last executing test programs:

1m29.389023721s ago: executing program 3 (id=496):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010084797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b40000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000c080002400000000208000440000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0xd4}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010)

1m28.915855484s ago: executing program 3 (id=498):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xf0, &(0x7f0000000000), &(0x7f0000000240)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
r4 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@default, @default, @default, @default, @null, @remote, @netrom, @bcast]}, &(0x7f00000001c0)=0x48, 0x80000)
sendto$ax25(r4, &(0x7f0000000340)="8ffca19691980f9286cdaf96eab167d091eb36c5fc8697df9357d079248fe4dcac6b2ecc04da449b4b5c87b60f0f326adb5c65ee1f8d953a79b52de61b89f0ec7aed", 0x42, 0x20040040, &(0x7f0000000580)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18, 0x1, 0x0, {0xfffffffffffff000}}, 0x18)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
r6 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845)
r7 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x9adc, 0xc000, 0x1, 0x20002f7})
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0x80044dfe, &(0x7f0000000600))
sendmsg$nl_route_sched(r6, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0x9}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x40010)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c)
socket$inet_sctp(0x2, 0x1, 0x84)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1)
ioctl$BLKPG(r9, 0xc0184d16, 0x0)

1m26.924736071s ago: executing program 3 (id=503):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf50", 0x15}, {&(0x7f0000000ec0)="6e20cbe6a4a13211", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES16=r3, @ANYBLOB="01000010000000e14f003ba800000008000300", @ANYRES32=r4, @ANYRES32=r3], 0x6f4}}, 0x200040c0)

1m26.265392957s ago: executing program 3 (id=506):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000001811000088236e58670abe185257bdbc5d005953cb763b15e85d5ba93b1cbeef2f0ab72ea2b4ca464e57925a8eddc9edf80a4cf46be463e959b50f5f0a31c63276c754f7f9cc9456fdaf83f4baf362b51434f4d1750d54adb61b5fc43793c31492d315a539e055e4bfbcfb5a545464fb644370463f8824f3efc3ccd66e4b337fc28fa7f750a2b75996e2f0b809bc7daee40664ca56ef72", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94)
semop(0x0, &(0x7f00000000c0)=[{0x3, 0x7}, {0x3, 0x7ffe}], 0x2)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000240)=0x3, &(0x7f00000003c0)=0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0)
r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r4, 0x0, 0x1, 0x0)
ptrace(0x10, r4)
ptrace$setsig(0x4203, r4, 0x2, &(0x7f0000000040)={0x24, 0x0, 0x3})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@lazytime}]}, 0x81, 0x63d, &(0x7f0000000600)="$eJzs3c9rHNcdAPDvzGplyVYruxRTm5YKerChWD9cU7c92b7UB0Nd6kMpPVi1JFd4ZQtLhto1RIYcHEgghFxD8CX/QO7B5OpbCCS55RxwQnDIwQneMLM78rI/pEXW7srezwdGevNmdt/77tPbebOjtxPA0JrKfqQRRyLichIx2bBtImobp+r7Pfn27pVsSaJa/cc3SST1vGL/Z/XfB7IfScRYRHxyLuIXpdZy127fuTZfqda8FjGzvrI6s3b7zonllfmri1cXr8+d/NOp07N/njs1tytxFnGdv/C3X7/1+n//uPRp5UQSZ+JS+f8L0RTHbpmKqXhWD7ExfyQiTmeJNq/Ly6YIIRlwPdiZUv3vsRwRh2MySrFvc9tkLL850MoBPVUtRVSBIZVs9v/yYCsC9FkxDijO7XtxHryXjZyNiKePIlriH6l9NhJj+bnR/idJfp5UyM53D+5C+VkZP949+l62RIfPIUZ2oZxONu5FxK/atX+S1+1g/ilOFn8aacPjsvRsRIzWX4t0h+VPNa33+++vOf6/j3SOv7EdsnjP1H9n+ee2L+p+u8xBxw/AcHp4tn4g38jWnh//s5FhMf6JNuOfiTbHrp0Y9PHv8dnaAbx1/FMc78fyz8jTpnFYNua52P4py80ZX75x/p1O5TeO/7IlK78YC/bD43sRR5viv58P5pLN9k/atH+2y+Uuy/jrZ1+f77Rt0PFXH0Qca3v+8/yKVpaaWV9ZLfKark/OLC1XFmdrP9uW8dGjf3/QqfxBx5+1f3SIf6v2z/JWuyzjw4sPVjptm9g2/vSr0eRSnhqt5/xvfn395lzEaHKhvktD/snNB7Z9eyr2KZ4ji//479r3/y3izxt6o8v4V/957Ukt1XqVtOv2b3lXyT2rdlmHTrL4F3bY/m93Wcb3/7r1m6as8SKxVfzjrU+VdPuaAwAAAAAAwDBK82uwSTq9mU7T6enaHN5fxv60cmNt/fdLN25dX4g4nv8/ZDktrnRP1taTbH2u/v+wxfrJpvU/RMShiHi3NJ6vT1+5UVkYdPAAAAAAAAAAAAAAAAAAAACwRxyoz/8v7lP9Xak2/78r64d7XDug53p5gzlgb9P/YXjl/b+bO7j+p/d1AfrL8R+Gl/4Pw0v/h+Gl/8Pwau7/3g9geOjvMLz0fxhe+j8AAAAAvJIO/fbhF0lEbPxlPF8yo/Vt5YHWDOi1xj4+1tUjpnpWF6C/uuvzLUq7XQ+g/zYv/Xcz/R94pXR1jv+0/uWAva8OMABJu8x8cFDduvM/bPtIAAAAAAAAAAAAAKAHjh0x/x+GVRofD7oKwIC8wER+3wEALzlf/Q/Dyzk+sN0s/o7fE2b+PwAAAAAAAAAAAAD0zUS+JOl0/RagE5Gm09MRP4uIg1FOlpYri7MR8fOI+LxU3petzw260gAAAAAAAAAAAAAAAAAAAPCKWbt959p8pbJ4szHxQ0tOjxPF3cW62blDnV8kUdwFtZ8hd5uIpP+FjkfEXoi9N4mRhpwkYiNr+T1RsZtrsSeqkebVGOCbEgAAAAAAAAAAAAAAAAAADKmGucftHX2/zzUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP57fv//nSeSbZ5n0DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+nnwIAAP///jAzVw==")
open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0)
semctl$GETZCNT(0x0, 0x0, 0xf, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000180)=0x7)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002e0000001801000020786c2500000400002020207b1af8ff00000034cc689217c990a142b3e78e00bfa100cc5521fdc8bc33a6c0000000000007010000f8ffffffb75e410008000000b70300"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x400000000000045c], 0x0, 0xffffffffff600000, 0x1, 0x1}}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = semget$private(0x0, 0x1, 0x184)
semop(r7, &(0x7f00000000c0)=[{0x0, 0x1000}, {0x2}], 0x4a)
semtimedop(r7, &(0x7f0000000000)=[{0x4, 0x5}], 0x1, 0x0)

1m23.348457569s ago: executing program 3 (id=515):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x9, 0x3, 0x7, 0xfffffffffffffffc, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "b4bc323ef77d1f000071849800000000dfff00"}}) (fail_nth: 1)

1m21.889048459s ago: executing program 3 (id=519):
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x3, 0xc4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4d, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1m20.644074175s ago: executing program 32 (id=519):
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x3, 0xc4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4d, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

17.53501193s ago: executing program 1 (id=610):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
keyctl$clear(0x11, 0xfffffffffffffffd)
listen(r0, 0xa)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f00000011c0)=[{{&(0x7f0000001200)={0xa, 0x4e24, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e80200000000000011"], 0x2e8}}], 0x1, 0x0)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001140)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000001180)='memory.events.local\x00', 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"cbe9f88dc436966861046be4526ad1b6606de57d4e48687c87976c9cc1366792adc0e119f87eaf903707fd42f61ea08fc60b1eabf9462c8a99613d6f1673a65219cc05c7831ed458254ed73d189a393d9b84fd8e4b81f6e4e52221903ab5dd6a668b8112d6a09638f9545c271d118b6ddb9cf8772129b7626a271c895b94e60be93d2afb3561ac06a899699ff33e51205099dc5528d33594ee58c21bda0324afa07735233137ea33d73885e4928f5065d08e0efb5330a2013169e2d98004d794f3d10f14d8cf5a6808e2ffb18b76fb498496c6c2432d4fc7bf3cf280ee302e753e5fd4e3e4846d1de4db6529a89e14903e8e265952c4f418b7025f201b3083167a3d9b396135c69632702ec612524683b162cea51b9c6ebca00e55127b7d4533263130b0572e60f76d71146a5af34e03205f47e5e4715d8ee719108a036f93a03a30be670ab1ac27b476acc959ee5be2cd5f382b6270a358d8bc810d05a60023aaa42e461c155f63f23c99b7e19ef61c2a145013aaec331db767b1b77a93e520fb81712ca167d1b193a6aad587a8259d1d52c92194acc7bbe750b6c26c6bf4f06afe381721cc7882ba2c467c811f6e39cf952c153494f1958e65d4165ade578671b9c52b4e570f3ae078a11275b55af0592a65c78ba91aed8d3680c56871644cbd5ed1845cd5312b57693f3c6403e875f4cb89c17572e35acce06922d6335a0e19324183659a6946c8cd2686cf2fbabb06585dbca2affcd72d6263613619c78add1a6caa7d36a03b04748d927fdc476559deb8206545840f9758032d33e5cef8d189e114933194163dde732ed4bb1df4a185a0e71a27b9d73927ad0a37d06326ccc5ecfd62f9d9055c44a0d377d75c61918f217c8f8592e6fb5fd95aee4931a4dc0c2e48915a7d6b24b5aaa7d51a23ab2b1a2d6b72cef26b13d115c1482efb3f6a231a4d406904ec09be8ece5da6a88f74688c839818b05da5dcbc81325e8ad5c450a703b5cbcdeaeaea8df128e54c32236930e75505b97a62fc01fda75bc0432d84269a2838afc287f6d67303ba91b5e599b4fa58916a20841a841a3f88b389ed29efbaf860a6bb9252c4fcb226982a9c272d94b3079b9bafaaa7a78ba6c4ae8d156d358bfd1805ba2d14efd831624b20a3dcb0d8ccfe6078f7f57cc3ad5185c52dc29ca5d26369eafc82abcb47760d86f8e334d988494b189dfe8e5e57d298323cbf011ce0beec4767edbf5c7d5415899b6b079ad0b57914b2561b51bd0a8292c23f79aaef7c00580fc9334e3d4c520324f212b9efe86484353fae1769ba5edcea81371d1ef5a7e1c09a6fafa410c89fa34e7dbde4c1dca98bcc94755ec95233a2afa999f77ba39a3f949d1f287ab5e9156352efe9e884529ba207850d0648b39596d24f27b74d200dd289a5ccf9dd96f7a6ba46eff497133db943dff7aafcb31db1d5c6d114244ccb960539aec1821e193f244eeaf5352167681eda09ad0ae462537bebc2427c1451bc1c5ce5961dd9f2dcf8dfa6eba53c3af27c613d7d20aaf22739860af856cab733597fac2346504eee380f882d2f49531e58de25568f3fc77b48ce43ce12193f24cebd1913d8f08ff862b119b8eb4eabc924d92408312ff545e83e3b0cbaeea245d6f8982263614ae2a5bf2ffe13595b3dfd181c351ddce53985434d052642f8631369345d5be37cd19c5fd6f62fce8ecad24013cadd8d8ba0b07696e91e214a5f436cd2bf5be2551f3e2e2bde7703739a82e651cd57c1185df5ac6c540d39fc437821a8b93262e00008a04192ca1f36ce1bb7a00c6300b144e6234bdcfe56a20c16e988871e6540a149ee772eba01084cc964c48386d3c51cf5ef1bd5df20ae589004273cd1741449a881a53ca479164e64781d29c4a2ff8d05318e68729c13aef537f3f263ba5eec80cbf02a7c704ed273e1323510704008e798b644c0810d50d17f7750f3b66d5b2e5069df7ebcc0e6af7482c8a0ee5ec5845fc91e7218639aa2563b6f29d40ca61eb43c9c84b1e31e08844a1ee89124e787782298e910dc0708458e29bc16bf19120e8d991ec44187c26b3ccd8f98a27eee7c1dc23e97bc4e274f94285478f8933a812c10fdd07766b1007755521d21cfca2dab2b3787cca6e8bf33a3d17cb32a17e595d1d94279aa5ae1db06951ce4181e2795e9738abaa67ebfc869ab064f2e02cbe527868922368174b3dbbbc114e93a41691ac9f995a56cf2de796d9b37170cded8a0277bc2b6de9e0a6fef660ae799cf38f35db14b9ff43172fbc0bb48bad3f525257baf55568dede1efa5816b34b251df15764807540b21a3b5532aaf6456d18deb6627e92c2ada2d81345509e947f192e6f3cf79dd43950b9fa193cb57a42a4b6e5aac0bdffcdfd45b191bfc452c28ad92663ce53c9db5a7906e367f5cf610a552e23d2e35e52e9b1d69839108e756dc9fb25ee91044dc7e15be1f91042f07350911e961e0274b57c55749bee1d2768de6fe9f164e5e4923dbb79d00c78ef92cbf8593c4c9be05f55180b6b5396e65ebbb14d2a68c148f3f37ea12ee8077f41dc5b702558ce6918aa5f637a700a498b40349d0e865a354330ebd11e052186620e11d3c93188cbdbf363a85f82cc37933e5da24be3ad786573cd2d0671287da620312947f6756953dd5fc71002fdd1ed2237c1dbc6b3f16740054e522b52229809a177f94d0b8d0a529881947a55472a66d0b14807a305217fef5499fb26aed2e375f091edd5660becf42a020d1883393bd0a6d5a0016efd1371578077c101d532903b40e581ed0eab700af3e67f5ac5565d3ef8d00b45c7f8ed4d6dfbf5851355a5c73449884c7a41f031ce41564f826a7227484033663bb809963efdd960e121198e2bd1fd2a8670b6cdb84883fb19215cf619acc0e4d2fb1673fd0c847fbfe0a80565968f7515ccecf8c90dcfd95b75c5c74507ddb7bb9de1eefcae281d0a8b2d4c03699661aa9862cdfe0aa7fc4925868eae37cd7bf6190b2eeb01012584a0d2854ce191cb38ded59b6e9853a1dc3d68ecc3afd261ffee8dc4b9f02fac34658ac9e543edff3f12fc168cf5cf68c444a93ad2500c2974912c4bf3153832c13cee8cdcb5e183bc20665ff303882a2e08be9aba8120ec85b7f8b8a5af4c6ad590f6d5fc4e8edf8df77b881adbacef032ca710a081a7ac1853ee2b01395398298bb8dbd1cb8dbe2deb3e3debf27b1eb38282ad551882e906645b3cf738940af6781532d5480e20abfd59b95a91c0643a1784e7d1f5bd47939d642ec387b99e4037452fe9680fba96b9835f847b81e239bb16869669e4476661bee6191c0e4329ec945bd5478c933401027ddd19c580eb7a752ea0f94e38af561232da66fa4ab8317eb2cb4a281cc11e14768271f76fd145fdfcee1e3a95beb77004837607a57e27bd8e358218fb0c5f51f844b449bafc68f289504f7921301af41a1bbe8c3176e628627c5b1be81cd8498bdecf4cdb711eef2a708a3e4707894d7cc12b813e4a5f21f6812ffa74b9e57f08bba381399d1d52d29ca03fe61f8345dda36d0e44f8a494906dac1ea1feb0e5829556708e0f0a3d00d384d0af2e1d4fd83902a14df23973148b3a7e8ec5fa9e6d3a0fcbcd46d72efae2d6b70b442d54ea312b939596da42c5cd53d2cbf31398680532d27ee4ad664dffe4bdd7a38406f15b8a009537ef724ac02ea65e9956a37d277f6b90bd9c13dcac08bdb84b4da7417ba67ab6a2050891009e13d4b96613ca8b5e62037c1537886f9c2efb07e782118306f1b750795b53936d834062aba04902535f631b33eef2961349c488ee3e5ea66cc1543619b505f2f6a113c992e8e214c3aad556fd64c69a39c7020127f7249cefe4d17c53a42c0c02557725dd14bc0524cd6d7bb34be5a66391ea6347ba3908eb4fc59f17e738167aaf7f091b99d2d372d5c29991ef66e079c583332afcd897dd9941caed8719b6b5088ccf946d42ebb13ccf46b0c43da5bc170446ceb3341c867aa15e3dad1b3971b634f2bfa56fb5ee1aa6c24dfae35764fffb2fe13ea9a168db0bfa9d7948097d92dbb2e1b1e2f3c6a8c427ca8cd7535307acc2e4839ab5bb7a6208c2def924ba3969a5a50701e34c0ab4ce26fcda86cde5a7622d84e75234eca23ac13520e06f46c5b49b37169d04f93b6266ffe1bd77b4f9a21181c95500a6795faf9fc44a12a67dd59b6c1b686bfdbcdebb4855ff412f4079dbd5b3590f1e6316c5b03000b246982025ae79a6844fb6277a50823a4698042e95d1a8321cca4b8529317177bf6eae49b53ffeed42963c2e91a137779f9bdf89fd25b5815fa44ca8b2045bc1fc61e26b7ca6dba7e4a91a50aa07f7a3f50c00061d013e6e7cef872e78b7556da030d0e9c5c76ed7adb007bea10039cb7957d5c8388d58ccb423134b56de589f6606feac0563d40011f6da0637ae5cccda1cb0e8f2b9faf59514ab0d9adf1801d1d1dda75151cdaa7188b13927bdc1dfebb57d970a8f383d86d1a18f10fcba3e6989d8bafa859a2a34b3d15fa10f35059e46ea49bb8c82909daa211ae4b1c01063c64e50458eb938c0915415638c4bcd07daf1bb8cece7c1e322afc1d75c48f41315d8a69da65111bb128a884e5e1fdc3fbd5e7fa2372180984ba02f72cde3ffcd86faafdedee3fb817fe58f742bc794b183e79c8803d65bbea6dc55d3a7a42e28a3557272df4a893c350b3a1d88ae85990e631a52a143bb8cb6256e04d61409f96c21ed2ac916533bda6b3a6a6e6dc90f9a941893fec05a27635f2fa5d916a47ae850e1520b50dba286bcb53acdced254f94a19a8edfbb19963b1b79d415501d566ec45563595ac22546b5bc1d884c418d6289c5a956e441512d6fee642f7338610a83d3c6a3516482da3ef7a04442f3e54b9b9f9a426f2f530be7ec8e918a2a879f9cc0b9e80593961c1eba7bc051318108932e3e03464a332aa16f45cb0f5f6718096c28ec033dc97f0c6bea1e316d9ba78063b74f8960e6d4d5bbd6f4e8f130561f9b6b8c43679d3ae072f647b5bb4b7291c219833f491facf952f3875ea3b3f6972f8936c42597b75879e39a6e55d691d3148363859979f4bc0fa5d8960dc212e98b8dc47d80b32ed9fbe87005aa1fd8ac7ced2fb332d876f846bebd62d27add4494882ec12e06381e0c0dd50a6404a724e17178cb08fef3f7eb9869fcb344754c6c07485d05aa3b45bcf94f55a1dd57cf95684a4029bb982d413273624f4f9cfee53c97d0c041cd177ff100e609b5be8d0ba9536f9495b790acdd293ba362d00cf1dcda448e9cf46e61d15b5e2cf6962fc860684157dd46f6ccacfbdd6f4e5b7da84a18ab5ed647bc1d4c62c9cbb74088b25fabc47157e1701c378d04c90b275728bc59f2d49dfbcfe5ae274ecd60d5f1d86495961d0aaee92c8ff74df11f3177e9adac0f485e61033217b058db53cfae66fe0554f64f93d4cd3e73db9fb361fbad7a947f36c22178a2f0a29c91e3aa0d0cfea6ce013ab62506da286ddd1acad5996a2ce7ca31316d3b0337097b10f3a5c5d2eee9ac9bcb96598750b7959a5cce52d6190b8e58b294cf7580c28d9a751b768043012968011c921d39eeeb64fb2a7c27ce7efecf6f3fd3270e035bf891253dd2413947f534c775105c48948fc4d3aec1b70d9700600a3d88cb4e8b37036b9bd198f4dac9b86d43772278b59bbbeb9322ba2b679d93031355f83d6bd1d72127ff2f59fd8c4535214cbf9a2bd53a144e56b110474b96d910617981ea15a6c7f16b2c8946df84e85e763952d56cfd96aac069", 0x1000}}, 0x1006)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket$inet(0x2, 0x2, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb05001800000000e545d7877a54"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'wg2\x00'})
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000140)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,nointegrity,iocharset=cp1251,integrity,nodiscard,noquota,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c00c38b4986bd7086e58f5d7fd70ab0f8e8bb0e5f5b35be555a19034ea00aa5cc6053411b1c187a24d1f68a37ecec3d26f9ba8207f6ce22b0a47e28485c69c14dc952b0c5e5f1ffe29eb2ce10e7e2a59e32a5a7ea7d8a6fa0b5e90476f3fa2cb4fcba14a881906678b3f96174c0ea0e4edc3068e37fec09729df129bb3e5b9490df2879472cb2e2"], 0x24, 0x621a, &(0x7f0000001500)="$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")
write$snapshot(r6, &(0x7f0000000040)='=k', 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4)
syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, &(0x7f0000001240)=ANY=[@ANYBLOB="00093b0000003b0ee7a0a136f73bef1f4e47b5b54dac70c142f5ecb499475d3d439fc45849b80702fb9083a2e5775943d428ef7ec739ca7849da3427d35c80828e9d5d08637aa015050352faeacb1ec1a0a375a9bc10254745dfbda7894700d639fbe40b5c6be139c86a6734be123907645a7bc32fb9b6320be1daa7099627b07d26cc7044cb66d08a3d1ccca4cdc6421dfe77a156113f5c397fecf40207d99bfa0628cc5cf287bc66679a5186e0bcb37bde13"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, 0x0, 0x0}, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}})
syz_usb_control_io(r5, &(0x7f0000001500)={0x2c, &(0x7f0000001300)={0x40, 0x7, 0xaf, {0xaf, 0x21, "cfdad370e53089f4d84917d656280a8fdb26a780f0156c8c99f1725ab3ef33f800c6103b114ecb91028cc65c0fef5292381077a83e202b8bbe5f3a8c5728664293fdd3a2b5f8239a5c489bdd073319833588d9f3a6cf61cbeeb92cc269301ff77f1c2c8e70052e39f583176bcc2c442c57b994d7b61ecb82594662ec905ba0a522a612d0bbbc62e9c787101a118ef2d48f75dffd8970355242a21912cb5fd98406759eb8b751542b083ea97009"}}, &(0x7f00000013c0)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "9d6693f89a45cccbfd7eb0406de963cad92bdf7f531f66f5b76da6b4487df7fb756240e2c87298edb00878a9b9fef6447f7b1af4284d934946222e6396f505c2c7e664e7895b94176dc89998cb145cdf6a331ceac5a80bf0acf0652bdd592f42742750eb95d41afd435c305b90"}}, &(0x7f0000001440)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000001480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x1, 0x3, 0xb8, "ca21c406", "58cebf04"}}, &(0x7f00000014c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x8, 0x20, 0xcf, 0x4, 0x51, 0x29}}}, &(0x7f0000001a00)={0x84, &(0x7f0000001540)={0x20, 0x14, 0xeb, "2dfff22c761e882c0490c4143ea4fef8efddb42ae82eca12e157680a411b6f83c6ba0569a3f2d16eeb95cdfd302552bd0023bfb74bbe36af67ae3f561075dbb67dab28847830af311cbf4410c61b695a8614ba0dff68cd2b26ca4b72e106992d1763c56dc43ddb330ac92ac948d1e89513d4149b37beafe7b0d9066155f7a4c1e65d1d4c2811a4a28e6d7eb00c123d3a38dd6332e5e71d8700c0b78cea29ef2492bb3c1db668c1601b53f26e7015046b298d4e1869d92647f7a8e0d1e05c902c38674fdd2fb7edced6dc43675628b7d5df6f043a2f39a717675ca896bc297055c06b22abb90048c7aae994"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001740)={0x40, 0x7, 0x2, 0x54f}, &(0x7f0000001780)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000017c0)={0x40, 0xb, 0x2, '=M'}, &(0x7f0000001800)={0x40, 0xf, 0x2}, &(0x7f0000001840)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001880)={0x40, 0x17, 0x6}, &(0x7f00000018c0)={0x40, 0x19, 0x2, "34d9"}, &(0x7f0000001900)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001940)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001980)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000019c0)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x40}}}}, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

