last executing test programs:

27.022070738s ago: executing program 3 (id=869):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

26.614097507s ago: executing program 3 (id=871):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=@newtaction={0x328, 0x30, 0x200, 0x70bd26, 0xf, {}, [{0x314, 0x1, [@m_ipt={0x174, 0x13, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x19c, 0x10, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xe1, 0x6, {0x9, 'security\x00', 0x80, 0x3ff, "5460a68cc7d0da96eedd3268571c4adee92bc2aeb020963534a83acf7870289cb13561c22160bfb014d5ec8aca6eef644d48221264d7250f6a3c19c173c3af9e1ac6ebc4cfecbb9fd7cb37c3a86ce5bed297540482d04166e618c5ebc91a7bb1fb1668187c0be9e974e846651e1f86ae3448e22b4bfac2f82f62b90fc64cc963b9024e181207c1d0a21c940a2b47fb8d1f6f3ba1092f44826c4f74936ebd3aa9df162c8f48f59320d2f4a9abd9143a245d91dc5458a94a"}}]}, {0x59, 0x6, "a85870074f64792662e5d7193747f634271c4eb3022538814b8a6492115f3ce7fc212eb6d8e7b4ce38f519613a10833d301f82b58f466e1395ca516ba301fa679086b307205c041ed0f4b73bf8e91cf9b9a38a4ca3"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0xc005}, 0x800)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x4, 0x4e)
recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/21, 0x15}, 0x3}], 0x47, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)=@newlink={0x84, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x4e008, 0x1022}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000, 0x8}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x5, 0x4}}]}]}}}, @IFLA_ADDRESS={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x8841}, 0x40080)
syz_emit_ethernet(0x32, &(0x7f0000000600)={@local, @random="abc16b4fd826", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}, @generic={0x82, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x9, 0x80}}}}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2f}}, @redirect={0x5, 0x2, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x17, 0x501, 0x66, 0x7f6, 0x48, 0x2f, 0xf, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}}, "060022ebffffffff"}}}}}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a", 0x83}, {&(0x7f0000000580)="04b9e38d7e7df57cf7765978123ad59b1cd4bac914cd9a0b5fa7248105a3b29a4e31d69d2256a9e10d6c88e3474d4d6739ba5f214c9d50556a886e14e94dc730c4e6415b01593ca488a0a2f24cd7d6772a34b83c4df6", 0x56}, {0x0}], 0x3}, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$eJzs3EtvG1UbAOB3xk16+3L5Srn0AjUUREQhadICFWIDAqkbJCRYwDKkoQpNW9QEiVYVLQgVsUL8AmCJxC9gBRsErEBsYY+QKtQNhQUymvEMceIkOHZdN/XzSGOfM5ec887Mic/M8TiAvlXNXpKIWkT8HBEj9ezyFar1t+vXLs78ee3iTBK12ku/J/l6f1y7OFOuWm63s8iMpRHp+0nsW6XchfMXTk3Pz8+eK/ITi6ffnFg4f+GxudPTJ2dPzp6ZOnbs6JHJJ5+YevyGxDmU1XXvO2f37zn+6scvzNTite++yOr7v2J5Yxx1ox2XWY3q8n2ZG8xfH+r4r99ahhrSyZYeVoQNqUREdrgG8vY/EpVYOngj8fx7Pa0c0FW1Wq22tWlupUxcrgG3sSR6XQOgN8oP+uz6t5xuYvej564+U78AyuK+Xkz1JVsizd621a/Yh7pUfjUiXrn81yfZFKveh1jdti7VBwC4/X2V9X8eXa3/N5zc1bDecDE2NBoRhyJiV0TcERG7I+LOiMjWvTsi7tlg+dUV+eb+z4/b2wqsRVn/7+libGt5/y8tVxmtFLmhPP6B5PW5+dnDxT4Zi4GtWX5ynTK+fu6nj9Za1tj/y6as/LIvWNTjty0rbtCdmF6c7iTmRk/N1d+b41+6L5BExJ6I2Lt0udCybJ/NPfL5/iw9vLN5+X/Hv44bMM5U+yzi4Xr8l2NF/KWkXtJa45MT22J+9vBEeVY0+/6HKy825gca0h3FfwNcfTdixxrHP1c2g3K8dmHjZVz55YM1r2naPf8Hk5fz9GAx7+3pxcVzkxGDxYxl86eWti3z5fpZ/GMHV4t/ONkV8fenxXb7IiI7ie+NiPsi4kBR9/sj4oGIOLhO/N8+++Ab6++h3h7/E+sd/4jRpHG8vo1E5dQ3X65VfmvH/2ieGivmtPL/r9UKdrLvAAAAYLNI8+/AJ+n4v+k0HR+vf4d/d+xI588uLB6qxltnTtS/Kz8aA2l5p2uk4X7oZHFvuMxPrcgfiYj/53cUt+f58Zmz890aUwdas3ON9p/5tdLr2gFdt6FxtOYn2oBNzPOa0KcGtH/oZ9o/9C/tH/rXau3/UsT1HlQFuMl8/kP/0v6hf2n/0L+0f+hLzY/Elz+30s6T/kuJXcc72nxTJT6M9jbfnicqXapYNP5oRxcSkfZ+z7edSG+FahwoElsjotWtLnX1mK48fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa/fwIAAP//5w/pXg==")
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r7, 0x8971, &(0x7f0000000300)='veth0:')
unlink(0x0)
syz_mount_image$fuse(0x0, 0x0, 0x846048, 0x0, 0x0, 0x0, 0x0)
socket(0x200000000000011, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)

23.062081659s ago: executing program 3 (id=876):
socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@orlov}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000004180)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000))
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)

21.740269036s ago: executing program 4 (id=878):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r1, 0x10)
bind$inet(r1, 0x0, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000400), &(0x7f0000000200), 0x400)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2c2ac07439eb58e2", "deb7c8f18af3c7cac406b08e0f3610ae", "00800002", "17e153029f1c00dd"}, 0x28)
close_range(r3, r4, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
getegid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9)

20.895280945s ago: executing program 4 (id=881):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

18.955520158s ago: executing program 4 (id=884):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x40, 0x2, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x81, 0x5, 0x1, {0x22, 0x8f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x2, 0xa1}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xf8, 0x86, 0x6, 0x40, 0x7}, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xfb, 0x2, 0x5, 0xf000, 0x0, [0xffc000, 0xcf]}]}, 0x5, [{0xe3, &(0x7f0000000240)=@string={0xe3, 0x3, "fad308f2ffb50b705b91ef13db35d844d100b5732cf4c288a1437d6d56c7a29d52c2e7c9bf6303f5bc7311a1be7327d19e767d6b9facaf0d0cc040dc44f9b47f5c622743c862c2f62be454d0df9bc4ad48fd262d1e5186c0f8e09bd3b954966720a69e6753a4775b3670592311f5ecbe2c38b8a85a85fd116a3cb4af523f688e4fea730040bf7d65b79d335d6d25aa3e94724cf031af08d6cf47d6c09c0a508e751ee89567e44f070d64ee40b74e1e5a8ac6be411e8eb5b3c4e1c402f241745b9fb068cbcef6401f95e1c156b21cc5f79374013b2321582498ea47122e936d9738"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x424}}, {0x8e, &(0x7f0000000380)=@string={0x8e, 0x3, "0afba62fafb23a627758b4f74c4a5f9bf31f044d4ee72bc78283b07281ea9393fe3be4a41d10db1d755343e4103d70c26b4a563bf5edf87a31b5479700acec02418af55cc06ebfd84cf3d909e0310c1edb6371311edc5927fb0dce65b70ec93f578a7a24a5a8a18be5bc6f3b8df18a22bb2757066e269752baf1fb50e345dba259b7c54a14d62741748cd4ac"}}, {0xd9, &(0x7f0000000480)=@string={0xd9, 0x3, "dd8025b47eeff13b3e87ee7b49b756e4c0b681c6f9b6ca90e1f7185c53e96a25603c9d815671d00f6f546b7302c595a503100e016da34751b7740187ab43e5dd69e6b3fb7b861b05850ff20528978bb6810d4c6c822766b0ce2291fb687b03b4586bf3835b89291d85dff0fee2c5ca014778c3a4021864eac4438b82cf3da31ac50883da3fbcb2b7094311d284868b6982f0fac3fb95abd166fa1fd0851573a348515dbe7c082bb626d3195797caf7b5f9892b8e23b7b6ea7704cd745b668615a9173fc3b54591620565e58537bc09043417cc2fbb0586"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41d}}]})
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000440)={@local, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000100)={&(0x7f0000000780)={{@hyper, 0x1}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x4})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'})

18.885756852s ago: executing program 3 (id=885):
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x300}})
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r2, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x4000, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c)

16.88305127s ago: executing program 2 (id=888):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x2, &(0x7f0000000000)=0x80000000000003)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
read$FUSE(r7, &(0x7f0000003b80)={0x2020}, 0x2076)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000140)={0x1d, r11, 0x3, {0x0, 0xff, 0x3}, 0xfd}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00'})
write$P9_RSTATu(r8, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0)

16.771655984s ago: executing program 4 (id=889):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x301940, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r0}, 0xc)

14.234152554s ago: executing program 2 (id=890):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r1 = getpgid(0x0)
mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x4, 0x2}}, 0x26)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf2506000000140008007665"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x4010)
mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0)
read(r7, &(0x7f0000000500)=""/1024, 0x400)
read$FUSE(r7, &(0x7f0000002480)={0x2020}, 0x2020)
migrate_pages(r1, 0x5, &(0x7f0000000040)=0x8, &(0x7f0000000200)=0xfffffffffffffff7)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a13235d78ad62ceef188a2e499b39cf581", 0x0, 0xa19, 0x0, 0x0, 0xfffffffffffffe32, &(0x7f00000002c0), 0x0}, 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000e80)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbc0cfb91c82f4a9164dda5e67a46d8e841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d72166cb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d090014b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd8f200000017587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eb00ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbb1d44925ce66ea1a94e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

13.504552739s ago: executing program 3 (id=891):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000380)='2', 0x1)
lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f0000000240), &(0x7f0000000280)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x4f, 0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000340)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x8000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000740)={0x1, 0x0, [{0x40000118}]})
write(r0, &(0x7f0000000000)="320d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a26edf0cb4a8663144a6303704b23b4c5c256d1407498edb1322eab5bebf36abbd7310095969b2d02bee1a96f00363317743602ad854c4298e6aec01edb1ce498c4c27d396eb49a7251cbbab9e02975ceeede0b8824bdd8a53ef4291", 0x7a)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000480)=@arm64_sys={0x603000000013c212, &(0x7f0000000440)=0x1})
write(r4, &(0x7f0000000940)='dummy_udc.0', 0xb)

13.449322478s ago: executing program 4 (id=893):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x11)
mkdirat(r0, 0x0, 0xa6)
openat$comedi(0xffffffffffffff9c, 0x0, 0x20043, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000000c0)={{0x80, 0x77}, 'port1\x00', 0xeb, 0xb1c07, 0x10, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84383, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000280)={0x3, 0xfffffffb, 0x0, 0x0, 0x11})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x22}], 0xaaaaaaaaaaaa8a6, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

13.218737207s ago: executing program 2 (id=894):
r0 = syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000540)='./bus\x00', 0x1810002, &(0x7f000000c680)=ANY=[], 0x1, 0x1e2, &(0x7f0000000180)="$eJzs28tO1FAcx/FfO52W4v22cWXiQjdOdZhE2ckD+ALuCFRCLGrUjcRE2fgePoY738QXgESfoOaU1qGkpy0dZ8rl+0mgh0N/55wm/NtTkhGAC+t69t2Ro2HWStP0yz1JL19I8orfV/IXtUYA85E6h0Vv41d3L9WnAJwNg9/V/YG1wH8UDZe7AHCWHawNsn3AT0f69efzxn7+NWy5fzhYc6VB/sORvC8t1W07/uX3nOx415P2j+QDlQdwvloG+n6Yf6ByPmy7/nz+5WP55aageWUy9tzs8PB+OX9J0mVJVyRdlXQtf9e6Ielmxfybx+a/03L9wCzMX9+o1FNXtk51flQTCernN9XzajuJHzct1GKY559UjNuGn+fHHecv8isd80GeH228TTatZz3vODpQz53Wf1hV300a699q+u/DWerfs9Q/gGYfPu2+Xk+S+P3JG279OebJ1nFkGuehUWwkTY+5TTenvv2P2c2bX+/X3twIT8cy7I2eb0wA5i76uPMuCrX7aHtnfSveit+MJ6vPJivjydPVKNuXR7PszgGcZtOHfrvzvXkvCAAAAAAAAAAAAAAAnNgtSbf7XgQAAACAhVjEx4n6vkYAAAAAAAAAAAAAAAAAAADgvPgbAAD//6hDOM8=")
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x40009, 0xc, 0x0, 0x10000e, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1000000100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x1000, 0x8, 0xb, 0x2000000003, 0x6, 0x3})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740), 0x8201, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@random="ed0f4cd1f1ca", @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @loopback}}}}, 0x0)
write$sequencer(r1, &(0x7f0000000380)=[@l={0x92, 0x4, 0xc0, 0x1, 0x18, 0x7, 0x2}], 0x8)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x58801000)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10b)
add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff050000000000112233ff07000000000000eeff0011", 0x20, 0xfffffffffffffffd)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f00000003c0))
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @mcast1, 0x9}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

