from 0 to 64
[  303.081089][ T7702] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  303.467083][ T5993] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  303.837684][ T5993] usb 5-1: device descriptor read/64, error -71
[  304.145880][ T5993] usb usb5-port1: attempt power cycle
[  305.773146][ T5993] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  305.993198][ T5993] usb 5-1: device not accepting address 13, error -71
[  306.044613][ T7717] loop5: detected capacity change from 0 to 2048
[  306.128966][ T7717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  306.208282][ T7717] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  306.390952][ T7722] loop4: detected capacity change from 0 to 4096
[  306.512604][ T7727] loop0: detected capacity change from 0 to 1024
[  306.525151][ T7722] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  306.726580][   T30] audit: type=1804 audit(1758564856.595:62): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.464" name="/newroot/92/file1/file1" dev="loop0" ino=20 res=1 errno=0
[  306.745088][ T7722] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  306.853288][ T7722] ntfs3(loop4): Failed to load $Extend (-22).
[  306.877669][ T7722] ntfs3(loop4): Failed to initialize $Extend.
[  308.440032][ T7737] FAULT_INJECTION: forcing a failure.
[  308.440032][ T7737] name failslab, interval 1, probability 0, space 0, times 0
[  308.502164][ T7737] CPU: 0 UID: 0 PID: 7737 Comm: syz.0.474 Not tainted syzkaller #0 PREEMPT(full) 
[  308.502192][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  308.502204][ T7737] Call Trace:
[  308.502211][ T7737]  <TASK>
[  308.502219][ T7737]  dump_stack_lvl+0x189/0x250
[  308.502248][ T7737]  ? __pfx____ratelimit+0x10/0x10
[  308.502269][ T7737]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.502291][ T7737]  ? __pfx__printk+0x10/0x10
[  308.502321][ T7737]  ? __pfx___might_resched+0x10/0x10
[  308.502338][ T7737]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.502364][ T7737]  should_fail_ex+0x414/0x560
[  308.502396][ T7737]  should_failslab+0xa8/0x100
[  308.502426][ T7737]  kmem_cache_alloc_noprof+0x73/0x3c0
[  308.502451][ T7737]  ? getname_flags+0xb8/0x540
[  308.502472][ T7737]  getname_flags+0xb8/0x540
[  308.502494][ T7737]  do_sys_openat2+0xbc/0x1c0
[  308.502517][ T7737]  ? __pfx_do_sys_openat2+0x10/0x10
[  308.502549][ T7737]  __se_sys_openat2+0x226/0x2c0
[  308.502570][ T7737]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.502592][ T7737]  ? __pfx___se_sys_openat2+0x10/0x10
[  308.502613][ T7737]  ? rcu_is_watching+0x15/0xb0
[  308.502637][ T7737]  ? do_syscall_64+0xbe/0x3b0
[  308.502655][ T7737]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.502680][ T7737]  do_syscall_64+0xfa/0x3b0
[  308.502699][ T7737]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.502717][ T7737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.502734][ T7737]  ? srso_alias_return_thunk+0x5/0xfbef5
[  308.502762][ T7737]  ? exc_page_fault+0x9f/0xf0
[  308.502782][ T7737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.502800][ T7737] RIP: 0033:0x7f4cdfb8eec9
[  308.502816][ T7737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.502831][ T7737] RSP: 002b:00007f4ce0986038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5
[  308.502850][ T7737] RAX: ffffffffffffffda RBX: 00007f4cdfde5fa0 RCX: 00007f4cdfb8eec9
[  308.502866][ T7737] RDX: 0000200000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  308.502879][ T7737] RBP: 00007f4ce0986090 R08: 0000000000000000 R09: 0000000000000000
[  308.502891][ T7737] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  308.502902][ T7737] R13: 00007f4cdfde6038 R14: 00007f4cdfde5fa0 R15: 00007fff4a099878
[  308.502930][ T7737]  </TASK>
[  309.563677][ T7754] loop0: detected capacity change from 0 to 512
[  309.570999][ T7754] msdos: Unknown parameter '/dev/snd/controlC#'
[  309.614412][ T7756] FAULT_INJECTION: forcing a failure.
[  309.614412][ T7756] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  309.638959][ T7722] netlink: 56 bytes leftover after parsing attributes in process `syz.4.471'.
[  309.674338][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'.
[  309.693424][ T7756] CPU: 0 UID: 0 PID: 7756 Comm: syz.5.477 Not tainted syzkaller #0 PREEMPT(full) 
[  309.693458][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  309.693473][ T7756] Call Trace:
[  309.693484][ T7756]  <TASK>
[  309.693494][ T7756]  dump_stack_lvl+0x189/0x250
[  309.693528][ T7756]  ? __pfx____ratelimit+0x10/0x10
[  309.693555][ T7756]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.693585][ T7756]  ? __pfx__printk+0x10/0x10
[  309.693619][ T7756]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.693663][ T7756]  should_fail_ex+0x414/0x560
[  309.693706][ T7756]  _copy_to_iter+0x404/0x1790
[  309.693759][ T7756]  ? __pfx__copy_to_iter+0x10/0x10
[  309.693789][ T7756]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.693816][ T7756]  ? rcu_is_watching+0x15/0xb0
[  309.693840][ T7756]  ? seq_read_iter+0x1fd/0xe10
[  309.693868][ T7756]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.693894][ T7756]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.693921][ T7756]  ? __kvmalloc_node_noprof+0x331/0x5f0
[  309.693956][ T7756]  ? seq_read_iter+0x1fd/0xe10
[  309.693993][ T7756]  seq_read_iter+0xbeb/0xe10
[  309.694046][ T7756]  seq_read+0x369/0x480
[  309.694073][ T7756]  ? __lock_acquire+0xab9/0xd20
[  309.694119][ T7756]  ? __pfx_seq_read+0x10/0x10
[  309.694170][ T7756]  ? __pfx_seq_read+0x10/0x10
[  309.694196][ T7756]  proc_reg_read+0x1e9/0x2e0
[  309.694235][ T7756]  vfs_readv+0x5aa/0x850
[  309.694260][ T7756]  ? __pfx_proc_reg_read+0x10/0x10
[  309.694295][ T7756]  ? __pfx_vfs_readv+0x10/0x10
[  309.694333][ T7756]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.694364][ T7756]  ? __fget_files+0x2a/0x420
[  309.694390][ T7756]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.694416][ T7756]  ? __fget_files+0x3a0/0x420
[  309.694436][ T7756]  ? __fget_files+0x2a/0x420
[  309.694462][ T7756]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.694494][ T7756]  __x64_sys_preadv+0x197/0x2a0
[  309.694534][ T7756]  ? __pfx___x64_sys_preadv+0x10/0x10
[  309.694566][ T7756]  ? rcu_is_watching+0x15/0xb0
[  309.694598][ T7756]  ? do_syscall_64+0xbe/0x3b0
[  309.694631][ T7756]  do_syscall_64+0xfa/0x3b0
[  309.694656][ T7756]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.694681][ T7756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.694704][ T7756]  ? srso_alias_return_thunk+0x5/0xfbef5
[  309.694730][ T7756]  ? exc_page_fault+0x9f/0xf0
[  309.694764][ T7756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.694788][ T7756] RIP: 0033:0x7fc48ab8eec9
[  309.694809][ T7756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.694829][ T7756] RSP: 002b:00007fc488df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  309.694854][ T7756] RAX: ffffffffffffffda RBX: 00007fc48ade5fa0 RCX: 00007fc48ab8eec9
[  309.694873][ T7756] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003
[  309.694889][ T7756] RBP: 00007fc488df6090 R08: 0000000000000004 R09: 0000000000000000
[  309.694904][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.694919][ T7756] R13: 00007fc48ade6038 R14: 00007fc48ade5fa0 R15: 00007ffe63766f08
[  309.694956][ T7756]  </TASK>
[  309.725465][ T7722] netlink: 31 bytes leftover after parsing attributes in process `syz.4.471'.
[  310.070088][ T7722] netlink: 'syz.4.471': attribute type 3 has an invalid length.
[  310.083280][ T5953] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  310.118808][ T7722] netlink: 31 bytes leftover after parsing attributes in process `syz.4.471'.
[  310.216218][ T7765] loop5: detected capacity change from 0 to 64
[  310.250073][ T7765] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  310.269244][ T5953] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  310.297660][ T5953] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  310.349273][ T5953] usb 3-1: config 0 interface 0 has no altsetting 0
[  311.073192][ T5953] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  311.082293][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.115219][ T5953] usb 3-1: config 0 descriptor??