15.379498059s ago: executing program 0 (id=613):
r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfefffffe}, 0x1c, 0x0}}], 0x1, 0x20080058)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_RESETEP(r3, 0x80045503, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r0, 0x1, 0x0)
fchdir(r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b)

15.335234492s ago: executing program 4 (id=614):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffc37, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="440100001a00ffff28bd7040030000000a010101000000000000000000000000ff020000000000000000000000000001000000004e240000000020a011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000004000000000000000084d46c000000ffffffff00000000000000f700000000000000000100000000000000000000000c3d000000000000fdffffffffffffffff07000000000000fcfffffffffffffffdffffffffffffff00000000000000000000000000000000b7cbdb136e7503000000000000fcffffffffffffffa3000000000000006d930000493d00000040000003000000033500000a000104600000000000000048e703006465666c617465ec8a56f9247a1b96e47200000000000000000004000000000000000000000000000000000100"/252], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r2, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)

12.645354298s ago: executing program 0 (id=615):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0)
shutdown(r3, 0x1)
recvmmsg(r3, 0x0, 0x0, 0x0, 0x0)

12.521694546s ago: executing program 1 (id=617):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0)
shutdown(r3, 0x1)
recvmmsg(r3, &(0x7f0000000840), 0x0, 0x0, 0x0)

12.453550841s ago: executing program 4 (id=618):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4", 0x49}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dc", 0xa2}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22", 0xb8}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081", 0x23}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b1", 0x1a}], 0x2}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x22f, &(0x7f0000000440)={0x0, 0x8ffd, 0x100, 0x0, 0x500002cf}, &(0x7f0000000000), 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x100000}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, 0x0, 0x844)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000))
shutdown(r5, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r4, @ANYRES16=r8, @ANYBLOB="050029bd708b000000002100000008000300", @ANYRES16=r7, @ANYBLOB="18017d80"], 0x134}}, 0x0)
lseek(r6, 0x1000000, 0x0)

11.369709695s ago: executing program 1 (id=619):
socketpair(0x10, 0x80000, 0x2, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000140)={{[0x3, 0x7ff, 0xfffffffa, 0x80000000]}, 0x0, 0x1, 0x9, 0x0, &(0x7f0000000040)=[{{@_ha_fsid={[0xfffffffb, 0x80000000]}, {0xb6c, 0x10, 0x8001, 0xfbf}}, 0x8, 0x0, '.\x00'}, {{@align=0xffff, {0xf, 0x6, 0x4, 0x4}}, 0x1, 0x0, '[\x00'}, {{@_ha_fsid={[0x1ff, 0x3ff]}, {0x101, 0xa, 0x8, 0x6}}, 0x3, 0x0, ':..%\x00'}, {{@_ha_fsid={[0x7, 0x8]}, {0x4, 0x5, 0x58, 0x7fff}}, 0xfffffff7, 0x0, '\x00'}, {{@align=0x8, {0x8, 0x1b, 0x3, 0x6}}, 0xfffffff9, 0x0, '&@%,{-+}\x00'}, {{@_ha_fsid={[0x4, 0x7]}, {0x7, 0x6, 0x5, 0x3ff}}, 0x6, 0x0, '*\'!(:^q\x00'}, {{@align=0x4a2, {0xf, 0x5, 0x2, 0xffffffff00000001}}, 0x0, 0x0, '$\x00'}]})
userfaultfd(0x800)
ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000180)={0x0, 0xe})
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @empty}, 0x60, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)='rose0\x00', 0x152a, 0x5, 0x9})
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x5, 0x202300)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=<r3=>0x0)
sched_setscheduler(r3, 0x6, &(0x7f0000000400)=0xff31)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[<r4=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x9, 0x4, 0x8})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000780)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x3, 0x0, r4})
r5 = getpid()
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x480, 0x0)
arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000840))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000009c0)={'sit0\x00', &(0x7f00000008c0)={'erspan0\x00', <r7=>0x0, 0x7840, 0x8, 0x0, 0x6, {{0x30, 0x4, 0x1, 0x9, 0xc0, 0x67, 0x0, 0x8, 0x2b, 0x0, @local, @private=0xa010101, {[@ssrr={0x89, 0x17, 0x1c, [@dev={0xac, 0x14, 0x14, 0x38}, @loopback, @loopback, @remote, @local]}, @rr={0x7, 0x13, 0x44, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @remote]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x2, 0x2}, {0x0, 0xa, "3d1d8cbb873a7e1f"}]}, @timestamp_prespec={0x44, 0x24, 0x87, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x1}, {@private=0xa010101, 0x3}, {@rand_addr=0x64010101, 0x9}, {@broadcast, 0x59}]}, @generic={0x82, 0xb, "7d37483c06ef7ea160"}, @noop, @timestamp_addr={0x44, 0x3c, 0x54, 0x1, 0x6, [{@broadcast, 0x8}, {@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@multicast2, 0x6}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@empty, 0x2}]}, @end]}}}}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000b40)={0x1, 0x1, 0x1, 0x0, 0x8})
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000b80)=""/4096)
sendmsg$nl_generic(r8, &(0x7f0000001f80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001bc0)={0x364, 0x2b, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@generic="c685ac3cc2d2b49f111b99a647044caafcf0245a481dfc24762d6131436779fb51543f6b91ba2007159dfec1ed19171b566abbdc6f05ccf8faa7ecb66a2470c881787a3a0e2584b816f6298d9abdd3d024358ddfc0bd75d88b58c0bab43f17df3e1064236648606f3f6dad4b4887c016a9230cb6ecd78d46ebefb37e34bde5d7a6bcdd11ef4f143e6e", @nested={0x1c, 0x137, 0x0, 0x1, [@nested={0x4, 0xfc}, @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x2a6, 0x134, 0x0, 0x1, [@generic="3693582b76a18312c9ac8f9cb9d020c336b862b6798de426ed2a37f126efd780ead60c53a17500954fdd6d11b45a6ea07db38956a0e9e76e31b2f7811bb80b4cd08edf56b5218aa9e598a009f467a47ec7cbc071c29eb1ac4e5d29567bc5931a030fca2a859c9940956f60f335828cd25f646e5453cee36a7bd2c3a9597a9f0d13b330fac96cc8309e051d342cd6f5124f2a6af15d38f266b33bebd91179d7106636e7437e7879c3b1cd2b416b5d7659a02956c7", @nested={0x4, 0x1a}, @typed={0xc, 0x4d, 0x0, 0x0, @u64=0x2}, @typed={0x6, 0x14b, 0x0, 0x0, @str=':\x00'}, @generic="b6c29dcdf7b10333806930bff4d9e68ff3db3210de723a122235a74991f782eda475eae1e714ae56afc8c3c17577ef635c6bddc9ef90d91eeae40b173c9c8cf62702d1427e1ea1daa477a3b0", @typed={0xf, 0x7, 0x0, 0x0, @str='/dev/vim2m\x00'}, @generic="bd68f802337cd1be5360908b7d31c780ab61e249c4ef1793aa42da5ed4e34cbc86e07dc86cad4a8267e8571180104be106ed9044e921b2448cc7ba0a6fa41fb784f5ce813fc832ff11f12b24ecbe5e33f17260525f9f6ed1dbddce47a6fbb28231d521de0a0378d198adb78895d6019d325883330bb9ab", @typed={0x8, 0xdc, 0x0, 0x0, @pid=r5}, @generic="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"]}]}, 0x364}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080)
r9 = fsopen(&(0x7f0000001fc0)='fusectl\x00', 0x1)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0)
r10 = syz_open_dev$hiddev(&(0x7f0000002000), 0x0, 0x44000)
ioctl$HIDIOCGSTRING(r10, 0x81044804, &(0x7f0000002040)={0x9b, "e9ab3e486a962113e67b8ae0e28bf2029eacb00855620d1ffda1e56b978c144e7cb5e9242084dd4e6d0679edec8342aa5327dd50a532e5d8465ebfe1fafbba722ea388ebbf4401dd97f3a6a216799d3062ba3675bc5b23bb40ac7f356a36133c1090116bc4bfdc1f8090b451d368cedd4a520f91899a5541d0292d3ab3a1f3e70201c04f67de0725740ce7c916a51f14d45b91d152bb88ca2611c7"})
ioctl$PPPIOCGIDLE64(r6, 0x8010743f, &(0x7f0000002100))
openat$comedi(0xffffffffffffff9c, &(0x7f0000002140)='/dev/comedi5\x00', 0x400, 0x0)
r11 = syz_genetlink_get_family_id$team(&(0x7f00000021c0), r1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002280)={'syztnl0\x00', &(0x7f0000002200)={'ip6tnl0\x00', <r12=>r7, 0x29, 0x3, 0x39, 0x5, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x8000, 0x40, 0x1, 0x1}})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002c80)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002700)={0x504, r11, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r7}, {0x2b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7858, 0x7, 0xfd, 0x3}, {0x7, 0x81, 0x4c, 0x3ade225}, {0x8, 0x8, 0x1, 0x90000000}, {0x2, 0x9, 0x3, 0xda}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x3, 0x8, 0xb3, 0x1}, {0x2, 0x1, 0x8, 0xffffc236}, {0xbef, 0x8, 0xc, 0x4}, {0x7, 0x2, 0xd, 0x3}, {0x0, 0xe2, 0x6, 0xa}, {0xb000, 0x9, 0x2, 0xffff}, {0x5, 0x5, 0x2, 0x7}, {0x9e, 0x9, 0x7, 0x7}, {0x0, 0x4, 0x40, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6b}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}]}, 0x504}, 0x1, 0x0, 0x0, 0x800}, 0x20000001)

10.797519145s ago: executing program 4 (id=620):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
get_mempolicy(&(0x7f0000000000), 0xfffffffffffffffc, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x4)
syz_open_dev$vim2m(&(0x7f0000000100), 0x490, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0), 0x0)
close(0x3)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0x1000000000000000, 0x4})

10.079280384s ago: executing program 2 (id=621):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000001400000000040100000000000000014100000014001700000000000004016b623a"], 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x40000c4)
move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000040), 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x1d8, 0x0, 0x0, 0x0, 0x10, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="03c900b84913e86d660f5e9f4330b3a82622898d3110b3a35cdc330b318688288fa3af73694420d4daf7e1db5cd12231257533d6cbc46eeb0579d0ce4fbe41b3c563502b2f22a8fa629ad1b92fced2a2053337487bcf4e2362b066a4a8ad88bdf998c3d492edbbd25b60d009e3afea2cf4a0419d71f8c5436e8e48f4a81dff9f0ae160a4d831794581b0510689aca83342377cedf37fb44e68a8f0d1d60feba5719bec0986651432f34b6f9ae8386ba8f07fca7e2289bfe6e02265a6b16376cca1c651"], 0xbc)
syz_emit_ethernet(0x73, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3d, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x8, {0x0, 0x6, "84c25c", 0x0, 0x21, 0x0, @loopback, @private2, [@fragment={0x2b, 0x0, 0xa, 0x1, 0x0, 0x8, 0x64}], "bad99e24db"}}}}}}}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)

9.434563679s ago: executing program 4 (id=622):
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x40)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}})

9.155009948s ago: executing program 4 (id=623):
r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfefffffe}, 0x1c, 0x0}}], 0x1, 0x20080058)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000140)={0x1, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r0, 0x1, 0x0)
fchdir(r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b)

7.921189503s ago: executing program 4 (id=624):
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, <r0=>0x0})
move_pages(r0, 0x3, &(0x7f0000000040)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000080)=[0xe, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0)
syz_usb_connect$midi(0x5, 0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="1201100100000008732b2900400001020301090230000101051001090400000101013005062402013d01062402025e0109050902ff03ed160209250105566426025e", @ANYRESHEX=r0], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x156}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9d", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5c", 0x45}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd35", 0x2a}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket(0x6, 0x3, 0x3ff)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
fdatasync(r2)
r3 = socket(0x1, 0x5, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0)
sendto$inet6(r3, 0x0, 0x0, 0x400c804, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffec1, @local, 0xffff8003}, 0x1c)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'hsr0\x00', 0x2}, 0x18)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4)
close(r5)
r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x6, &(0x7f0000000080)={0x0, "14abd83463604d70b41d4008e300000000fcffffff000000000000006d803e8800"}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000440}, 0x140000f0)
socket$kcm(0xa, 0x2, 0x0)

7.657498421s ago: executing program 1 (id=625):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26, 0x80000000}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r3, 0x0, 0x4, 0xfffffffffffffa72})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x1, r3, 0x0, 0x1000, 0x2000})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000})
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x14, r1, 0x1, 0x50bd27, 0x0, {0x1c}}, 0x14}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x3}]}, 0x48}, 0x4, 0x700000000000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x3a4, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x1b8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "55a2d753eb43040fc937f2a9efa7e077e8b06d64b500eb27397a577f9be627b2"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa6ba}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x66}, @NL802154_KEY_ATTR_ID={0x84, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc1a9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x68, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1e}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "abfeadf07506193018af34e497afe92eb35fe90937c540106828536fca9aa133"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "45659ad750014afe142ebfce50d8837d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8b080c60b56d4cd9ec046fff2387dc08a0b0a69c4d82979c3d0e82fc35c8bb9b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8d3bbbc6a4f441980cb9de5b1d97e5b2"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8866b22eefd3a0c4ab2f88b21a7da3ac"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf0}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x17c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5837b0534ccc1c9b22f9a5d1aa3e8f5acf2751f22ead9d219ef2d8e9f77d89e1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81253aeb86ef9f79210a22f1f1377440"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1b6702162ff3b32393f88ab8ff8069f7c6b209c8b20775c17b3f85fe4bcde146"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6d844f27d5ea9af73130c9b6d8f7c8eb93a7fd3fe73104cd51bf4e44467e0d79"}, @NL802154_KEY_ATTR_ID={0xd0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ea3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "142e41f1d9d12f77356358d891ed5a7e"}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x6004004}, 0x8854)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010604ad0c002b800800040007000000140003007665746830"], 0x4c}}, 0x48000)

6.22354956s ago: executing program 0 (id=626):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
close(r0)

6.028160944s ago: executing program 1 (id=627):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0)
shutdown(r3, 0x1)
recvmmsg(r3, &(0x7f0000000840), 0x0, 0x0, 0x0)

4.914768781s ago: executing program 1 (id=628):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000064c0)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x6180, &(0x7f0000000340)="$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")
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd28, 0x0, {{@in=@private=0xa010102, @in=@private, 0x0, 0xecdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3c}, {@in=@broadcast, 0x4d2, 0x33}, @in6=@loopback, {0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x1, 0x1000000}, {0x0, 0x0, 0x80000000, 0x3}, {}, 0x0, 0xfffffffc, 0x2, 0x2, 0x0, 0x2e}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60e0b776a01e0d8e}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24008051}, 0xc000)
setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000040)=0x181, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
write$vga_arbiter(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='lock m'], 0x9)
unlink(&(0x7f0000000000)='./file1\x00')
mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0)

4.843543676s ago: executing program 2 (id=629):
syz_clone3(&(0x7f0000000340)={0x1103000, &(0x7f00000000c0), 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (rerun: 32)
fchdir(r0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x280, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2aa}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0xc, 0x3, "4d42786dd5283aed"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6089f2609a8b80d2d02e531487ea6185fb271eaf536890cc7b2da695d81d13d8cdadc7"}}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5645}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x41}, 0x4000)