10.434120666s ago: executing program 4 (id=896):
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf2502000000080002000200000052474d2304cef72da39a1d95996550e0832deda87cf98a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf011}, {0x0}], 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={0x0, <r2=>0x0})
capget(&(0x7f0000000640)={0x20071026, r2}, &(0x7f0000000680)={0x1689, 0x2, 0x80000000, 0x1, 0x80, 0x7})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000000f000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3a018, 0x10}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @IFLA_IFNAME={0x14, 0x3, 'pimreg\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
recvmmsg(r6, &(0x7f0000008d00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x63, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r7=>r3, {0x2}}, './cgroup.cpu/cgroup.procs\x00'})
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ff", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd39, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xfff2, 0xfff3}, {0x0, 0xe}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xe, 0x9}}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x401}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @loopback}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

10.292052864s ago: executing program 1 (id=897):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x54, r4, 0x1, 0x70bf2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20004814)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x88, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff5c1b82de082486dd613fe50000522f00fe8000000000000000000000000000bb"], 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setns(0xc9, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000f40)={&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040010}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
socket$kcm(0x23, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94)

9.197633294s ago: executing program 1 (id=899):
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x3100000000000, 0x7a8, 0x1, 0x3, 0x397, 0x3, 0x8, 0x7f, 0x0, 0x8, 0xfffffffffffff231, 0xfff, 0xf, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
userfaultfd(0x80001)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x168}, 0x1, 0x0, 0x0, 0x4040014}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00')
write$char_usb(r1, &(0x7f0000000800)='(', 0x1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

6.628878052s ago: executing program 0 (id=900):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0, 0xffffffffffffffab}], 0x1, 0x2c, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

6.116134956s ago: executing program 0 (id=901):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r1, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r2 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$tcp_mem(r2, 0x0, 0xffffff69)

5.938228557s ago: executing program 0 (id=902):
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b603b)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)

5.797108539s ago: executing program 1 (id=903):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=@newtaction={0x328, 0x30, 0x200, 0x70bd26, 0xf, {}, [{0x314, 0x1, [@m_ipt={0x174, 0x13, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x19c, 0x10, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xe1, 0x6, {0x9, 'security\x00', 0x80, 0x3ff, "5460a68cc7d0da96eedd3268571c4adee92bc2aeb020963534a83acf7870289cb13561c22160bfb014d5ec8aca6eef644d48221264d7250f6a3c19c173c3af9e1ac6ebc4cfecbb9fd7cb37c3a86ce5bed297540482d04166e618c5ebc91a7bb1fb1668187c0be9e974e846651e1f86ae3448e22b4bfac2f82f62b90fc64cc963b9024e181207c1d0a21c940a2b47fb8d1f6f3ba1092f44826c4f74936ebd3aa9df162c8f48f59320d2f4a9abd9143a245d91dc5458a94a"}}]}, {0x59, 0x6, "a85870074f64792662e5d7193747f634271c4eb3022538814b8a6492115f3ce7fc212eb6d8e7b4ce38f519613a10833d301f82b58f466e1395ca516ba301fa679086b307205c041ed0f4b73bf8e91cf9b9a38a4ca3"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0xc005}, 0x800)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x4, 0x4e)
recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/21, 0x15}, 0x3}], 0x47, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)=@newlink={0x84, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x4e008, 0x1022}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000, 0x8}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x5, 0x4}}]}]}}}, @IFLA_ADDRESS={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x8841}, 0x40080)
syz_emit_ethernet(0x32, &(0x7f0000000600)={@local, @random="abc16b4fd826", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}, @generic={0x82, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x9, 0x80}}}}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2f}}, @redirect={0x5, 0x2, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x17, 0x501, 0x66, 0x7f6, 0x48, 0x2f, 0xf, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}}, "060022ebffffffff"}}}}}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a", 0x83}, {&(0x7f0000000580)="04b9e38d7e7df57cf7765978123ad59b1cd4bac914cd9a0b5fa7248105a3b29a4e31d69d2256a9e10d6c88e3474d4d6739ba5f214c9d50556a886e14e94dc730c4e6415b01593ca488a0a2f24cd7d6772a34b83c4df6", 0x56}, {0x0}], 0x3}, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$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")
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl(r7, 0x8971, &(0x7f0000000300)='veth0:')
unlink(0x0)
syz_mount_image$fuse(0x0, 0x0, 0x846048, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)

5.637988241s ago: executing program 2 (id=904):
unshare(0x22020600)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94)
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f0000000500)=ANY=[@ANYBLOB="6769643d3277ab97c637", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000011,iocharset=cp1255,part=0x000000000000000c,\x00'], 0x2, 0x34b, &(0x7f00000008c0)="$eJzs3T1rFEEcBvBn9uVuz4S4JpGAlUQDViGJhWJjkGDjF7CQYEwuELJG0AgmIEZrETtBsLSzFv0K2ohfQKsUYqM2wcKVmd3Zt5u9XC4vm+OeH3js7c7s/OdmZm8mIQ6IqG9dm/v29uK2/CdcADaAK4AFwAMcAKcx5j1cW2/NWc+/tZMjgSinaMmyuNY0xeAhzpF952AwPUeHJQzD8PuuqX4fSSxUHZEdwRlWNNAdPcK9I4/scGy1PMD6QKaFxQ528AhDVYZDRETVi7//rfhbYjCev1sWMBHPw3v9+z83v9mpLo5jIfn+t6L3oZCfz0l1Sa73VtaD5lK0hJOtb+lVoulexj4Rph93DVHPsgcyU65MKWYqFquxvBI0J7fUDZ7haiyTbFS9LkFXRCmLthalGjesTdtoV/fIr5LzA6oOrqzDTEn8I+1KNC6AP/7AK3Nx859NZwt1FZ/EFzEvfLzGUjL/c0Ihm0m1lF8YKlH8UyVVlLXUYQbNqVwt0/BPqULOxCXgw7u0lo2yz9WDLWPJq6X1KM7ffR3ny5r5hur0MPI/VohqN11eO5VrBHCEWjVkc80kif4ac40Wy2osu0FzcvFeUNbpD5ZxRSdeiJtiHD/xHnOZ+b8lU0+gfGTmRrlQKeOe0bY+jkrZ0o4Gamje3dPIJOV6frx2lOc57uAyhh5sbK4uBEHzfvUHeqh0mf3sQcZT39iMOmLcHeUlqCdckgaePHABHNiH8C8MQ+MlB0fRBK6q6qU3aZU3VxdE/MzbXxHyyVm4NFueGMAsgPiMfiJ0U/qTJFc9veEuuXxV1h/Z2upMrkO6+kBHpS7prns4raOLyl2yUe9opDS6KPTG49WFoKsnEfWYtNExdqvqYKgKcr4govVfZr0ypZ468sVvs/5x828bLQkyd5wuWQENq9cTna3gktuWzhMH9MEua65zF4DzhRIt6BKfFm/rx3HiOP5Wcu+/yhBz+Irb/Pk/EREREREREREREREREREREREREVGv2etfI3Tz5wT5Erf78D/eICIiIiIiIiIiIiIiIiIiIiIiIiIiIiLan8z+v4Ctdoypmfb/bbdTk2JHO8R4+97/F/DtDvb/FVu9vBcZ0bHwPwAA//+3SFg2")
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x918)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x56b2, 0x4)

5.567817984s ago: executing program 0 (id=905):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
listen(0xffffffffffffffff, 0x10)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000400), &(0x7f0000000200), 0x400)
r2 = socket(0x10, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2c2ac07439eb58e2", "deb7c8f18af3c7cac406b08e0f3610ae", "00800002", "17e153029f1c00dd"}, 0x28)
close_range(r2, r3, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
getegid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9)

4.368931937s ago: executing program 0 (id=906):
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00022abd000800f8ff", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/virtio/drivers_probe\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8)
chdir(&(0x7f00000000c0)='./file1\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xf, &(0x7f00000061c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

3.955464316s ago: executing program 2 (id=907):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x11)
mkdirat(r0, 0x0, 0xa6)
openat$comedi(0xffffffffffffff9c, 0x0, 0x20043, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000000c0)={{0x80, 0x77}, 'port1\x00', 0xeb, 0xb1c07, 0x10, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84383, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000280)={0x3, 0xfffffffb, 0x0, 0x0, 0x11})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0x22}], 0xaaaaaaaaaaaa8a6, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

3.953538552s ago: executing program 1 (id=908):
r0 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x9)
fchdir(r1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
r2 = open(0x0, 0x0, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078)

3.935896133s ago: executing program 3 (id=909):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
sched_setscheduler(r4, 0x5, &(0x7f0000000100)=0x9)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

677.465632ms ago: executing program 2 (id=910):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x54, r4, 0x1, 0x70bf2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20004814)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
syz_emit_ethernet(0x88, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff5c1b82de082486dd613fe50000522f00fe8000000000000000000000000000bb"], 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setns(0xc9, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000f40)={&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040010}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
socket$kcm(0x23, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94)

560.133234ms ago: executing program 0 (id=911):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0, 0xffffffffffffffab}], 0x1, 0x2c, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

268.147927ms ago: executing program 1 (id=912):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r1, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r2 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$tcp_mem(r2, 0x0, 0xffffff69)

0s ago: executing program 1 (id=913):
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x3100000000000, 0x7a8, 0x1, 0x3, 0x397, 0x3, 0x8, 0x7f, 0x0, 0x8, 0xfffffffffffff231, 0xfff, 0xf, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
userfaultfd(0x80001)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x168}, 0x1, 0x0, 0x0, 0x4040014}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00')
write$char_usb(r1, &(0x7f0000000800)='(', 0x1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

kernel console output (not intermixed with test programs):