[  311.121610][ T7760] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  311.583456][ T5993] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  312.343293][ T5993] usb 2-1: device descriptor read/64, error -71
[  312.663022][ T5993] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  313.003162][ T5993] usb 2-1: device descriptor read/64, error -71
[  313.132602][ T5993] usb usb2-port1: attempt power cycle
[  313.523159][ T5993] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  313.642482][ T5993] usb 2-1: device descriptor read/8, error -71
[  313.848291][ T5953] usbhid 3-1:0.0: can't add hid device: -71
[  313.859193][ T5953] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  313.893294][ T5993] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  313.929600][ T5953] usb 3-1: USB disconnect, device number 9
[  313.933234][ T5993] usb 2-1: device descriptor read/8, error -71
[  314.056225][ T5993] usb usb2-port1: unable to enumerate USB device
[  314.990093][ T7795] FAULT_INJECTION: forcing a failure.
[  314.990093][ T7795] name failslab, interval 1, probability 0, space 0, times 0
[  315.003266][ T7795] CPU: 0 UID: 0 PID: 7795 Comm: syz.4.487 Not tainted syzkaller #0 PREEMPT(full) 
[  315.003297][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  315.003312][ T7795] Call Trace:
[  315.003321][ T7795]  <TASK>
[  315.003330][ T7795]  dump_stack_lvl+0x189/0x250
[  315.003365][ T7795]  ? __pfx____ratelimit+0x10/0x10
[  315.003393][ T7795]  ? __pfx_dump_stack_lvl+0x10/0x10
[  315.003422][ T7795]  ? __pfx__printk+0x10/0x10
[  315.003465][ T7795]  ? __pfx___might_resched+0x10/0x10
[  315.003494][ T7795]  should_fail_ex+0x414/0x560
[  315.003538][ T7795]  should_failslab+0xa8/0x100
[  315.003582][ T7795]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  315.003618][ T7795]  ? __alloc_skb+0x112/0x2d0
[  315.003651][ T7795]  __alloc_skb+0x112/0x2d0
[  315.003683][ T7795]  netlink_sendmsg+0x5c6/0xb30
[  315.003723][ T7795]  ? __pfx_netlink_sendmsg+0x10/0x10
[  315.003761][ T7795]  ? srso_alias_return_thunk+0x5/0xfbef5
[  315.003789][ T7795]  ? aa_sock_msg_perm+0xf1/0x1d0
[  315.003816][ T7795]  ? srso_alias_return_thunk+0x5/0xfbef5
[  315.003844][ T7795]  ? srso_alias_return_thunk+0x5/0xfbef5
[  315.003872][ T7795]  ? __pfx_netlink_sendmsg+0x10/0x10
[  315.003900][ T7795]  __sock_sendmsg+0x21c/0x270
[  315.003942][ T7795]  ____sys_sendmsg+0x505/0x830
[  315.003981][ T7795]  ? __pfx_____sys_sendmsg+0x10/0x10
[  315.004023][ T7795]  ? srso_alias_return_thunk+0x5/0xfbef5
[  315.004050][ T7795]  ? import_iovec+0x74/0xa0
[  315.004088][ T7795]  ___sys_sendmsg+0x21f/0x2a0
[  315.004122][ T7795]  ? __pfx____sys_sendmsg+0x10/0x10
[  315.004161][ T7795]  ? srso_alias_return_thunk+0x5/0xfbef5
[  315.004223][ T7795]  ? __fget_files+0x2a/0x420
[  315.004244][ T7795]  ? srso_alias_return_thunk+0x5/0xfbef5
[  315.004271][ T7795]  ? __fget_files+0x3a0/0x420
[  315.004306][ T7795]  __x64_sys_sendmsg+0x19b/0x260
[  315.004341][ T7795]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  315.004384][ T7795]  ? __pfx_ksys_write+0x10/0x10
[  315.004426][ T7795]  ? do_syscall_64+0xbe/0x3b0
[  315.004460][ T7795]  do_syscall_64+0xfa/0x3b0
[  315.004488][ T7795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.004511][ T7795]  ? asm_sysvec_call_function_single+0x1a/0x20
[  315.004542][ T7795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.004566][ T7795] RIP: 0033:0x7f94d218eec9
[  315.004588][ T7795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.004610][ T7795] RSP: 002b:00007f94d03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  315.004636][ T7795] RAX: ffffffffffffffda RBX: 00007f94d23e6090 RCX: 00007f94d218eec9
[  315.004655][ T7795] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009
[  315.004670][ T7795] RBP: 00007f94d03f6090 R08: 0000000000000000 R09: 0000000000000000
[  315.004686][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  315.004701][ T7795] R13: 00007f94d23e6128 R14: 00007f94d23e6090 R15: 00007fff86359bb8
[  315.004739][ T7795]  </TASK>
[  315.296813][    C0] vkms_vblank_simulate: vblank timer overrun
[  316.543792][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  316.551329][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  317.837358][ T6163] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  318.521694][ T7829] loop0: detected capacity change from 0 to 64
[  318.537473][ T7829] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  318.565720][ T6163] usb 3-1: config 72 has an invalid descriptor of length 169, skipping remainder of the config
[  319.656591][ T6163] usb 3-1: config 72 has 0 interfaces, different from the descriptor's value: 1
[  319.727026][ T6163] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  319.758622][ T6163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.036456][ T6163] usb 3-1: can't set config #72, error -71
[  322.043357][ T5966] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  322.076995][ T6163] usb 3-1: USB disconnect, device number 10
[  322.233292][ T5966] usb 6-1: Using ep0 maxpacket: 8
[  322.274104][ T5966] usb 6-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config
[  322.310921][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  322.509140][ T5966] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  322.524353][ T5966] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=81.58
[  322.534958][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.548571][ T5966] usb 6-1: config 0 descriptor??
[  324.138236][ T6163] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  324.279357][ T7847] loop4: detected capacity change from 0 to 1024
[  324.343200][ T6163] usb 3-1: device descriptor read/64, error -71
[  324.352405][ T7847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  324.390949][ T7847] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.423371][ T7850] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  324.507678][ T7847] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.503: lblock 3 mapped to illegal pblock 3 (length 3)
[  324.575800][ T7847] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  324.615328][ T6163] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  324.634492][ T7847] EXT4-fs (loop4): This should not happen!! Data will be lost
[  324.634492][ T7847] 
[  324.789811][ T1131] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8)
[  324.803264][ T6163] usb 3-1: device descriptor read/64, error -71
[  324.826284][ T1131] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  324.842417][ T1131] EXT4-fs (loop4): This should not happen!! Data will be lost
[  324.842417][ T1131] 
[  324.861394][ T5868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  324.941025][ T6163] usb usb3-port1: attempt power cycle
[  325.324421][ T5966] usb 6-1: USB disconnect, device number 14
[  325.860732][ T7862] loop4: detected capacity change from 0 to 1024
[  326.394481][ T6232] hfsplus: b-tree write err: -5, ino 4
[  326.439957][ T5966] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  326.617168][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.638582][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  326.658613][ T5966] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  326.678138][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.789873][ T5966] usb 6-1: config 0 descriptor??
[  327.012605][ T7868] loop4: detected capacity change from 0 to 256
[  327.050167][ T7868] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  327.340498][ T6163] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  327.350901][  T974] IPVS: starting estimator thread 0...
[  327.358389][ T5966] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  327.388416][ T5966] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  327.395605][ T5966] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  327.402614][ T5966] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  327.414452][ T5966] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  327.432472][ T5966] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  327.446632][ T5966] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  327.473388][ T7871] IPVS: using max 31 ests per chain, 74400 per kthread
[  327.483428][ T5966] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  327.514996][ T6163] usb 2-1: config 7 has an invalid interface number: 34 but max is 0
[  327.553282][ T6163] usb 2-1: config 7 has no interface number 0
[  327.656407][ T6163] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35
[  327.657006][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.505'.
[  327.674667][ T5966] cp2112 0003:10C4:EA90.0005: error requesting version
[  327.879904][ T5966] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -32
[  328.429891][ T6163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.438462][ T6163] usb 2-1: Product: syz
[  328.446119][ T6163] usb 2-1: Manufacturer: syz
[  328.450821][ T6163] usb 2-1: SerialNumber: syz
[  328.479756][ T5966] usb 6-1: USB disconnect, device number 15
[  328.527425][ T7860] loop2: detected capacity change from 0 to 32768
[  328.733225][   T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  328.821043][ T6163] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state.