3.701596724s ago: executing program 2 (id=630):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000019100)={0x8, 'veth0_to_batadv\x00', {'rose0\x00'}})
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40242)
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
read$FUSE(r3, 0x0, 0x0)
write$uinput_user_dev(r3, &(0x7f00000008c0)={'syz1\x00', {0x3, 0x10, 0x5, 0x7}, 0x2d, [0x1, 0x3, 0x8000, 0x200, 0x5, 0x4, 0x7fffffff, 0x40, 0x35, 0x1, 0x3ff, 0x0, 0xfff, 0x10001, 0x7, 0xf, 0x2eaf, 0x3ff, 0x7ff, 0x34d, 0x1, 0x8, 0x2, 0x8, 0x30ad, 0x9, 0x6, 0x6, 0xd, 0x678, 0x0, 0x9, 0x3, 0xba, 0x80000000, 0x4, 0xfffffff4, 0x1ff, 0x0, 0x4, 0x2, 0x542b02e5, 0x37f7, 0x6, 0x5, 0x9, 0x54b4, 0xa, 0x400, 0x0, 0xfffffffc, 0x81, 0xfffffffc, 0x6, 0xab, 0x8, 0x10000, 0xfffffffd, 0xd, 0x0, 0x2, 0x5, 0x81, 0xff], [0x80000000, 0x8, 0x9, 0x5, 0x6, 0x9, 0x5, 0x9, 0x0, 0x6, 0xf33, 0x9, 0xc, 0x7, 0x5, 0x4, 0x7, 0x8, 0x0, 0x2, 0xc38, 0xb, 0x3, 0x8, 0xffff, 0x1, 0x4, 0x3, 0x1, 0x2, 0x1, 0x6, 0x70, 0x3, 0x4, 0x10000, 0x401, 0xd, 0x4, 0xf, 0x1, 0xffff, 0x9, 0xc, 0x6, 0x4, 0x1, 0x4, 0x5, 0xcd47, 0xc, 0x9, 0x3, 0x8001, 0x5, 0x3, 0x8, 0x2, 0x2, 0xb, 0xb, 0x6, 0xdc2, 0x3], [0xfff, 0x3, 0xa, 0x3, 0xffff, 0x5, 0xfffffffe, 0x2, 0x465, 0x9, 0xfc, 0xb6, 0x8, 0x3, 0x0, 0x8001, 0x8978, 0x6, 0x0, 0x1, 0xfffffffb, 0x34b, 0x400, 0x7fff, 0x10001, 0xe, 0x5, 0xfffffff9, 0x9, 0x0, 0x80000000, 0x1, 0x10000, 0x4, 0xffffff80, 0x0, 0x6, 0x7, 0xe0, 0x6, 0xfffffff4, 0x2, 0xb0b87eb, 0xfffffff7, 0x2, 0x7fffffff, 0x2, 0xfffffffb, 0x10, 0xfffffffc, 0x0, 0x3, 0x6, 0x0, 0xc00000, 0x3, 0x5, 0x9, 0x1, 0x0, 0x0, 0x7, 0x7, 0x801], [0xff, 0x8000000, 0x9, 0x1, 0xfffffff9, 0xa, 0x1, 0x7f, 0x0, 0x90, 0xc00a839, 0x5e, 0x80000001, 0x4, 0x7, 0x2, 0x3, 0x6, 0x18, 0x500, 0xdc, 0x5, 0x6, 0x5, 0x9f59, 0x5, 0x9, 0x0, 0x28, 0x3, 0x7, 0x0, 0x200, 0x0, 0x0, 0x2, 0xfffffffa, 0x2, 0x9, 0x3, 0x5, 0x3, 0xff, 0x6, 0x3, 0x2, 0x7, 0xfffff800, 0x10, 0x0, 0x3, 0x7ff, 0x3ff, 0xf, 0xc, 0x2, 0x9, 0x81, 0x101, 0x9, 0x8, 0x7, 0x7f, 0x7f]}, 0x45c)
r4 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r4, 0x114, 0x5, &(0x7f0000000100)=""/102400, &(0x7f00000000c0)=0x19000)
mmap(&(0x7f0000a76000/0x1000)=nil, 0x1000, 0x100000a, 0x12, r0, 0xffffd000)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x106408, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0, @ANYBLOB="5d8aa2967546021e527c4097db5dbf98c418397c0724e91379af69189bf3e6e67f0000000000060004a76b2251d4d4f0572fe11f33340c8a55c960ca87c2531ed2a395a7cf563b5e421a1db265e6532f8ff4e868a275ac8ab1d4a0fdebc161505d533bab03727ddae6"], 0x0, 0x1e7, &(0x7f0000000140)="$eJzslj+L1EAYxp+ZxGQj4gewsbgDz8JcklWxOVgbGy0E/xwWgouXO05zHu6l0AMRP4G9nYUfQ1hbP4SsgiiINmo9Mn+STCSR3RjcwvcH9+bJzcw777yzPLsgCOK/5cP7nzPxY+PTAMAxrMI3///sVHO4Nf/d4NuTN1cubT6//eqtPwuDejZ/4f1duJhedJCbdyGEsMdXzfM6eKlvgOO00ZtgCI2+A46bRqdguGX0PUvvy/lhuL2bpeHd/WxLikiGWIZEhmG9PuDrM4Ytqz5mjR88Prw/zrJ00o84YtLWhpo7N/1S1jcANqz67PsKoauNrP7F4IiNHoLhmtEX4Be90S2pzn/5hFvld/54fg9th3x4HJijER9r59/uqbONwpNbdVoOsL7v/u9EgC6rHL2quNH+6vGQTg5Wlt8WuL0lFD7w74qXu809+fVI319Z6lP9vtimo5Yhr9NHq/JP8ZLhlOVP2kpeqC+L9XxPPg/P7O6Nd9Kd9EGSDM9HZ6PoXLKujEjHZgtU+QPlz0er/EHbXI95eDTO80msY/me6NjkuFz5H8faCpQ3Szf1fsv7HUCxKTN/XD2lWnNaiycIglgiJ8GUJytfLsTI/OYXJcnVZRdKEARBEARBEARBEERnfgUAAP//P99WlQ==")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x101000, 0x348)

3.3378309s ago: executing program 2 (id=631):
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x40)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}})

3.137092203s ago: executing program 2 (id=632):
r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfefffffe}, 0x1c, 0x0}}], 0x1, 0x20080058)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000140)={0x1, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r0, 0x1, 0x0)
fchdir(r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b)

3.118721064s ago: executing program 0 (id=633):
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000380)=""/55, 0x37)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x3)
r2 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0})

1.897192259s ago: executing program 2 (id=634):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a4", 0x61}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08", 0x1d}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.746689249s ago: executing program 0 (id=635):
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x3, 0xc4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4d, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
mmap(&(0x7f00008d8000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0x9f6f2000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
unshare(0x6020400)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

0s ago: executing program 0 (id=636):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r0=>0x0})
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x21400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f000004ca80)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r4, 0x10d, 0xda, &(0x7f0000001040), &(0x7f0000000440)=0x4)
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r5 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004"], 0x188}}, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010000000000000000040007002e00000800170009000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000050)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r2)
recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

kernel console output (not intermixed with test programs):