 tree
[  430.126255][ T8865] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  430.126343][ T8865] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  430.290482][ T8865] BTRFS info (device loop1): checking UUID tree
[  430.304476][ T8865] BTRFS info (device loop1): setting nodatasum
[  430.304546][ T8865] BTRFS info (device loop1): setting nodatacow
[  430.304584][ T8865] BTRFS info (device loop1): enabling ssd optimizations
[  430.304750][ T8865] BTRFS info (device loop1): using spread ssd allocation scheme
[  430.304847][ T8865] BTRFS info (device loop1): turning off barriers
[  430.304890][ T8865] BTRFS info (device loop1): turning on flush-on-commit
[  430.305009][ T8865] BTRFS info (device loop1): force clearing of disk cache
[  430.435260][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.524371][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'.
[  430.565246][ T8865] ubi: mtd0 is already attached to ubi0
[  430.639690][ T8901] netlink: 'syz.4.737': attribute type 21 has an invalid length.
[  430.639749][ T8901] netlink: 156 bytes leftover after parsing attributes in process `syz.4.737'.
[  430.688854][ T8901] loop4: detected capacity change from 0 to 512
[  430.704223][ T8901] EXT4-fs: Ignoring removed nobh option
[  430.761220][ T8908] FAULT_INJECTION: forcing a failure.
[  430.761220][ T8908] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  430.761311][ T8908] CPU: 1 UID: 0 PID: 8908 Comm: syz.2.740 Not tainted syzkaller #0 PREEMPT(full) 
[  430.761337][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  430.761430][ T8908] Call Trace:
[  430.761470][ T8908]  <TASK>
[  430.761508][ T8908]  dump_stack_lvl+0xe8/0x150
[  430.761670][ T8908]  should_fail_ex+0x410/0x560
[  430.761777][ T8908]  _copy_to_iter+0x1e4/0x1810
[  430.762022][ T8908]  ? __pfx__copy_to_iter+0x10/0x10
[  430.762107][ T8908]  ? _copy_to_iter+0x255/0x1810
[  430.762231][ T8908]  ? do_raw_spin_lock+0x12b/0x2f0
[  430.762325][ T8908]  __skb_datagram_iter+0xf8/0x980
[  430.762431][ T8908]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  430.762565][ T8908]  skb_copy_datagram_iter+0xb5/0x240
[  430.762649][ T8908]  tun_do_read+0x1b42/0x28b0
[  430.762814][ T8908]  ? aa_file_perm+0x4ed/0x15f0
[  430.762967][ T8908]  ? __pfx_tun_do_read+0x10/0x10
[  430.763085][ T8908]  ? lock_acquire+0x115/0x350
[  430.763161][ T8908]  ? tun_get+0x1c/0x2f0
[  430.763245][ T8908]  ? __pfx_default_wake_function+0x10/0x10
[  430.763339][ T8908]  ? tun_get+0x1c/0x2f0
[  430.763421][ T8908]  ? tun_get+0x1c/0x2f0
[  430.763516][ T8908]  tun_chr_read_iter+0x13b/0x260
[  430.763609][ T8908]  do_iter_readv_writev+0x612/0x8c0
[  430.763699][ T8908]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  430.763815][ T8908]  ? bpf_lsm_file_permission+0x9/0x20
[  430.763890][ T8908]  ? security_file_permission+0x75/0x260
[  430.763983][ T8908]  ? rw_verify_area+0x24a/0x4c0
[  430.764078][ T8908]  vfs_readv+0x28d/0x850
[  430.764180][ T8908]  ? __pfx_vfs_readv+0x10/0x10
[  430.764305][ T8908]  ? __fget_files+0x2a/0x420
[  430.764403][ T8908]  ? __fget_files+0x3a2/0x420
[  430.764476][ T8908]  ? __fget_files+0x2a/0x420
[  430.764582][ T8908]  __x64_sys_preadv+0x19c/0x2b0
[  430.764647][ T8908]  ? __pfx___x64_sys_preadv+0x10/0x10
[  430.764731][ T8908]  do_syscall_64+0x166/0x520
[  430.764814][ T8908]  ? trace_irq_disable+0x3b/0x140
[  430.764875][ T8908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.764933][ T8908]  ? clear_bhb_loop+0x70/0xc0
[  430.765007][ T8908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.765070][ T8908] RIP: 0033:0x7f142919e0d9
[  430.765131][ T8908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.765184][ T8908] RSP: 002b:00007f142a11a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  430.765247][ T8908] RAX: ffffffffffffffda RBX: 00007f1429425fa0 RCX: 00007f142919e0d9
[  430.765289][ T8908] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003
[  430.765331][ T8908] RBP: 00007f142a11a090 R08: 0000000000410000 R09: 0000000000000000
[  430.765372][ T8908] R10: 0000000081000003 R11: 0000000000000246 R12: 0000000000000001
[  430.765405][ T8908] R13: 00007f1429426038 R14: 00007f1429425fa0 R15: 00007ffd87e44748
[  430.765498][ T8908]  </TASK>
[  431.094638][ T8901] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  431.094710][ T8901] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[  431.103271][ T8901] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.737: inode has both inline data and extents flags
[  431.103305][ T8901] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  431.103838][ T8901] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.737: couldn't read orphan inode 13 (err -117)
[  431.103873][ T8901] loop4: lost filesystem error report for type 5 error -117
[  431.112217][    C0] EXT4-fs (loop4): error count since last fsck: 2
[  431.112246][    C0] EXT4-fs (loop4): initial error at time 1787215286: ext4_orphan_get:1403: inode 13
[  431.112284][    C0] EXT4-fs (loop4): last error at time 1787215286: ext4_orphan_get:1408
[  431.187638][ T8901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.458490][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.354893][ T5625] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  433.893005][ T8937] FAULT_INJECTION: forcing a failure.
[  433.893005][ T8937] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  433.893081][ T8937] CPU: 1 UID: 0 PID: 8937 Comm: syz.4.749 Not tainted syzkaller #0 PREEMPT(full) 
[  433.893107][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  433.893120][ T8937] Call Trace:
[  433.893157][ T8937]  <TASK>
[  433.893200][ T8937]  dump_stack_lvl+0xe8/0x150
[  433.893290][ T8937]  should_fail_ex+0x410/0x560
[  433.893447][ T8937]  _copy_from_iter+0x1d3/0x1660
[  433.893555][ T8937]  ? __lock_acquire+0x6df/0x2e50
[  433.893626][ T8937]  ? __pfx__copy_from_iter+0x10/0x10
[  433.893759][ T8937]  tun_get_user+0x52f/0x44d0
[  433.893884][ T8937]  ? aa_file_perm+0x18b/0x15f0
[  433.893966][ T8937]  ? aa_file_perm+0x4ed/0x15f0
[  433.894030][ T8937]  ? __pfx_tun_get_user+0x10/0x10
[  433.894125][ T8937]  ? __lock_acquire+0x6df/0x2e50
[  433.894191][ T8937]  ? kstrtoull+0x137/0x1d0
[  433.894276][ T8937]  ? ref_tracker_alloc+0x341/0x4b0
[  433.894434][ T8937]  ? lock_acquire+0x115/0x350
[  433.894496][ T8937]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  433.894560][ T8937]  ? lock_acquire+0x115/0x350
[  433.894623][ T8937]  ? tun_get+0x1c/0x2f0
[  433.894748][ T8937]  ? tun_get+0x1c/0x2f0
[  433.894830][ T8937]  ? tun_get+0x1c/0x2f0
[  433.894924][ T8937]  tun_chr_write_iter+0x113/0x200
[  433.895018][ T8937]  vfs_write+0x612/0xba0
[  433.895132][ T8937]  ? __pfx_vfs_write+0x10/0x10
[  433.895249][ T8937]  ? __fget_files+0x2a/0x420
[  433.895345][ T8937]  ksys_write+0x150/0x270
[  433.895445][ T8937]  ? __pfx_ksys_write+0x10/0x10
[  433.895552][ T8937]  do_syscall_64+0x166/0x520
[  433.895635][ T8937]  ? trace_irq_disable+0x3b/0x140
[  433.895696][ T8937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.895760][ T8937]  ? clear_bhb_loop+0x70/0xc0
[  433.895832][ T8937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.895893][ T8937] RIP: 0033:0x7f241999e0d9
[  433.895946][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.896001][ T8937] RSP: 002b:00007f241a8ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  433.896071][ T8937] RAX: ffffffffffffffda RBX: 00007f2419c25fa0 RCX: 00007f241999e0d9
[  433.896121][ T8937] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000003
[  433.896169][ T8937] RBP: 00007f241a8ac090 R08: 0000000000000000 R09: 0000000000000000
[  433.896203][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.896235][ T8937] R13: 00007f2419c26038 R14: 00007f2419c25fa0 R15: 00007ffc5f5fcc38
[  433.896321][ T8937]  </TASK>
[  434.788043][ T5351] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  434.847096][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  434.967006][ T5351] usb 2-1: Using ep0 maxpacket: 8
[  434.969175][ T5351] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  434.973594][ T5351] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  434.973630][ T5351] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  434.973676][ T5351] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  434.973705][ T5351] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  434.973742][ T5351] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  434.973792][ T5351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.069470][   T10] usb 5-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  435.097859][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  435.111536][ T5351] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[  435.119824][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  435.127998][   T10] usb 5-1: Product: syz
[  435.132367][   T10] usb 5-1: Manufacturer: syz
[  435.184482][   T10] navman 5-1:1.0: navman converter detected
[  435.209116][   T10] usb 5-1: navman converter now attached to ttyUSB0
[  435.365496][ T5351] usb 2-1: USB disconnect, device number 13
[  435.692872][ T5637] usb 5-1: USB disconnect, device number 11
[  435.708608][ T5637] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  435.710240][ T5637] navman 5-1:1.0: device disconnected
[  435.719931][ T8979] loop2: detected capacity change from 0 to 40427
[  435.736508][ T8979] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  435.736536][ T8979] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  435.847036][ T8979] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  435.876296][ T8979] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  435.876339][ T8979] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  435.927565][ T5351] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  436.006474][ T8979] syz.2.754: attempt to access beyond end of device
[  436.006474][ T8979] loop2: rw=2049, sector=45096, nr_sectors = 1888 limit=40427
[  436.080702][ T5351] usb 4-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  436.084242][ T5351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  436.111403][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  436.111468][ T5351] usb 4-1: Product: syz
[  436.111503][ T5351] usb 4-1: Manufacturer: syz
[  436.159677][ T5351] navman 4-1:1.0: navman converter detected
[  436.271079][ T5351] usb 4-1: navman converter now attached to ttyUSB0
[  436.347397][ T8981] FAULT_INJECTION: forcing a failure.
[  436.347397][ T8981] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.347455][ T8981] CPU: 1 UID: 0 PID: 8981 Comm: syz.3.755 Not tainted syzkaller #0 PREEMPT(full) 
[  436.347481][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  436.347545][ T8981] Call Trace:
[  436.347572][ T8981]  <TASK>
[  436.347608][ T8981]  dump_stack_lvl+0xe8/0x150
[  436.347758][ T8981]  should_fail_ex+0x410/0x560
[  436.347872][ T8981]  strncpy_from_user+0x36/0x2c0
[  436.347961][ T8981]  do_getname+0x77/0x250
[  436.348044][ T8981]  do_sys_openat2+0xcc/0x200
[  436.348134][ T8981]  ? __pfx_do_sys_openat2+0x10/0x10
[  436.348216][ T8981]  ? ksys_write+0x242/0x270
[  436.348325][ T8981]  ? __pfx_ksys_write+0x10/0x10
[  436.348422][ T8981]  __x64_sys_openat+0x138/0x170
[  436.348503][ T8981]  do_syscall_64+0x166/0x520
[  436.348576][ T8981]  ? trace_irq_disable+0x3b/0x140
[  436.348631][ T8981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.348692][ T8981]  ? clear_bhb_loop+0x70/0xc0
[  436.348761][ T8981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.348812][ T8981] RIP: 0033:0x7fcd7f59e0d9
[  436.348874][ T8981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.348951][ T8981] RSP: 002b:00007fcd804df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  436.349021][ T8981] RAX: ffffffffffffffda RBX: 00007fcd7f825fa0 RCX: 00007fcd7f59e0d9
[  436.349078][ T8981] RDX: 0000000000000802 RSI: 0000200000000200 RDI: ffffffffffffff9c
[  436.349135][ T8981] RBP: 00007fcd804df090 R08: 0000000000000000 R09: 0000000000000000
[  436.349176][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.349208][ T8981] R13: 00007fcd7f826038 R14: 00007fcd7f825fa0 R15: 00007ffd821ec478
[  436.349309][ T8981]  </TASK>
[  436.371221][ T5351] usb 4-1: USB disconnect, device number 13
[  436.523165][ T5351] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  436.559245][ T5351] navman 4-1:1.0: device disconnected
[  436.601359][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'.
[  436.696239][ T5624] syz-executor: attempt to access beyond end of device
[  436.696239][ T5624] loop2: rw=8390659, sector=45096, nr_sectors = 1888 limit=40427
[  436.709748][ T5624] F2FS-fs (loop2): Issue discard(5637, 5637, 236) failed, ret: -5
[  436.730398][ T8989] netlink: 'syz.1.756': attribute type 21 has an invalid length.
[  436.730452][ T8989] netlink: 156 bytes leftover after parsing attributes in process `syz.1.756'.
[  436.754186][ T8989] loop1: detected capacity change from 0 to 512
[  436.761605][ T8989] EXT4-fs: Ignoring removed nobh option
[  436.786533][ T8989] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  436.786604][ T8989] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  436.803790][ T8989] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.756: inode has both inline data and extents flags
[  436.803825][ T8989] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  436.817081][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  436.817106][    C0] EXT4-fs (loop1): initial error at time 1787215292: ext4_orphan_get:1403: inode 13
[  436.817146][    C0] EXT4-fs (loop1): last error at time 1787215292: ext4_orphan_get:1403: inode 13
[  436.819126][ T8989] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.756: couldn't read orphan inode 13 (err -117)
[  436.819209][ T8989] loop1: lost filesystem error report for type 5 error -117
[  436.844204][ T8989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.993445][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.759'.
[  437.031274][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.378629][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  440.378714][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  440.776446][ T9027] lo: entered allmulticast mode
[  440.823199][ T9027] lo: left allmulticast mode
[  440.838367][ T5351] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  442.519022][ T5351] usb 5-1: Using ep0 maxpacket: 8
[  442.519782][ T5351] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40
[  442.521155][ T5351] usb 5-1: config 1 interface 0 has no altsetting 0
[  442.544828][ T5351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.544885][ T5351] usb 5-1: Product: ﬊⾦늯戺塷䩌魟ῳ䴄윫莂犰鎓㯾ꓤဝᷛ卵㴐쉰䩫㭖竸딱靇가ˬ詁峵滀৙㇠Ḍ換ㅱ❙෻旎ື㿉詗⑺ꢥ计볥㭯⊊➻ٗ♮劗僻䗣ꋛ띙䫅혔䄧豴곔
[  442.544914][ T5351] usb 5-1: Manufacturer: Ф
[  442.544968][ T5351] usb 5-1: SerialNumber: 胝됥㯱蜾篮띉뛀욁뛹郊尘╪㱠膝煖࿐呯獫씂ꖕဃĎꍭ兇璷蜁䎫﮳虻ԛ྅ײ霨뚋ඁ汌➂끦⋎ﮑ筨됃歘菳襛ᴩﻰ엢NJ硇꓃᠂䏄芋㷏᪣ࣅ밿랲䌉툑蚄榋쏺闻톫辶퀟ᖅꍳ先빝ࡼ똫팦圙쪗뗷觹踫뜣ѷ瓍晛ᖆឩ쌿䖵抑攅藥밷Љ᜴⿌ֻ
[  442.666331][ T9039] netlink: 84 bytes leftover after parsing attributes in process `syz.1.771'.
[  442.887675][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'.
[  443.029122][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'.
[  443.235864][ T5351] usbhid 5-1:1.0: can't add hid device: -71
[  443.236544][ T5351] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  443.375904][ T5351] usb 5-1: USB disconnect, device number 12
[  444.174630][ T9055] loop3: detected capacity change from 0 to 64
[  444.311181][ T9060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.780'.
[  446.079672][ T5633] Bluetooth: hci3: unexpected event for opcode 0x0c5b
[  446.323458][ T9074] netlink: 'syz.4.785': attribute type 10 has an invalid length.
[  446.351945][ T9074] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  446.584017][ T9077] netlink: 84 bytes leftover after parsing attributes in process `syz.4.786'.
[  446.955892][ T9070] loop2: detected capacity change from 0 to 131072
[  446.983414][ T9070] F2FS-fs (loop2): invalid crc value
[  447.092366][ T9070] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  447.105398][ T9070] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  447.135212][ T9070] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  447.149125][ T9070] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  447.160074][ T9070] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  448.096116][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.772'.
[  448.233948][ T9101] netlink: 'syz.0.772': attribute type 21 has an invalid length.
[  448.234021][ T9101] netlink: 156 bytes leftover after parsing attributes in process `syz.0.772'.
[  448.305237][ T9101] loop0: detected capacity change from 0 to 512
[  448.321167][ T9101] EXT4-fs: Ignoring removed nobh option
[  448.357198][ T9101] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  448.357275][ T9101] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[  448.374559][ T9101] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #13: comm syz.0.772: inode has both inline data and extents flags
[  448.374608][ T9101] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  448.387947][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  448.387971][    C1] EXT4-fs (loop0): initial error at time 1787215304: ext4_orphan_get:1403: inode 13
[  448.387996][    C1] EXT4-fs (loop0): last error at time 1787215304: ext4_orphan_get:1403: inode 13
[  448.388270][ T9101] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.772: couldn't read orphan inode 13 (err -117)
[  448.388301][ T9101] loop0: lost filesystem error report for type 5 error -117