[  328.859778][ T7883] loop3: detected capacity change from 0 to 64
[  328.903834][   T10] usb 5-1: Using ep0 maxpacket: 16
[  328.904507][ T6163] dvb-usb: bulk message failed: -22 (2/0)
[  328.910451][ T7883] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  328.938495][ T6163] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  328.989816][   T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  329.016231][   T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  329.625799][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  329.832870][ T6163] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19)
[  330.191732][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  330.315617][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.372711][   T10] usb 5-1: Product: syz
[  330.401537][ T7890] loop5: detected capacity change from 0 to 128
[  330.436585][   T10] usb 5-1: Manufacturer: syz
[  330.490057][   T10] usb 5-1: SerialNumber: syz
[  330.522784][ T7890] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  330.759873][ T7890] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  331.809975][ T6163] dvb_usb_cxusb 2-1:7.34: probe with driver dvb_usb_cxusb failed with error -22
[  331.957384][   T10] usb 5-1: can't set config #1, error -71
[  332.785773][   T10] usb 5-1: USB disconnect, device number 15
[  333.417643][ T6163] usb 2-1: USB disconnect, device number 21
[  333.594844][ T7897] libceph: resolve '4.4' (ret=-3): failed
[  335.685878][ T7916] loop5: detected capacity change from 0 to 256
[  335.803337][ T5966] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  336.067603][ T7918] loop2: detected capacity change from 0 to 40427
[  336.108134][ T7918] F2FS-fs (loop2): invalid crc value
[  336.117223][ T7916] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  336.205094][ T7918] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  336.227651][ T7918] F2FS-fs (loop2): Start checkpoint disabled!
[  336.237824][ T7918] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  336.307481][ T5966] usb 2-1: Using ep0 maxpacket: 16
[  336.368930][ T7921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.525'.
[  336.625912][ T5966] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.780357][ T5966] usb 2-1: config 0 interface 0 has no altsetting 0
[  336.937151][ T5966] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  337.016091][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.355327][ T7925] loop5: detected capacity change from 0 to 40427
[  337.363157][ T7925] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  337.372440][ T7925] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  337.384823][ T5966] usb 2-1: config 0 descriptor??
[  337.393568][ T5966] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  337.407104][ T7925] F2FS-fs (loop5): invalid crc value
[  337.468264][ T7925] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  337.547898][ T7925] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  337.555066][ T7925] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  337.610568][   T12] kworker/u8:0: attempt to access beyond end of device
[  337.610568][   T12] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  337.647158][   T30] audit: type=1800 audit(1758564887.495:63): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.526" name="file1" dev="loop5" ino=10 res=0 errno=0
[  337.893548][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  337.893578][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  337.893594][   T12] Workqueue: writeback wb_workfn (flush-7:2)
[  337.893629][   T12] Call Trace:
[  337.893639][   T12]  <TASK>
[  337.893650][   T12]  dump_stack_lvl+0x189/0x250
[  337.893689][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.893718][   T12]  ? __pfx_queue_work_on+0x10/0x10
[  337.893742][   T12]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  337.893789][   T12]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  337.893843][   T12]  f2fs_handle_critical_error+0x37c/0x540
[  337.893889][   T12]  f2fs_write_end_io+0x886/0xb60
[  337.893939][   T12]  __submit_merged_bio+0x27a/0x6a0
[  337.893983][   T12]  __submit_merged_write_cond+0x255/0x530
[  337.894029][   T12]  f2fs_write_data_pages+0x261d/0x3000
[  337.894102][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  337.894123][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.894172][   T12]  ? unwind_next_frame+0xa5/0x2390
[  337.894238][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.894273][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.894298][   T12]  ? rcu_read_lock_sched_held+0x89/0x100
[  337.894323][   T12]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  337.894345][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.894404][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.894429][   T12]  ? __lock_acquire+0xab9/0xd20
[  337.894474][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.894511][   T12]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  337.894537][   T12]  do_writepages+0x32e/0x550
[  337.894576][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.894601][   T12]  ? reacquire_held_locks+0x127/0x1d0
[  337.894624][   T12]  ? writeback_sb_inodes+0x384/0x1010
[  337.894668][   T12]  __writeback_single_inode+0x145/0xff0
[  337.894698][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.894724][   T12]  ? do_raw_spin_unlock+0x122/0x240
[  337.894769][   T12]  writeback_sb_inodes+0x6c7/0x1010
[  337.894839][   T12]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  337.894931][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.894956][   T12]  ? rcu_is_watching+0x15/0xb0
[  337.894979][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.895018][   T12]  wb_writeback+0x43b/0xaf0
[  337.895060][   T12]  ? queue_io+0x381/0x590
[  337.895095][   T12]  ? __pfx_wb_writeback+0x10/0x10
[  337.895139][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.895182][   T12]  wb_workfn+0x409/0xef0
[  337.895231][   T12]  ? __pfx_wb_workfn+0x10/0x10
[  337.895263][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.895288][   T12]  ? __lock_acquire+0xab9/0xd20
[  337.895339][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.895369][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.895399][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.895433][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  337.895455][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  337.895482][   T12]  process_scheduled_works+0xae1/0x17b0
[  337.895549][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  337.895584][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.895622][   T12]  worker_thread+0x8a0/0xda0
[  337.895687][   T12]  kthread+0x711/0x8a0
[  337.895721][   T12]  ? __pfx_worker_thread+0x10/0x10
[  337.895744][   T12]  ? __pfx_kthread+0x10/0x10
[  337.895776][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.895807][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.895840][   T12]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.895865][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.895887][   T12]  ? __pfx_kthread+0x10/0x10
[  337.895917][   T12]  ret_from_fork+0x439/0x7d0
[  337.895947][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  337.895981][   T12]  ? __switch_to_asm+0x39/0x70
[  337.896010][   T12]  ? __switch_to_asm+0x33/0x70
[  337.896038][   T12]  ? __pfx_kthread+0x10/0x10
[  337.896069][   T12]  ret_from_fork_asm+0x1a/0x30
[  337.896123][   T12]  </TASK>
[  337.896134][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  338.097530][ T7936] loop3: detected capacity change from 0 to 1024
[  338.492761][ T1164] hfsplus: b-tree write err: -5, ino 4
[  338.797427][ T7939] loop4: detected capacity change from 0 to 64
[  338.864095][ T7939] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  342.291990][  T974] usb 2-1: USB disconnect, device number 22
[  343.496645][ T7947] loop3: detected capacity change from 0 to 4096
[  343.558782][ T7947] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  344.606674][ T7947] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  345.093418][ T7947] ntfs3(loop3): Failed to load $Extend (-22).
[  345.119005][ T7947] ntfs3(loop3): Failed to initialize $Extend.
[  345.206681][ T7953] libceph: resolve '4.4' (ret=-3): failed
[  346.069186][ T7970] loop5: detected capacity change from 0 to 256
[  346.195500][ T7973] loop4: detected capacity change from 0 to 512
[  346.202756][ T7973] msdos: Unknown parameter '/dev/snd/controlC#'
[  346.251104][ T7970] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  347.165220][ T7979] loop0: detected capacity change from 0 to 40427
[  347.687377][ T7977] netlink: 56 bytes leftover after parsing attributes in process `syz.3.534'.
[  347.742851][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'.
[  348.239578][ T7977] netlink: 31 bytes leftover after parsing attributes in process `syz.3.534'.
[  348.482761][ T7979] F2FS-fs (loop0): invalid crc value
[  348.609465][ T7977] netlink: 'syz.3.534': attribute type 3 has an invalid length.
[  348.772509][ T7979] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  348.813905][ T7979] F2FS-fs (loop0): Start checkpoint disabled!
[  348.852852][ T7987] macvlan1: entered promiscuous mode
[  348.893285][ T7979] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  348.908538][ T7987] ipvlan0: entered promiscuous mode
[  348.921044][ T7977] netlink: 31 bytes leftover after parsing attributes in process `syz.3.534'.
[  348.943688][ T7987] ipvlan0: left promiscuous mode
[  348.958278][ T7979] netlink: 56 bytes leftover after parsing attributes in process `syz.0.541'.