: 00002000000000c0 RSI: 000000004008b100 RDI: 0000000000000004
[  317.672925][ T7194] RBP: 00007faa33391090 R08: 0000000000000000 R09: 0000000000000000
[  317.680919][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.688907][ T7194] R13: 00007faa32816038 R14: 00007faa32815fa0 R15: 00007ffe2d0a65b8
[  317.696910][ T7194]  </TASK>
[  319.140516][ T7194] ERROR: Out of memory at tomoyo_realpath_from_path.
[  319.740580][ T5816] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  319.877158][ T7203] loop3: detected capacity change from 0 to 64
[  319.915074][ T7203] hfs: part requires an argument
[  319.920198][ T7203] hfs: unable to parse mount options
[  319.949057][ T5816] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  319.960587][ T5816] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  319.974177][ T5816] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  320.114087][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  320.131252][ T5816] usb 2-1: SerialNumber: syz
[  320.430668][ T7205] FAULT_INJECTION: forcing a failure.
[  320.430668][ T7205] name failslab, interval 1, probability 0, space 0, times 0
[  320.440735][ T7199] hsr0: entered promiscuous mode
[  320.462805][ T7199] macsec1: entered allmulticast mode
[  320.495748][ T7199] hsr0: entered allmulticast mode
[  320.501110][ T7205] CPU: 0 PID: 7205 Comm: syz.3.375 Not tainted syzkaller #0
[  320.508417][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  320.518509][ T7205] Call Trace:
[  320.521812][ T7205]  <TASK>
[  320.524770][ T7205]  dump_stack_lvl+0x18c/0x250
[  320.529474][ T7205]  ? show_regs_print_info+0x20/0x20
[  320.534684][ T7205]  ? load_image+0x420/0x420
[  320.539208][ T7205]  ? __might_sleep+0xe0/0xe0
[  320.543810][ T7205]  ? __lock_acquire+0x7d40/0x7d40
[  320.548861][ T7205]  should_fail_ex+0x39d/0x4d0
[  320.553591][ T7205]  should_failslab+0x9/0x20
[  320.558141][ T7205]  slab_pre_alloc_hook+0x59/0x310
[  320.563190][ T7205]  ? kvmalloc_node+0x70/0x180
[  320.567922][ T7205]  ? kvmalloc_node+0x70/0x180
[  320.572628][ T7205]  __kmem_cache_alloc_node+0x53/0x250
[  320.578035][ T7205]  ? mutex_lock_nested+0x20/0x20
[  320.583136][ T7205]  ? kvmalloc_node+0x70/0x180
[  320.587860][ T7205]  __kmalloc_node+0xa4/0x230
[  320.592497][ T7205]  kvmalloc_node+0x70/0x180
[  320.597054][ T7205]  seq_read_iter+0x1fa/0xd50
[  320.601693][ T7205]  seq_read+0x175/0x220
[  320.605903][ T7205]  ? seq_open+0x140/0x140
[  320.610361][ T7205]  ? debugfs_file_get+0x352/0x450
[  320.615434][ T7205]  ? debugfs_real_fops+0xa0/0xa0
[  320.620382][ T7205]  ? trace_raw_output_contention_end+0xd0/0xd0
[  320.626566][ T7205]  ? end_current_label_crit_section+0x149/0x170
[  320.632852][ T7205]  full_proxy_read+0x110/0x1c0
[  320.637655][ T7205]  ? full_proxy_llseek+0x1b0/0x1b0
[  320.642765][ T7205]  vfs_read+0x28b/0x970
[  320.646955][ T7205]  ? kernel_read+0x1e0/0x1e0
[  320.651581][ T7205]  ? __fget_files+0x28/0x4b0
[  320.656186][ T7205]  ? __fget_files+0x28/0x4b0
[  320.660814][ T7205]  ? __fget_files+0x43d/0x4b0
[  320.665524][ T7205]  ? __fdget_pos+0x2a3/0x330
[  320.670124][ T7205]  ? ksys_read+0x75/0x260
[  320.674486][ T7205]  ksys_read+0x150/0x260
[  320.678767][ T7205]  ? vfs_write+0x990/0x990
[  320.683205][ T7205]  ? lockdep_hardirqs_on+0x98/0x150
[  320.688449][ T7205]  do_syscall_64+0x55/0xa0
[  320.692873][ T7205]  ? clear_bhb_loop+0x40/0x90
[  320.697586][ T7205]  ? clear_bhb_loop+0x40/0x90
[  320.702287][ T7205]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  320.708188][ T7205] RIP: 0033:0x7fbdcf99c819
[  320.712613][ T7205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  320.732226][ T7205] RSP: 002b:00007fbdd082b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  320.740670][ T7205] RAX: ffffffffffffffda RBX: 00007fbdcfc15fa0 RCX: 00007fbdcf99c819
[  320.748653][ T7205] RDX: 0000000000002020 RSI: 0000200000005180 RDI: 0000000000000003
[  320.756641][ T7205] RBP: 00007fbdd082b090 R08: 0000000000000000 R09: 0000000000000000
[  320.764650][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  320.772738][ T7205] R13: 00007fbdcfc16038 R14: 00007fbdcfc15fa0 R15: 00007ffef3d61bc8
[  320.780740][ T7205]  </TASK>
[  320.793712][ T7199] hsr_slave_0: entered allmulticast mode
[  320.850360][ T7199] hsr_slave_1: entered allmulticast mode
[  320.888664][ T7206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.373'.
[  320.981502][ T7199] hsr0: left allmulticast mode
[  320.986761][ T7199] hsr_slave_0: left allmulticast mode
[  321.030275][ T7199] hsr_slave_1: left allmulticast mode
[  322.658511][ T5816] usb 2-1: 0:2 : does not exist
[  322.679698][ T5816] usb 2-1: unit 255 not found!
[  324.176251][   T28] audit: type=1326 audit(1775885233.759:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4deaf9c819 code=0x7fc00000
[  324.200649][ T5816] usb 2-1: USB disconnect, device number 3
[  324.243349][   T28] audit: type=1326 audit(1775885233.789:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4deaf9c819 code=0x7fc00000
[  324.333525][ T7228] loop1: detected capacity change from 0 to 512
[  324.335173][ T6814] udevd[6814]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  324.380065][   T28] audit: type=1326 audit(1775885233.959:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4deaf9c819 code=0x7fc00000
[  324.535857][ T7233] FAULT_INJECTION: forcing a failure.
[  324.535857][ T7233] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.560446][ T7228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.569512][ T7233] CPU: 0 PID: 7233 Comm: syz.2.384 Not tainted syzkaller #0
[  324.580253][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  324.590528][ T7233] Call Trace:
[  324.593827][ T7233]  <TASK>
[  324.596767][ T7233]  dump_stack_lvl+0x18c/0x250
[  324.601494][ T7233]  ? show_regs_print_info+0x20/0x20
[  324.606727][ T7233]  ? load_image+0x420/0x420
[  324.611255][ T7233]  ? __might_fault+0xaa/0x120
[  324.615943][ T7233]  ? __lock_acquire+0x7d40/0x7d40
[  324.620992][ T7233]  should_fail_ex+0x39d/0x4d0
[  324.625691][ T7233]  _copy_from_user+0x2f/0xe0
[  324.630315][ T7233]  ___sys_sendmsg+0x1c7/0x360
[  324.635003][ T7233]  ? get_pid_task+0x20/0x1e0
[  324.639613][ T7233]  ? __sys_sendmsg+0x2a0/0x2a0
[  324.644406][ T7233]  ? __lock_acquire+0x7d40/0x7d40
[  324.649468][ T7233]  __se_sys_sendmsg+0x1c2/0x2b0
[  324.654334][ T7233]  ? __x64_sys_sendmsg+0x80/0x80
[  324.659298][ T7233]  ? lockdep_hardirqs_on+0x98/0x150
[  324.664510][ T7233]  do_syscall_64+0x55/0xa0
[  324.668940][ T7233]  ? clear_bhb_loop+0x40/0x90
[  324.673634][ T7233]  ? clear_bhb_loop+0x40/0x90
[  324.678329][ T7233]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  324.684235][ T7233] RIP: 0033:0x7f4deaf9c819
[  324.688666][ T7233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.708303][ T7233] RSP: 002b:00007f4debef5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  324.716735][ T7233] RAX: ffffffffffffffda RBX: 00007f4deb215fa0 RCX: 00007f4deaf9c819
[  324.724718][ T7233] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000005
[  324.732702][ T7233] RBP: 00007f4debef5090 R08: 0000000000000000 R09: 0000000000000000
[  324.740683][ T7233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.748670][ T7233] R13: 00007f4deb216038 R14: 00007f4deb215fa0 R15: 00007fff4cf448e8
[  324.756679][ T7233]  </TASK>
[  324.759789][    C0] vkms_vblank_simulate: vblank timer overrun
[  324.820435][ T7228] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.938717][ T7228] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4057: comm syz.1.381: Allocating blocks 18-19 which overlap fs metadata
[  325.000546][ T7228] Quota error (device loop1): write_blk: dquota write failed
[  325.008512][ T7228] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  325.080353][ T7228] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.381: Failed to acquire dquot type 0
[  325.264660][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.678729][ T7296] loop0: detected capacity change from 0 to 2048
[  334.755366][ T7296] UDF-fs: warning (device loop0): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount.
[  334.819523][ T7296] proc: Unknown parameter '{.á\]^:'
[  339.335288][ T7321] loop0: detected capacity change from 0 to 1024
[  342.697202][ T7339] syzkaller0: entered promiscuous mode
[  342.710425][ T7339] syzkaller0: entered allmulticast mode
[  342.840446][ T5811] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  343.010531][ T5811] usb 4-1: device descriptor read/64, error -71
[  343.243529][ T7341] loop2: detected capacity change from 0 to 32768
[  343.266897][ T7348] netlink: 56 bytes leftover after parsing attributes in process `syz.1.414'.
[  343.286015][ T5811] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  343.316196][ T7341] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  343.450343][ T5811] usb 4-1: device descriptor read/64, error -71
[  343.571410][ T5811] usb usb4-port1: attempt power cycle
[  345.205401][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[  345.241331][ T5811] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  345.259615][ T7341] (syz.2.411,7341,1):ocfs2_double_lock:1190 ERROR: status = -2
[  345.271494][ T5811] usb 4-1: device descriptor read/8, error -71
[  345.378402][ T7352] syz.2.411 (7352) used greatest stack depth: 18768 bytes left
[  345.474949][ T5779] ocfs2: Unmounting device (7,2) on (node local)
[  345.540718][ T5811] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  345.771778][ T5811] usb 4-1: device not accepting address 6, error -71
[  345.809558][ T5811] usb usb4-port1: unable to enumerate USB device
[  346.025313][ T7361] loop2: detected capacity change from 0 to 8
[  346.187111][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'.
[  347.110499][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  347.161916][ T7363] loop0: detected capacity change from 0 to 32768
[  347.255077][ T7363] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  347.294602][ T7363] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  347.301164][    T9] usb 3-1: Using ep0 maxpacket: 16
[  347.307510][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.307533][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.307546][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  347.307572][    T9] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  347.307587][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.352484][    T9] usb 3-1: config 0 descriptor??
[  347.475833][ T7363] XFS (loop0): Ending clean mount
[  347.513299][ T7363] XFS (loop0): Quotacheck needed: Please wait.
[  347.648204][ T5816] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  347.690342][ T5816] XFS (loop0): Unmount and run xfs_repair
[  347.713527][ T5816] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  347.744442][ T5816] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  347.773823][ T5816] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  347.810379][ T5816] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  347.860443][ T5816] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  347.879669][ T5816] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  347.900101][ T5816] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  348.069426][ T5816] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  348.083319][ T5816] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  348.109562][ T5855] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74
[  348.873713][ T7363] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  351.480507][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  351.860477][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  351.866568][    T9] usbhid: probe of 3-1:0.0 failed with error -71
[  351.922951][    T9] usb 3-1: USB disconnect, device number 5
[  352.477368][ T7398] loop0: detected capacity change from 0 to 16
[  352.509688][ T7398] erofs: (device loop0): erofs_read_superblock: invalid sb_extslots 4208 (more than a fs block)
[  355.391107][ T7425] IPVS: set_ctl: invalid protocol: 222 172.30.0.1:20004
[  355.410396][ T7428] binder: 7417:7428 ioctl c0285840 0 returned -22
[  357.161976][ T7443] Illegal XDP return value 1544176144 on prog  (id 13) dev N/A, expect packet loss!
[  357.199214][ T7445] Zero length message leads to an empty skb
[  357.220178][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'.
[  357.240807][ T5853] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  357.279716][ T7448] loop3: detected capacity change from 0 to 1024
[  357.288000][ T7448] EXT4-fs: Ignoring removed nobh option
[  357.336626][ T7449] loop2: detected capacity change from 0 to 1024
[  357.351748][ T7448] EXT4-fs: Ignoring removed nomblk_io_submit option
[  357.367769][ T7449] hfsplus: unable to parse mount options
[  357.431086][ T7448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.467396][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.570420][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.571376][ T7447] EXT4-fs: Ignoring removed orlov option
[  357.597926][ T5853] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  357.617570][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.640358][ T5853] usb 2-1: config 0 descriptor??
[  357.677465][ T7447] EXT4-fs (loop3): can't enable nombcache during remount
[  357.768447][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.116895][ T5853] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  358.132221][ T5853] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  358.132265][ T5853] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  358.132282][ T5853] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  358.132298][ T5853] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  358.132314][ T5853] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  358.132330][ T5853] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  358.156070][ T5853] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  358.321076][ T5853] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE
[  359.368254][ T5853] cp2112 0003:10C4:EA90.0001: error setting SMBus config
[  359.392328][ T5853] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71
[  359.464366][ T5853] usb 2-1: USB disconnect, device number 4
[  361.680417][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  361.903973][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.930535][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.955365][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  361.988959][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  362.025351][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.041734][    T9] usb 3-1: config 0 descriptor??
[  362.410511][ T5853] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  362.479844][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.479884][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.479911][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.479938][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.479963][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.479989][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.480022][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.480047][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.480073][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.480098][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.480123][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.480148][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.480174][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.482282][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.482311][    T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  362.483752][    T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  362.499630][    T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  362.603041][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.644507][ T7482] loop1: detected capacity change from 0 to 32768
[  362.680632][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.680678][ T5853] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  362.680749][ T5853] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  362.680794][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.686864][ T5853] usb 4-1: config 0 descriptor??
[  362.779246][ T7482] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  362.860508][ T7482] XFS (loop1): Ending clean mount
[  362.870107][ T7482] XFS (loop1): Quotacheck needed: Please wait.
[  362.993531][ T7482] XFS (loop1): Quotacheck: Done.
[  363.082522][ T7500] FAULT_INJECTION: forcing a failure.
[  363.082522][ T7500] name failslab, interval 1, probability 0, space 0, times 0
[  363.094662][ T5853] plantronics 0003:047F:FFFF.0003: unknown global tag 0xd
[  363.100378][ T7500] CPU: 0 PID: 7500 Comm: syz.2.447 Not tainted syzkaller #0
[  363.109632][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  363.119816][ T7500] Call Trace:
[  363.123138][ T7500]  <TASK>
[  363.123251][ T5853] plantronics 0003:047F:FFFF.0003: item 0 0 1 13 parsing failed
[  363.126095][ T7500]  dump_stack_lvl+0x18c/0x250
[  363.138455][ T7500]  ? show_regs_print_info+0x20/0x20
[  363.143699][ T7500]  ? load_image+0x420/0x420
[  363.148257][ T7500]  ? __might_sleep+0xe0/0xe0
[  363.149262][ T5853] plantronics 0003:047F:FFFF.0003: parse failed
[  363.153042][ T7500]  ? __lock_acquire+0x7d40/0x7d40
[  363.153075][ T7500]  should_fail_ex+0x39d/0x4d0
[  363.153109][ T7500]  should_failslab+0x9/0x20
[  363.153136][ T7500]  slab_pre_alloc_hook+0x59/0x310
[  363.153167][ T7500]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  363.153191][ T7500]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  363.153212][ T7500]  __kmem_cache_alloc_node+0x53/0x250
[  363.153246][ T7500]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  363.153266][ T7500]  __kmalloc+0xa4/0x230
[  363.166636][ T5853] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22
[  363.169229][ T7500]  tomoyo_realpath_from_path+0xe3/0x5d0
[  363.219032][ T7500]  tomoyo_path_number_perm+0x248/0x620
[  363.224553][ T7500]  ? tomoyo_path_number_perm+0x217/0x620
[  363.230208][ T7500]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  363.235702][ T7500]  ? ksys_write+0x1c4/0x260
[  363.240267][ T7500]  ? __fget_files+0x28/0x4b0
[  363.244890][ T7500]  ? __fget_files+0x28/0x4b0
[  363.249519][ T7500]  security_file_ioctl+0x70/0xa0
[  363.254474][ T7500]  __se_sys_ioctl+0x48/0x170
[  363.259077][ T7500]  do_syscall_64+0x55/0xa0
[  363.263502][ T7500]  ? clear_bhb_loop+0x40/0x90
[  363.268197][ T7500]  ? clear_bhb_loop+0x40/0x90
[  363.272902][ T7500]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  363.278798][ T7500] RIP: 0033:0x7f4deaf9c819
[  363.283237][ T7500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  363.302981][ T7500] RSP: 002b:00007f4debed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  363.311467][ T7500] RAX: ffffffffffffffda RBX: 00007f4deb216090 RCX: 00007f4deaf9c819
[  363.319482][ T7500] RDX: 00002000000000c0 RSI: 0000000081044804 RDI: 0000000000000004
[  363.327500][ T7500] RBP: 00007f4debed4090 R08: 0000000000000000 R09: 0000000000000000
[  363.335521][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.343528][ T7500] R13: 00007f4deb216128 R14: 00007f4deb216090 R15: 00007fff4cf448e8
[  363.345174][ T7501] FAULT_INJECTION: forcing a failure.
[  363.345174][ T7501] name failslab, interval 1, probability 0, space 0, times 0
[  363.351542][ T7500]  </TASK>
[  363.354820][ T7500] ERROR: Out of memory at tomoyo_realpath_from_path.
[  363.389048][ T7501] CPU: 1 PID: 7501 Comm: syz.3.445 Not tainted syzkaller #0
[  363.396427][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  363.406709][ T7501] Call Trace:
[  363.410018][ T7501]  <TASK>
[  363.412990][ T7501]  dump_stack_lvl+0x18c/0x250
[  363.417726][ T7501]  ? show_regs_print_info+0x20/0x20
[  363.423003][ T7501]  ? load_image+0x420/0x420
[  363.427517][ T7501]  ? __might_sleep+0xe0/0xe0
[  363.432133][ T7501]  ? __lock_acquire+0x7d40/0x7d40
[  363.437186][ T7501]  should_fail_ex+0x39d/0x4d0
[  363.441904][ T7501]  should_failslab+0x9/0x20
[  363.446464][ T7501]  slab_pre_alloc_hook+0x59/0x310
[  363.451541][ T7501]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  363.457299][ T7501]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  363.463052][ T7501]  __kmem_cache_alloc_node+0x53/0x250
[  363.468490][ T7501]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  363.474217][ T7501]  __kmalloc+0xa4/0x230
[  363.478398][ T7501]  tomoyo_realpath_from_path+0xe3/0x5d0
[  363.483963][ T7501]  tomoyo_path_number_perm+0x248/0x620
[  363.489441][ T7501]  ? tomoyo_path_number_perm+0x217/0x620
[  363.495180][ T7501]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  363.500677][ T7501]  ? ksys_write+0x1c4/0x260
[  363.505207][ T7501]  ? __fget_files+0x28/0x4b0
[  363.509800][ T7501]  ? __fget_files+0x28/0x4b0
[  363.514397][ T7501]  security_file_ioctl+0x70/0xa0
[  363.519351][ T7501]  __se_sys_ioctl+0x48/0x170
[  363.523959][ T7501]  do_syscall_64+0x55/0xa0
[  363.528385][ T7501]  ? clear_bhb_loop+0x40/0x90
[  363.533065][ T7501]  ? clear_bhb_loop+0x40/0x90
[  363.537745][ T7501]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  363.542153][ T5869] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  363.543635][ T7501] RIP: 0033:0x7fbdcf99c819
[  363.543659][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  363.543678][ T7501] RSP: 002b:00007fbdd080a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  363.583595][ T7501] RAX: ffffffffffffffda RBX: 00007fbdcfc16090 RCX: 00007fbdcf99c819
[  363.591583][ T7501] RDX: 0000000000000000 RSI: 00000000c018480d RDI: 0000000000000004
[  363.599589][ T7501] RBP: 00007fbdd080a090 R08: 0000000000000000 R09: 0000000000000000
[  363.607604][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.615594][ T7501] R13: 00007fbdcfc16128 R14: 00007fbdcfc16090 R15: 00007ffef3d61bc8
[  363.623577][ T7501]  </TASK>
[  363.655392][ T7501] ERROR: Out of memory at tomoyo_realpath_from_path.
[  363.730397][ T5869] usb 2-1: Using ep0 maxpacket: 8
[  363.747459][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short
[  363.766028][ T5869] usb 2-1: config 7 has an invalid interface number: 130 but max is 0
[  363.774550][ T5869] usb 2-1: config 7 has no interface number 0
[  363.781273][ T5869] usb 2-1: config 7 interface 130 has no altsetting 0
[  363.792355][ T5869] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=1c.83
[  363.803059][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.811856][ T5869] usb 2-1: Product: syz
[  363.816183][ T5869] usb 2-1: Manufacturer: syz
[  363.821306][ T5869] usb 2-1: SerialNumber: syz
[  364.046697][ T5869] ums-cypress 2-1:7.130: USB Mass Storage device detected
[  364.120412][ T7488] usb 3-1: string descriptor 0 read error: -71
[  364.129926][    T9] usb 4-1: USB disconnect, device number 7
[  364.145459][ T5869] usb 2-1: USB disconnect, device number 5
[  364.568609][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  364.797551][ T7518] input: syz1 as /devices/virtual/input/input10
[  365.001177][ T7464] usb 3-1: USB disconnect, device number 6
[  365.066645][ T7529] FAULT_INJECTION: forcing a failure.
[  365.066645][ T7529] name failslab, interval 1, probability 0, space 0, times 0
[  365.082970][ T7529] CPU: 1 PID: 7529 Comm: syz.2.460 Not tainted syzkaller #0
[  365.090331][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  365.100429][ T7529] Call Trace:
[  365.103738][ T7529]  <TASK>
[  365.106682][ T7529]  dump_stack_lvl+0x18c/0x250
[  365.111414][ T7529]  ? show_regs_print_info+0x20/0x20
[  365.116674][ T7529]  ? load_image+0x420/0x420
[  365.121227][ T7529]  ? __might_sleep+0xe0/0xe0
[  365.125952][ T7529]  ? __lock_acquire+0x7d40/0x7d40
[  365.131035][ T7529]  should_fail_ex+0x39d/0x4d0
[  365.135763][ T7529]  should_failslab+0x9/0x20
[  365.140401][ T7529]  slab_pre_alloc_hook+0x59/0x310