[  448.450467][ T9101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.703347][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.959336][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  448.959422][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  448.959473][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd706 instead
[  448.959537][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x6be5 instead
[  448.959592][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  448.959643][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  448.959751][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  448.959845][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  448.970324][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  448.970366][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  448.970449][ T9110] jffs2: Further such events for this erase block will not be printed
[  448.971080][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  448.971136][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  448.971188][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd706 instead
[  448.971247][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x6be5 instead
[  448.971291][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  448.971335][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  448.971385][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  448.971446][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  448.971535][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  448.971628][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  448.971672][ T9110] jffs2: Further such events for this erase block will not be printed
[  448.992627][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[  448.992654][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[  448.992673][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd706 instead
[  448.992694][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xa0da instead
[  448.992745][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[  448.992764][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[  448.992785][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd706 instead
[  448.992806][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xa0da instead
[  448.992853][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[  448.992870][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[  448.992888][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd706 instead
[  448.992909][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xa0da instead
[  448.992971][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[  448.992989][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[  448.993009][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd706 instead
[  448.993031][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xa0da instead
[  448.993083][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[  448.993102][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[  448.993121][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd706 instead
[  448.993143][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xa0da instead
[  448.993194][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[  448.993213][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[  448.993233][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd706 instead
[  448.993255][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xa0da instead
[  448.993307][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[  448.993326][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[  448.993346][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd706 instead
[  448.993367][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xa0da instead
[  449.000456][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[  449.000531][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[  449.000591][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd706 instead
[  449.000695][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xa0da instead
[  449.000822][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[  449.000894][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[  449.000955][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd706 instead
[  449.001016][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xa0da instead
[  449.001144][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[  449.001194][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[  449.001247][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd706 instead
[  449.001301][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xa0da instead
[  449.001439][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[  449.001492][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[  449.001543][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd706 instead
[  449.001599][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xa0da instead
[  449.001725][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[  449.001769][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[  449.001821][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd706 instead
[  449.001875][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xa0da instead
[  449.049036][ T9107] block nbd0: server does not support multiple connections per device.
[  449.060721][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[  449.060792][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[  449.060872][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd706 instead
[  449.060927][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xa0da instead
[  449.061061][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[  449.061105][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[  449.061157][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd706 instead
[  449.061211][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xa0da instead
[  449.061339][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[  449.061384][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[  449.061434][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd706 instead
[  449.061488][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xa0da instead
[  449.061654][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[  449.061706][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[  449.061750][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd706 instead
[  449.061810][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xa0da instead
[  449.061923][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[  449.061973][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[  449.062044][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd706 instead
[  449.098679][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xa0da instead
[  449.099887][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[  449.099910][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[  449.099979][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd706 instead
[  449.100050][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xa0da instead
[  449.100197][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[  449.100252][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[  449.100304][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd706 instead
[  449.121407][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xa0da instead
[  449.121702][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[  449.121762][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[  449.121807][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd706 instead
[  449.121854][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xa0da instead
[  449.121987][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[  449.122031][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[  449.122083][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd706 instead
[  449.122136][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xa0da instead
[  449.122275][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[  449.122324][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[  449.122369][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd706 instead
[  449.122427][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xa0da instead
[  449.122549][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[  449.122591][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[  449.122647][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd706 instead
[  449.122705][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xa0da instead
[  449.122834][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[  449.122877][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[  449.122927][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd706 instead
[  449.122997][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xa0da instead
[  449.154291][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[  449.154378][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[  449.154440][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd706 instead
[  449.154494][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xa0da instead
[  449.154630][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[  449.154674][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[  449.154726][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd706 instead
[  449.154780][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xa0da instead
[  449.155026][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[  449.155076][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[  449.155121][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd706 instead
[  449.155182][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xa0da instead
[  449.155308][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[  449.155352][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[  449.155403][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd706 instead
[  449.155451][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xa0da instead
[  449.155582][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[  449.155627][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[  449.155686][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd706 instead
[  449.176844][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xa0da instead
[  449.177479][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[  449.177549][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[  449.177600][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd706 instead
[  449.177650][ T9110] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xa0da instead
[  449.177741][ T9110] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  449.177768][ T9110] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  449.289315][ T9112] FAULT_INJECTION: forcing a failure.
[  449.289315][ T9112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  449.289349][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.0.794 Not tainted syzkaller #0 PREEMPT(full) 
[  449.289374][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  449.289387][ T9112] Call Trace:
[  449.289396][ T9112]  <TASK>
[  449.289405][ T9112]  dump_stack_lvl+0xe8/0x150
[  449.289450][ T9112]  should_fail_ex+0x410/0x560
[  449.289490][ T9112]  strncpy_from_user+0x36/0x2c0
[  449.289529][ T9112]  do_getname+0x77/0x250
[  449.289559][ T9112]  __se_sys_renameat2+0x34/0x2c0
[  449.289592][ T9112]  do_syscall_64+0x166/0x520
[  449.289623][ T9112]  ? trace_irq_disable+0x3b/0x140
[  449.289645][ T9112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.289668][ T9112]  ? clear_bhb_loop+0x70/0xc0
[  449.289696][ T9112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.289718][ T9112] RIP: 0033:0x7f9662b9e0d9
[  449.289739][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.289758][ T9112] RSP: 002b:00007f9660df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  449.289781][ T9112] RAX: ffffffffffffffda RBX: 00007f9662e26090 RCX: 00007f9662b9e0d9
[  449.289797][ T9112] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c
[  449.289814][ T9112] RBP: 00007f9660df6090 R08: 0000000000000000 R09: 0000000000000000
[  449.289828][ T9112] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001
[  449.289843][ T9112] R13: 00007f9662e26128 R14: 00007f9662e26090 R15: 00007ffe1efca478
[  449.289955][ T9112]  </TASK>
[  450.083931][ T9107] block nbd0: shutting down sockets
[  451.247994][ T9123] netlink: 84 bytes leftover after parsing attributes in process `syz.3.798'.
[  451.377758][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'.
[  452.238260][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  452.250467][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  452.250534][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd706 instead
[  452.250561][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x6be5 instead
[  452.250583][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  452.250604][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  452.250626][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  452.250653][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  452.250693][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  452.250728][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  452.250747][ T9134] jffs2: Further such events for this erase block will not be printed
[  452.251160][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  452.251186][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  452.251211][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd706 instead
[  452.251236][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x6be5 instead
[  452.251259][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  452.251281][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  452.251303][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  452.251330][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  452.251371][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  452.340741][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  452.340768][ T9134] jffs2: Further such events for this erase block will not be printed
[  452.341171][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[  452.341192][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[  452.341211][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd706 instead
[  452.341232][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xa0da instead
[  452.341283][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[  452.341302][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[  452.341322][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd706 instead
[  452.341342][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xa0da instead
[  452.341399][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[  452.341418][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[  452.341437][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd706 instead
[  452.341458][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xa0da instead
[  452.341510][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[  452.341529][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[  452.341548][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd706 instead
[  452.341569][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xa0da instead
[  452.341604][ T9135] FAULT_INJECTION: forcing a failure.
[  452.341604][ T9135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  452.341619][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[  452.341638][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[  452.341636][ T9135] CPU: 1 UID: 0 PID: 9135 Comm: syz.1.801 Not tainted syzkaller #0 PREEMPT(full) 
[  452.341658][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd706 instead
[  452.341662][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  452.341677][ T9135] Call Trace:
[  452.341681][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xa0da instead
[  452.341687][ T9135]  <TASK>
[  452.341695][ T9135]  dump_stack_lvl+0xe8/0x150
[  452.341733][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[  452.341734][ T9135]  should_fail_ex+0x410/0x560
[  452.341752][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[  452.341772][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd706 instead
[  452.341775][ T9135]  strncpy_from_user+0x36/0x2c0
[  452.341793][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xa0da instead
[  452.341815][ T9135]  do_getname+0x77/0x250
[  452.341846][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[  452.341847][ T9135]  __se_sys_renameat2+0x34/0x2c0
[  452.341866][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[  452.341886][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd706 instead
[  452.341880][ T9135]  do_syscall_64+0x166/0x520
[  452.341907][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xa0da instead
[  452.341913][ T9135]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.341938][ T9135]  ? clear_bhb_loop+0x70/0xc0
[  452.341960][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[  452.341966][ T9135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.341979][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[  452.341990][ T9135] RIP: 0033:0x7fa01659e0d9
[  452.341999][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd706 instead