[  349.005640][ T7992] loop5: detected capacity change from 0 to 64
[  349.019180][ T7992] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  349.058043][ T7987] macvlan1: left promiscuous mode
[  352.272001][ T1164] kworker/u8:7: attempt to access beyond end of device
[  352.272001][ T1164] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  352.303354][ T6163] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  352.356702][ T1164] CPU: 1 UID: 0 PID: 1164 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[  352.356736][ T1164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  352.356761][ T1164] Workqueue: writeback wb_workfn (flush-7:0)
[  352.356800][ T1164] Call Trace:
[  352.356810][ T1164]  <TASK>
[  352.356821][ T1164]  dump_stack_lvl+0x189/0x250
[  352.356859][ T1164]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.356889][ T1164]  ? __pfx_queue_work_on+0x10/0x10
[  352.356914][ T1164]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  352.356958][ T1164]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  352.357014][ T1164]  f2fs_handle_critical_error+0x37c/0x540
[  352.357063][ T1164]  f2fs_write_end_io+0x886/0xb60
[  352.357116][ T1164]  __submit_merged_bio+0x27a/0x6a0
[  352.357163][ T1164]  __submit_merged_write_cond+0x255/0x530
[  352.357211][ T1164]  f2fs_write_data_pages+0x261d/0x3000
[  352.357286][ T1164]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  352.357332][ T1164]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  352.357412][ T1164]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  352.357448][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.357477][ T1164]  ? look_up_lock_class+0x74/0x170
[  352.357519][ T1164]  ? trace_f2fs_writepages+0x7f/0x200
[  352.357558][ T1164]  ? f2fs_write_node_pages+0x478/0x6e0
[  352.357600][ T1164]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  352.357662][ T1164]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  352.357688][ T1164]  do_writepages+0x32e/0x550
[  352.357732][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.357764][ T1164]  ? reacquire_held_locks+0x127/0x1d0
[  352.357790][ T1164]  ? writeback_sb_inodes+0x384/0x1010
[  352.357836][ T1164]  __writeback_single_inode+0x145/0xff0
[  352.357868][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.357895][ T1164]  ? do_raw_spin_unlock+0x122/0x240
[  352.357933][ T1164]  writeback_sb_inodes+0x6c7/0x1010
[  352.357977][ T1164]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  352.358041][ T1164]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  352.358134][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.358160][ T1164]  ? rcu_is_watching+0x15/0xb0
[  352.358187][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.358227][ T1164]  wb_writeback+0x43b/0xaf0
[  352.358272][ T1164]  ? queue_io+0x381/0x590
[  352.358309][ T1164]  ? __pfx_wb_writeback+0x10/0x10
[  352.358354][ T1164]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.358400][ T1164]  wb_workfn+0x409/0xef0
[  352.358450][ T1164]  ? __pfx_wb_workfn+0x10/0x10
[  352.358483][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.358510][ T1164]  ? __lock_acquire+0xab9/0xd20
[  352.358562][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.358594][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.358626][ T1164]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.358661][ T1164]  ? process_scheduled_works+0x9ef/0x17b0
[  352.358685][ T1164]  ? process_scheduled_works+0x9ef/0x17b0
[  352.358713][ T1164]  process_scheduled_works+0xae1/0x17b0
[  352.358786][ T1164]  ? __pfx_process_scheduled_works+0x10/0x10
[  352.358823][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.358863][ T1164]  worker_thread+0x8a0/0xda0
[  352.358908][ T1164]  ? __kthread_parkme+0x7b/0x200
[  352.358951][ T1164]  kthread+0x711/0x8a0
[  352.358987][ T1164]  ? __pfx_worker_thread+0x10/0x10
[  352.359012][ T1164]  ? __pfx_kthread+0x10/0x10
[  352.359039][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.359072][ T1164]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.359108][ T1164]  ? srso_alias_return_thunk+0x5/0xfbef5
[  352.359135][ T1164]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.359158][ T1164]  ? __pfx_kthread+0x10/0x10
[  352.359191][ T1164]  ret_from_fork+0x439/0x7d0
[  352.359221][ T1164]  ? __pfx_ret_from_fork+0x10/0x10
[  352.359256][ T1164]  ? __switch_to_asm+0x39/0x70
[  352.359286][ T1164]  ? __switch_to_asm+0x33/0x70
[  352.359316][ T1164]  ? __pfx_kthread+0x10/0x10
[  352.359348][ T1164]  ret_from_fork_asm+0x1a/0x30
[  352.359404][ T1164]  </TASK>
[  352.793119][ T1164] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  353.469744][ T8002] loop4: detected capacity change from 0 to 40427
[  353.489566][ T8002] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  353.497721][ T8002] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  353.509545][ T8002] F2FS-fs (loop4): invalid crc value
[  353.575411][ T8002] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  353.594263][ T8002] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  353.601359][ T8002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  354.521395][ T8009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.549'.
[  356.812065][ T8022] loop2: detected capacity change from 0 to 32768
[  356.871857][ T8022] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  356.871857][ T8022] clean (size 2912):
[  356.871857][ T8022] flags:          0
[  356.871857][ T8022] journal_seq:    8
[  356.871857][ T8022] usage: type=inodes v=8
[  356.871857][ T8022] usage: type=key_version v=0
[  356.871857][ T8022] usage: type=reserved v=0
[  356.871857][ T8022] usage: type=reserved v=0
[  356.871857][ T8022] usage: type=reserved v=0
[  356.871857][ T8022] usage: type=(unknown fs_usage_type 3) v=0
[  356.871857][ T8022] data_usage: btree: 1/1 [0]=2816
[  356.871857][ T8022] data_usage: journal: 1/1 [0]=0
[  356.871857][ T8022] data_usage: user: 1/1 [0]=32
[  356.871857][ T8022] dev_usage: dev=0  
[  356.871857][ T8022]   free: buckets=83 sectors=0 fragmented=0
[  356.871857][ T8022]   sb: buckets=25 sectors=6152 fragmented=248
[  356.871857][ T8022]   journal: buckets=8 sectors=2048 fragmented=0
[  356.871857][ T8022]   btree: buckets=11 sectors=2816 fragmented=0
[  356.871857][ T8022]   user: buckets=1 sectors=32 fragmented=224
[  356.871857][ T8022]   cached: buckets=0 sectors=0 fragmented=0
[  356.871857][ T8022]   parity: buckets=0 sectors=0 fragmented=0
[  356.871857][ T8022]   stripe: buckets=0 sectors=0 fragmented=0
[  356.871857][ T8022]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  356.871857][ T8022]   need_discard: buckets=0 sectors=0 fragmented=0
[  356.871857][ T8022] clock: read=0
[  356.871857][ T8022] clock: write=1288
[  356.871857][ T8022] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 720575940379
[  356.872139][ T8022] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  358.013711][ T5871] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  358.214082][ T6163] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  358.231751][ T5871] usb 4-1: Using ep0 maxpacket: 32
[  358.255635][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.286515][ T5882] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  358.298160][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  358.298194][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  358.298211][ T5882] Workqueue: hci0 hci_rx_work
[  358.298251][ T5882] Call Trace:
[  358.298260][ T5882]  <TASK>
[  358.298271][ T5882]  dump_stack_lvl+0x189/0x250
[  358.298307][ T5882]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.298337][ T5882]  ? __pfx__printk+0x10/0x10
[  358.298378][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.298406][ T5882]  ? kernfs_path_from_node+0x250/0x290
[  358.298434][ T5882]  ? kernfs_path_from_node+0x2f/0x290
[  358.298466][ T5882]  sysfs_create_dir_ns+0x259/0x280
[  358.298497][ T5882]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  358.298527][ T5882]  ? do_raw_spin_unlock+0x122/0x240
[  358.298564][ T5882]  kobject_add_internal+0x59f/0xb40
[  358.298606][ T5882]  kobject_add+0x155/0x220
[  358.298634][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.298670][ T5882]  ? __pfx_kobject_add+0x10/0x10
[  358.298699][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.298727][ T5882]  ? _raw_spin_unlock+0x28/0x50
[  358.298762][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.298795][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.298823][ T5882]  ? get_device_parent+0x366/0x3a0
[  358.298859][ T5882]  device_add+0x408/0xb50
[  358.298893][ T5882]  hci_conn_add_sysfs+0xd5/0x1e0
[  358.298932][ T5882]  le_conn_complete_evt+0xc3a/0x1220
[  358.298975][ T5882]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  358.299008][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.299035][ T5882]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  358.299061][ T5882]  ? __asan_memcpy+0x40/0x70
[  358.299096][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.299123][ T5882]  ? skb_pull_data+0xfb/0x200
[  358.299166][ T5882]  hci_le_conn_complete_evt+0x187/0x450
[  358.299200][ T5882]  hci_event_packet+0x78f/0x1200
[  358.299241][ T5882]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  358.299269][ T5882]  ? __pfx_hci_event_packet+0x10/0x10
[  358.299307][ T5882]  ? kcov_remote_start+0x4d3/0x7f0
[  358.299340][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.299366][ T5882]  ? lockdep_hardirqs_on+0x90/0x150
[  358.299395][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.299424][ T5882]  ? hci_send_to_monitor+0xe2/0x570
[  358.299456][ T5882]  hci_rx_work+0x46a/0xe80
[  358.299503][ T5882]  ? process_scheduled_works+0x9ef/0x17b0
[  358.299532][ T5882]  process_scheduled_works+0xae1/0x17b0
[  358.299593][ T5882]  ? __pfx_process_scheduled_works+0x10/0x10
[  358.299627][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.299666][ T5882]  worker_thread+0x8a0/0xda0
[  358.299723][ T5882]  kthread+0x711/0x8a0
[  358.299758][ T5882]  ? __pfx_worker_thread+0x10/0x10
[  358.299783][ T5882]  ? __pfx_kthread+0x10/0x10
[  358.299810][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.299841][ T5882]  ? _raw_spin_unlock_irq+0x23/0x50
[  358.299878][ T5882]  ? srso_alias_return_thunk+0x5/0xfbef5
[  358.299906][ T5882]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.299928][ T5882]  ? __pfx_kthread+0x10/0x10
[  358.299961][ T5882]  ret_from_fork+0x439/0x7d0
[  358.299991][ T5882]  ? __pfx_ret_from_fork+0x10/0x10
[  358.300030][ T5882]  ? __switch_to_asm+0x39/0x70
[  358.300061][ T5882]  ? __switch_to_asm+0x33/0x70
[  358.300091][ T5882]  ? __pfx_kthread+0x10/0x10
[  358.300124][ T5882]  ret_from_fork_asm+0x1a/0x30
[  358.300175][ T5882]  </TASK>
[  358.300208][ T5882] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  358.650402][ T5882] Bluetooth: hci0: failed to register connection device
[  358.660780][ T5871] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  358.671097][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.723262][ T6163] usb 6-1: Using ep0 maxpacket: 32
[  358.746621][ T6163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.783414][ T5871] usb 4-1: config 0 descriptor??