[  365.145480][ T7529]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  365.151242][ T7529]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  365.157003][ T7529]  __kmem_cache_alloc_node+0x53/0x250
[  365.162428][ T7529]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  365.168186][ T7529]  __kmalloc+0xa4/0x230
[  365.172392][ T7529]  tomoyo_realpath_from_path+0xe3/0x5d0
[  365.177998][ T7529]  tomoyo_path_number_perm+0x248/0x620
[  365.183503][ T7529]  ? tomoyo_path_number_perm+0x217/0x620
[  365.189191][ T7529]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  365.194733][ T7529]  ? ksys_write+0x1c4/0x260
[  365.199290][ T7529]  ? __fget_files+0x28/0x4b0
[  365.203906][ T7529]  ? __fget_files+0x28/0x4b0
[  365.208557][ T7529]  security_file_ioctl+0x70/0xa0
[  365.213560][ T7529]  __se_sys_ioctl+0x48/0x170
[  365.218193][ T7529]  do_syscall_64+0x55/0xa0
[  365.222816][ T7529]  ? clear_bhb_loop+0x40/0x90
[  365.227534][ T7529]  ? clear_bhb_loop+0x40/0x90
[  365.232257][ T7529]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.238299][ T7529] RIP: 0033:0x7f4deaf9c819
[  365.242736][ T7529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.262565][ T7529] RSP: 002b:00007f4debef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  365.271044][ T7529] RAX: ffffffffffffffda RBX: 00007f4deb215fa0 RCX: 00007f4deaf9c819
[  365.279061][ T7529] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  365.287079][ T7529] RBP: 00007f4debef5090 R08: 0000000000000000 R09: 0000000000000000
[  365.295095][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.303107][ T7529] R13: 00007f4deb216038 R14: 00007f4deb215fa0 R15: 00007fff4cf448e8
[  365.311139][ T7529]  </TASK>
[  365.332060][ T7529] ERROR: Out of memory at tomoyo_realpath_from_path.
[  365.369469][ T7529] input: syz1 as /devices/virtual/input/input11
[  365.479251][ T7540] FAULT_INJECTION: forcing a failure.
[  365.479251][ T7540] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  365.499010][ T7540] CPU: 1 PID: 7540 Comm: syz.1.463 Not tainted syzkaller #0
[  365.506383][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  365.516488][ T7540] Call Trace:
[  365.519809][ T7540]  <TASK>
[  365.522784][ T7540]  dump_stack_lvl+0x18c/0x250
[  365.527524][ T7540]  ? show_regs_print_info+0x20/0x20
[  365.530339][ T5869] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  365.532750][ T7540]  ? load_image+0x420/0x420
[  365.544767][ T7540]  ? __might_fault+0xaa/0x120
[  365.549482][ T7540]  ? __lock_acquire+0x7d40/0x7d40
[  365.554546][ T7540]  should_fail_ex+0x39d/0x4d0
[  365.559248][ T7540]  _copy_from_user+0x2f/0xe0
[  365.563855][ T7540]  ___sys_sendmsg+0x1c7/0x360
[  365.568546][ T7540]  ? get_pid_task+0x20/0x1e0
[  365.573179][ T7540]  ? __sys_sendmsg+0x2a0/0x2a0
[  365.578059][ T7540]  ? __lock_acquire+0x7d40/0x7d40
[  365.583119][ T7540]  __se_sys_sendmsg+0x1c2/0x2b0
[  365.587992][ T7540]  ? __x64_sys_sendmsg+0x80/0x80
[  365.592964][ T7540]  ? lockdep_hardirqs_on+0x98/0x150
[  365.598183][ T7540]  do_syscall_64+0x55/0xa0
[  365.602605][ T7540]  ? clear_bhb_loop+0x40/0x90
[  365.607296][ T7540]  ? clear_bhb_loop+0x40/0x90
[  365.611991][ T7540]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.617898][ T7540] RIP: 0033:0x7faa3259c819
[  365.622325][ T7540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.642031][ T7540] RSP: 002b:00007faa33391028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  365.650477][ T7540] RAX: ffffffffffffffda RBX: 00007faa32815fa0 RCX: 00007faa3259c819
[  365.658491][ T7540] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004
[  365.666494][ T7540] RBP: 00007faa33391090 R08: 0000000000000000 R09: 0000000000000000
[  365.674482][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.682471][ T7540] R13: 00007faa32816038 R14: 00007faa32815fa0 R15: 00007ffe2d0a65b8
[  365.690473][ T7540]  </TASK>
[  365.870319][ T5869] usb 4-1: Using ep0 maxpacket: 32
[  365.884028][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.910318][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.921074][ T5869] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  365.930173][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.956585][ T5869] usb 4-1: config 0 descriptor??
[  365.973121][ T5869] hub 4-1:0.0: USB hub found
[  366.090766][ T5811] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  366.199552][ T5869] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  366.260694][ T5811] usb 3-1: device descriptor read/64, error -71
[  366.386327][ T5869] usbhid 4-1:0.0: can't add hid device: -71
[  366.510152][ T5869] usbhid: probe of 4-1:0.0 failed with error -71
[  366.580503][ T5811] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  366.695292][ T5869] usb 4-1: USB disconnect, device number 8
[  366.743132][ T5811] usb 3-1: device descriptor read/64, error -71
[  366.870609][ T5811] usb usb3-port1: attempt power cycle
[  367.017986][ T7546] loop0: detected capacity change from 0 to 32768
[  367.047291][ T7546] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  367.167887][ T7546] XFS (loop0): Ending clean mount
[  367.300438][ T5811] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  367.314679][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  367.354288][ T5811] usb 3-1: device descriptor read/8, error -71
[  367.515030][ T7580] loop3: detected capacity change from 0 to 128
[  367.636138][ T7580] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 322)
[  367.646916][ T7580] FAT-fs (loop3): Filesystem has been set read-only
[  367.663788][ T7580] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 322)
[  367.678550][ T7580] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 322)
[  367.799231][ T5811] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  367.851453][ T5811] usb 3-1: device descriptor read/8, error -71
[  367.992312][ T7585] loop0: detected capacity change from 0 to 128
[  368.780996][ T5811] usb usb3-port1: unable to enumerate USB device
[  368.839670][ T7589] FAULT_INJECTION: forcing a failure.
[  368.839670][ T7589] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  368.852962][ T7589] CPU: 1 PID: 7589 Comm: syz.3.474 Not tainted syzkaller #0
[  368.860282][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  368.870363][ T7589] Call Trace:
[  368.873677][ T7589]  <TASK>
[  368.876638][ T7589]  dump_stack_lvl+0x18c/0x250
[  368.881390][ T7589]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  368.887064][ T7589]  ? show_regs_print_info+0x20/0x20
[  368.892299][ T7589]  ? load_image+0x420/0x420
[  368.896856][ T7589]  should_fail_ex+0x39d/0x4d0
[  368.901581][ T7589]  _copy_from_user+0x2f/0xe0
[  368.906210][ T7589]  ___sys_sendmsg+0x1c7/0x360
[  368.911099][ T7589]  ? lock_chain_count+0x20/0x20
[  368.916011][ T7589]  ? __sys_sendmsg+0x2a0/0x2a0
[  368.920878][ T7589]  __se_sys_sendmsg+0x1c2/0x2b0
[  368.925771][ T7589]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  368.931455][ T7589]  ? __x64_sys_sendmsg+0x80/0x80
[  368.936444][ T7589]  ? lockdep_hardirqs_on+0x98/0x150
[  368.941681][ T7589]  do_syscall_64+0x55/0xa0
[  368.946126][ T7589]  ? clear_bhb_loop+0x40/0x90
[  368.950836][ T7589]  ? clear_bhb_loop+0x40/0x90
[  368.955555][ T7589]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  368.961481][ T7589] RIP: 0033:0x7fbdcf99c819
[  368.965930][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.985581][ T7589] RSP: 002b:00007fbdd07e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  368.994124][ T7589] RAX: ffffffffffffffda RBX: 00007fbdcfc16180 RCX: 00007fbdcf99c819
[  369.002125][ T7589] RDX: 0000000000000844 RSI: 0000200000009b40 RDI: 0000000000000005
[  369.010128][ T7589] RBP: 00007fbdd07e9090 R08: 0000000000000000 R09: 0000000000000000
[  369.018134][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.026135][ T7589] R13: 00007fbdcfc16218 R14: 00007fbdcfc16180 R15: 00007ffef3d61bc8
[  369.034151][ T7589]  </TASK>
[  369.449884][ T5778] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  370.195659][ T7602] bond0: (slave bond_slave_1): Releasing backup interface
[  370.322402][ T5816] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  370.620891][ T5816] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  370.659817][ T5816] usb 4-1: config 0 has no interface number 0
[  370.667464][ T7464] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  370.686831][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'.
[  370.687037][ T5816] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  370.720252][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.738668][ T5816] usb 4-1: Product: syz
[  370.743128][ T5816] usb 4-1: Manufacturer: syz
[  370.747789][ T5816] usb 4-1: SerialNumber: syz
[  370.765218][ T5816] usb 4-1: config 0 descriptor??
[  370.868102][ T7464] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  370.887628][ T7464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.906917][ T7464] usb 2-1: Product: syz
[  370.923304][ T7464] usb 2-1: Manufacturer: syz
[  370.928129][ T7464] usb 2-1: SerialNumber: syz
[  370.956355][ T7464] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  371.664482][ T7601] vlan2: entered promiscuous mode
[  371.673562][ T5816] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[  371.690116][ T7601] bond0: entered promiscuous mode
[  371.695090][ T5816] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[  371.703212][ T5770] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  371.726904][ T7601] bond_slave_0: entered promiscuous mode
[  371.730146][ T5816] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[  371.749801][ T5816] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[  371.759484][ T5811] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  371.769197][ T7601] bond_slave_1: entered promiscuous mode
[  371.794106][ T5816] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  371.880521][ T5770] usb 1-1: Using ep0 maxpacket: 32
[  371.889069][ T5770] usb 1-1: config 4 has an invalid interface number: 128 but max is 0
[  371.907725][ T5770] usb 1-1: config 4 has no interface number 0
[  371.918800][ T5770] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.943334][ T5770] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.958596][ T5770] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  371.968044][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.008476][ T5770] hub 1-1:4.128: USB hub found
[  372.031948][ T7464] usb 4-1: USB disconnect, device number 9
[  372.055385][ T7464] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  372.088156][ T7464] keyspan 4-1:0.133: device disconnected
[  372.200584][ T5816] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  372.213119][ T5770] hub 1-1:4.128: 19 ports detected
[  372.218488][ T5770] hub 1-1:4.128: Using single TT (err -22)
[  372.227735][ T5770] hub 1-1:4.128: insufficient power available to use all downstream ports
[  372.380359][ T5816] usb 3-1: Using ep0 maxpacket: 8
[  372.391128][ T5816] usb 3-1: config 0 has no interfaces?
[  372.409718][ T5816] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  372.419076][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.424614][ T5770] hub 1-1:4.128: hub_hub_status failed (err = -71)
[  372.427233][ T5816] usb 3-1: Product: syz
[  372.439014][ T5816] usb 3-1: Manufacturer: syz
[  372.442743][ T5770] hub 1-1:4.128: config failed, can't get hub status (err -71)
[  372.475004][ T5816] usb 3-1: SerialNumber: syz
[  372.492356][ T5816] usb 3-1: config 0 descriptor??
[  372.501216][ T5770] usb 1-1: USB disconnect, device number 8
[  372.765913][ T7634] FAULT_INJECTION: forcing a failure.
[  372.765913][ T7634] name failslab, interval 1, probability 0, space 0, times 0
[  372.778873][ T7634] CPU: 0 PID: 7634 Comm: syz.3.483 Not tainted syzkaller #0
[  372.786195][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  372.796265][ T7634] Call Trace:
[  372.799559][ T7634]  <TASK>
[  372.802503][ T7634]  dump_stack_lvl+0x18c/0x250
[  372.807214][ T7634]  ? show_regs_print_info+0x20/0x20
[  372.812442][ T7634]  ? load_image+0x420/0x420
[  372.816962][ T7634]  ? __might_sleep+0xe0/0xe0
[  372.821573][ T7634]  ? __lock_acquire+0x7d40/0x7d40
[  372.826613][ T7634]  should_fail_ex+0x39d/0x4d0
[  372.831324][ T7634]  should_failslab+0x9/0x20
[  372.835852][ T7634]  slab_pre_alloc_hook+0x59/0x310
[  372.840986][ T7634]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  372.846725][ T7634]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  372.852465][ T7634]  __kmem_cache_alloc_node+0x53/0x250
[  372.857876][ T7634]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  372.863606][ T7634]  __kmalloc+0xa4/0x230
[  372.867791][ T7634]  tomoyo_realpath_from_path+0xe3/0x5d0
[  372.873365][ T7634]  tomoyo_path_number_perm+0x248/0x620
[  372.878855][ T7634]  ? tomoyo_path_number_perm+0x217/0x620
[  372.884512][ T7634]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  372.890003][ T7634]  ? ksys_write+0x1c4/0x260
[  372.894561][ T7634]  ? __fget_files+0x28/0x4b0
[  372.899186][ T7634]  ? __fget_files+0x28/0x4b0
[  372.903805][ T7634]  security_file_ioctl+0x70/0xa0
[  372.908763][ T7634]  __se_sys_ioctl+0x48/0x170
[  372.913386][ T7634]  do_syscall_64+0x55/0xa0
[  372.917810][ T7634]  ? clear_bhb_loop+0x40/0x90
[  372.922676][ T7634]  ? clear_bhb_loop+0x40/0x90
[  372.927366][ T7634]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  372.933273][ T7634] RIP: 0033:0x7fbdcf99c819
[  372.937742][ T7634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  372.957448][ T7634] RSP: 002b:00007fbdd07e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  372.965969][ T7634] RAX: ffffffffffffffda RBX: 00007fbdcfc16180 RCX: 00007fbdcf99c819
[  372.973957][ T7634] RDX: 0000200000000140 RSI: 00000000c02064b2 RDI: 0000000000000007
[  372.981952][ T7634] RBP: 00007fbdd07e9090 R08: 0000000000000000 R09: 0000000000000000
[  372.989937][ T7634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  372.997922][ T7634] R13: 00007fbdcfc16218 R14: 00007fbdcfc16180 R15: 00007ffef3d61bc8
[  373.005921][ T7634]  </TASK>
[  373.043785][ T5770] usb 3-1: USB disconnect, device number 11
[  373.051078][ T5811] usb 2-1: Service connection timeout for: 256
[  373.057512][ T5811] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  373.082889][ T7634] ERROR: Out of memory at tomoyo_realpath_from_path.
[  373.094234][ T5811] ath9k_htc: Failed to initialize the device
[  373.106011][ T5811] usb 2-1: ath9k_htc: USB layer deinitialized
[  373.576854][   T23] usb 2-1: USB disconnect, device number 6
[  375.502271][ T7646] FAULT_INJECTION: forcing a failure.
[  375.502271][ T7646] name failslab, interval 1, probability 0, space 0, times 0
[  375.570445][ T7646] CPU: 1 PID: 7646 Comm: syz.1.487 Not tainted syzkaller #0
[  375.577801][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  375.587902][ T7646] Call Trace:
[  375.591183][ T7646]  <TASK>
[  375.594115][ T7646]  dump_stack_lvl+0x18c/0x250
[  375.598816][ T7646]  ? show_regs_print_info+0x20/0x20
[  375.604036][ T7646]  ? load_image+0x420/0x420
[  375.608577][ T7646]  ? __might_sleep+0xe0/0xe0
[  375.613189][ T7646]  ? __lock_acquire+0x7d40/0x7d40
[  375.618215][ T7646]  should_fail_ex+0x39d/0x4d0
[  375.622932][ T7646]  should_failslab+0x9/0x20
[  375.627467][ T7646]  slab_pre_alloc_hook+0x59/0x310
[  375.632516][ T7646]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  375.638246][ T7646]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  375.643968][ T7646]  __kmem_cache_alloc_node+0x53/0x250
[  375.649358][ T7646]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  375.655079][ T7646]  __kmalloc+0xa4/0x230
[  375.659248][ T7646]  tomoyo_realpath_from_path+0xe3/0x5d0
[  375.664834][ T7646]  tomoyo_path_number_perm+0x248/0x620
[  375.670346][ T7646]  ? tomoyo_path_number_perm+0x217/0x620
[  375.676019][ T7646]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  375.681529][ T7646]  ? ksys_write+0x1c4/0x260
[  375.686117][ T7646]  ? __fget_files+0x28/0x4b0
[  375.690750][ T7646]  ? __fget_files+0x28/0x4b0
[  375.695398][ T7646]  security_file_ioctl+0x70/0xa0
[  375.700381][ T7646]  __se_sys_ioctl+0x48/0x170
[  375.705020][ T7646]  do_syscall_64+0x55/0xa0
[  375.709467][ T7646]  ? clear_bhb_loop+0x40/0x90
[  375.714183][ T7646]  ? clear_bhb_loop+0x40/0x90
[  375.718900][ T7646]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  375.724831][ T7646] RIP: 0033:0x7faa3259c819
[  375.729279][ T7646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.748935][ T7646] RSP: 002b:00007faa33391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  375.757399][ T7646] RAX: ffffffffffffffda RBX: 00007faa32815fa0 RCX: 00007faa3259c819
[  375.765408][ T7646] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  375.773507][ T7646] RBP: 00007faa33391090 R08: 0000000000000000 R09: 0000000000000000
[  375.781524][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.789739][ T7646] R13: 00007faa32816038 R14: 00007faa32815fa0 R15: 00007ffe2d0a65b8
[  375.797770][ T7646]  </TASK>
[  375.817855][ T7646] ERROR: Out of memory at tomoyo_realpath_from_path.
[  376.020938][ T7654] FAULT_INJECTION: forcing a failure.
[  376.020938][ T7654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  376.090468][ T7654] CPU: 1 PID: 7654 Comm: syz.3.489 Not tainted syzkaller #0
[  376.097866][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  376.107982][ T7654] Call Trace:
[  376.111305][ T7654]  <TASK>
[  376.114273][ T7654]  dump_stack_lvl+0x18c/0x250
[  376.119009][ T7654]  ? show_regs_print_info+0x20/0x20
[  376.124270][ T7654]  ? load_image+0x420/0x420
[  376.128836][ T7654]  ? __lock_acquire+0x7d40/0x7d40
[  376.133924][ T7654]  ? snprintf+0xe9/0x140
[  376.138223][ T7654]  should_fail_ex+0x39d/0x4d0
[  376.142985][ T7654]  _copy_to_user+0x2f/0xa0
[  376.147452][ T7654]  simple_read_from_buffer+0xe7/0x150
[  376.152980][ T7654]  proc_fail_nth_read+0x1e8/0x260
[  376.158057][ T7654]  ? proc_fault_inject_write+0x360/0x360
[  376.163740][ T7654]  ? fsnotify_perm+0x271/0x5e0
[  376.168553][ T7654]  ? proc_fault_inject_write+0x360/0x360
[  376.174228][ T7654]  vfs_read+0x28b/0x970
[  376.178432][ T7654]  ? kernel_read+0x1e0/0x1e0
[  376.183068][ T7654]  ? __fget_files+0x28/0x4b0
[  376.187757][ T7654]  ? __fget_files+0x28/0x4b0
[  376.192392][ T7654]  ? __fget_files+0x43d/0x4b0
[  376.197212][ T7654]  ? __fdget_pos+0x2a3/0x330
[  376.201847][ T7654]  ? ksys_read+0x75/0x260
[  376.206243][ T7654]  ksys_read+0x150/0x260
[  376.210531][ T7654]  ? vfs_write+0x990/0x990
[  376.214991][ T7654]  ? lockdep_hardirqs_on+0x98/0x150
[  376.220227][ T7654]  do_syscall_64+0x55/0xa0
[  376.224711][ T7654]  ? clear_bhb_loop+0x40/0x90
[  376.229424][ T7654]  ? clear_bhb_loop+0x40/0x90
[  376.234144][ T7654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  376.240087][ T7654] RIP: 0033:0x7fbdcf95d04e
[  376.244539][ T7654] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  376.264190][ T7654] RSP: 002b:00007fbdd07e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  376.272660][ T7654] RAX: ffffffffffffffda RBX: 00007fbdd07e96c0 RCX: 00007fbdcf95d04e
[  376.280685][ T7654] RDX: 000000000000000f RSI: 00007fbdd07e90a0 RDI: 0000000000000006
[  376.288792][ T7654] RBP: 00007fbdd07e9090 R08: 0000000000000000 R09: 0000000000000000
[  376.296802][ T7654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.304812][ T7654] R13: 00007fbdcfc16218 R14: 00007fbdcfc16180 R15: 00007ffef3d61bc8
[  376.312854][ T7654]  </TASK>
[  376.762595][ T7660] loop1: detected capacity change from 0 to 128
[  377.399430][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'.
[  377.432139][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'.
[  377.474170][ T7672] nbd: must specify at least one socket
[  377.917144][ T7681] loop1: detected capacity change from 0 to 32768
[  377.926897][ T7681] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.495 (7681)
[  377.950162][ T7681] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  377.960572][ T7681] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  377.969332][ T7681] BTRFS info (device loop1): enabling disk space caching
[  377.976539][ T7681] BTRFS info (device loop1): force clearing of disk cache
[  377.983790][ T7681] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  377.993749][ T7681] BTRFS info (device loop1): use zstd compression, level 3
[  378.001108][ T7681] BTRFS info (device loop1): disk space caching is enabled
[  378.097165][ T7687] loop0: detected capacity change from 0 to 512
[  378.173902][ T7681] BTRFS info (device loop1): enabling ssd optimizations
[  378.181152][ T7681] BTRFS info (device loop1): auto enabling async discard
[  378.230314][ T7681] BTRFS info (device loop1): rebuilding free space tree
[  378.286798][ T7681] BTRFS info (device loop1): disabling free space tree
[  378.293972][ T7681] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  378.304132][ T7681] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  378.499928][ T7709] loop0: detected capacity change from 0 to 1024
[  378.841965][ T7713] FAULT_INJECTION: forcing a failure.
[  378.841965][ T7713] name failslab, interval 1, probability 0, space 0, times 0
[  378.869265][ T7713] CPU: 1 PID: 7713 Comm: syz.0.500 Not tainted syzkaller #0
[  378.876641][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  378.886744][ T7713] Call Trace:
[  378.890064][ T7713]  <TASK>
[  378.893028][ T7713]  dump_stack_lvl+0x18c/0x250
[  378.897768][ T7713]  ? show_regs_print_info+0x20/0x20
[  378.903024][ T7713]  ? load_image+0x420/0x420
[  378.907576][ T7713]  ? __might_sleep+0xe0/0xe0
[  378.912209][ T7713]  ? __lock_acquire+0x7d40/0x7d40
[  378.917283][ T7713]  should_fail_ex+0x39d/0x4d0
[  378.922009][ T7713]  should_failslab+0x9/0x20
[  378.926556][ T7713]  slab_pre_alloc_hook+0x59/0x310
[  378.931628][ T7713]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  378.937392][ T7713]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  378.940806][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  378.943213][ T7713]  __kmem_cache_alloc_node+0x53/0x250
[  378.943251][ T7713]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  378.949610][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  378.954854][ T7713]  __kmalloc+0xa4/0x230
[  378.954894][ T7713]  tomoyo_realpath_from_path+0xe3/0x5d0
[  378.954930][ T7713]  tomoyo_path_number_perm+0x248/0x620
[  378.982212][ T7713]  ? tomoyo_path_number_perm+0x217/0x620
[  378.987913][ T7713]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  378.993600][ T7713]  ? ksys_write+0x1c4/0x260
[  378.998274][ T7713]  ? __fget_files+0x28/0x4b0
[  379.002916][ T7713]  ? __fget_files+0x28/0x4b0
[  379.007567][ T7713]  security_file_ioctl+0x70/0xa0
[  379.012552][ T7713]  __se_sys_ioctl+0x48/0x170
[  379.017213][ T7713]  do_syscall_64+0x55/0xa0
[  379.021696][ T7713]  ? clear_bhb_loop+0x40/0x90
[  379.026423][ T7713]  ? clear_bhb_loop+0x40/0x90
[  379.031160][ T7713]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  379.037114][ T7713] RIP: 0033:0x7f76d7d9c819
[  379.041579][ T7713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.061250][ T7713] RSP: 002b:00007f76d5ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  379.069726][ T7713] RAX: ffffffffffffffda RBX: 00007f76d8015fa0 RCX: 00007f76d7d9c819
[  379.077753][ T7713] RDX: 0000200000000680 RSI: 00000000c018aec0 RDI: 0000000000000004
[  379.085862][ T7713] RBP: 00007f76d5ff6090 R08: 0000000000000000 R09: 0000000000000000
[  379.093887][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  379.101913][ T7713] R13: 00007f76d8016038 R14: 00007f76d8015fa0 R15: 00007ffe25cac528
[  379.109969][ T7713]  </TASK>
[  379.598661][ T7717] fs-verity: sha512 using implementation "sha512-avx2"
[  379.626226][ T7717] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4)
[  379.671333][ T7713] ERROR: Out of memory at tomoyo_realpath_from_path.
[  380.056695][ T7724] loop0: detected capacity change from 0 to 8