[  452.342010][ T9135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.342021][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xa0da instead
[  452.342030][ T9135] RSP: 002b:00007fa01749f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  452.342055][ T9135] RAX: ffffffffffffffda RBX: 00007fa016826090 RCX: 00007fa01659e0d9
[  452.342072][ T9135] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c
[  452.342082][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[  452.342090][ T9135] RBP: 00007fa01749f090 R08: 0000000000000000 R09: 0000000000000000
[  452.342106][ T9135] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001
[  452.342121][ T9135] R13: 00007fa016826128 R14: 00007fa016826090 R15: 00007ffeb0aea188
[  452.342120][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[  452.342143][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd706 instead
[  452.342156][ T9135]  </TASK>
[  452.342165][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xa0da instead
[  452.456711][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[  452.456780][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[  452.456832][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd706 instead
[  452.456885][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xa0da instead
[  452.457321][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[  452.457375][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[  452.457426][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd706 instead
[  452.457465][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xa0da instead
[  452.457601][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[  452.457662][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[  452.457731][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd706 instead
[  452.457799][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xa0da instead
[  452.457923][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[  452.457974][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[  452.458024][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd706 instead
[  452.458077][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xa0da instead
[  452.495829][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[  452.495903][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[  452.495956][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd706 instead
[  452.496024][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xa0da instead
[  452.496132][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[  452.496183][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[  452.496234][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd706 instead
[  452.496289][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xa0da instead
[  452.496419][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[  452.496467][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[  452.496485][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd706 instead
[  452.496506][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xa0da instead
[  452.496578][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[  452.496743][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[  452.496795][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd706 instead
[  452.496849][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xa0da instead
[  452.497164][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[  452.497223][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[  452.497266][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd706 instead
[  452.497326][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xa0da instead
[  452.509520][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[  452.509588][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[  452.509652][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd706 instead
[  452.509706][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xa0da instead
[  452.509852][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[  452.509910][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[  452.509968][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd706 instead
[  452.510021][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xa0da instead
[  452.510141][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[  452.510191][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[  452.510244][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd706 instead
[  452.510296][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xa0da instead
[  452.510421][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[  452.510470][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[  452.510520][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd706 instead
[  452.510573][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xa0da instead
[  452.510713][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[  452.510756][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[  452.510807][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd706 instead
[  452.510859][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xa0da instead
[  452.534820][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[  452.534900][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[  452.534952][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd706 instead
[  452.535004][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xa0da instead
[  452.535128][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[  452.535178][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[  452.535239][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd706 instead
[  452.535290][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xa0da instead
[  452.535442][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[  452.535493][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[  452.535544][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd706 instead
[  452.535596][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xa0da instead
[  452.535805][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[  452.535856][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[  452.535907][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd706 instead
[  452.535959][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xa0da instead
[  452.536093][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[  452.536148][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[  452.536194][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd706 instead
[  452.536250][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xa0da instead
[  452.577155][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[  452.577227][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[  452.577279][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd706 instead
[  452.577340][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xa0da instead
[  452.577490][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[  452.577541][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[  452.577593][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd706 instead
[  452.577654][ T9134] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xa0da instead
[  452.577750][ T9134] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  452.577773][ T9134] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  453.960563][ T5786] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  454.002479][ T9144] loop1: detected capacity change from 0 to 64
[  454.010439][ T5632] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  454.117263][ T5786] usb 4-1: Using ep0 maxpacket: 16
[  454.120681][ T5786] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  454.132790][ T5786] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  454.132854][ T5786] usb 4-1: config 0 has no interface number 0
[  454.132983][ T5786] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB
[  454.133060][ T5786] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  454.133143][ T5786] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  454.156302][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  454.156386][ T5786] usb 4-1: Product: syz
[  454.156428][ T5786] usb 4-1: SerialNumber: syz
[  454.170262][ T5632] usb 3-1: Using ep0 maxpacket: 8
[  454.178841][ T5632] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40
[  454.194250][ T9144] xt_hashlimit: size too large, truncated to 1048576
[  454.219321][ T5632] usb 3-1: config 1 interface 0 has no altsetting 0
[  454.241546][ T5786] usb 4-1: config 0 descriptor??
[  454.260338][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.260408][ T5632] usb 3-1: Product: ﬊⾦늯戺塷䩌魟ῳ䴄윫莂犰鎓㯾ꓤဝᷛ卵㴐쉰䩫㭖竸딱靇가ˬ詁峵滀৙㇠Ḍ換ㅱ❙෻旎ື㿉詗⑺ꢥ计볥㭯⊊➻ٗ♮劗僻䗣ꋛ띙䫅혔䄧豴곔
[  454.260458][ T5632] usb 3-1: Manufacturer: Ф
[  454.260532][ T5632] usb 3-1: SerialNumber: 胝됥㯱蜾篮띉뛀욁뛹郊尘╪㱠膝煖࿐呯獫씂ꖕဃĎꍭ兇璷蜁䎫﮳虻ԛ྅ײ霨뚋ඁ汌➂끦⋎ﮑ筨됃歘菳襛ᴩﻰ엢NJ硇꓃᠂䏄芋㷏᪣ࣅ밿랲䌉툑蚄榋쏺闻톫辶퀟ᖅꍳ先빝ࡼ똫팦圙쪗뗷觹踫뜣ѷ瓍晛ᖆឩ쌿䖵抑攅藥밷Љ᜴⿌ֻ
[  454.362455][ T5786] usbhid 4-1:0.8: couldn't find an input interrupt endpoint
[  454.860263][ T9147] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  454.877061][ T9147] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  455.019607][ T9147] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  455.037419][ T9147] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  455.043800][ T9158] loop4: detected capacity change from 0 to 64
[  455.052744][ T9158] hfs: Unknown parameter 'crmator'
[  455.117368][ T9147] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  455.124651][ T9147] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  455.153325][ T9147] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  455.160953][ T9150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.169920][ T9147] hwrng_fill thread creation failed
[  455.184825][ T9150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.224228][ T5632] usbhid 3-1:1.0: can't add hid device: -71
[  455.224483][ T5632] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  455.242264][ T5762] usb 4-1: USB disconnect, device number 14
[  455.282805][ T5632] usb 3-1: USB disconnect, device number 22
[  455.437961][ T1186] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  455.485339][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'.
[  455.623709][ T9171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.810'.
[  456.637174][ T5633] Bluetooth: hci1: command 0x0406 tx timeout
[  457.107053][ T5633] Bluetooth: hci2: command 0x0406 tx timeout
[  457.185068][ T4935] Bluetooth: hci3: command 0x0406 tx timeout
[  457.205176][ T5633] Bluetooth: hci4: command 0x0406 tx timeout
[  457.277030][ T1186] usb 2-1: Using ep0 maxpacket: 16
[  457.307232][ T1186] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  457.308452][ T1186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.308518][ T1186] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  457.308550][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.308580][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.312103][ T1186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.312179][ T1186] usb 2-1: Product: syz
[  457.312220][ T1186] usb 2-1: Manufacturer: syz
[  457.312260][ T1186] usb 2-1: SerialNumber: syz
[  457.319708][ T1186] usb 2-1: config 0 descriptor??
[  457.328458][ T1186] appledisplay 2-1:0.0: Submitting URB failed
[  457.328857][ T1186] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5
[  457.670922][ T9176] type: 8192 invalid
[  457.678997][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  457.679043][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  457.679069][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd706 instead
[  457.679096][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x6be5 instead
[  457.679126][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  457.679149][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  457.679171][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  457.679198][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  457.679239][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  457.679283][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  457.679305][ T9176] jffs2: Further such events for this erase block will not be printed
[  457.679708][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  457.679734][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  457.679760][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd706 instead
[  457.679786][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x6be5 instead
[  457.679810][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  457.679838][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  457.679861][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  457.679888][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  457.679927][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  457.679968][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  457.679989][ T9176] jffs2: Further such events for this erase block will not be printed
[  457.816389][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[  457.816534][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[  457.816596][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd706 instead
[  457.816703][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xa0da instead
[  457.834949][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[  457.835075][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[  457.835115][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd706 instead
[  457.835437][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xa0da instead
[  457.835758][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[  457.835812][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[  457.835924][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd706 instead
[  457.835986][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xa0da instead
[  457.836326][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[  457.836386][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[  457.836491][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd706 instead
[  457.836561][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xa0da instead
[  457.867577][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[  457.867652][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[  457.867749][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd706 instead
[  457.867826][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xa0da instead
[  457.868210][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[  457.868316][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[  457.868374][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd706 instead
[  457.868429][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xa0da instead
[  457.868624][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[  457.868715][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[  457.868784][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd706 instead
[  457.868890][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xa0da instead
[  457.869084][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[  457.869136][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[  457.869263][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd706 instead
[  457.934512][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xa0da instead
[  458.091220][ T9179] loop4: detected capacity change from 0 to 64
[  458.125465][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[  458.125596][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[  458.125654][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd706 instead
[  458.125765][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xa0da instead
[  458.125969][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[  458.126019][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[  458.126120][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd706 instead
[  458.126180][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xa0da instead
[  458.155836][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[  458.155906][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[  458.156018][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd706 instead
[  458.156081][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xa0da instead
[  458.156274][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[  458.156396][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[  458.156456][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd706 instead
[  458.156572][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xa0da instead
[  458.156763][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[  458.156814][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[  458.157134][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd706 instead
[  458.157195][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xa0da instead
[  458.157402][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[  458.183720][ T9179] hfs: Bad value for 'gid'
[  458.189096][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[  458.189231][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd706 instead
[  458.189293][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xa0da instead
[  458.189559][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[  458.189612][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[  458.189664][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd706 instead