[  358.831194][ T6163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.039387][ T6163] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  359.207479][ T6163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.542821][ T6163] usb 6-1: config 0 descriptor??
[  359.559044][ T8024] loop3: detected capacity change from 0 to 1024
[  360.344807][ T8024] EXT4-fs: Ignoring removed nobh option
[  360.363298][ T8024] EXT4-fs: Ignoring removed bh option
[  360.440451][ T8024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.586660][ T8050] loop1: detected capacity change from 0 to 64
[  360.626480][ T8053] netlink: 'syz.3.554': attribute type 1 has an invalid length.
[  360.644442][ T8050] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  360.652960][ T8052] loop0: detected capacity change from 0 to 128
[  360.674547][ T8052] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  360.951133][ T8024] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.554: Allocating blocks 497-513 which overlap fs metadata
[  361.200447][ T5876] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  361.398954][ T8052] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  363.352697][ T6163] ft260 0003:0403:6030.0006: unknown main item tag 0x7
[  363.557902][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short
[  363.945612][ T8024] EXT4-fs (loop3): pa ffff888031cb2910: logic 128, phys. 385, len 8
[  363.954258][ T8024] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  364.169496][ T6163] ft260 0003:0403:6030.0006: failed to retrieve chip version
[  364.193902][ T6163] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -71
[  364.241402][ T5876] usb 3-1: unable to read config index 0 descriptor/start: -71
[  364.252888][ T8053] bond1: entered promiscuous mode
[  364.256019][ T5876] usb 3-1: can't read configurations, error -71
[  364.270770][ T6163] usb 6-1: USB disconnect, device number 16
[  364.307217][ T5871] usbhid 4-1:0.0: can't add hid device: -32
[  364.337385][ T5871] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  364.361060][ T8053] 8021q: adding VLAN 0 to HW filter on device bond1
[  364.514172][ T8071] loop2: detected capacity change from 0 to 1024
[  365.619512][ T5876] usb 4-1: USB disconnect, device number 13
[  365.626112][ T8068] loop4: detected capacity change from 0 to 4096
[  365.766198][ T8068] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  365.791972][   T12] hfsplus: b-tree write err: -5, ino 4
[  365.820172][ T5882] Bluetooth: hci0: command 0x0406 tx timeout
[  366.433287][ T8068] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  366.449530][ T8068] ntfs3(loop4): Failed to load $Extend (-22).
[  366.473274][ T8068] ntfs3(loop4): Failed to initialize $Extend.
[  366.485019][ T8073] loop5: detected capacity change from 0 to 4096
[  366.559264][ T8073] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  366.786989][ T8073] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  366.797677][ T5869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.836539][ T8073] ntfs3(loop5): Failed to load $Extend (-22).
[  366.881239][ T8073] ntfs3(loop5): Failed to initialize $Extend.
[  367.025950][ T8077] netlink: 56 bytes leftover after parsing attributes in process `syz.5.566'.
[  367.073896][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.566'.
[  367.082923][ T8077] netlink: 31 bytes leftover after parsing attributes in process `syz.5.566'.
[  367.143363][ T8077] netlink: 'syz.5.566': attribute type 3 has an invalid length.
[  367.459648][ T8077] netlink: 31 bytes leftover after parsing attributes in process `syz.5.566'.
[  367.710712][ T8096] loop1: detected capacity change from 0 to 1024
[  368.510640][ T1131] hfsplus: b-tree write err: -5, ino 4
[  368.668464][ T8101] loop3: detected capacity change from 0 to 256
[  368.757349][ T8101] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  370.574270][ T8114] loop1: detected capacity change from 0 to 64
[  370.816757][ T8114] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  370.952831][ T8116] libceph: resolve '4.4' (ret=-3): failed
[  372.803451][ T8128] loop3: detected capacity change from 0 to 128
[  372.864087][ T8128] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  373.092171][ T8128] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  377.753147][ T5993] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  377.981778][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  377.988304][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  378.820397][ T5993] usb 3-1: device descriptor read/64, error -71
[  379.149308][ T8160] loop0: detected capacity change from 0 to 40427
[  379.166540][ T8160] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  379.177616][ T8160] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  379.203312][ T8160] F2FS-fs (loop0): invalid crc value
[  379.262093][ T5993] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  379.345172][ T8160] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  379.357390][ T8176] loop5: detected capacity change from 0 to 256
[  379.376713][ T8160] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  379.384341][ T8160] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  379.409492][ T5993] usb 3-1: device descriptor read/64, error -71
[  379.416119][ T8173] loop3: detected capacity change from 0 to 512
[  379.474485][ T8173] msdos: Unknown parameter '/dev/snd/controlC#'
[  379.640309][ T5993] usb usb3-port1: attempt power cycle
[  380.463582][   T30] audit: type=1800 audit(1758564929.615:64): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.590" name="file1" dev="loop0" ino=10 res=0 errno=0
[  380.909362][ T8176] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  381.209176][ T5993] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  381.983247][ T5993] usb 3-1: device descriptor read/8, error -71
[  382.233782][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.596'.
[  382.331476][ T8193] loop1: detected capacity change from 0 to 256
[  382.338577][ T8192] loop3: detected capacity change from 0 to 64
[  382.385754][ T8192] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  382.621235][ T8199] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  382.634405][ T8199] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  382.643127][ T8199] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  382.651523][ T8199] comedi comedi3: 8255: I/O port conflict (0x401,4)
[  382.658400][ T8193] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  382.673102][ T8199] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  382.682101][ T8199] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  382.690960][ T8199] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  382.699578][ T8199] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  382.707727][ T8199] comedi comedi3: 8255: I/O port conflict (0x3bf,4)
[  382.716375][ T8199] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  382.723114][ T8199] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[  382.733742][ T8199] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  382.742876][ T8199] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  385.464552][ T8205] loop2: detected capacity change from 0 to 128
[  385.623370][ T8205] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  386.180125][ T8205] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  386.733243][ T8213] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  386.741937][ T8213] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  386.750456][ T8213] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  386.758938][ T8213] comedi comedi3: 8255: I/O port conflict (0x401,4)
[  386.767407][ T8213] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  386.818796][ T8213] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  386.831651][ T8213] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  386.840030][ T8213] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  386.847451][ T8213] comedi comedi3: 8255: I/O port conflict (0x3bf,4)
[  386.857197][ T8213] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  386.873103][ T8213] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[  386.882726][ T8213] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  386.892083][ T8213] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  390.026444][ T8243] loop1: detected capacity change from 0 to 32768
[  390.033174][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  390.034129][ T8243] btrfs: Deprecated parameter 'usebackuproot'
[  390.046859][ T8243] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  390.056283][ T8243] btrfs: Deprecated parameter 'usebackuproot'
[  390.062361][ T8243] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  390.100697][ T8243] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.608 (8243)
[  390.191389][ T8243] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  390.201652][ T8243] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  390.212505][ T8243] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  390.249868][ T8243] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  390.263677][   T10] usb 1-1: Using ep0 maxpacket: 32
[  390.300273][ T8243] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  390.316501][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.326048][ T8243] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  390.361360][ T8243] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  390.392526][ T8243] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  390.428069][   T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  390.428160][ T8243] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[  390.478107][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.500207][   T10] usb 1-1: config 0 descriptor??