[  380.185653][ T5767] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  380.492528][ T7731] FAULT_INJECTION: forcing a failure.
[  380.492528][ T7731] name failslab, interval 1, probability 0, space 0, times 0
[  380.523015][ T7731] CPU: 0 PID: 7731 Comm: syz.0.505 Not tainted syzkaller #0
[  380.530390][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  380.540493][ T7731] Call Trace:
[  380.543813][ T7731]  <TASK>
[  380.546762][ T7731]  dump_stack_lvl+0x18c/0x250
[  380.551450][ T7731]  ? show_regs_print_info+0x20/0x20
[  380.556663][ T7731]  ? load_image+0x420/0x420
[  380.561178][ T7731]  ? __might_sleep+0xe0/0xe0
[  380.565802][ T7731]  ? __lock_acquire+0x7d40/0x7d40
[  380.570938][ T7731]  should_fail_ex+0x39d/0x4d0
[  380.575642][ T7731]  should_failslab+0x9/0x20
[  380.580171][ T7731]  slab_pre_alloc_hook+0x59/0x310
[  380.585265][ T7731]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  380.591000][ T7731]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  380.596734][ T7731]  __kmem_cache_alloc_node+0x53/0x250
[  380.602137][ T7731]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  380.607868][ T7731]  __kmalloc+0xa4/0x230
[  380.612051][ T7731]  tomoyo_realpath_from_path+0xe3/0x5d0
[  380.617619][ T7731]  tomoyo_path_number_perm+0x248/0x620
[  380.623098][ T7731]  ? tomoyo_path_number_perm+0x217/0x620
[  380.628748][ T7731]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  380.634228][ T7731]  ? ksys_write+0x1c4/0x260
[  380.638772][ T7731]  ? __fget_files+0x28/0x4b0
[  380.643388][ T7731]  ? __fget_files+0x28/0x4b0
[  380.648001][ T7731]  security_file_ioctl+0x70/0xa0
[  380.652950][ T7731]  __se_sys_ioctl+0x48/0x170
[  380.657554][ T7731]  do_syscall_64+0x55/0xa0
[  380.661980][ T7731]  ? clear_bhb_loop+0x40/0x90
[  380.666671][ T7731]  ? clear_bhb_loop+0x40/0x90
[  380.671361][ T7731]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  380.677266][ T7731] RIP: 0033:0x7f76d7d9c819
[  380.681715][ T7731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  380.701337][ T7731] RSP: 002b:00007f76d5fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  380.709771][ T7731] RAX: ffffffffffffffda RBX: 00007f76d8016090 RCX: 00007f76d7d9c819
[  380.717758][ T7731] RDX: 0000200000000300 RSI: 00000000c02064b6 RDI: 0000000000000003
[  380.725741][ T7731] RBP: 00007f76d5fd5090 R08: 0000000000000000 R09: 0000000000000000
[  380.733725][ T7731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.741705][ T7731] R13: 00007f76d8016128 R14: 00007f76d8016090 R15: 00007ffe25cac528
[  380.749704][ T7731]  </TASK>
[  380.752753][    C0] vkms_vblank_simulate: vblank timer overrun
[  381.086618][ T7731] ERROR: Out of memory at tomoyo_realpath_from_path.
[  381.622461][ T7739] loop2: detected capacity change from 0 to 1024
[  381.625442][ T7735] loop3: detected capacity change from 0 to 8192
[  381.629919][ T7739] hfsplus: unable to parse mount options
[  381.695272][ T7735] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  381.749898][ T7735] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  381.761458][ T7735] REISERFS (device loop3): using ordered data mode
[  381.768028][ T7735] reiserfs: using flush barriers
[  381.786302][ T7735] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  381.805624][ T7735] REISERFS (device loop3): checking transaction log (loop3)
[  381.836176][ T7735] REISERFS (device loop3): Using r5 hash to sort names
[  381.844514][   T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  381.864013][ T7735] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  381.889072][ T7735] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  381.908846][ T7749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'.
[  381.930628][ T7749] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  382.070444][   T23] usb 1-1: Using ep0 maxpacket: 32
[  382.101780][   T23] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  382.120409][   T23] usb 1-1: config 0 has no interface number 0
[  382.126623][   T23] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  382.158901][   T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  382.174866][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.190302][   T23] usb 1-1: Product: syz
[  382.197880][   T23] usb 1-1: Manufacturer: syz
[  382.211937][   T23] usb 1-1: SerialNumber: syz
[  382.225197][   T23] usb 1-1: config 0 descriptor??
[  382.237985][ T7755] FAULT_INJECTION: forcing a failure.
[  382.237985][ T7755] name failslab, interval 1, probability 0, space 0, times 0
[  382.241894][ T7740] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  382.254259][ T7755] CPU: 0 PID: 7755 Comm: syz.1.512 Not tainted syzkaller #0
[  382.258687][ T5811] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  382.265460][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  382.265477][ T7755] Call Trace:
[  382.265487][ T7755]  <TASK>
[  382.265496][ T7755]  dump_stack_lvl+0x18c/0x250
[  382.265536][ T7755]  ? show_regs_print_info+0x20/0x20
[  382.265564][ T7755]  ? load_image+0x420/0x420
[  382.265590][ T7755]  ? __might_sleep+0xe0/0xe0
[  382.265614][ T7755]  ? __lock_acquire+0x7d40/0x7d40
[  382.313824][ T7755]  should_fail_ex+0x39d/0x4d0
[  382.318571][ T7755]  should_failslab+0x9/0x20
[  382.323208][ T7755]  slab_pre_alloc_hook+0x59/0x310
[  382.328357][ T7755]  kmem_cache_alloc_node+0x60/0x320
[  382.333672][ T7755]  ? __alloc_skb+0x103/0x2c0
[  382.338304][ T7755]  __alloc_skb+0x103/0x2c0
[  382.342780][ T7755]  alloc_skb_with_frags+0xca/0x7b0
[  382.347940][ T7755]  ? aa_sk_perm+0x970/0x970
[  382.352519][ T7755]  sock_alloc_send_pskb+0x883/0x9a0
[  382.357793][ T7755]  ? sock_kzfree_s+0x50/0x50
[  382.362435][ T7755]  ? aa_file_perm+0x11b/0xee0
[  382.367163][ T7755]  ? aa_sk_perm+0x83c/0x970
[  382.371895][ T7755]  hci_sock_sendmsg+0x207/0xeb0
[  382.376804][ T7755]  ? hci_sock_getsockopt+0x600/0x600
[  382.382136][ T7755]  ? aa_sock_msg_perm+0x94/0x150
[  382.387116][ T7755]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  382.392449][ T7755]  ? security_socket_sendmsg+0x80/0xa0
[  382.398041][ T7755]  sock_write_iter+0x2df/0x420
[  382.402852][ T7755]  ? sock_read_iter+0x3e0/0x3e0
[  382.407745][ T7755]  ? common_file_perm+0x198/0x1f0
[  382.412824][ T7755]  vfs_write+0x46c/0x990
[  382.417118][ T7755]  ? file_end_write+0x250/0x250
[  382.422016][ T7755]  ? __fget_files+0x43d/0x4b0
[  382.426743][ T7755]  ? __fdget_pos+0x1d8/0x330
[  382.431376][ T7755]  ? ksys_write+0x75/0x260
[  382.435835][ T7755]  ksys_write+0x150/0x260
[  382.440207][ T7755]  ? __ia32_sys_read+0x90/0x90
[  382.445018][ T7755]  ? lockdep_hardirqs_on+0x98/0x150
[  382.450261][ T7755]  do_syscall_64+0x55/0xa0
[  382.454713][ T7755]  ? clear_bhb_loop+0x40/0x90
[  382.459429][ T7755]  ? clear_bhb_loop+0x40/0x90
[  382.464156][ T7755]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  382.470086][ T7755] RIP: 0033:0x7faa3259c819
[  382.474542][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.494276][ T7755] RSP: 002b:00007faa33391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  382.502733][ T7755] RAX: ffffffffffffffda RBX: 00007faa32815fa0 RCX: 00007faa3259c819
[  382.510735][ T7755] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004
[  382.517288][ T5811] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  382.518718][ T7755] RBP: 00007faa33391090 R08: 0000000000000000 R09: 0000000000000000
[  382.518738][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.518751][ T7755] R13: 00007faa32816038 R14: 00007faa32815fa0 R15: 00007ffe2d0a65b8
[  382.537310][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.543767][ T7755]  </TASK>
[  382.543886][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.592322][ T7740] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  382.599949][ T5811] usb 4-1: Product: syz
[  382.632089][ T5811] usb 4-1: Manufacturer: syz
[  382.651009][ T5811] usb 4-1: SerialNumber: syz
[  382.659271][ T5811] usb 4-1: config 0 descriptor??
[  383.004367][   T23] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  383.019236][   T23] asix: probe of 1-1:0.188 failed with error -61
[  383.068087][ T5770] usb 4-1: USB disconnect, device number 10
[  383.571938][ T7767] loop2: detected capacity change from 0 to 512
[  383.915330][ T7767] EXT4-fs: test_dummy_encryption requires encrypt feature
[  385.176663][  T970] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  385.488749][  T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  385.510363][ T1082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.557213][  T970] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  385.668748][  T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.730536][ T1082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.843588][  T970] usb 3-1: config 0 descriptor??
[  385.966873][ T5816] usb 1-1: USB disconnect, device number 9
[  386.023456][ T1082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.091542][  T970] usbhid 3-1:0.0: can't add hid device: -71
[  386.123105][  T970] usbhid: probe of 3-1:0.0 failed with error -71
[  386.208460][  T970] usb 3-1: USB disconnect, device number 12
[  386.323068][ T1082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.081077][ T7794] FAULT_INJECTION: forcing a failure.
[  387.081077][ T7794] name failslab, interval 1, probability 0, space 0, times 0
[  387.094086][ T7794] CPU: 0 PID: 7794 Comm: syz.0.523 Not tainted syzkaller #0
[  387.101434][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  387.111488][ T7794] Call Trace:
[  387.114787][ T7794]  <TASK>
[  387.117722][ T7794]  dump_stack_lvl+0x18c/0x250
[  387.122420][ T7794]  ? show_regs_print_info+0x20/0x20
[  387.127657][ T7794]  ? load_image+0x420/0x420
[  387.132206][ T7794]  ? __might_sleep+0xe0/0xe0
[  387.136804][ T7794]  ? __lock_acquire+0x7d40/0x7d40
[  387.141827][ T7794]  should_fail_ex+0x39d/0x4d0
[  387.146527][ T7794]  should_failslab+0x9/0x20
[  387.151037][ T7794]  slab_pre_alloc_hook+0x59/0x310
[  387.156070][ T7794]  kmem_cache_alloc+0x5a/0x2d0
[  387.160836][ T7794]  ? copy_fs_struct+0x4f/0x270
[  387.165616][ T7794]  copy_fs_struct+0x4f/0x270
[  387.170219][ T7794]  ksys_unshare+0x3bc/0x8c0
[  387.174738][ T7794]  ? sighand_ctor+0x50/0x50
[  387.179253][ T7794]  ? lock_chain_count+0x20/0x20
[  387.184109][ T7794]  ? syscall_enter_from_user_mode+0x25/0x80
[  387.190025][ T7794]  __x64_sys_unshare+0x38/0x40
[  387.194812][ T7794]  do_syscall_64+0x55/0xa0
[  387.199240][ T7794]  ? clear_bhb_loop+0x40/0x90
[  387.203925][ T7794]  ? clear_bhb_loop+0x40/0x90
[  387.208610][ T7794]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  387.214513][ T7794] RIP: 0033:0x7f76d7d9c819
[  387.218950][ T7794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.238580][ T7794] RSP: 002b:00007f76d5fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  387.247029][ T7794] RAX: ffffffffffffffda RBX: 00007f76d8016090 RCX: 00007f76d7d9c819
[  387.255019][ T7794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028060400
[  387.262995][ T7794] RBP: 00007f76d5fd5090 R08: 0000000000000000 R09: 0000000000000000
[  387.270985][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.278956][ T7794] R13: 00007f76d8016128 R14: 00007f76d8016090 R15: 00007ffe25cac528
[  387.286949][ T7794]  </TASK>
[  387.965162][  T970] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  389.191510][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  389.204179][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  389.212462][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  389.270563][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  389.285345][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  389.292822][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  391.360369][ T5778] Bluetooth: hci2: command tx timeout
[  391.501602][ T7830] tmpfs: Bad value for 'mpol'
[  391.643449][ T7827] loop2: detected capacity change from 0 to 512
[  391.800301][ T7827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  391.990480][ T7827] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 1803188595: comm syz.2.528: lblock 0 mapped to illegal pblock 1803188595 (length 1)
[  392.011496][ T7836] FAULT_INJECTION: forcing a failure.
[  392.011496][ T7836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  392.092313][ T7836] CPU: 0 PID: 7836 Comm: syz.1.530 Not tainted syzkaller #0
[  392.099703][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  392.109812][ T7836] Call Trace:
[  392.113128][ T7836]  <TASK>
[  392.116091][ T7836]  dump_stack_lvl+0x18c/0x250
[  392.120916][ T7836]  ? show_regs_print_info+0x20/0x20
[  392.126162][ T7836]  ? load_image+0x420/0x420
[  392.129893][ T7824] loop0: detected capacity change from 0 to 32768
[  392.130689][ T7836]  ? __lock_acquire+0x7d40/0x7d40
[  392.142197][ T7836]  ? snprintf+0xe9/0x140
[  392.146459][ T7836]  should_fail_ex+0x39d/0x4d0
[  392.151162][ T7836]  _copy_to_user+0x2f/0xa0
[  392.155597][ T7836]  simple_read_from_buffer+0xe7/0x150
[  392.160996][ T7836]  proc_fail_nth_read+0x1e8/0x260
[  392.166045][ T7836]  ? proc_fault_inject_write+0x360/0x360
[  392.171699][ T7836]  ? fsnotify_perm+0x271/0x5e0
[  392.176482][ T7836]  ? proc_fault_inject_write+0x360/0x360
[  392.182130][ T7836]  vfs_read+0x28b/0x970
[  392.186305][ T7836]  ? kernel_read+0x1e0/0x1e0
[  392.190911][ T7836]  ? __fget_files+0x28/0x4b0
[  392.195517][ T7836]  ? __fget_files+0x28/0x4b0
[  392.200148][ T7836]  ? __fget_files+0x43d/0x4b0
[  392.204870][ T7836]  ? __fdget_pos+0x2a3/0x330
[  392.209485][ T7836]  ? ksys_read+0x75/0x260
[  392.213846][ T7836]  ksys_read+0x150/0x260
[  392.218116][ T7836]  ? vfs_write+0x990/0x990
[  392.222566][ T7836]  ? lockdep_hardirqs_on+0x98/0x150
[  392.227806][ T7836]  do_syscall_64+0x55/0xa0
[  392.232234][ T7836]  ? clear_bhb_loop+0x40/0x90
[  392.236927][ T7836]  ? clear_bhb_loop+0x40/0x90
[  392.241618][ T7836]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  392.247524][ T7836] RIP: 0033:0x7faa3255d04e
[  392.251959][ T7836] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  392.271584][ T7836] RSP: 002b:00007faa3336ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  392.280015][ T7836] RAX: ffffffffffffffda RBX: 00007faa333706c0 RCX: 00007faa3255d04e
[  392.288001][ T7836] RDX: 000000000000000f RSI: 00007faa333700a0 RDI: 0000000000000004
[  392.295987][ T7836] RBP: 00007faa33370090 R08: 0000000000000000 R09: 0000000000000000
[  392.304079][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.312057][ T7836] R13: 00007faa32816128 R14: 00007faa32816090 R15: 00007ffe2d0a65b8
[  392.320229][ T7836]  </TASK>
[  392.329263][ T7827] EXT4-fs (loop2): mount failed
[  392.433436][ T7824] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  392.636021][ T7824] XFS (loop0): Ending clean mount
[  392.755175][ T7850] FAULT_INJECTION: forcing a failure.
[  392.755175][ T7850] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  392.830524][ T7850] CPU: 0 PID: 7850 Comm: syz.1.531 Not tainted syzkaller #0
[  392.837916][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  392.848019][ T7850] Call Trace:
[  392.851341][ T7850]  <TASK>
[  392.854305][ T7850]  dump_stack_lvl+0x18c/0x250
[  392.859037][ T7850]  ? show_regs_print_info+0x20/0x20
[  392.864283][ T7850]  ? load_image+0x420/0x420
[  392.868833][ T7850]  ? __lock_acquire+0x7d40/0x7d40
[  392.873920][ T7850]  ? snprintf+0xe9/0x140
[  392.878215][ T7850]  should_fail_ex+0x39d/0x4d0
[  392.882948][ T7850]  _copy_to_user+0x2f/0xa0
[  392.887417][ T7850]  simple_read_from_buffer+0xe7/0x150
[  392.892856][ T7850]  proc_fail_nth_read+0x1e8/0x260
[  392.897938][ T7850]  ? proc_fault_inject_write+0x360/0x360
[  392.903629][ T7850]  ? fsnotify_perm+0x271/0x5e0
[  392.908460][ T7850]  ? proc_fault_inject_write+0x360/0x360
[  392.914159][ T7850]  vfs_read+0x28b/0x970
[  392.918383][ T7850]  ? kernel_read+0x1e0/0x1e0
[  392.923026][ T7850]  ? __fget_files+0x28/0x4b0
[  392.927669][ T7850]  ? __fget_files+0x28/0x4b0
[  392.932311][ T7850]  ? __fget_files+0x43d/0x4b0
[  392.937047][ T7850]  ? __fdget_pos+0x2a3/0x330
[  392.941683][ T7850]  ? ksys_read+0x75/0x260
[  392.946064][ T7850]  ksys_read+0x150/0x260
[  392.950347][ T7850]  ? vfs_write+0x990/0x990
[  392.954792][ T7850]  ? lockdep_hardirqs_on+0x98/0x150
[  392.960035][ T7850]  do_syscall_64+0x55/0xa0
[  392.964476][ T7850]  ? clear_bhb_loop+0x40/0x90
[  392.969179][ T7850]  ? clear_bhb_loop+0x40/0x90
[  392.973890][ T7850]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  392.979828][ T7850] RIP: 0033:0x7faa3255d04e
[  392.984302][ T7850] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  393.003938][ T7850] RSP: 002b:00007faa3336ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  393.012374][ T7850] RAX: ffffffffffffffda RBX: 00007faa333706c0 RCX: 00007faa3255d04e
[  393.020361][ T7850] RDX: 000000000000000f RSI: 00007faa333700a0 RDI: 0000000000000005
[  393.028386][ T7850] RBP: 00007faa33370090 R08: 0000000000000000 R09: 0000000000000000
[  393.036394][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  393.044384][ T7850] R13: 00007faa32816128 R14: 00007faa32816090 R15: 00007ffe2d0a65b8
[  393.052392][ T7850]  </TASK>
[  393.060351][ T5816] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  393.233788][ T7806] chnl_net:caif_netlink_parms(): no params data found
[  393.292488][ T5816] usb 3-1: Using ep0 maxpacket: 8
[  393.308261][ T5816] usb 3-1: config 0 has an invalid interface number: 106 but max is 0
[  393.330303][ T5816] usb 3-1: config 0 has no interface number 0
[  393.336487][ T5816] usb 3-1: too many endpoints for config 0 interface 106 altsetting 164: 243, using maximum allowed: 30
[  393.440359][ T5778] Bluetooth: hci2: command tx timeout
[  393.447346][ T5816] usb 3-1: config 0 interface 106 altsetting 164 has 0 endpoint descriptors, different from the interface descriptor's value: 243
[  393.482128][ T5816] usb 3-1: config 0 interface 106 has no altsetting 0
[  393.503569][ T5816] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  393.513211][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.530311][ T5816] usb 3-1: Product: syz
[  393.551444][ T5816] usb 3-1: Manufacturer: syz
[  393.567126][ T5816] usb 3-1: SerialNumber: syz
[  393.618344][ T5816] usb 3-1: config 0 descriptor??
[  393.748392][ T7806] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.755888][ T7806] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.778279][ T7806] bridge_slave_0: entered allmulticast mode
[  393.799987][ T7806] bridge_slave_0: entered promiscuous mode
[  393.847898][ T7806] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.895951][ T7806] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.920567][ T7806] bridge_slave_1: entered allmulticast mode
[  393.952061][ T7806] bridge_slave_1: entered promiscuous mode
[  394.100692][ T7869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.251927][ T7869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.413656][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.419236][ T7806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.500479][ T5869] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  394.560976][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.592764][ T1082] hsr_slave_0: left promiscuous mode
[  394.609447][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.634448][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.645102][ T1082] hsr_slave_1: left promiscuous mode
[  394.658785][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.721626][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.763072][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.782361][ T5869] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  394.796476][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.820324][ T5869] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  394.840641][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.912751][ T1082] bridge_slave_1: left allmulticast mode
[  394.936940][ T1082] bridge_slave_1: left promiscuous mode
[  394.964797][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.036334][ T1082] bridge_slave_0: left allmulticast mode
[  395.078305][ T1082] bridge_slave_0: left promiscuous mode
[  395.109114][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.182830][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.251691][ T1082] veth1_macvtap: left promiscuous mode
[  395.257881][ T1082] veth0_macvtap: left promiscuous mode
[  395.280686][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.289901][ T1082] veth1_vlan: left promiscuous mode
[  395.307472][ T1082] veth0_vlan: left promiscuous mode
[  395.376678][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.478433][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.566923][ T5778] Bluetooth: hci2: command tx timeout
[  395.883365][ T5869] usb 2-1: string descriptor 0 read error: -71
[  396.029751][ T5869] usb 2-1: USB disconnect, device number 7
[  396.037335][ T7867] ALSA: mixer_oss: invalid OSS volume 'u'
[  398.441501][ T5778] Bluetooth: hci2: command tx timeout
[  399.623303][ T7883] FAULT_INJECTION: forcing a failure.
[  399.623303][ T7883] name failslab, interval 1, probability 0, space 0, times 0
[  399.645507][ T7883] CPU: 0 PID: 7883 Comm: syz.1.534 Not tainted syzkaller #0
[  399.652892][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  399.662981][ T7883] Call Trace:
[  399.666280][ T7883]  <TASK>
[  399.669231][ T7883]  dump_stack_lvl+0x18c/0x250
[  399.673931][ T7883]  ? show_regs_print_info+0x20/0x20
[  399.679154][ T7883]  ? load_image+0x420/0x420
[  399.683686][ T7883]  ? __might_sleep+0xe0/0xe0
[  399.688327][ T7883]  ? __lock_acquire+0x7d40/0x7d40
[  399.693368][ T7883]  should_fail_ex+0x39d/0x4d0
[  399.698084][ T7883]  should_failslab+0x9/0x20
[  399.702628][ T7883]  slab_pre_alloc_hook+0x59/0x310
[  399.707781][ T7883]  ? vfs_write+0x7dd/0x990
[  399.712220][ T7883]  kmem_cache_alloc+0x5a/0x2d0
[  399.716999][ T7883]  ? getname_flags+0xbb/0x500
[  399.721696][ T7883]  getname_flags+0xbb/0x500
[  399.726219][ T7883]  do_sys_openat2+0xda/0x1d0
[  399.730829][ T7883]  ? do_sys_open+0xe0/0xe0
[  399.735264][ T7883]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  399.741265][ T7883]  ? lock_chain_count+0x20/0x20
[  399.746130][ T7883]  __x64_sys_openat+0x139/0x160
[  399.751001][ T7883]  do_syscall_64+0x55/0xa0
[  399.755434][ T7883]  ? clear_bhb_loop+0x40/0x90
[  399.760125][ T7883]  ? clear_bhb_loop+0x40/0x90
[  399.764823][ T7883]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  399.770731][ T7883] RIP: 0033:0x7faa3259c819
[  399.775167][ T7883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.794791][ T7883] RSP: 002b:00007faa33391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  399.803224][ T7883] RAX: ffffffffffffffda RBX: 00007faa32815fa0 RCX: 00007faa3259c819
[  399.811214][ T7883] RDX: 0000000000000800 RSI: 0000200000000200 RDI: ffffffffffffff9c
[  399.819197][ T7883] RBP: 00007faa33391090 R08: 0000000000000000 R09: 0000000000000000
[  399.827180][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  399.835162][ T7883] R13: 00007faa32816038 R14: 00007faa32815fa0 R15: 00007ffe2d0a65b8
[  399.843164][ T7883]  </TASK>
[  400.017274][ T1082] team0 (unregistering): Port device team_slave_1 removed
[  400.130068][ T1082] team0 (unregistering): Port device team_slave_0 removed
[  400.233450][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  400.244761][ T1082] bond_slave_1 (unregistering): left promiscuous mode
[  400.307309][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  400.319891][ T1082] bond_slave_0 (unregistering): left promiscuous mode
[  400.947969][ T1082] bond0 (unregistering): Released all slaves
[  401.089656][ T7806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.119681][ T7865] syzkaller1: entered promiscuous mode
[  401.125784][ T7865] syzkaller1: entered allmulticast mode
[  401.251889][ T5765] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  401.324463][ T5770] usb 3-1: USB disconnect, device number 14