[  458.189776][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xa0da instead
[  458.189970][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[  458.190022][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[  458.190128][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd706 instead
[  458.190182][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xa0da instead
[  458.190392][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[  458.190507][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[  458.190547][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd706 instead
[  458.190599][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xa0da instead
[  458.190794][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[  458.190893][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[  458.233392][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd706 instead
[  458.233475][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xa0da instead
[  458.233746][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[  458.233799][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[  458.233851][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd706 instead
[  458.233965][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xa0da instead
[  458.234160][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[  458.234219][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[  458.234332][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd706 instead
[  458.234386][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xa0da instead
[  458.234595][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[  458.234699][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[  458.234758][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd706 instead
[  458.234866][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xa0da instead
[  458.235003][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[  458.235028][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[  458.235049][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd706 instead
[  458.235110][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xa0da instead
[  458.254350][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[  458.254427][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[  458.254533][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd706 instead
[  458.254594][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xa0da instead
[  458.254805][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[  458.254909][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[  458.254960][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd706 instead
[  458.255012][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xa0da instead
[  458.255162][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[  458.255276][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[  458.255326][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd706 instead
[  458.255422][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xa0da instead
[  458.255596][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[  458.255645][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[  458.255690][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd706 instead
[  458.255791][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xa0da instead
[  458.255844][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[  458.255902][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[  458.256047][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd706 instead
[  458.256107][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xa0da instead
[  458.281521][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[  458.281657][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[  458.281711][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd706 instead
[  458.281863][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xa0da instead
[  458.282064][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[  458.282107][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[  458.286509][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd706 instead
[  458.286576][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xa0da instead
[  458.286784][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[  458.286889][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[  458.315879][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd706 instead
[  458.315961][ T9176] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xa0da instead
[  458.316131][ T9176] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  458.316155][ T9176] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  458.588337][ T9178] loop1: detected capacity change from 0 to 1024
[  458.708682][ T5633] Bluetooth: hci1: command 0x0406 tx timeout
[  458.806817][ T9178] hfsplus: failed to load extents file
[  459.191314][ T5633] Bluetooth: hci2: command 0x0406 tx timeout
[  459.277016][ T5633] Bluetooth: hci3: command 0x0406 tx timeout
[  459.986260][ T1186] usb 2-1: USB disconnect, device number 14
[  460.160047][ T9193] loop1: detected capacity change from 0 to 64
[  460.266144][ T9193] xt_hashlimit: size too large, truncated to 1048576
[  460.554007][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'.
[  461.654522][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'.
[  462.159607][ T9209] netlink: 260 bytes leftover after parsing attributes in process `syz.0.821'.
[  462.617291][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.823'.
[  462.993870][ T5762] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  463.237614][ T5762] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  463.263820][ T5762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  463.275025][ T5762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  463.343113][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  463.351930][ T5762] usb 1-1: SerialNumber: syz
[  463.797413][ T1186] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  463.878509][ T9224] overlayfs: failed to resolve './file0': -2
[  463.950235][ T1186] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  463.962048][ T1186] usb 3-1: config 0 has no interfaces?
[  463.976746][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.976797][ T1186] usb 3-1: Product: syz
[  463.976840][ T1186] usb 3-1: Manufacturer: syz
[  463.976861][ T1186] usb 3-1: SerialNumber: syz
[  464.007175][ T5622] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  464.053232][ T1186] usb 3-1: config 0 descriptor??
[  464.477049][ T5622] usb 5-1: Using ep0 maxpacket: 8
[  464.490155][ T5622] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40
[  464.556876][ T5622] usb 5-1: config 1 interface 0 has no altsetting 0
[  464.614816][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.615424][ T5622] usb 5-1: Product: ﬊⾦늯戺塷䩌魟ῳ䴄윫莂犰鎓㯾ꓤဝᷛ卵㴐쉰䩫㭖竸딱靇가ˬ詁峵滀৙㇠Ḍ換ㅱ❙෻旎ື㿉詗⑺ꢥ计볥㭯⊊➻ٗ♮劗僻䗣ꋛ띙䫅혔䄧豴곔
[  464.615516][ T5622] usb 5-1: Manufacturer: Ф
[  464.615630][ T5622] usb 5-1: SerialNumber: 胝됥㯱蜾篮띉뛀욁뛹郊尘╪㱠膝煖࿐呯獫씂ꖕဃĎꍭ兇璷蜁䎫﮳虻ԛ྅ײ霨뚋ඁ汌➂끦⋎ﮑ筨됃歘菳襛ᴩﻰ엢NJ硇꓃᠂䏄芋㷏᪣ࣅ밿랲䌉툑蚄榋쏺闻톫辶퀟ᖅꍳ先빝ࡼ똫팦圙쪗뗷觹踫뜣ѷ瓍晛ᖆឩ쌿䖵抑攅藥밷Љ᜴⿌ֻ
[  464.645407][ T9220] netlink: 84 bytes leftover after parsing attributes in process `syz.1.826'.
[  464.726868][ T5786] usb 3-1: USB disconnect, device number 23
[  464.860084][ T5762] usb 1-1: 0:2 : does not exist
[  464.920566][ T5622] usbhid 5-1:1.0: can't add hid device: -71
[  464.920750][ T5622] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  464.946079][ T5622] usb 5-1: USB disconnect, device number 13
[  465.290566][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'.
[  465.372887][ T5762] usb 1-1: USB disconnect, device number 16
[  466.585110][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  467.111660][ T9261] loop1: detected capacity change from 0 to 64
[  467.205197][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  467.205273][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  467.494618][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'.
[  467.567278][ T9261] xt_hashlimit: size too large, truncated to 1048576
[  470.675485][ T9274] netlink: 84 bytes leftover after parsing attributes in process `syz.3.839'.
[  471.496840][ T9292] tipc: Started in network mode
[  471.502678][ T9292] tipc: Node identity 1000001, cluster identity 4369
[  471.510881][ T9292] tipc: Node number set to 16777217
[  471.517348][ T9292] tipc: Cannot configure node identity twice
[  471.545437][ T9292] tipc: New replicast peer: 127.0.0.1
[  471.561861][ T9292] tipc: Enabled bearer <udp:syz0>, priority 10
[  471.756081][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'.
[  475.115465][ T5622] hid_parser_main: 34 callbacks suppressed
[  475.121287][ T5622] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  475.121410][ T5622] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  475.123766][ T5622] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  475.123847][ T5622] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  475.123918][ T5622] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  475.123980][ T5622] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  475.124054][ T5622] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  475.124124][ T5622] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0
[  475.325928][ T9313] FAULT_INJECTION: forcing a failure.
[  475.325928][ T9313] name failslab, interval 1, probability 0, space 0, times 0
[  475.358827][ T9313] CPU: 0 UID: 0 PID: 9313 Comm: syz.0.850 Not tainted syzkaller #0 PREEMPT(full) 
[  475.358860][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  475.358875][ T9313] Call Trace:
[  475.358884][ T9313]  <TASK>
[  475.358894][ T9313]  dump_stack_lvl+0xe8/0x150
[  475.358934][ T9313]  should_fail_ex+0x410/0x560
[  475.358975][ T9313]  should_failslab+0xa8/0x100
[  475.359005][ T9313]  __kmalloc_noprof+0xfe/0x720
[  475.359042][ T9313]  ? tomoyo_encode+0x2ad/0x570
[  475.359068][ T9313]  ? tomoyo_encode+0x2ad/0x570
[  475.359109][ T9313]  tomoyo_encode+0x2ad/0x570
[  475.359142][ T9313]  tomoyo_realpath_from_path+0x5fa/0x640
[  475.359180][ T9313]  ? tomoyo_path_number_perm+0x219/0x5f0
[  475.359216][ T9313]  tomoyo_path_number_perm+0x246/0x5f0
[  475.359255][ T9313]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  475.359290][ T9313]  ? __lock_acquire+0x6df/0x2e50
[  475.359330][ T9313]  ? hook_file_ioctl+0x1f2/0x600
[  475.359383][ T9313]  ? __fget_files+0x2a/0x420
[  475.359418][ T9313]  ? __fget_files+0x2a/0x420
[  475.359447][ T9313]  ? __fget_files+0x3a2/0x420
[  475.359476][ T9313]  ? __fget_files+0x2a/0x420
[  475.359512][ T9313]  security_file_ioctl+0xc3/0x2a0
[  475.359548][ T9313]  __se_sys_ioctl+0x47/0x170
[  475.359574][ T9313]  do_syscall_64+0x166/0x520
[  475.359606][ T9313]  ? trace_irq_disable+0x3b/0x140
[  475.359629][ T9313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.359653][ T9313]  ? clear_bhb_loop+0x70/0xc0
[  475.359682][ T9313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.359706][ T9313] RIP: 0033:0x7f9662b9e0d9
[  475.359727][ T9313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.359747][ T9313] RSP: 002b:00007f9663998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  475.359771][ T9313] RAX: ffffffffffffffda RBX: 00007f9662e25fa0 RCX: 00007f9662b9e0d9
[  475.359788][ T9313] RDX: 0000200000000580 RSI: 000000004018920a RDI: 0000000000000003
[  475.359803][ T9313] RBP: 00007f9663998090 R08: 0000000000000000 R09: 0000000000000000
[  475.359817][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.359831][ T9313] R13: 00007f9662e26038 R14: 00007f9662e25fa0 R15: 00007ffe1efca478
[  475.359867][ T9313]  </TASK>
[  475.359993][ T9313] ERROR: Out of memory at tomoyo_realpath_from_path.
[  475.704803][ T5622] hid-generic 0000:0000:0001.0005: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  476.008255][ T9317] fido_id[9317]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  476.109563][ T9326] loop0: detected capacity change from 0 to 64
[  476.241188][ T9326] xt_hashlimit: size too large, truncated to 1048576
[  476.269840][ T1186] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  476.429677][ T1186] usb 5-1: Using ep0 maxpacket: 8
[  476.436646][ T1186] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40
[  476.452636][ T1186] usb 5-1: config 1 interface 0 has no altsetting 0
[  476.464111][ T1186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.464166][ T1186] usb 5-1: Product: ﬊⾦늯戺塷䩌魟ῳ䴄윫莂犰鎓㯾ꓤဝᷛ卵㴐쉰䩫㭖竸딱靇가ˬ詁峵滀৙㇠Ḍ換ㅱ❙෻旎ື㿉詗⑺ꢥ计볥㭯⊊➻ٗ♮劗僻䗣ꋛ띙䫅혔䄧豴곔
[  476.464197][ T1186] usb 5-1: Manufacturer: Ф
[  476.464217][ T1186] usb 5-1: SerialNumber: 胝됥㯱蜾篮띉뛀욁뛹郊尘╪㱠膝煖࿐呯獫씂ꖕဃĎꍭ兇璷蜁䎫﮳虻ԛ྅ײ霨뚋ඁ汌➂끦⋎ﮑ筨됃歘菳襛ᴩﻰ엢NJ硇꓃᠂䏄芋㷏᪣ࣅ밿랲䌉툑蚄榋쏺闻톫辶퀟ᖅꍳ先빝ࡼ똫팦圙쪗뗷觹踫뜣ѷ瓍晛ᖆឩ쌿䖵抑攅藥밷Љ᜴⿌ֻ
[  476.837207][ T1186] usbhid 5-1:1.0: can't add hid device: -71
[  476.843552][ T1186] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  476.863452][ T1186] usb 5-1: USB disconnect, device number 14
[  477.108896][ T9337] netlink: 84 bytes leftover after parsing attributes in process `syz.3.854'.
[  477.445163][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'.
[  477.553774][ T9354] netlink: 'syz.1.855': attribute type 21 has an invalid length.
[  477.563686][ T9354] netlink: 156 bytes leftover after parsing attributes in process `syz.1.855'.
[  477.599466][ T9354] loop1: detected capacity change from 0 to 512
[  477.600457][ T9354] EXT4-fs: Ignoring removed nobh option
[  477.641192][ T9354] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  477.706540][ T9354] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  477.725194][ T9354] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.855: inode has both inline data and extents flags
[  477.725334][ T9354] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  477.735616][ T9354] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.855: couldn't read orphan inode 13 (err -117)
[  477.735716][ T9354] loop1: lost filesystem error report for type 5 error -117
[  477.804743][ T9354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.650316][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'.
[  479.418887][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.651485][ T9384] FAULT_INJECTION: forcing a failure.
[  480.651485][ T9384] name failslab, interval 1, probability 0, space 0, times 0
[  480.664851][ T9384] CPU: 1 UID: 0 PID: 9384 Comm: syz.2.863 Not tainted syzkaller #0 PREEMPT(full) 
[  480.664883][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  480.664898][ T9384] Call Trace:
[  480.664907][ T9384]  <TASK>
[  480.664916][ T9384]  dump_stack_lvl+0xe8/0x150
[  480.664957][ T9384]  should_fail_ex+0x410/0x560
[  480.664997][ T9384]  ? __alloc_skb+0x1db/0x7a0
[  480.665018][ T9384]  should_failslab+0xa8/0x100
[  480.665048][ T9384]  ? __alloc_skb+0x1db/0x7a0
[  480.665067][ T9384]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  480.665110][ T9384]  ? __alloc_skb+0x18d/0x7a0
[  480.665132][ T9384]  ? __alloc_skb+0x1db/0x7a0
[  480.665159][ T9384]  __alloc_skb+0x1db/0x7a0
[  480.665186][ T9384]  netlink_sendmsg+0x5d4/0xb40
[  480.665310][ T9384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.665347][ T9384]  ? apparmor_socket_sendmsg+0x98/0x360
[  480.665420][ T9384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.665447][ T9384]  sock_sendmsg_nosec+0x13a/0x180
[  480.665483][ T9384]  ____sys_sendmsg+0x54e/0x850
[  480.665515][ T9384]  ? __pfx_____sys_sendmsg+0x10/0x10
[  480.665550][ T9384]  ? import_iovec+0x73/0xa0
[  480.665579][ T9384]  ___sys_sendmsg+0x2a5/0x360
[  480.665604][ T9384]  ? __lock_acquire+0x6df/0x2e50
[  480.665632][ T9384]  ? __pfx____sys_sendmsg+0x10/0x10
[  480.665664][ T9384]  ? kstrtouint+0x6e/0xe0
[  480.665726][ T9384]  ? __fget_files+0x2a/0x420
[  480.665756][ T9384]  ? __fget_files+0x3a2/0x420
[  480.665797][ T9384]  __sys_sendmmsg+0x273/0x4d0
[  480.665829][ T9384]  ? __pfx___sys_sendmmsg+0x10/0x10
[  480.665865][ T9384]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  480.665966][ T9384]  ? ksys_write+0x242/0x270
[  480.666002][ T9384]  ? __pfx_ksys_write+0x10/0x10
[  480.666043][ T9384]  __x64_sys_sendmmsg+0xa0/0xc0
[  480.666071][ T9384]  do_syscall_64+0x166/0x520
[  480.666110][ T9384]  ? trace_irq_disable+0x3b/0x140
[  480.666133][ T9384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.666157][ T9384]  ? clear_bhb_loop+0x70/0xc0
[  480.666185][ T9384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.666209][ T9384] RIP: 0033:0x7f142919e0d9
[  480.666230][ T9384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.666250][ T9384] RSP: 002b:00007f142a11a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  480.666275][ T9384] RAX: ffffffffffffffda RBX: 00007f1429425fa0 RCX: 00007f142919e0d9
[  480.666293][ T9384] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  480.666309][ T9384] RBP: 00007f142a11a090 R08: 0000000000000000 R09: 0000000000000000
[  480.666324][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.666338][ T9384] R13: 00007f1429426038 R14: 00007f1429425fa0 R15: 00007ffd87e44748
[  480.666373][ T9384]  </TASK>
[  481.290881][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'.
[  481.462717][ T9380] loop1: detected capacity change from 0 to 4096
[  482.279531][ T5637] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  482.694484][ T9380] ntfs3(loop1): Failed to read $UpCase (-4).
[  483.144213][ T5637] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  483.164756][ T5637] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.164862][ T5637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.231276][ T5637] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected
[  483.243407][ T5637] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81
[  483.243554][ T5637] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1
[  483.265400][ T5637] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84
[  483.273773][ T5637] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[  483.299639][ T5637] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  483.313865][ T5637] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88
[  483.322233][ T5637] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6
[  483.332630][ T5637] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  483.838493][ T9392] netlink: 774 bytes leftover after parsing attributes in process `syz.2.865'.
[  484.167268][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  484.205713][ T9398] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  484.317067][ T5762] usb 3-1: USB disconnect, device number 24
[  484.350581][    T9] usb 2-1: Using ep0 maxpacket: 8
[  484.359573][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40
[  484.374407][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  484.391549][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.391678][    T9] usb 2-1: Product: ﬊⾦늯戺塷䩌魟ῳ䴄윫莂犰鎓㯾ꓤဝᷛ卵㴐쉰䩫㭖竸딱靇가ˬ詁峵滀৙㇠Ḍ換ㅱ❙෻旎ື㿉詗⑺ꢥ计볥㭯⊊➻ٗ♮劗僻䗣ꋛ띙䫅혔䄧豴곔
[  484.391810][    T9] usb 2-1: Manufacturer: Ф
[  484.391831][    T9] usb 2-1: SerialNumber: 胝됥㯱蜾篮띉뛀욁뛹郊尘╪㱠膝煖࿐呯獫씂ꖕဃĎꍭ兇璷蜁䎫﮳虻ԛ྅ײ霨뚋ඁ汌➂끦⋎ﮑ筨됃歘菳襛ᴩﻰ엢NJ硇꓃᠂䏄芋㷏᪣ࣅ밿랲䌉툑蚄榋쏺闻톫辶퀟ᖅꍳ先빝ࡼ똫팦圙쪗뗷觹踫뜣ѷ瓍晛ᖆឩ쌿䖵抑攅藥밷Љ᜴⿌ֻ
[  484.486463][ T5762] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  484.504151][ T5762] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  484.517499][ T5762] keyspan 3-1:1.0: device disconnected
[  484.568853][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  484.580234][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  484.593831][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd706 instead
[  484.606179][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x6be5 instead
[  484.619978][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  484.620004][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  484.620023][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  484.620047][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  484.620083][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  484.680258][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  484.680349][ T9414] jffs2: Further such events for this erase block will not be printed
[  484.680844][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  484.680894][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  484.680918][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd706 instead
[  484.680944][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x6be5 instead
[  484.680966][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  484.680988][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  484.681036][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  484.681063][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  484.681103][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  484.681142][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  484.681187][ T9414] jffs2: Further such events for this erase block will not be printed
[  484.681676][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[  484.817340][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[  484.817435][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd706 instead
[  484.827916][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xa0da instead
[  484.828093][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[  484.828145][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[  484.828193][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd706 instead
[  484.828253][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xa0da instead
[  484.828380][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[  484.828423][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[  484.828464][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd706 instead
[  484.828521][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xa0da instead
[  484.828669][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[  484.828711][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[  484.828755][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd706 instead
[  484.828811][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xa0da instead
[  484.828932][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[  484.828980][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[  484.829022][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd706 instead
[  484.829079][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xa0da instead
[  484.829238][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[  484.829280][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[  484.829349][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd706 instead
[  484.829401][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xa0da instead
[  484.829532][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[  484.829575][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[  484.835961][ T9416] FAULT_INJECTION: forcing a failure.
[  484.835961][ T9416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.836050][ T9416] CPU: 1 UID: 0 PID: 9416 Comm: syz.0.870 Not tainted syzkaller #0 PREEMPT(full) 
[  484.836117][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  484.836158][ T9416] Call Trace:
[  484.836178][ T9416]  <TASK>
[  484.836199][ T9416]  dump_stack_lvl+0xe8/0x150
[  484.836296][ T9416]  should_fail_ex+0x410/0x560
[  484.836394][ T9416]  strncpy_from_user+0x36/0x2c0
[  484.836492][ T9416]  do_getname+0x77/0x250
[  484.836562][ T9416]  __se_sys_renameat2+0x34/0x2c0
[  484.836642][ T9416]  do_syscall_64+0x166/0x520
[  484.836708][ T9416]  ? trace_irq_disable+0x3b/0x140
[  484.836760][ T9416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.836833][ T9416]  ? clear_bhb_loop+0x70/0xc0
[  484.836909][ T9416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.836969][ T9416] RIP: 0033:0x7f9662b9e0d9
[  484.837014][ T9416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.837056][ T9416] RSP: 002b:00007f9660df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  484.837109][ T9416] RAX: ffffffffffffffda RBX: 00007f9662e26090 RCX: 00007f9662b9e0d9
[  484.837151][ T9416] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c
[  484.837238][ T9416] RBP: 00007f9660df6090 R08: 0000000000000000 R09: 0000000000000000
[  484.837257][ T9416] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001
[  484.837297][ T9416] R13: 00007f9662e26128 R14: 00007f9662e26090 R15: 00007ffe1efca478
[  484.837387][ T9416]  </TASK>
[  484.852414][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd706 instead
[  484.852505][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xa0da instead
[  484.852671][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[  484.852717][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[  484.852769][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd706 instead
[  484.852822][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xa0da instead
[  484.852960][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[  484.853012][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[  484.861352][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd706 instead
[  484.861426][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xa0da instead
[  484.861583][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[  484.861644][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[  484.861690][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd706 instead
[  484.861743][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xa0da instead
[  485.009721][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[  485.009801][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[  485.009848][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd706 instead
[  485.009902][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xa0da instead
[  485.010059][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[  485.010103][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[  485.010156][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd706 instead
[  485.010210][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xa0da instead
[  485.010352][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[  485.010395][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[  485.010446][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd706 instead
[  485.010498][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xa0da instead
[  485.010626][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[  485.010670][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[  485.010721][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd706 instead
[  485.010774][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xa0da instead
[  485.010912][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[  485.010956][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[  485.011007][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd706 instead
[  485.011067][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xa0da instead
[  485.251685][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[  485.251758][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[  485.251818][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd706 instead
[  485.251870][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xa0da instead
[  485.252012][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[  485.299680][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[  485.299754][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd706 instead
[  485.299815][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xa0da instead
[  485.299978][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[  485.300021][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[  485.300080][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd706 instead
[  485.300132][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xa0da instead
[  485.300287][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[  485.300346][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[  485.300404][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd706 instead
[  485.300459][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xa0da instead
[  485.300591][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[  485.300765][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[  485.300826][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd706 instead
[  485.300879][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xa0da instead
[  485.301012][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[  485.301061][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[  485.301105][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd706 instead
[  485.301164][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xa0da instead
[  485.333500][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[  485.333529][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[  485.333549][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd706 instead
[  485.333570][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xa0da instead
[  485.333644][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[  485.333663][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[  485.333682][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd706 instead
[  485.333740][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xa0da instead
[  485.333794][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[  485.333813][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[  485.333832][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd706 instead
[  485.333854][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xa0da instead
[  485.333906][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[  485.333925][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[  485.333945][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd706 instead
[  485.333967][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xa0da instead
[  485.334020][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[  485.334038][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[  485.334058][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd706 instead
[  485.334080][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xa0da instead
[  485.334131][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[  485.334150][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[  485.334170][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd706 instead
[  485.334190][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xa0da instead
[  485.334240][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[  485.334258][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[  485.334277][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd706 instead
[  485.334296][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xa0da instead
[  485.334349][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[  485.334368][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[  485.334398][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd706 instead
[  485.334417][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xa0da instead
[  485.334465][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[  485.334482][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[  485.334498][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd706 instead
[  485.334517][ T9414] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xa0da instead
[  485.334554][ T9414] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  485.334564][ T9414] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  485.610257][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'.
[  485.877748][ T9421] netlink: 'syz.3.871': attribute type 21 has an invalid length.
[  485.877776][ T9421] netlink: 156 bytes leftover after parsing attributes in process `syz.3.871'.
[  485.884756][    T9] usbhid 2-1:1.0: can't add hid device: -71
[  485.885074][    T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  485.983113][    T9] usb 2-1: USB disconnect, device number 15
[  486.136583][ T9421] loop3: detected capacity change from 0 to 512
[  486.261094][ T9421] EXT4-fs: Ignoring removed nobh option
[  486.389642][ T9421] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  486.389753][ T9421] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  486.401292][ T9421] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.871: inode has both inline data and extents flags
[  486.401326][ T9421] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  486.411014][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  486.411044][    C1] EXT4-fs (loop3): initial error at time 1787215342: ext4_orphan_get:1403: inode 13
[  486.411081][    C1] EXT4-fs (loop3): last error at time 1787215342: ext4_orphan_get:1403: inode 13
[  486.516159][ T9421] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.871: couldn't read orphan inode 13 (err -117)
[  486.516296][ T9421] loop3: lost filesystem error report for type 5 error -117
[  486.553925][ T9421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.703967][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'.
[  486.827491][ T9430] netlink: 112 bytes leftover after parsing attributes in process `syz.1.874'.
[  487.290127][ T9428] loop0: detected capacity change from 0 to 40427
[  487.300923][ T9423] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  487.362267][ T9428] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  487.364206][ T9428] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  487.811162][ T9428] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  487.832310][ T9428] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  487.832389][ T9428] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  487.938591][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.230807][ T9428] syz.0.872: attempt to access beyond end of device
[  488.230807][ T9428] loop0: rw=2049, sector=45096, nr_sectors = 8152 limit=40427
[  488.234919][ T9428] syz.0.872: attempt to access beyond end of device
[  488.234919][ T9428] loop0: rw=2049, sector=45056, nr_sectors = 8 limit=40427
[  488.262798][ T9428] syz.0.872: attempt to access beyond end of device
[  488.262798][ T9428] loop0: rw=2049, sector=57344, nr_sectors = 7112 limit=40427
[  488.301746][ T9428] syz.0.872: attempt to access beyond end of device
[  488.301746][ T9428] loop0: rw=2049, sector=64456, nr_sectors = 8192 limit=40427
[  488.309768][ T9428] syz.0.872: attempt to access beyond end of device
[  488.309768][ T9428] loop0: rw=2049, sector=72648, nr_sectors = 1080 limit=40427
[  488.311608][ T9428] syz.0.872: attempt to access beyond end of device
[  488.311608][ T9428] loop0: rw=2049, sector=73728, nr_sectors = 8 limit=40427
[  488.311756][ T9428] syz.0.872: attempt to access beyond end of device
[  488.311756][ T9428] loop0: rw=2049, sector=73736, nr_sectors = 8 limit=40427
[  488.312039][ T9428] syz.0.872: attempt to access beyond end of device
[  488.312039][ T9428] loop0: rw=2049, sector=73744, nr_sectors = 8 limit=40427