[  390.565067][ T8243] BTRFS info (device loop1): rebuilding free space tree
[  390.976873][ T8267] loop2: detected capacity change from 0 to 512
[  391.028695][ T8243] BTRFS info (device loop1): setting nodatasum
[  391.035037][ T8243] BTRFS info (device loop1): enabling ssd optimizations
[  391.041991][ T8243] BTRFS info (device loop1): enabling free space tree
[  391.048839][ T8243] BTRFS info (device loop1): force clearing of disk cache
[  391.056020][ T8243] BTRFS info (device loop1): doing ref verification
[  391.062614][ T8243] BTRFS info (device loop1): trying to use backup root at mount time
[  391.079959][ T8267] msdos: Unknown parameter '/dev/snd/controlC#'
[  391.202615][ T8245] loop0: detected capacity change from 0 to 1024
[  391.424456][ T8245] EXT4-fs: Ignoring removed nobh option
[  391.430091][ T8245] EXT4-fs: Ignoring removed bh option
[  391.905690][ T8243] BTRFS info (device loop1): balance: start -f -slimit=8589934593
[  391.914958][ T8243] BTRFS info (device loop1): left=0, need=98304, flags=2
[  391.922063][ T8243] BTRFS info (device loop1): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  391.931906][ T8243] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  391.947839][ T8243] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1441792
[  391.957195][ T8243] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  391.966486][ T8243] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  391.974305][ T8243] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  391.982658][ T8243] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0
[  391.994052][ T8243] BTRFS info (device loop1): relocating block group 1048576 flags system
[  392.074346][ T8245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.149116][ T8243] BTRFS info (device loop1): balance: ended with status: 0
[  392.486536][ T8279] netlink: 'syz.0.594': attribute type 1 has an invalid length.
[  392.864970][ T8282] loop5: detected capacity change from 0 to 1024
[  393.158047][ T8282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  393.174099][ T8282] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.191495][ T8279] bond1: entered promiscuous mode
[  393.197574][ T8279] 8021q: adding VLAN 0 to HW filter on device bond1
[  393.243313][ T8282] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.611: lblock 3 mapped to illegal pblock 3 (length 3)
[  393.259863][ T8282] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  393.276219][ T8282] EXT4-fs (loop5): This should not happen!! Data will be lost
[  393.276219][ T8282] 
[  393.292792][ T5866] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  393.324478][ T8294] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.611: lblock 3 mapped to illegal pblock 3 (length 1)
[  393.547190][ T8286] loop3: detected capacity change from 0 to 4096
[  393.608520][ T8286] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  393.707824][ T6115] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8)
[  393.848402][ T6115] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  393.909347][ T8298] loop2: detected capacity change from 0 to 64
[  393.920398][ T8286] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  393.944552][ T6115] EXT4-fs (loop5): This should not happen!! Data will be lost
[  393.944552][ T6115] 
[  393.964191][ T8298] hfs: Unknown parameter 'codepaY…³ÚÚ®]Þ‰DÁze'
[  394.086177][ T8286] ntfs3(loop3): Failed to load $Extend (-22).
[  394.126666][ T8286] ntfs3(loop3): Failed to initialize $Extend.
[  394.563785][ T5865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  396.210400][ T8286] netlink: 56 bytes leftover after parsing attributes in process `syz.3.612'.
[  396.321098][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'.
[  396.430646][ T8286] netlink: 31 bytes leftover after parsing attributes in process `syz.3.612'.
[  396.557777][ T8286] netlink: 'syz.3.612': attribute type 3 has an invalid length.
[  396.665580][ T8286] netlink: 31 bytes leftover after parsing attributes in process `syz.3.612'.
[  396.925135][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  397.012929][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  397.648493][   T10] usb 1-1: USB disconnect, device number 14
[  399.990064][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.022619][ T5882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  405.034822][ T5882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  405.042904][ T5882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  405.051036][ T5882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  405.078051][ T5882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  406.622340][ T8349] loop1: detected capacity change from 0 to 512
[  406.804712][ T8349] msdos: Unknown parameter '/dev/snd/controlC#'
[  407.442738][ T5882] Bluetooth: hci6: command tx timeout
[  408.798704][ T8354] loop4: detected capacity change from 0 to 40427
[  408.984200][ T8354] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  408.992007][ T8354] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  409.011616][ T8354] F2FS-fs (loop4): invalid crc value
[  409.259991][ T8354] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  409.470031][ T8354] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  409.477219][ T8354] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  409.708702][ T5882] Bluetooth: hci6: command tx timeout
[  412.124582][ T5882] Bluetooth: hci6: command tx timeout
[  414.134017][ T5882] Bluetooth: hci6: command tx timeout
[  415.000950][ T8398] loop5: detected capacity change from 0 to 1024
[  415.024549][ T7522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.201856][ T8336] chnl_net:caif_netlink_parms(): no params data found
[  415.265123][ T8398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  415.349522][ T8398] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.504593][ T8400] loop1: detected capacity change from 0 to 40427
[  415.510271][ T8398] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.639: lblock 3 mapped to illegal pblock 3 (length 3)
[  415.517479][ T8400] F2FS-fs (loop1): invalid crc value
[  415.622159][ T8400] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  415.633336][ T8400] F2FS-fs (loop1): Start checkpoint disabled!
[  415.639079][ T8398] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  415.652740][ T8400] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  415.709611][ T8400] netlink: 56 bytes leftover after parsing attributes in process `syz.1.641'.
[  415.798839][ T3539] kworker/u8:8: attempt to access beyond end of device
[  415.798839][ T3539] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  415.824917][ T8398] EXT4-fs (loop5): This should not happen!! Data will be lost
[  415.824917][ T8398] 
[  415.836965][ T7522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.878746][ T3539] CPU: 0 UID: 0 PID: 3539 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  415.878784][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  415.878798][ T3539] Workqueue: writeback wb_workfn (flush-7:1)
[  415.878830][ T3539] Call Trace:
[  415.878839][ T3539]  <TASK>
[  415.878848][ T3539]  dump_stack_lvl+0x189/0x250
[  415.878880][ T3539]  ? __pfx_dump_stack_lvl+0x10/0x10
[  415.878905][ T3539]  ? __pfx_queue_work_on+0x10/0x10
[  415.878925][ T3539]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  415.878957][ T3539]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  415.879003][ T3539]  f2fs_handle_critical_error+0x37c/0x540
[  415.879044][ T3539]  f2fs_write_end_io+0x886/0xb60
[  415.879086][ T3539]  __submit_merged_bio+0x27a/0x6a0
[  415.879121][ T3539]  __submit_merged_write_cond+0x255/0x530
[  415.879157][ T3539]  f2fs_write_data_pages+0x261d/0x3000
[  415.879209][ T3539]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  415.879300][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.879326][ T3539]  ? f2fs_write_meta_pages+0x357/0x450
[  415.879354][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.879376][ T3539]  ? __lock_acquire+0xab9/0xd20
[  415.879411][ T3539]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  415.879432][ T3539]  do_writepages+0x32e/0x550
[  415.879465][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.879486][ T3539]  ? reacquire_held_locks+0x127/0x1d0
[  415.879507][ T3539]  ? writeback_sb_inodes+0x384/0x1010
[  415.879542][ T3539]  __writeback_single_inode+0x145/0xff0
[  415.879569][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.879592][ T3539]  ? do_raw_spin_unlock+0x122/0x240
[  415.879621][ T3539]  writeback_sb_inodes+0x6c7/0x1010
[  415.879674][ T3539]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  415.879742][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.879765][ T3539]  ? rcu_is_watching+0x15/0xb0
[  415.879793][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.879824][ T3539]  wb_writeback+0x43b/0xaf0
[  415.879859][ T3539]  ? queue_io+0x381/0x590
[  415.879887][ T3539]  ? __pfx_wb_writeback+0x10/0x10
[  415.879922][ T3539]  ? wb_workfn+0x3d0/0xef0
[  415.879951][ T3539]  wb_workfn+0x409/0xef0
[  415.879989][ T3539]  ? __pfx_wb_workfn+0x10/0x10
[  415.880018][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.880041][ T3539]  ? __lock_acquire+0xab9/0xd20
[  415.880080][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.880104][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.880130][ T3539]  ? _raw_spin_unlock_irq+0x23/0x50
[  415.880162][ T3539]  ? process_scheduled_works+0x9ef/0x17b0
[  415.880181][ T3539]  ? process_scheduled_works+0x9ef/0x17b0