[  401.396240][ T7806] team0: Port device team_slave_0 added
[  401.433636][ T7806] team0: Port device team_slave_1 added
[  401.636713][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.653084][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.695864][ T7806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.752486][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.879598][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.990382][ T7806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.229618][ T7806] hsr_slave_0: entered promiscuous mode
[  402.421582][ T7908] FAULT_INJECTION: forcing a failure.
[  402.421582][ T7908] name failslab, interval 1, probability 0, space 0, times 0
[  402.434250][ T7908] CPU: 0 PID: 7908 Comm: syz.2.539 Not tainted syzkaller #0
[  402.441552][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  402.451605][ T7908] Call Trace:
[  402.454886][ T7908]  <TASK>
[  402.457819][ T7908]  dump_stack_lvl+0x18c/0x250
[  402.462518][ T7908]  ? show_regs_print_info+0x20/0x20
[  402.467719][ T7908]  ? load_image+0x420/0x420
[  402.472226][ T7908]  ? __might_sleep+0xe0/0xe0
[  402.476816][ T7908]  ? __lock_acquire+0x7d40/0x7d40
[  402.481856][ T7908]  should_fail_ex+0x39d/0x4d0
[  402.486542][ T7908]  should_failslab+0x9/0x20
[  402.491048][ T7908]  slab_pre_alloc_hook+0x59/0x310
[  402.496087][ T7908]  ? vfs_write+0x7dd/0x990
[  402.500522][ T7908]  kmem_cache_alloc+0x5a/0x2d0
[  402.505301][ T7908]  ? getname_flags+0xbb/0x500
[  402.509989][ T7908]  getname_flags+0xbb/0x500
[  402.514509][ T7908]  do_sys_openat2+0xda/0x1d0
[  402.519111][ T7908]  ? do_sys_open+0xe0/0xe0
[  402.523544][ T7908]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  402.529540][ T7908]  ? lock_chain_count+0x20/0x20
[  402.534394][ T7908]  __x64_sys_openat+0x139/0x160
[  402.539246][ T7908]  do_syscall_64+0x55/0xa0
[  402.543660][ T7908]  ? clear_bhb_loop+0x40/0x90
[  402.548349][ T7908]  ? clear_bhb_loop+0x40/0x90
[  402.553043][ T7908]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  402.558949][ T7908] RIP: 0033:0x7f4deaf9c819
[  402.563364][ T7908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.583005][ T7908] RSP: 002b:00007f4debef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  402.591430][ T7908] RAX: ffffffffffffffda RBX: 00007f4deb215fa0 RCX: 00007f4deaf9c819
[  402.599402][ T7908] RDX: 0000000000101001 RSI: 00002000000014c0 RDI: ffffffffffffff9c
[  402.607373][ T7908] RBP: 00007f4debef5090 R08: 0000000000000000 R09: 0000000000000000
[  402.615346][ T7908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.623322][ T7908] R13: 00007f4deb216038 R14: 00007f4deb215fa0 R15: 00007fff4cf448e8
[  402.631306][ T7908]  </TASK>
[  403.374738][ T7806] hsr_slave_1: entered promiscuous mode
[  403.422775][ T7806] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  403.437728][ T7806] Cannot create hsr debugfs directory
[  403.444651][ T5816] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  403.463712][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.666473][ T5816] usb 1-1: Using ep0 maxpacket: 16
[  403.692050][ T5816] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  403.714733][ T7917] usb usb8: usbfs: process 7917 (syz.1.541) did not claim interface 0 before use
[  405.314905][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  405.362838][ T5816] usb 1-1: config 0 has no interface number 0
[  405.380790][ T5816] usb 1-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  405.422595][ T5816] usb 1-1: config 0 interface 41 has no altsetting 0
[  405.445851][ T5816] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  405.459144][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.479862][ T5816] usb 1-1: Product: syz
[  405.489029][ T5816] usb 1-1: Manufacturer: syz
[  405.503201][ T5816] usb 1-1: SerialNumber: syz
[  405.542278][ T5816] usb 1-1: config 0 descriptor??
[  405.569488][ T5816] sr9700: probe of 1-1:0.41 failed with error -22
[  405.603387][ T7806] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  405.636430][ T7806] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  405.680936][ T7806] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  405.714046][ T7806] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  405.780879][ T5816] usb 1-1: USB disconnect, device number 10
[  406.023442][ T7806] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.071501][ T7806] 8021q: adding VLAN 0 to HW filter on device team0
[  406.107974][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.115276][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.173012][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.180259][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.352500][ T7806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  406.770586][ T5815] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  406.781025][ T7942] loop1: detected capacity change from 0 to 64
[  406.850318][   T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  406.945106][ T7806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.975130][ T5815] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  407.001417][ T5815] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  407.046252][ T5815] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  407.051963][   T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.076986][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.099784][   T23] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  407.130341][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.160232][   T23] usb 1-1: Product: syz
[  407.164563][   T23] usb 1-1: Manufacturer: syz
[  407.189586][   T23] usb 1-1: SerialNumber: syz
[  407.209164][   T23] usb 1-1: config 0 descriptor??
[  407.307848][ T5815] usb 3-1: usb_control_msg returned -32
[  407.325083][ T5815] usbtmc 3-1:16.0: can't read capabilities
[  407.467416][ T5816] usb 1-1: USB disconnect, device number 11
[  407.666516][ T7957] FAULT_INJECTION: forcing a failure.
[  407.666516][ T7957] name failslab, interval 1, probability 0, space 0, times 0
[  407.700302][ T7957] CPU: 1 PID: 7957 Comm: syz.2.540 Not tainted syzkaller #0
[  407.707688][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  407.717876][ T7957] Call Trace:
[  407.721194][ T7957]  <TASK>
[  407.724157][ T7957]  dump_stack_lvl+0x18c/0x250
[  407.728971][ T7957]  ? show_regs_print_info+0x20/0x20
[  407.734221][ T7957]  ? load_image+0x420/0x420
[  407.738774][ T7957]  ? __might_sleep+0xe0/0xe0
[  407.743415][ T7957]  ? __lock_acquire+0x7d40/0x7d40
[  407.746492][ T7806] veth0_vlan: entered promiscuous mode
[  407.748467][ T7957]  should_fail_ex+0x39d/0x4d0
[  407.748508][ T7957]  should_failslab+0x9/0x20
[  407.763190][ T7957]  slab_pre_alloc_hook+0x59/0x310
[  407.768343][ T7957]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  407.774104][ T7957]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  407.779924][ T7957]  __kmem_cache_alloc_node+0x53/0x250
[  407.785320][ T7957]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  407.791054][ T7957]  __kmalloc+0xa4/0x230
[  407.795229][ T7957]  tomoyo_realpath_from_path+0xe3/0x5d0
[  407.800793][ T7957]  tomoyo_path_number_perm+0x248/0x620
[  407.806271][ T7957]  ? tomoyo_path_number_perm+0x217/0x620
[  407.811923][ T7957]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  407.817403][ T7957]  ? ksys_write+0x1c4/0x260
[  407.821952][ T7957]  ? __fget_files+0x28/0x4b0
[  407.826577][ T7957]  ? __fget_files+0x28/0x4b0
[  407.831237][ T7957]  security_file_ioctl+0x70/0xa0
[  407.836207][ T7957]  __se_sys_ioctl+0x48/0x170
[  407.840821][ T7957]  do_syscall_64+0x55/0xa0
[  407.845248][ T7957]  ? clear_bhb_loop+0x40/0x90
[  407.850029][ T7957]  ? clear_bhb_loop+0x40/0x90
[  407.854813][ T7957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  407.860729][ T7957] RIP: 0033:0x7f4deaf9c819
[  407.865156][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.884777][ T7957] RSP: 002b:00007f4debed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  407.893293][ T7957] RAX: ffffffffffffffda RBX: 00007f4deb216090 RCX: 00007f4deaf9c819
[  407.901281][ T7957] RDX: 0000200000000040 RSI: 00000000c0145b0d RDI: 0000000000000004
[  407.909261][ T7957] RBP: 00007f4debed4090 R08: 0000000000000000 R09: 0000000000000000
[  407.917246][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.925319][ T7957] R13: 00007f4deb216128 R14: 00007f4deb216090 R15: 00007fff4cf448e8
[  407.933316][ T7957]  </TASK>
[  407.969713][ T7806] veth1_vlan: entered promiscuous mode
[  407.993405][ T7957] ERROR: Out of memory at tomoyo_realpath_from_path.
[  408.100034][ T7806] veth0_macvtap: entered promiscuous mode
[  408.136676][ T7806] veth1_macvtap: entered promiscuous mode
[  408.183405][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.205783][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.226880][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.258094][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.269366][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.281480][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.305058][ T7806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.329793][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.340940][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.368061][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.379226][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.404991][ T7806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.415833][ T7806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.432007][ T7806] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.463468][ T7806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.520443][ T7806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.529298][ T7806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.565565][ T7806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.597976][ T7975] FAULT_INJECTION: forcing a failure.
[  408.597976][ T7975] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.613276][ T7975] CPU: 0 PID: 7975 Comm: syz.0.545 Not tainted syzkaller #0
[  408.620625][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  408.630719][ T7975] Call Trace:
[  408.634077][ T7975]  <TASK>
[  408.637131][ T7975]  dump_stack_lvl+0x18c/0x250
[  408.641865][ T7975]  ? show_regs_print_info+0x20/0x20
[  408.647127][ T7975]  ? load_image+0x420/0x420
[  408.651679][ T7975]  ? __might_fault+0xaa/0x120
[  408.656404][ T7975]  ? __lock_acquire+0x7d40/0x7d40
[  408.661474][ T7975]  should_fail_ex+0x39d/0x4d0
[  408.666469][ T7975]  _copy_from_user+0x2f/0xe0
[  408.671103][ T7975]  ___sys_sendmsg+0x1c7/0x360
[  408.675827][ T7975]  ? get_pid_task+0x20/0x1e0
[  408.680466][ T7975]  ? __sys_sendmsg+0x2a0/0x2a0
[  408.685307][ T7975]  ? __lock_acquire+0x7d40/0x7d40
[  408.690414][ T7975]  __se_sys_sendmsg+0x1c2/0x2b0
[  408.695338][ T7975]  ? __x64_sys_sendmsg+0x80/0x80
[  408.700340][ T7975]  ? lockdep_hardirqs_on+0x98/0x150
[  408.705561][ T7975]  do_syscall_64+0x55/0xa0
[  408.709989][ T7975]  ? clear_bhb_loop+0x40/0x90
[  408.714683][ T7975]  ? clear_bhb_loop+0x40/0x90
[  408.719389][ T7975]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  408.725390][ T7975] RIP: 0033:0x7f76d7d9c819
[  408.729819][ T7975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.749438][ T7975] RSP: 002b:00007f76d5ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.757868][ T7975] RAX: ffffffffffffffda RBX: 00007f76d8015fa0 RCX: 00007f76d7d9c819
[  408.765853][ T7975] RDX: 0000000004048820 RSI: 0000200000002ac0 RDI: 0000000000000003
[  408.773839][ T7975] RBP: 00007f76d5ff6090 R08: 0000000000000000 R09: 0000000000000000
[  408.781823][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.789807][ T7975] R13: 00007f76d8016038 R14: 00007f76d8015fa0 R15: 00007ffe25cac528
[  408.797803][ T7975]  </TASK>
[  408.850153][ T7974] syzkaller0: entered promiscuous mode
[  408.856807][ T7974] syzkaller0: entered allmulticast mode
[  409.626885][ T5770] usb 3-1: USB disconnect, device number 15
[  412.078153][ T7987] loop2: detected capacity change from 0 to 1024
[  412.112574][ T7989] usb usb8: usbfs: process 7989 (syz.0.549) did not claim interface 0 before use
[  413.759667][ T7987] hfsplus: failed to load root directory
[  414.978106][ T7998] input: syz0 as /devices/virtual/input/input12
[  417.193557][ T8004] FAULT_INJECTION: forcing a failure.
[  417.193557][ T8004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.206819][ T8004] CPU: 0 PID: 8004 Comm: syz.2.553 Not tainted syzkaller #0
[  417.214152][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  417.224247][ T8004] Call Trace:
[  417.227563][ T8004]  <TASK>
[  417.230531][ T8004]  dump_stack_lvl+0x18c/0x250
[  417.235287][ T8004]  ? show_regs_print_info+0x20/0x20
[  417.240556][ T8004]  ? load_image+0x420/0x420
[  417.245114][ T8004]  ? __lock_acquire+0x7d40/0x7d40
[  417.250181][ T8004]  ? snprintf+0xe9/0x140
[  417.254477][ T8004]  should_fail_ex+0x39d/0x4d0
[  417.259211][ T8004]  _copy_to_user+0x2f/0xa0
[  417.263667][ T8004]  simple_read_from_buffer+0xe7/0x150
[  417.269067][ T8004]  proc_fail_nth_read+0x1e8/0x260
[  417.274114][ T8004]  ? proc_fault_inject_write+0x360/0x360
[  417.279771][ T8004]  ? fsnotify_perm+0x271/0x5e0
[  417.284566][ T8004]  ? proc_fault_inject_write+0x360/0x360
[  417.290225][ T8004]  vfs_read+0x28b/0x970
[  417.294412][ T8004]  ? kernel_read+0x1e0/0x1e0
[  417.299018][ T8004]  ? __fget_files+0x28/0x4b0
[  417.303624][ T8004]  ? __fget_files+0x28/0x4b0
[  417.308228][ T8004]  ? __fget_files+0x43d/0x4b0
[  417.312926][ T8004]  ? __fdget_pos+0x2a3/0x330
[  417.317529][ T8004]  ? ksys_read+0x75/0x260
[  417.321875][ T8004]  ksys_read+0x150/0x260
[  417.326134][ T8004]  ? vfs_write+0x990/0x990
[  417.330571][ T8004]  ? lockdep_hardirqs_on+0x98/0x150
[  417.335817][ T8004]  do_syscall_64+0x55/0xa0
[  417.340242][ T8004]  ? clear_bhb_loop+0x40/0x90
[  417.344932][ T8004]  ? clear_bhb_loop+0x40/0x90
[  417.349626][ T8004]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  417.355532][ T8004] RIP: 0033:0x7f4deaf5d04e
[  417.359960][ T8004] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  417.379577][ T8004] RSP: 002b:00007f4debef4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  417.388007][ T8004] RAX: ffffffffffffffda RBX: 00007f4debef56c0 RCX: 00007f4deaf5d04e
[  417.395994][ T8004] RDX: 000000000000000f RSI: 00007f4debef50a0 RDI: 0000000000000005
[  417.403977][ T8004] RBP: 00007f4debef5090 R08: 0000000000000000 R09: 0000000000000000
[  417.411957][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.419937][ T8004] R13: 00007f4deb216038 R14: 00007f4deb215fa0 R15: 00007fff4cf448e8
[  417.428020][ T8004]  </TASK>
[  417.948496][ T8014] FAULT_INJECTION: forcing a failure.
[  417.948496][ T8014] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.961859][ T8014] CPU: 1 PID: 8014 Comm: syz.2.555 Not tainted syzkaller #0
[  417.969192][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  417.979306][ T8014] Call Trace:
[  417.982622][ T8014]  <TASK>
[  417.985572][ T8014]  dump_stack_lvl+0x18c/0x250
[  417.990290][ T8014]  ? show_regs_print_info+0x20/0x20
[  417.995523][ T8014]  ? load_image+0x420/0x420
[  418.000136][ T8014]  ? __might_fault+0xaa/0x120
[  418.004928][ T8014]  ? __lock_acquire+0x7d40/0x7d40
[  418.009965][ T8014]  should_fail_ex+0x39d/0x4d0
[  418.014666][ T8014]  _copy_from_user+0x2f/0xe0
[  418.019263][ T8014]  ___sys_sendmsg+0x1c7/0x360
[  418.024067][ T8014]  ? get_pid_task+0x20/0x1e0
[  418.028700][ T8014]  ? __sys_sendmsg+0x2a0/0x2a0
[  418.033479][ T8014]  ? __lock_acquire+0x7d40/0x7d40
[  418.038523][ T8014]  __se_sys_sendmsg+0x1c2/0x2b0
[  418.043462][ T8014]  ? __x64_sys_sendmsg+0x80/0x80
[  418.048410][ T8014]  ? lockdep_hardirqs_on+0x98/0x150
[  418.053612][ T8014]  do_syscall_64+0x55/0xa0
[  418.058037][ T8014]  ? clear_bhb_loop+0x40/0x90
[  418.062746][ T8014]  ? clear_bhb_loop+0x40/0x90
[  418.067503][ T8014]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  418.073442][ T8014] RIP: 0033:0x7f4deaf9c819
[  418.077887][ T8014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  418.097497][ T8014] RSP: 002b:00007f4debef5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.105917][ T8014] RAX: ffffffffffffffda RBX: 00007f4deb215fa0 RCX: 00007f4deaf9c819
[  418.113913][ T8014] RDX: 0000000004048820 RSI: 0000200000002ac0 RDI: 0000000000000003
[  418.121894][ T8014] RBP: 00007f4debef5090 R08: 0000000000000000 R09: 0000000000000000
[  418.129896][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.137868][ T8014] R13: 00007f4deb216038 R14: 00007f4deb215fa0 R15: 00007fff4cf448e8
[  418.145848][ T8014]  </TASK>
[  419.630389][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.647581][ T8022] usb usb8: usbfs: process 8022 (syz.0.557) did not claim interface 0 before use
[  421.241519][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.386353][ T8026] loop1: detected capacity change from 0 to 512
[  421.391419][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.416611][ T8026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  421.446862][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.503962][ T8026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.540454][ T8026] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  421.627111][ T8038] FAULT_INJECTION: forcing a failure.
[  421.627111][ T8038] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  421.651608][ T8038] CPU: 0 PID: 8038 Comm: syz.2.561 Not tainted syzkaller #0
[  421.659066][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  421.669164][ T8038] Call Trace:
[  421.672453][ T8038]  <TASK>
[  421.675398][ T8038]  dump_stack_lvl+0x18c/0x250
[  421.680099][ T8038]  ? show_regs_print_info+0x20/0x20
[  421.685312][ T8038]  ? load_image+0x420/0x420
[  421.689824][ T8038]  ? __might_fault+0xaa/0x120
[  421.694505][ T8038]  ? __lock_acquire+0x7d40/0x7d40
[  421.699533][ T8038]  should_fail_ex+0x39d/0x4d0
[  421.704313][ T8038]  _copy_from_user+0x2f/0xe0
[  421.708905][ T8038]  ___sys_sendmsg+0x1c7/0x360
[  421.713580][ T8038]  ? get_pid_task+0x20/0x1e0
[  421.718174][ T8038]  ? __sys_sendmsg+0x2a0/0x2a0
[  421.722950][ T8038]  ? __lock_acquire+0x7d40/0x7d40
[  421.727989][ T8038]  __se_sys_sendmsg+0x1c2/0x2b0
[  421.732847][ T8038]  ? __x64_sys_sendmsg+0x80/0x80
[  421.737799][ T8038]  ? lockdep_hardirqs_on+0x98/0x150
[  421.743014][ T8038]  do_syscall_64+0x55/0xa0
[  421.747512][ T8038]  ? clear_bhb_loop+0x40/0x90
[  421.752243][ T8038]  ? clear_bhb_loop+0x40/0x90
[  421.756971][ T8038]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  421.762880][ T8038] RIP: 0033:0x7f4deaf9c819
[  421.767304][ T8038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  421.786918][ T8038] RSP: 002b:00007f4debef5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  421.795358][ T8038] RAX: ffffffffffffffda RBX: 00007f4deb215fa0 RCX: 00007f4deaf9c819
[  421.803342][ T8038] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  421.811323][ T8038] RBP: 00007f4debef5090 R08: 0000000000000000 R09: 0000000000000000
[  421.819299][ T8038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  421.827285][ T8038] R13: 00007f4deb216038 R14: 00007f4deb215fa0 R15: 00007fff4cf448e8
[  421.835272][ T8038]  </TASK>
[  421.983798][ T8042] loop4: detected capacity change from 0 to 64
[  422.103288][ T8020] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  422.208706][ T8048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.562'.
[  422.242998][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.836239][ T8077] loop1: detected capacity change from 0 to 256
[  424.877226][ T8077] FAT-fs (loop1): Unrecognized mount option "rootcon" or missing value
[  425.205698][ T8077] loop1: detected capacity change from 0 to 4096
[  425.269882][ T8060] loop2: detected capacity change from 0 to 32768
[  425.314283][ T8060] JBD2: Ignoring recovery information on journal
[  425.363312][ T8060] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  425.458206][ T8085] input: syz0 as /devices/virtual/input/input13
[  426.785881][ T5779] ocfs2: Unmounting device (7,2) on (node local)
[  427.017732][ T8101] loop0: detected capacity change from 0 to 2048
[  427.090558][ T7464] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  427.108323][ T8101] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  427.176815][ T6814] udevd[6814]: incorrect nilfs2 checksum on /dev/loop0
[  427.369407][ T8109] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  429.491527][ T5811] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  429.654746][ T8126] loop0: detected capacity change from 0 to 4096
[  429.693684][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short
[  429.703393][ T8126] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  429.745667][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  429.768059][ T8126] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  429.800859][ T5811] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  429.815152][ T8126] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  429.839570][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  429.839731][ T8129] loop4: detected capacity change from 0 to 4096
[  429.856435][ T8126] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  429.873523][ T8126] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  429.888080][ T5811] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  429.906434][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.908869][ T8129] EXT4-fs: inline encryption not supported
[  429.936329][ T8126] ntfs: volume version 3.1.
[  429.955596][ T5811] usb 2-1: Product: syz
[  429.959909][ T5811] usb 2-1: Manufacturer: syz
[  429.966494][ T8129] EXT4-fs (loop4): Test dummy encryption mode enabled
[  429.967734][ T8126] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  430.001831][ T5811] usb 2-1: SerialNumber: syz
[  430.016519][ T8129] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  430.026280][ T5811] usb 2-1: config 0 descriptor??
[  430.033338][ T8126] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  430.041217][ T8114] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  430.077264][ T8129] System zones: 0-5
[  430.115983][ T5811] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  430.136444][ T8129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.180345][ T8126] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  430.230563][ T8126] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  430.296092][ T8126] ntfs: (device loop0): ntfs_check_logfile(): Error mapping $LogFile page (index 0).
[  430.354981][ T5815] usb 2-1: USB disconnect, device number 8
[  430.653158][ T7806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.090382][ T7464] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  431.203699][ T8153] loop2: detected capacity change from 0 to 128
[  431.269307][ T8153] affs: No valid root block on device loop2
[  431.280377][ T7464] usb 5-1: Using ep0 maxpacket: 8
[  431.301764][ T7464] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  431.321740][ T7464] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  431.331749][ T5811] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  431.349193][ T7464] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  431.372088][ T7464] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  431.405775][ T7464] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  431.429835][ T7464] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  431.453031][ T8153] loop2: detected capacity change from 0 to 4096
[  431.460327][ T7464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.540288][ T5811] usb 2-1: Using ep0 maxpacket: 8
[  431.548526][ T5811] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  431.558144][ T5811] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  431.619730][ T5811] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  431.660576][ T5811] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  431.680405][ T5811] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  431.702243][ T7464] usb 5-1: usb_control_msg returned -32