[  488.312184][ T9428] syz.0.872: attempt to access beyond end of device
[  488.312184][ T9428] loop0: rw=2049, sector=73752, nr_sectors = 8 limit=40427
[  488.312357][ T9428] syz.0.872: attempt to access beyond end of device
[  488.312357][ T9428] loop0: rw=2049, sector=73760, nr_sectors = 8 limit=40427
[  488.657404][ T5351] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  488.829008][ T5351] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  488.842887][ T5351] usb 2-1: config 1 has an invalid interface number: 220 but max is 0
[  488.842942][ T5351] usb 2-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config
[  488.842969][ T5351] usb 2-1: config 1 has no interface number 0
[  488.843003][ T5351] usb 2-1: too many endpoints for config 1 interface 220 altsetting 6: 43, using maximum allowed: 30
[  488.843046][ T5351] usb 2-1: config 1 interface 220 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 43
[  488.843079][ T5351] usb 2-1: config 1 interface 220 has no altsetting 0
[  488.843126][ T5351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.220761][ T5351] usb 2-1: string descriptor 0 read error: -71
[  489.297143][ T5351] as10x_usb: device has been detected
[  489.297969][ T5351] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  489.339203][ T9449] loop3: detected capacity change from 0 to 1024
[  489.350739][ T9449] EXT4-fs: Ignoring removed orlov option
[  489.396618][ T5351] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  489.495162][ T9449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.602791][ T5351] as10x_usb: error during firmware upload part1
[  489.611746][ T5351] Registered device Abilis Systems DVB-Titan
[  489.708766][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'.
[  489.715369][ T5351] usb 2-1: USB disconnect, device number 16
[  489.828717][ T5351] Unregistered device Abilis Systems DVB-Titan
[  489.887930][ T5351] as10x_usb: device has been disconnected
[  489.949280][ T9449] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  490.993784][ T5618] CPU: 0 UID: 0 PID: 5618 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  490.993820][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  490.993835][ T5618] Call Trace:
[  490.993844][ T5618]  <TASK>
[  490.993855][ T5618]  dump_stack_lvl+0xe8/0x150
[  490.993896][ T5618]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  490.994022][ T5618]  f2fs_write_end_bio+0x1211/0x16e0
[  490.994110][ T5618]  ? blkg_put+0x22/0x240
[  490.994181][ T5618]  __submit_merged_bio+0x258/0x6a0
[  490.994210][ T5618]  ? rcu_is_watching+0x16/0xb0
[  490.994244][ T5618]  f2fs_submit_merged_write+0x27d/0x380
[  490.994280][ T5618]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  490.994328][ T5618]  f2fs_sync_node_pages+0x1055/0x1210
[  490.994381][ T5618]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  490.994460][ T5618]  f2fs_write_checkpoint+0xf91/0x2710
[  490.994560][ T5618]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  490.994643][ T5618]  ? try_to_wake_up+0x8b6/0x14d0
[  490.994689][ T5618]  kill_f2fs_super+0x2dd/0x700
[  490.994733][ T5618]  ? __pfx_kill_f2fs_super+0x10/0x10
[  490.994783][ T5618]  ? call_rcu+0x64d/0x8b0
[  490.994811][ T5618]  ? lockdep_hardirqs_on+0x7b/0x110
[  490.994859][ T5618]  deactivate_locked_super+0xbc/0x110
[  490.994893][ T5618]  cleanup_mnt+0x3d3/0x460
[  490.994934][ T5618]  task_work_run+0x1d9/0x270
[  490.994964][ T5618]  ? __pfx_task_work_run+0x10/0x10
[  490.995001][ T5618]  exit_to_user_mode_loop+0x204/0x770
[  490.995026][ T5618]  ? rcu_is_watching+0x16/0xb0
[  490.995059][ T5618]  do_syscall_64+0x328/0x520
[  490.995089][ T5618]  ? trace_irq_disable+0x3b/0x140
[  490.995112][ T5618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.995136][ T5618]  ? clear_bhb_loop+0x70/0xc0
[  490.995165][ T5618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.995189][ T5618] RIP: 0033:0x7f9662b9f317
[  490.995210][ T5618] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  490.995230][ T5618] RSP: 002b:00007ffe1efc96e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  490.995255][ T5618] RAX: 0000000000000000 RBX: 00007f9662c34474 RCX: 00007f9662b9f317
[  490.995271][ T5618] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1efc97a0
[  490.995285][ T5618] RBP: 00007ffe1efc97a0 R08: 00007ffe1efca7a0 R09: 00000000ffffffff
[  490.995301][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1efca830
[  490.995316][ T5618] R13: 00007f9662c34474 R14: 0000000000077793 R15: 00007ffe1efca870
[  490.995354][ T5618]  </TASK>
[  491.045110][ T5618] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  492.099677][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.474666][ T5637] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  492.639639][ T5637] usb 5-1: Using ep0 maxpacket: 8
[  492.646481][ T5637] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40
[  492.668005][ T5637] usb 5-1: config 1 interface 0 has no altsetting 0
[  492.682719][ T5637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.682829][ T5637] usb 5-1: Product: ﬊⾦늯戺塷䩌魟ῳ䴄윫莂犰鎓㯾ꓤဝᷛ卵㴐쉰䩫㭖竸딱靇가ˬ詁峵滀৙㇠Ḍ換ㅱ❙෻旎ື㿉詗⑺ꢥ计볥㭯⊊➻ٗ♮劗僻䗣ꋛ띙䫅혔䄧豴곔
[  492.682997][ T5637] usb 5-1: Manufacturer: Ф
[  492.683070][ T5637] usb 5-1: SerialNumber: 胝됥㯱蜾篮띉뛀욁뛹郊尘╪㱠膝煖࿐呯獫씂ꖕဃĎꍭ兇璷蜁䎫﮳虻ԛ྅ײ霨뚋ඁ汌➂끦⋎ﮑ筨됃歘菳襛ᴩﻰ엢NJ硇꓃᠂䏄芋㷏᪣ࣅ밿랲䌉툑蚄榋쏺闻톫辶퀟ᖅꍳ先빝ࡼ똫팦圙쪗뗷觹踫뜣ѷ瓍晛ᖆឩ쌿䖵抑攅藥밷Љ᜴⿌ֻ
[  492.977497][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'.
[  493.175890][ T9486] netlink: 'syz.1.886': attribute type 21 has an invalid length.
[  493.186767][ T9486] netlink: 156 bytes leftover after parsing attributes in process `syz.1.886'.
[  493.209314][ T9486] loop1: detected capacity change from 0 to 512
[  493.219899][ T9486] EXT4-fs: Ignoring removed nobh option
[  493.273243][ T9486] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  493.292443][ T9486] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  493.302756][ T9486] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.886: inode has both inline data and extents flags
[  493.302840][ T9486] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  493.317144][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  493.317176][    C0] EXT4-fs (loop1): initial error at time 1787215348: ext4_orphan_get:1403: inode 13
[  493.317213][    C0] EXT4-fs (loop1): last error at time 1787215348: ext4_orphan_get:1403: inode 13
[  493.390017][ T9486] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.886: couldn't read orphan inode 13 (err -117)
[  493.390098][ T9486] loop1: lost filesystem error report for type 5 error -117
[  493.418505][ T5637] usbhid 5-1:1.0: can't add hid device: -71
[  493.418660][ T5637] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  494.023074][ T5637] usb 5-1: USB disconnect, device number 15
[  494.038146][ T9486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.257636][ T9489] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  497.291806][ T9500] netlink: 84 bytes leftover after parsing attributes in process `syz.2.890'.
[  497.486567][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.300214][ T9506] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  500.422263][ T9525] loop2: detected capacity change from 0 to 64
[  501.654516][ T9525] xt_hashlimit: size too large, truncated to 1048576
[  501.822844][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  501.823023][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  504.316805][ T9510] configfs-gadget.g1 gadget.0: HOST MAC 26:3d:32:01:6b:8a
[  504.364974][ T9510] configfs-gadget.g1 gadget.0: MAC 5e:41:8a:85:bf:b9
[  505.578206][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'.
[  505.717902][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'.
[  505.839643][ T9567] netlink: 'syz.1.903': attribute type 21 has an invalid length.
[  505.839706][ T9567] netlink: 156 bytes leftover after parsing attributes in process `syz.1.903'.
[  506.370370][ T9567] loop1: detected capacity change from 0 to 512
[  506.476170][ T9567] EXT4-fs: Ignoring removed nobh option
[  506.591925][ T9567] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  506.606734][ T9567] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  506.618397][ T9567] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.903: inode has both inline data and extents flags
[  506.633275][ T9567] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  506.636991][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  506.637049][    C0] EXT4-fs (loop1): initial error at time 1787215362: ext4_orphan_get:1403: inode 13
[  506.637096][    C0] EXT4-fs (loop1): last error at time 1787215362: ext4_orphan_get:1403: inode 13
[  506.675019][ T9567] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.903: couldn't read orphan inode 13 (err -117)
[  506.687381][ T9567] loop1: lost filesystem error report for type 5 error -117
[  506.692827][ T9567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.746775][ T9570] loop2: detected capacity change from 0 to 64
[  506.762861][ T9570] hfs: Bad value for 'gid'
[  507.007048][ T5351] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  507.245089][ T9575] loop0: detected capacity change from 0 to 40427
[  507.262728][ T9575] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  507.262829][ T9575] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  507.263165][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.348144][ T5351] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  507.359794][ T5351] usb 1-1: Dual-Role OTG device on HNP port
[  507.363466][ T5351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.607688][ T5351] usb-storage 1-1:1.0: USB Mass Storage device detected
[  507.621783][ T9575] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  507.636394][ T9575] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  507.636415][ T9575] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  510.015435][ T5351] scsi host1: usb-storage 1-1:1.0
[  510.280427][ T5351] cdc_eem 1-1:1.1 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 5a:36:3c:24:57:39
[  510.384587][ T5351] cdc_acm 1-1:1.2: ttyACM0: USB ACM device
[  511.145489][ T5351] BUG: sche
** replaying previous printk message **
[  511.145489][ T5351] BUG: scheduling while atomic: kworker/1:3/5351/0x00010001
[  511.145595][ T5351] locks held by kworker/1:3/5351: 7, on CPU#1:
[  511.145888][ T5351]  #0: ffff88801f692140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  511.146092][ T5351]  #1: ffffc90003627c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  511.146265][ T5351]  #2: ffff888029e371d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  511.146481][ T5351]  #3: ffff88802b77b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  511.146734][ T5351]  #4: ffff88807f8451a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  511.147183][ T5351]  #5: ffffffff901b58a0 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x5e6/0x2240
[  511.147422][ T5351]  #6: ffff88807b4a6160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x48/0x170
[  511.147623][ T5351] Modules linked in:
[  511.147656][ T5351] Preemption disabled at:
[  511.147675][ T5351] [<ffffffff8be4f1c1>] __mutex_lock+0x171/0x1550
[  511.147801][ T5351] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ...
[  511.259383][ T5351] CPU: 1 UID: 0 PID: 5351 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) 
[  511.268797][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  511.278901][ T5351] Workqueue: usb_hub_wq hub_event
[  511.283982][ T5351] Call Trace:
[  511.287295][ T5351]  <TASK>
[  511.290251][ T5351]  vpanic+0x56d/0xa60
[  511.294254][ T5351]  ? __pfx_vpanic+0x10/0x10
[  511.298791][ T5351]  panic+0xc5/0xd0
[  511.302543][ T5351]  ? __pfx_panic+0x10/0x10
[  511.306987][ T5351]  ? __pfx__printk+0x10/0x10
[  511.311604][ T5351]  ? print_lock_name+0x68/0x90
[  511.316375][ T5351]  ? __mutex_lock+0x171/0x1550
[  511.321167][ T5351]  check_panic_on_warn+0x89/0xb0
[  511.326114][ T5351]  ? __mutex_lock+0x171/0x1550
[  511.330891][ T5351]  __schedule_bug+0xf1/0x150
[  511.335504][ T5351]  __schedule+0x1c2c/0x5bc0
[  511.340020][ T5351]  ? __lock_acquire+0x6df/0x2e50
[  511.344978][ T5351]  ? lockdep_hardirqs_on+0x7b/0x110
[  511.350220][ T5351]  ? irqentry_exit+0x218/0x910
[  511.354997][ T5351]  ? trace_irq_disable+0x3b/0x140
[  511.360040][ T5351]  ? __pfx___schedule+0x10/0x10
[  511.364903][ T5351]  ? lock_acquire+0x115/0x350
[  511.369591][ T5351]  ? schedule+0x90/0x2b0
[  511.373853][ T5351]  schedule+0x164/0x2b0
[  511.378028][ T5351]  schedule_timeout+0x152/0x2c0
[  511.382919][ T5351]  ? __pfx_schedule_timeout+0x10/0x10
[  511.388334][ T5351]  ? __pfx_process_timeout+0x10/0x10
[  511.393669][ T5351]  drain_urb_queue+0x24e/0x410
[  511.398562][ T5351]  ? lockdep_hardirqs_on+0x7b/0x110
[  511.403795][ T5351]  ? __pfx_drain_urb_queue+0x10/0x10
[  511.409099][ T5351]  ? do_raw_spin_lock+0x12b/0x2f0
[  511.414146][ T5351]  ? __pfx_autoremove_wake_function+0x10/0x10
[  511.420234][ T5351]  ? _raw_spin_unlock_irq_enable+0x4f/0xa0
[  511.426062][ T5351]  ? __pfx_snd_ump_rawmidi_drain+0x10/0x10
[  511.431952][ T5351]  snd_rawmidi_drain_output+0x56f/0x8d0
[  511.437538][ T5351]  ? __pfx_snd_rawmidi_drain_output+0x10/0x10
[  511.443671][ T5351]  close_substream+0x20d/0x790
[  511.448481][ T5351]  ? __pfx_close_substream+0x10/0x10
[  511.453785][ T5351]  ? __pfx_autoremove_wake_function+0x10/0x10
[  511.459873][ T5351]  ? rawmidi_open_priv+0xdc/0x630
[  511.464917][ T5351]  rawmidi_release_priv+0xeb/0x170
[  511.470044][ T5351]  snd_rawmidi_kernel_release+0x46/0xa0
[  511.475602][ T5351]  snd_ump_parse_endpoint+0x85c/0xc40
[  511.481002][ T5351]  ? preempt_schedule_thunk+0x16/0x40
[  511.486398][ T5351]  snd_usb_midi_v2_create+0x2545/0x4ac0
[  511.491986][ T5351]  ? __pfx_snd_usb_midi_v2_create+0x10/0x10
[  511.497909][ T5351]  ? usb_ifnum_to_if+0x262/0x2f0
[  511.502966][ T5351]  snd_usb_create_stream+0x262/0x630
[  511.508276][ T5351]  usb_audio_probe+0x144c/0x2240
[  511.513231][ T5351]  ? __pfx_usb_audio_probe+0x10/0x10
[  511.518529][ T5351]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  511.524354][ T5351]  usb_probe_interface+0x788/0xe50
[  511.529552][ T5351]  ? __pfx_usb_probe_interface+0x10/0x10
[  511.535211][ T5351]  ? sysfs_do_create_link_sd+0xe0/0x110
[  511.540773][ T5351]  ? driver_sysfs_add+0x1fe/0x210
[  511.545823][ T5351]  ? __pfx_usb_probe_interface+0x10/0x10
[  511.551486][ T5351]  really_probe+0x254/0xae0
[  511.556001][ T5351]  __driver_probe_device+0x1e8/0x360
[  511.561301][ T5351]  driver_probe_device+0x4f/0x240
[  511.566345][ T5351]  __device_attach_driver+0x270/0x410
[  511.571727][ T5351]  bus_for_each_drv+0x258/0x2f0
[  511.576607][ T5351]  ? __pfx___device_attach_driver+0x10/0x10
[  511.582504][ T5351]  ? __pfx_bus_for_each_drv+0x10/0x10
[  511.587893][ T5351]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  511.593723][ T5351]  __device_attach+0x2c4/0x450
[  511.598509][ T5351]  ? __pfx___device_attach+0x10/0x10
[  511.603804][ T5351]  ? do_raw_spin_unlock+0xf5/0x200
[  511.608943][ T5351]  ? _raw_spin_unlock+0x28/0x50
[  511.613803][ T5351]  device_initial_probe+0xa1/0xd0
[  511.618838][ T5351]  bus_probe_device+0x12a/0x220
[  511.623713][ T5351]  device_add+0x7d7/0xb80
[  511.628127][ T5351]  usb_set_configuration+0x1ad8/0x2180
[  511.633618][ T5351]  usb_generic_driver_probe+0x8d/0x150
[  511.639141][ T5351]  usb_probe_device+0x1c3/0x3b0
[  511.644017][ T5351]  ? __pfx_usb_probe_device+0x10/0x10
[  511.649413][ T5351]  really_probe+0x254/0xae0
[  511.653955][ T5351]  __driver_probe_device+0x1e8/0x360
[  511.659253][ T5351]  driver_probe_device+0x4f/0x240
[  511.664292][ T5351]  __device_attach_driver+0x270/0x410
[  511.669685][ T5351]  bus_for_each_drv+0x258/0x2f0
[  511.674558][ T5351]  ? __pfx___device_attach_driver+0x10/0x10
[  511.680461][ T5351]  ? __pfx_bus_for_each_drv+0x10/0x10
[  511.685860][ T5351]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  511.691675][ T5351]  __device_attach+0x2c4/0x450
[  511.696455][ T5351]  ? __pfx___device_attach+0x10/0x10
[  511.701765][ T5351]  ? do_raw_spin_unlock+0xf5/0x200
[  511.706913][ T5351]  ? _raw_spin_unlock+0x28/0x50
[  511.711792][ T5351]  device_initial_probe+0xa1/0xd0
[  511.716834][ T5351]  bus_probe_device+0x12a/0x220
[  511.721700][ T5351]  device_add+0x7d7/0xb80
[  511.726043][ T5351]  usb_new_device+0x9aa/0x1690
[  511.730825][ T5351]  ? __pfx_usb_new_device+0x10/0x10
[  511.736039][ T5351]  ? _raw_spin_unlock_irq+0x23/0x50
[  511.741251][ T5351]  hub_event+0x28e8/0x4d30
[  511.745674][ T5351]  ? do_raw_spin_unlock+0xf5/0x200
[  511.750886][ T5351]  ? __pfx_hub_event+0x10/0x10
[  511.755695][ T5351]  ? rcu_is_watching+0x16/0xb0
[  511.760484][ T5351]  ? process_scheduled_works+0x97a/0x1630
[  511.766217][ T5351]  process_scheduled_works+0xc3d/0x1630
[  511.771797][ T5351]  ? __pfx_process_scheduled_works+0x10/0x10
[  511.777804][ T5351]  ? assign_work+0x3cf/0x5d0
[  511.782419][ T5351]  worker_thread+0xa47/0xfb0
[  511.787044][ T5351]  ? __kthread_parkme+0x71/0x1f0
[  511.792001][ T5351]  kthread+0x38b/0x480
[  511.796071][ T5351]  ? __pfx_worker_thread+0x10/0x10
[  511.801188][ T5351]  ? __pfx_kthread+0x10/0x10
[  511.805782][ T5351]  ret_from_fork+0x514/0xb70
[  511.810379][ T5351]  ? __pfx_ret_from_fork+0x10/0x10
[  511.815493][ T5351]  ? __switch_to+0xc89/0x1420
[  511.820184][ T5351]  ? __pfx_kthread+0x10/0x10
[  511.824779][ T5351]  ret_from_fork_asm+0x1a/0x30
[  511.829574][ T5351]  </TASK>
[  511.833223][ T5351] Kernel Offset: disabled
[  511.837567][ T5351] Rebooting in 86400 seconds..