[  415.880203][ T3539]  process_scheduled_works+0xae1/0x17b0
[  415.880253][ T3539]  ? __pfx_process_scheduled_works+0x10/0x10
[  415.880281][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.880313][ T3539]  worker_thread+0x8a0/0xda0
[  415.880365][ T3539]  kthread+0x711/0x8a0
[  415.880396][ T3539]  ? __pfx_worker_thread+0x10/0x10
[  415.880417][ T3539]  ? __pfx_kthread+0x10/0x10
[  415.880440][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.880468][ T3539]  ? _raw_spin_unlock_irq+0x23/0x50
[  415.880500][ T3539]  ? srso_alias_return_thunk+0x5/0xfbef5
[  415.880523][ T3539]  ? lockdep_hardirqs_on+0x9c/0x150
[  415.880544][ T3539]  ? __pfx_kthread+0x10/0x10
[  415.880573][ T3539]  ret_from_fork+0x439/0x7d0
[  415.880601][ T3539]  ? __pfx_ret_from_fork+0x10/0x10
[  415.880633][ T3539]  ? __switch_to_asm+0x39/0x70
[  415.880663][ T3539]  ? __switch_to_asm+0x33/0x70
[  415.880686][ T3539]  ? __pfx_kthread+0x10/0x10
[  415.880710][ T3539]  ret_from_fork_asm+0x1a/0x30
[  415.880750][ T3539]  </TASK>
[  416.223844][    C0] vkms_vblank_simulate: vblank timer overrun
[  416.234406][ T3539] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  416.468596][ T6232] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8)
[  416.509910][ T6232] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  416.592709][ T6232] EXT4-fs (loop5): This should not happen!! Data will be lost
[  416.592709][ T6232] 
[  416.641977][ T5865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  417.195694][ T7522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.258195][ T8424] loop5: detected capacity change from 0 to 512
[  417.313329][ T8424] msdos: Unknown parameter '/dev/snd/controlC#'
[  418.407274][ T8336] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.460129][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.520546][ T8336] bridge_slave_0: entered allmulticast mode
[  418.950122][ T8336] bridge_slave_0: entered promiscuous mode
[  419.554437][ T7522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.615212][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.679990][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.739024][ T8336] bridge_slave_1: entered allmulticast mode
[  419.792228][ T8336] bridge_slave_1: entered promiscuous mode
[  419.972317][ T8441] loop5: detected capacity change from 0 to 512
[  420.060539][ T8441] msdos: Unknown parameter '/dev/snd/controlC#'
[  421.346620][ T8336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.640887][ T8336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.853353][   T30] audit: type=1326 audit(1758564971.625:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075498eec9 code=0x7ffc0000
[  422.545545][   T30] audit: type=1326 audit(1758564971.625:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075498eec9 code=0x7ffc0000
[  422.702207][   T30] audit: type=1326 audit(1758564971.635:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f075498eec9 code=0x7ffc0000
[  422.781639][   T30] audit: type=1326 audit(1758564971.635:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075498eec9 code=0x7ffc0000
[  422.848606][   T30] audit: type=1326 audit(1758564971.635:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075498eec9 code=0x7ffc0000
[  422.961974][   T30] audit: type=1326 audit(1758564971.635:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f075498eec9 code=0x7ffc0000
[  423.119923][ T8336] team0: Port device team_slave_0 added
[  423.133280][   T30] audit: type=1326 audit(1758564971.635:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075498eec9 code=0x7ffc0000
[  423.168583][ T8336] team0: Port device team_slave_1 added
[  423.450700][   T30] audit: type=1326 audit(1758564971.635:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075498eec9 code=0x7ffc0000
[  423.474086][   T30] audit: type=1326 audit(1758564971.645:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f075498eec9 code=0x7ffc0000
[  423.499151][   T30] audit: type=1326 audit(1758564971.645:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075498eec9 code=0x7ffc0000
[  423.907214][ T8467] loop2: detected capacity change from 0 to 128
[  423.930674][ T8467] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  423.986224][ T8467] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  424.105168][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.150724][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.220363][ T8336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.284725][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.318263][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.393558][ T8336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.253786][ T8475] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  425.262117][ T8475] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  425.270368][ T8475] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  425.277313][ T8475] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  425.286173][ T8475] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  425.340257][ T8475] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  425.353176][ T8475] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  425.360123][ T8475] comedi comedi3: 8255: I/O port conflict (0x3bf,4)
[  425.371022][ T8475] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  425.378577][ T8475] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[  425.387734][ T8475] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  425.396444][ T8475] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  426.476956][ T8336] hsr_slave_0: entered promiscuous mode
[  426.514126][ T8336] hsr_slave_1: entered promiscuous mode
[  426.520563][ T8336] debugfs: 'hsr0' already exists in 'hsr'
[  426.733528][ T8336] Cannot create hsr debugfs directory
[  426.739964][ T7522] bridge_slave_1: left allmulticast mode
[  426.773192][ T7522] bridge_slave_1: left promiscuous mode
[  426.781515][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.866223][ T8494] comedi comedi1: c6xdigio: I/O port conflict (0x401,3)
[  427.874050][ T8494] ==================================================================
[  427.882242][ T8494] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x3d/0x70
[  427.890223][ T8494] Read of size 8 at addr ffff88805b606a30 by task syz.4.661/8494
[  427.897955][ T8494] 
[  427.900285][ T8494] CPU: 0 UID: 0 PID: 8494 Comm: syz.4.661 Not tainted syzkaller #0 PREEMPT(full) 
[  427.900319][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  427.900340][ T8494] Call Trace:
[  427.900351][ T8494]  <TASK>
[  427.900361][ T8494]  dump_stack_lvl+0x189/0x250
[  427.900400][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.900438][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.900476][ T8494]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.900511][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.900546][ T8494]  ? rcu_is_watching+0x15/0xb0
[  427.900578][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.900614][ T8494]  ? lock_release+0x4b/0x3e0
[  427.900665][ T8494]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  427.900717][ T8494]  ? __virt_addr_valid+0x1c8/0x5c0
[  427.900745][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.900770][ T8494]  ? __virt_addr_valid+0x4a5/0x5c0
[  427.900800][ T8494]  print_report+0xca/0x240
[  427.900821][ T8494]  ? sysfs_remove_file_ns+0x3d/0x70
[  427.900845][ T8494]  kasan_report+0x118/0x150
[  427.900888][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.900925][ T8494]  ? sysfs_remove_file_ns+0x3d/0x70
[  427.900956][ T8494]  sysfs_remove_file_ns+0x3d/0x70
[  427.900990][ T8494]  bus_remove_driver+0x198/0x2f0
[  427.901024][ T8494]  comedi_device_detach_locked+0x178/0x750
[  427.901068][ T8494]  comedi_device_attach+0x5d4/0x720
[  427.901093][ T8494]  comedi_unlocked_ioctl+0x5ff/0x1020
[  427.901129][ T8494]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  427.901166][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.901190][ T8494]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.901214][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.901244][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.901269][ T8494]  ? rcu_is_watching+0x15/0xb0
[  427.901290][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.901315][ T8494]  ? trace_irq_disable+0x37/0x110
[  427.901344][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.901368][ T8494]  ? preempt_schedule_irq+0xde/0x150
[  427.901390][ T8494]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  427.901416][ T8494]  ? irqentry_exit+0x74/0x90
[  427.901436][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.901461][ T8494]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.901482][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  427.901509][ T8494]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  427.901539][ T8494]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  427.901569][ T8494]  ? __se_sys_ioctl+0xea/0x170
[  427.901598][ T8494]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  427.901627][ T8494]  __se_sys_ioctl+0xfc/0x170
[  427.901655][ T8494]  do_syscall_64+0xfa/0x3b0
[  427.901680][ T8494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.901701][ T8494]  ? asm_sysvec_call_function_single+0x1a/0x20
[  427.901726][ T8494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.901748][ T8494] RIP: 0033:0x7f94d218eec9