[  431.709626][ T5811] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  431.719698][ T7464] usbtmc 5-1:16.0: can't read capabilities
[  431.734054][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.002547][ T5811] usb 2-1: usb_control_msg returned -32
[  432.009355][ T5811] usbtmc 2-1:16.0: can't read capabilities
[  432.850018][   T23] usb 5-1: USB disconnect, device number 2
[  434.473803][ T5815] usb 2-1: USB disconnect, device number 9
[  434.525366][ T8194] FAULT_INJECTION: forcing a failure.
[  434.525366][ T8194] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  434.586624][ T8194] CPU: 1 PID: 8194 Comm: syz.2.587 Not tainted syzkaller #0
[  434.594004][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  434.604536][ T8194] Call Trace:
[  434.607857][ T8194]  <TASK>
[  434.611433][ T8194]  dump_stack_lvl+0x18c/0x250
[  434.616175][ T8194]  ? show_regs_print_info+0x20/0x20
[  434.621435][ T8194]  ? load_image+0x420/0x420
[  434.625984][ T8194]  ? __lock_acquire+0x7d40/0x7d40
[  434.631048][ T8194]  ? snprintf+0xe9/0x140
[  434.635342][ T8194]  should_fail_ex+0x39d/0x4d0
[  434.640077][ T8194]  _copy_to_user+0x2f/0xa0
[  434.644541][ T8194]  simple_read_from_buffer+0xe7/0x150
[  434.649972][ T8194]  proc_fail_nth_read+0x1e8/0x260
[  434.655051][ T8194]  ? proc_fault_inject_write+0x360/0x360
[  434.660734][ T8194]  ? fsnotify_perm+0x271/0x5e0
[  434.665542][ T8194]  ? proc_fault_inject_write+0x360/0x360
[  434.670347][ T5869] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  434.671197][ T8194]  vfs_read+0x28b/0x970
[  434.671235][ T8194]  ? kernel_read+0x1e0/0x1e0
[  434.687576][ T8194]  ? __fget_files+0x28/0x4b0
[  434.692210][ T8194]  ? __fget_files+0x28/0x4b0
[  434.696856][ T8194]  ? __fget_files+0x43d/0x4b0
[  434.701610][ T8194]  ? __fdget_pos+0x2a3/0x330
[  434.706229][ T8194]  ? ksys_read+0x75/0x260
[  434.710588][ T8194]  ksys_read+0x150/0x260
[  434.714885][ T8194]  ? vfs_write+0x990/0x990
[  434.719316][ T8194]  ? lockdep_hardirqs_on+0x98/0x150
[  434.724520][ T8194]  do_syscall_64+0x55/0xa0
[  434.728949][ T8194]  ? clear_bhb_loop+0x40/0x90
[  434.733633][ T8194]  ? clear_bhb_loop+0x40/0x90
[  434.738316][ T8194]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  434.744212][ T8194] RIP: 0033:0x7f4deaf5d04e
[  434.748627][ T8194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  434.768247][ T8194] RSP: 002b:00007f4debeb2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  434.776668][ T8194] RAX: ffffffffffffffda RBX: 00007f4debeb36c0 RCX: 00007f4deaf5d04e
[  434.784642][ T8194] RDX: 000000000000000f RSI: 00007f4debeb30a0 RDI: 0000000000000008
[  434.792626][ T8194] RBP: 00007f4debeb3090 R08: 0000000000000000 R09: 0000000000000000
[  434.800610][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.808594][ T8194] R13: 00007f4deb216218 R14: 00007f4deb216180 R15: 00007fff4cf448e8
[  434.816587][ T8194]  </TASK>
[  434.951996][ T8200] syzkaller0: entered promiscuous mode
[  434.957293][ T5869] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  434.979365][ T8200] syzkaller0: entered allmulticast mode
[  435.106336][ T5869] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  435.169807][ T5869] usb 1-1: config 1 interface 0 has no altsetting 0
[  435.218550][ T5869] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  435.236208][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.300492][ T5869] usb 1-1: Product: syz
[  435.305315][ T5869] usb 1-1: Manufacturer: syz
[  435.309940][ T5869] usb 1-1: SerialNumber: syz
[  435.357841][ T8187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  435.371413][ T8187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  435.550091][ T8211] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  436.863626][ T8187] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2
[  437.077063][ T5869] (unnamed net_device) (uninitialized): Assigned a random MAC address: b2:c8:e0:13:ce:ea
[  437.185476][ T5869] rtl8150 1-1:1.0: eth5: rtl8150 is detected
[  437.199674][ T8228] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  437.232359][ T8228] FAULT_INJECTION: forcing a failure.
[  437.232359][ T8228] name failslab, interval 1, probability 0, space 0, times 0
[  437.277353][ T5869] usb 1-1: USB disconnect, device number 13
[  437.295842][ T8228] CPU: 0 PID: 8228 Comm: syz.1.592 Not tainted syzkaller #0
[  437.303224][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  437.313322][ T8228] Call Trace:
[  437.316636][ T8228]  <TASK>
[  437.319611][ T8228]  dump_stack_lvl+0x18c/0x250
[  437.324348][ T8228]  ? show_regs_print_info+0x20/0x20
[  437.329604][ T8228]  ? load_image+0x420/0x420
[  437.334155][ T8228]  ? __might_sleep+0xe0/0xe0
[  437.338807][ T8228]  ? __lock_acquire+0x7d40/0x7d40
[  437.343877][ T8228]  should_fail_ex+0x39d/0x4d0
[  437.348580][ T8228]  should_failslab+0x9/0x20
[  437.353099][ T8228]  slab_pre_alloc_hook+0x59/0x310
[  437.358154][ T8228]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  437.363898][ T8228]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  437.369730][ T8228]  __kmem_cache_alloc_node+0x53/0x250
[  437.375120][ T8228]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  437.380870][ T8228]  __kmalloc+0xa4/0x230
[  437.385047][ T8228]  tomoyo_realpath_from_path+0xe3/0x5d0
[  437.390617][ T8228]  tomoyo_path_number_perm+0x248/0x620
[  437.396095][ T8228]  ? tomoyo_path_number_perm+0x217/0x620
[  437.401747][ T8228]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  437.407227][ T8228]  ? ksys_write+0x1c4/0x260
[  437.411783][ T8228]  ? __fget_files+0x28/0x4b0
[  437.416474][ T8228]  ? __fget_files+0x28/0x4b0
[  437.421187][ T8228]  security_file_ioctl+0x70/0xa0
[  437.426137][ T8228]  __se_sys_ioctl+0x48/0x170
[  437.430837][ T8228]  do_syscall_64+0x55/0xa0
[  437.435266][ T8228]  ? clear_bhb_loop+0x40/0x90
[  437.439963][ T8228]  ? clear_bhb_loop+0x40/0x90
[  437.444742][ T8228]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  437.450652][ T8228] RIP: 0033:0x7faa3259c819
[  437.455181][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.474802][ T8228] RSP: 002b:00007faa33391028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  437.483230][ T8228] RAX: ffffffffffffffda RBX: 00007faa32815fa0 RCX: 00007faa3259c819
[  437.491215][ T8228] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  437.499196][ T8228] RBP: 00007faa33391090 R08: 0000000000000000 R09: 0000000000000000
[  437.507177][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.515765][ T8228] R13: 00007faa32816038 R14: 00007faa32815fa0 R15: 00007ffe2d0a65b8
[  437.523762][ T8228]  </TASK>
[  437.526865][    C0] vkms_vblank_simulate: vblank timer overrun
[  437.568399][ T8228] ERROR: Out of memory at tomoyo_realpath_from_path.
[  437.570944][ T8233] loop4: detected capacity change from 0 to 4096
[  437.599699][ T8233] ntfs3: Unknown parameter '0x0000000000000003'
[  439.728208][ T8247] FAULT_INJECTION: forcing a failure.
[  439.728208][ T8247] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  439.744711][ T8247] CPU: 1 PID: 8247 Comm: syz.0.596 Not tainted syzkaller #0
[  439.752061][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  439.762157][ T8247] Call Trace:
[  439.765484][ T8247]  <TASK>
[  439.768455][ T8247]  dump_stack_lvl+0x18c/0x250
[  439.773285][ T8247]  ? show_regs_print_info+0x20/0x20
[  439.778531][ T8247]  ? load_image+0x420/0x420
[  439.783069][ T8247]  ? __might_fault+0xaa/0x120
[  439.787759][ T8247]  ? __lock_acquire+0x7d40/0x7d40
[  439.792797][ T8247]  ? vfs_write+0x7dd/0x990
[  439.797236][ T8247]  should_fail_ex+0x39d/0x4d0
[  439.801940][ T8247]  _copy_from_user+0x2f/0xe0
[  439.806636][ T8247]  do_sock_getsockopt+0x188/0x450
[  439.811673][ T8247]  ? __ia32_sys_setsockopt+0x200/0x200
[  439.817337][ T8247]  ? lockdep_hardirqs_on+0x70/0x150
[  439.822573][ T8247]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  439.828578][ T8247]  __x64_sys_getsockopt+0x1d6/0x280
[  439.833815][ T8247]  ? lockdep_hardirqs_on+0x70/0x150
[  439.839044][ T8247]  ? lockdep_hardirqs_on+0x70/0x150
[  439.844364][ T8247]  do_syscall_64+0x55/0xa0
[  439.848802][ T8247]  ? clear_bhb_loop+0x40/0x90
[  439.853586][ T8247]  ? clear_bhb_loop+0x40/0x90
[  439.858282][ T8247]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  439.864195][ T8247] RIP: 0033:0x7f76d7d9c819
[  439.868628][ T8247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.888332][ T8247] RSP: 002b:00007f76d5ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  439.896790][ T8247] RAX: ffffffffffffffda RBX: 00007f76d8015fa0 RCX: 00007f76d7d9c819
[  439.904785][ T8247] RDX: 0000000000000005 RSI: 0000000000000111 RDI: 0000000000000003
[  439.912767][ T8247] RBP: 00007f76d5ff6090 R08: 0000000000000000 R09: 0000000000000000
[  439.920747][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.928728][ T8247] R13: 00007f76d8016038 R14: 00007f76d8015fa0 R15: 00007ffe25cac528
[  439.936723][ T8247]  </TASK>
[  441.570783][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  441.594311][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  441.648772][ T8257] loop0: detected capacity change from 0 to 512
[  449.524675][ T8308] FAULT_INJECTION: forcing a failure.
[  449.524675][ T8308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  449.558690][ T8308] CPU: 1 PID: 8308 Comm: syz.0.605 Not tainted syzkaller #0
[  449.566078][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  449.576180][ T8308] Call Trace:
[  449.579500][ T8308]  <TASK>
[  449.582471][ T8308]  dump_stack_lvl+0x18c/0x250
[  449.587196][ T8308]  ? show_regs_print_info+0x20/0x20
[  449.592437][ T8308]  ? load_image+0x420/0x420
[  449.596988][ T8308]  ? __might_fault+0xaa/0x120
[  449.601715][ T8308]  ? __lock_acquire+0x7d40/0x7d40
[  449.606790][ T8308]  should_fail_ex+0x39d/0x4d0
[  449.611521][ T8308]  _copy_from_user+0x2f/0xe0
[  449.616156][ T8308]  ___sys_recvmsg+0x176/0x590
[  449.620872][ T8308]  ? __sys_recvmsg+0x2a0/0x2a0
[  449.625721][ T8308]  ? __fget_files+0x43d/0x4b0
[  449.630472][ T8308]  ? __fdget+0x180/0x210
[  449.634753][ T8308]  ? do_recvmmsg+0x1ae/0x870
[  449.639386][ T8308]  do_recvmmsg+0x39a/0x870
[  449.643932][ T8308]  ? __sys_recvmmsg+0x290/0x290
[  449.648818][ T8308]  ? vfs_write+0x7dd/0x990
[  449.653286][ T8308]  ? mutex_unlock+0x10/0x10
[  449.657911][ T8308]  ? __fget_files+0x43d/0x4b0
[  449.662644][ T8308]  __x64_sys_recvmmsg+0x199/0x250
[  449.667705][ T8308]  ? do_recvmmsg+0x870/0x870
[  449.672334][ T8308]  ? lockdep_hardirqs_on+0x98/0x150
[  449.677581][ T8308]  do_syscall_64+0x55/0xa0
[  449.682032][ T8308]  ? clear_bhb_loop+0x40/0x90
[  449.686759][ T8308]  ? clear_bhb_loop+0x40/0x90
[  449.691573][ T8308]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  449.697498][ T8308] RIP: 0033:0x7f76d7d9c819
[  449.701935][ T8308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.721555][ T8308] RSP: 002b:00007f76d5ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  449.729984][ T8308] RAX: ffffffffffffffda RBX: 00007f76d8015fa0 RCX: 00007f76d7d9c819
[  449.737966][ T8308] RDX: 0000000000000001 RSI: 0000200000004c00 RDI: 0000000000000004
[  449.745948][ T8308] RBP: 00007f76d5ff6090 R08: 0000000000000000 R09: 0000000000000000
[  449.753933][ T8308] R10: 0000000040002123 R11: 0000000000000246 R12: 0000000000000001
[  449.761915][ T8308] R13: 00007f76d8016038 R14: 00007f76d8015fa0 R15: 00007ffe25cac528
[  449.769915][ T8308]  </TASK>
[  450.195442][ T5811] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  450.310751][ T7464] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  450.386409][ T5811] usb 2-1: Using ep0 maxpacket: 16
[  450.419421][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.456752][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  451.330504][ T5811] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  451.339640][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.360256][ T7464] usb 3-1: Using ep0 maxpacket: 8
[  451.368217][ T7464] usb 3-1: unable to get BOS descriptor or descriptor too short
[  451.382669][ T5811] usb 2-1: config 0 descriptor??
[  451.396932][ T7464] usb 3-1: config 4 interface 0 has no altsetting 0
[  451.449917][ T7464] usb 3-1: string descriptor 0 read error: -22
[  451.471274][ T7464] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  451.511611][ T7464] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  451.571840][ T7464] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  451.638663][ T7464] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  451.691011][ T7464] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  451.698775][ T7464] usb 3-1: media controller created
[  451.797309][ T8312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.338707][ T8312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.391788][ T8338] netlink: 84 bytes leftover after parsing attributes in process `syz.4.614'.
[  454.414192][ T7464] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  454.450370][ T5811] usbhid 2-1:0.0: can't add hid device: -71
[  454.466327][ T5811] usbhid: probe of 2-1:0.0 failed with error -71
[  454.511612][ T5811] usb 2-1: USB disconnect, device number 10
[  454.595275][ T7464] zl10353_read_register: readreg error (reg=127, ret==0)
[  455.664057][ T8345] loop2: detected capacity change from 0 to 512
[  455.701206][ T8345] EXT4-fs: Ignoring removed i_version option
[  455.994824][ T7464] usb 3-1: USB disconnect, device number 16
[  456.004137][ T8345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.318010][ T8358] loop4: detected capacity change from 0 to 512
[  456.341451][ T8358] EXT4-fs: Ignoring removed nobh option
[  456.370485][ T8358] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  456.466764][ T8358] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  456.572689][ T8358] EXT4-fs (loop4): 1 truncate cleaned up
[  456.579732][ T8358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.957034][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.603514][ T7806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.850353][ T5770] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  459.093407][ T5770] usb 3-1: Using ep0 maxpacket: 16
[  459.136074][ T5770] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  459.152003][ T5770] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  459.161592][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.196662][ T5770] usb 3-1: config 0 descriptor??
[  461.030916][ T5778] Bluetooth: hci3: SCO packet for unknown connection handle 201
[  461.035420][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  461.075843][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  461.090258][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  461.109713][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.139265][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.170841][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.220300][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.227696][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.290310][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.297711][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.340303][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.370267][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.377674][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.421074][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.448827][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.479220][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.490617][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.526791][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.554407][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.577645][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.615629][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.645963][ T5770] dragonrise 0003:0079:0011.0004: unknown main item tag 0x0
[  462.692623][ T5770] dragonrise 0003:0079:0011.0004: hidraw0: USB HID v0.09 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0
[  462.759310][ T5770] usb 3-1: USB disconnect, device number 17
[  462.957742][ T8410] fido_id[8410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  463.463139][ T8421] loop2: detected capacity change from 0 to 16
[  463.573577][ T6814] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  463.940316][ T5770] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  465.152262][ T5770] usb 5-1: Using ep0 maxpacket: 8
[  465.178066][ T5770] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023
[  465.202134][ T5770] usb 5-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40
[  465.220207][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.249171][ T5770] usb 5-1: Product: syz
[  465.259071][ T5770] usb 5-1: Manufacturer: syz
[  465.289927][ T5770] usb 5-1: SerialNumber: syz
[  465.322267][ T8426] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  466.470576][ T5770] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  466.547134][ T5770] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  466.587149][ T5770] usb 5-1: USB disconnect, device number 3
[  466.614400][ T6814] udevd[6814]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  466.776132][ T8443] loop1: detected capacity change from 0 to 32768
[  466.923310][ T8443] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  466.923310][ T8443] 
[  466.985316][ T8443] ERROR: (device loop1): remounting filesystem as read-only
[  467.010890][ T8443] ERROR: (device loop1): jfs_unlink: 
[  467.010890][ T8443] 
[  467.070559][ T8458] BUG: Bad page state in process syz.1.628  pfn:4c6f7
[  467.077415][ T8458] page:ffffea000131bdc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x4c6f7
[  467.105277][ T8458] flags: 0xfff0800000821c(referenced|uptodate|dirty|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  467.117001][ T8458] page_type: 0xffffffff()
[  467.142220][ T8458] raw: 00fff0800000821c ffffea0000b90948 ffffc90004aa7940 0000000000000000
[  467.191528][ T8458] raw: 000000000000001c ffff888026e08aa8 00000000ffffffff 0000000000000000
[  467.300407][ T8458] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  467.353281][ T8458] page_owner tracks the page as allocated
[  467.400706][ T8458] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 8443, tgid 8441 (syz.1.628), ts 466867144396, free_ts 466568300235
[  467.501334][ T8458]  post_alloc_hook+0x1c1/0x200
[  467.528321][ T8458]  get_page_from_freelist+0x1951/0x19e0
[  467.560919][ T8458]  __alloc_pages+0x1f0/0x460
[  467.565613][ T8458]  folio_alloc+0x1e/0x30
[  467.595759][ T8458]  filemap_alloc_folio+0xdf/0x490
[  467.605800][ T8458]  do_read_cache_folio+0x364/0x7d0
[  467.612247][ T8458]  do_read_cache_page+0x32/0x250
[  467.617514][ T8458]  __get_metapage+0x31a/0xfa0
[  467.627344][ T8458]  diRead+0x6d3/0xb90
[  467.634908][ T8458]  jfs_iget+0x90/0x440
[  467.639306][ T8458]  jfs_fill_super+0x712/0xad0
[  467.650991][ T8458]  mount_bdev+0x221/0x2d0
[  467.655564][ T8458]  legacy_get_tree+0xea/0x180
[  467.663419][ T8458]  vfs_get_tree+0x8c/0x280
[  467.668083][ T8458]  do_new_mount+0x24b/0xa40
[  467.673848][ T8458]  __se_sys_mount+0x2e7/0x3d0
[  467.678802][ T8458] page last free stack trace:
[  467.686337][ T8458]  free_unref_page_prepare+0x7b2/0x8c0
[  467.694101][ T8458]  free_unref_page_list+0xbe/0x860
[  467.699468][ T8458]  release_pages+0x1f7a/0x2200
[  467.712569][ T8458]  tlb_flush_mmu+0x379/0x510
[  467.717505][ T8458]  tlb_finish_mmu+0xf9/0x220
[  467.720502][ T8463] loop0: detected capacity change from 0 to 8192
[  467.725487][ T8458]  exit_mmap+0x428/0xb90
[  467.737634][ T8458]  __mmput+0x118/0x3c0
[  467.772853][ T8458]  exit_mm+0x1f2/0x2c0
[  467.777399][ T8458]  do_exit+0x8dd/0x2460
[  467.781949][ T8458]  do_group_exit+0x21b/0x2d0
[  467.782895][ T8463] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  467.786736][ T8458]  __x64_sys_exit_group+0x3f/0x40
[  467.805029][ T8458]  do_syscall_64+0x55/0xa0
[  467.809686][ T8458]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  467.816046][ T8458] Modules linked in:
[  467.821428][ T8463] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  467.833437][ T8463] REISERFS (device loop0): using ordered data mode
[  467.850665][ T8463] reiserfs: using flush barriers
[  467.877878][ T8458] CPU: 1 PID: 8458 Comm: syz.1.628 Not tainted syzkaller #0
[  467.885254][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  467.895353][ T8458] Call Trace:
[  467.898673][ T8458]  <TASK>
[  467.901638][ T8458]  dump_stack_lvl+0x18c/0x250
[  467.906373][ T8458]  ? show_regs_print_info+0x20/0x20
[  467.911624][ T8458]  ? swiotlb_print_info+0x70/0x70
[  467.916702][ T8458]  ? dump_page+0xba3/0x14a0
[  467.921265][ T8458]  bad_page+0x14b/0x170
[  467.925465][ T8458]  free_unref_page_prepare+0x85f/0x8c0
[  467.931021][ T8458]  free_unref_page_list+0xbe/0x860
[  467.936274][ T8458]  ? __folio_memcg+0x63/0x160
[  467.940529][ T8463] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  467.940984][ T8458]  ? folio_memcg+0x127/0x480
[  467.960710][ T8463] REISERFS (device loop0): checking transaction log (loop0)
[  467.961622][ T8458]  release_pages+0x1f7a/0x2200
[  467.973842][ T8458]  ? lru_cache_disable+0x30/0x30
[  467.978893][ T8458]  ? mlock_drain_local+0x79/0x490
[  467.983959][ T8458]  ? mlock_drain_local+0x79/0x490
[  467.988990][ T8458]  ? mlock_drain_local+0x28d/0x490
[  467.994118][ T8458]  __folio_batch_release+0x71/0xe0
[  467.999231][ T8458]  truncate_inode_pages_range+0x3b9/0xfb0
[  468.004952][ T8458]  ? filemap_fdatawait_range+0x40/0x40
[  468.010422][ T8458]  ? mapping_evict_folio+0x510/0x510
[  468.015716][ T8458]  ? mutex_unlock+0x10/0x10
[  468.020229][ T8458]  ? jfs_sync_fs+0x87/0xa0
[  468.024668][ T8458]  ? sync_filesystem+0x1e6/0x220
[  468.029605][ T8458]  jfs_remount+0x341/0x5b0
[  468.034030][ T8458]  ? jfs_statfs+0x550/0x550
[  468.038555][ T8458]  reconfigure_super+0x21e/0x8a0
[  468.043498][ T8458]  path_mount+0xd2f/0xff0
[  468.047835][ T8458]  __se_sys_mount+0x2e7/0x3d0
[  468.052533][ T8458]  ? __x64_sys_mount+0xc0/0xc0
[  468.057299][ T8458]  ? lockdep_hardirqs_on+0x98/0x150
[  468.062501][ T8458]  ? __x64_sys_mount+0x20/0xc0
[  468.067263][ T8458]  do_syscall_64+0x55/0xa0
[  468.071677][ T8458]  ? clear_bhb_loop+0x40/0x90
[  468.076354][ T8458]  ? clear_bhb_loop+0x40/0x90
[  468.081033][ T8458]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  468.086946][ T8458] RIP: 0033:0x7faa3259c819
[  468.091379][ T8458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.111004][ T8458] RSP: 002b:00007faa33370028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  468.119419][ T8458] RAX: ffffffffffffffda RBX: 00007faa32816090 RCX: 00007faa3259c819
[  468.127393][ T8458] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000
[  468.135366][ T8458] RBP: 00007faa32632c91 R08: 0000000000000000 R09: 0000000000000000
[  468.143355][ T8458] R10: 00000000010f4c2a R11: 0000000000000246 R12: 0000000000000000
[  468.151348][ T8458] R13: 00007faa32816128 R14: 00007faa32816090 R15: 00007ffe2d0a65b8
[  468.159331][ T8458]  </TASK>
[  468.177596][ T8458] Disabling lock debugging due to kernel taint
[  468.275234][ T5767] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt
[  468.275234][ T5767] 
[  468.290046][ T5767] ERROR: (device loop1): remounting filesystem as read-only
[  468.494739][ T8463] REISERFS (device loop0): Using tea hash to sort names
[  468.513261][ T8463] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  468.699981][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  468.699999][   T28] audit: type=1800 audit(1775885378.279:126): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.636" name="file1" dev="loop0" ino=4 res=0 errno=0
[  468.733185][ T8461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.636'.