[  427.901768][ T8494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.901788][ T8494] RSP: 002b:00007f94d03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  427.901812][ T8494] RAX: ffffffffffffffda RBX: 00007f94d23e6090 RCX: 00007f94d218eec9
[  427.901829][ T8494] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  427.901844][ T8494] RBP: 00007f94d2211f91 R08: 0000000000000000 R09: 0000000000000000
[  427.901858][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  427.901871][ T8494] R13: 00007f94d23e6128 R14: 00007f94d23e6090 R15: 00007fff86359bb8
[  427.901897][ T8494]  </TASK>
[  427.901904][ T8494] 
[  428.248533][ T8494] Allocated by task 6114:
[  428.252846][ T8494]  kasan_save_track+0x3e/0x80
[  428.257523][ T8494]  __kasan_kmalloc+0x93/0xb0
[  428.262109][ T8494]  __kmalloc_cache_noprof+0x230/0x3d0
[  428.267477][ T8494]  bus_add_driver+0x162/0x640
[  428.272142][ T8494]  driver_register+0x23a/0x320
[  428.276904][ T8494]  c6xdigio_attach+0x94/0x890
[  428.281573][ T8494]  comedi_device_attach+0x51f/0x720
[  428.286758][ T8494]  comedi_unlocked_ioctl+0x5ff/0x1020
[  428.292223][ T8494]  __se_sys_ioctl+0xfc/0x170
[  428.296805][ T8494]  do_syscall_64+0xfa/0x3b0
[  428.301304][ T8494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.307198][ T8494] 
[  428.309503][ T8494] Freed by task 8462:
[  428.313463][ T8494]  kasan_save_track+0x3e/0x80
[  428.318136][ T8494]  kasan_save_free_info+0x46/0x50
[  428.323148][ T8494]  __kasan_slab_free+0x5b/0x80
[  428.327961][ T8494]  kfree+0x18e/0x440
[  428.331854][ T8494]  kobject_put+0x22b/0x480
[  428.336264][ T8494]  bus_remove_driver+0x245/0x2f0
[  428.341192][ T8494]  comedi_device_detach_locked+0x178/0x750
[  428.346998][ T8494]  comedi_unlocked_ioctl+0xcde/0x1020
[  428.352370][ T8494]  __se_sys_ioctl+0xfc/0x170
[  428.356990][ T8494]  do_syscall_64+0xfa/0x3b0
[  428.361581][ T8494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.367462][ T8494] 
[  428.369769][ T8494] The buggy address belongs to the object at ffff88805b606a00
[  428.369769][ T8494]  which belongs to the cache kmalloc-256 of size 256
[  428.383811][ T8494] The buggy address is located 48 bytes inside of
[  428.383811][ T8494]  freed 256-byte region [ffff88805b606a00, ffff88805b606b00)
[  428.397511][ T8494] 
[  428.399821][ T8494] The buggy address belongs to the physical page:
[  428.406219][ T8494] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805b607e00 pfn:0x5b606
[  428.416271][ T8494] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  428.424761][ T8494] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  428.432294][ T8494] page_type: f5(slab)
[  428.436268][ T8494] raw: 00fff00000000040 ffff88801a441b40 ffffea0000c2d200 dead000000000002
[  428.444843][ T8494] raw: ffff88805b607e00 000000000010000e 00000000f5000000 0000000000000000
[  428.453415][ T8494] head: 00fff00000000040 ffff88801a441b40 ffffea0000c2d200 dead000000000002
[  428.462074][ T8494] head: ffff88805b607e00 000000000010000e 00000000f5000000 0000000000000000
[  428.470734][ T8494] head: 00fff00000000001 ffffea00016d8181 00000000ffffffff 00000000ffffffff
[  428.479395][ T8494] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  428.488044][ T8494] page dumped because: kasan: bad access detected
[  428.494440][ T8494] page_owner tracks the page as allocated
[  428.500136][ T8494] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5864, tgid 5864 (syz-executor), ts 99671160771, free_ts 99544229321
[  428.521493][ T8494]  post_alloc_hook+0x240/0x2a0
[  428.526271][ T8494]  get_page_from_freelist+0x21e4/0x22c0
[  428.531805][ T8494]  __alloc_frozen_pages_noprof+0x181/0x370
[  428.537603][ T8494]  alloc_pages_mpol+0x232/0x4a0
[  428.542453][ T8494]  allocate_slab+0x8a/0x370
[  428.546957][ T8494]  ___slab_alloc+0xbeb/0x1420
[  428.551639][ T8494]  __kmalloc_noprof+0x305/0x4f0
[  428.556487][ T8494]  fib_create_info+0x1728/0x3210
[  428.561411][ T8494]  fib_table_insert+0xc6/0x1b50
[  428.566251][ T8494]  fib_magic+0x2c4/0x390
[  428.570488][ T8494]  fib_add_ifaddr+0x144/0x5f0
[  428.575161][ T8494]  fib_netdev_event+0x382/0x490
[  428.580011][ T8494]  notifier_call_chain+0x1b6/0x3e0
[  428.585110][ T8494]  __dev_notify_flags+0x18d/0x2e0
[  428.590131][ T8494]  netif_change_flags+0xe8/0x1a0
[  428.595066][ T8494]  do_setlink+0xc55/0x41c0
[  428.599475][ T8494] page last free pid 23 tgid 23 stack trace:
[  428.605443][ T8494]  __free_frozen_pages+0xbc4/0xd30
[  428.610569][ T8494]  rcu_core+0xcab/0x1770
[  428.614820][ T8494]  handle_softirqs+0x286/0x870
[  428.619573][ T8494]  run_ksoftirqd+0x9b/0x100
[  428.624067][ T8494]  smpboot_thread_fn+0x542/0xa60
[  428.628993][ T8494]  kthread+0x711/0x8a0
[  428.633063][ T8494]  ret_from_fork+0x439/0x7d0
[  428.637645][ T8494]  ret_from_fork_asm+0x1a/0x30
[  428.642411][ T8494] 
[  428.644720][ T8494] Memory state around the buggy address:
[  428.650332][ T8494]  ffff88805b606900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  428.658379][ T8494]  ffff88805b606980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  428.666428][ T8494] >ffff88805b606a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  428.674474][ T8494]                                      ^
[  428.680087][ T8494]  ffff88805b606a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  428.688138][ T8494]  ffff88805b606b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  428.696531][ T8494] ==================================================================
[  429.010990][ T8494] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  429.018233][ T8494] CPU: 0 UID: 0 PID: 8494 Comm: syz.4.661 Not tainted syzkaller #0 PREEMPT(full) 
[  429.027589][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  429.037630][ T8494] Call Trace:
[  429.040892][ T8494]  <TASK>
[  429.043807][ T8494]  dump_stack_lvl+0x99/0x250
[  429.048389][ T8494]  ? __asan_memcpy+0x40/0x70
[  429.052967][ T8494]  ? __pfx_dump_stack_lvl+0x10/0x10
[  429.058170][ T8494]  ? __pfx__printk+0x10/0x10
[  429.062790][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.068450][ T8494]  vpanic+0x281/0x750
[  429.072539][ T8494]  ? preempt_schedule+0xae/0xc0
[  429.077408][ T8494]  ? __pfx_vpanic+0x10/0x10
[  429.081921][ T8494]  ? preempt_schedule_common+0x83/0xd0
[  429.087375][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.093012][ T8494]  ? preempt_schedule+0xae/0xc0
[  429.097859][ T8494]  ? __pfx_preempt_schedule+0x10/0x10
[  429.103231][ T8494]  panic+0xb9/0xc0
[  429.106947][ T8494]  ? __pfx_panic+0x10/0x10
[  429.111369][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.117001][ T8494]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  429.122920][ T8494]  ? is_module_address+0x17/0xf0
[  429.127863][ T8494]  ? sysfs_remove_file_ns+0x3d/0x70
[  429.133053][ T8494]  check_panic_on_warn+0x89/0xb0
[  429.138015][ T8494]  ? sysfs_remove_file_ns+0x3d/0x70
[  429.143202][ T8494]  end_report+0x78/0x160
[  429.147447][ T8494]  kasan_report+0x129/0x150
[  429.151951][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.157592][ T8494]  ? sysfs_remove_file_ns+0x3d/0x70
[  429.162785][ T8494]  sysfs_remove_file_ns+0x3d/0x70
[  429.167802][ T8494]  bus_remove_driver+0x198/0x2f0
[  429.172734][ T8494]  comedi_device_detach_locked+0x178/0x750
[  429.178558][ T8494]  comedi_device_attach+0x5d4/0x720
[  429.183758][ T8494]  comedi_unlocked_ioctl+0x5ff/0x1020
[  429.189148][ T8494]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  429.194962][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.200594][ T8494]  ? lockdep_hardirqs_on+0x9c/0x150
[  429.205782][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.211412][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.217037][ T8494]  ? rcu_is_watching+0x15/0xb0
[  429.221797][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.227424][ T8494]  ? trace_irq_disable+0x37/0x110
[  429.232450][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.238077][ T8494]  ? preempt_schedule_irq+0xde/0x150
[  429.243358][ T8494]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  429.249073][ T8494]  ? irqentry_exit+0x74/0x90
[  429.253657][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.259287][ T8494]  ? lockdep_hardirqs_on+0x9c/0x150
[  429.264478][ T8494]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.270109][ T8494]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  429.275914][ T8494]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  429.281720][ T8494]  ? __se_sys_ioctl+0xea/0x170
[  429.286476][ T8494]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  429.292281][ T8494]  __se_sys_ioctl+0xfc/0x170
[  429.296868][ T8494]  do_syscall_64+0xfa/0x3b0
[  429.301371][ T8494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.307428][ T8494]  ? asm_sysvec_call_function_single+0x1a/0x20
[  429.313577][ T8494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.319474][ T8494] RIP: 0033:0x7f94d218eec9
[  429.323883][ T8494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  429.343499][ T8494] RSP: 002b:00007f94d03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  429.351920][ T8494] RAX: ffffffffffffffda RBX: 00007f94d23e6090 RCX: 00007f94d218eec9
[  429.359886][ T8494] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  429.367852][ T8494] RBP: 00007f94d2211f91 R08: 0000000000000000 R09: 0000000000000000
[  429.375821][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  429.383782][ T8494] R13: 00007f94d23e6128 R14: 00007f94d23e6090 R15: 00007fff86359bb8
[  429.391762][ T8494]  </TASK>
[  429.395039][ T8494] Kernel Offset: disabled
[  429.399356][ T8494] Rebooting in 86400 seconds..