last executing test programs:

17m32.902406867s ago: executing program 32 (id=156):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
flock(r0, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sync()
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
r3 = dup3(0xffffffffffffffff, r2, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000000)={0x5, 0x4, [0x3]})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)

16m48.39958774s ago: executing program 33 (id=295):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
pipe(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300)
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x3288000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x100000000001, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
write(r0, &(0x7f00000000c0)='4', 0x1)

16m19.58581054s ago: executing program 34 (id=330):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r4, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x120, 0x0)
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000440)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@lastblock={'lastblock', 0x3d, 0xfffffffffffffff7}}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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")
execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)

16m6.572707207s ago: executing program 35 (id=384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf, 0x5, 0x101, 0x8, 0xe4, 0xe87c, 0xc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x50811}, 0x0)

16m3.589389829s ago: executing program 5 (id=391):
r0 = gettid()
timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

16m1.816184792s ago: executing program 36 (id=393):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0xa00001, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=ascii,iocharset=utf8,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c646d6f64653d30303030303030303030303030303030303030303031302c6e6f7374726963742c73686f727461642c696f636861727365743d61736369692c73686f727461642c756e686964652c00a8172232e70e75ff55ee99288f4286134bd498ff12fd9da7eca6ff93c4f1a0e84abfa43537739ac9326baba94c4a70a0bbcb7eec8ecce9ad25a114ed70f407120236e32ebd5bc880e931c32b4ec75ca836be8bdc"], 0x1, 0xc43, &(0x7f0000001d40)="$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")
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001400030076656669009613992eb745ab0d33b090"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r3 = fspick(r2, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)

16m1.811290142s ago: executing program 5 (id=395):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
pwritev(r1, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x88, 0x0, @remote, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)

16m1.201750227s ago: executing program 5 (id=396):
r0 = inotify_init()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000500), &(0x7f0000000240)=r1}, 0x20)
read(r1, &(0x7f0000000080)=""/5, 0x5)
close_range(r0, 0xffffffffffffffff, 0x0)

16m1.09319649s ago: executing program 5 (id=397):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x35)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
setns(0xffffffffffffffff, 0x24020000)
umount2(0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x360, 0x238, 0x140, 0xfeffffff, 0x238, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'wlan1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @broadcast, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)

16m0.23572896s ago: executing program 5 (id=399):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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")
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x67, 0xc54, &(0x7f0000002500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
rmdir(0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
read(r4, 0x0, 0x0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000005c0))
r5 = syz_pidfd_open(r1, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$unix(r6, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000000002010100000000000000000a0000000400018004000380300002802c00018014000300ff"], 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
r7 = syz_open_dev$loop(0x0, 0x81, 0x141200)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, 0x0)
ioctl$LOOP_CHANGE_FD(r7, 0x4c03, r8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0xc, &(0x7f0000000300), 0x2, 0x53a, &(0x7f00000011c0)="$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")
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)

15m58.904194043s ago: executing program 5 (id=402):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x2, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
bind$unix(r3, &(0x7f00000003c0)=@abs={0x1}, 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, <r4=>0x0}})
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000b00)={{}, {@val={r4}, @max}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x3}})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x47}})

15m58.376501996s ago: executing program 37 (id=402):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x2, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
bind$unix(r3, &(0x7f00000003c0)=@abs={0x1}, 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, <r4=>0x0}})
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000b00)={{}, {@val={r4}, @max}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x3}})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x47}})

14m55.099121613s ago: executing program 7 (id=541):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ptrace(0x10, r0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
userfaultfd(0x80001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, 0x0}, 0x94)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)

14m54.102770297s ago: executing program 7 (id=543):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, 0x0, 0x0)

14m53.880869283s ago: executing program 7 (id=544):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0)
write(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)
read(r5, &(0x7f0000000180), 0x1000)
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x6, 0x0)
mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r6, 0x0)
r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
fcntl$setstatus(r8, 0x4, 0x0)
syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58)

14m52.905500317s ago: executing program 7 (id=546):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x35)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
setns(0xffffffffffffffff, 0x24020000)
umount2(0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x360, 0x238, 0x140, 0xfeffffff, 0x238, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'wlan1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @broadcast, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)

14m52.573924764s ago: executing program 6 (id=549):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
capset(0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0)

14m51.473059761s ago: executing program 6 (id=552):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x40000000000032a, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x4a)
r3 = dup(0xffffffffffffffff)
write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}})
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)

14m49.987314897s ago: executing program 7 (id=554):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106)
fallocate(r1, 0x8, 0x14000, 0x10000)

14m47.957431756s ago: executing program 6 (id=557):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
mlockall(0x7)

14m46.491801042s ago: executing program 6 (id=562):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x3, 0xc6b, &(0x7f0000000cc0)="$eJzs3V1sXGdaB/DnnWMndsqyLm3TLl2kWYrYNE2C89HWKC1yNsbalaI2quOFG5DH8SSMao9d21mlFSxBAm5AEFSkFXBBbpC44CI3SGiFUMTNIgFSBKq0CCQCbaOVEOAVLKxYaY3OzDv22I1jN192mt9vN/nPOfOcOe+Z9j1zpppnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiC/89InBw2m7RwEAPEivjb0xeNTrPwA8Us54/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOZSFPFWpHhvdClNtJbb+k41mhcujo+M3nqz/hQpKlG06ss/fYePHD324ksvD3Xy9tvfa5+J18fOnKienJ2Zm68vLNSnquPNxtnZqfqWH+Fut19vf+sJqM68eWHq3LmF6pFDR9fcfXHg5u7H9g4cH3r2wPOd2vGR0dGxrpqe3jve+0eke/dQfILsiiK+GCm+cfBbqRYRlbj7ubDJueN+64+ecv61DmJ8ZLR1INONWnOxvDNVclVPxEDXRsOdOfIA5uJdGY64VP5zKge8vzy8sbnafG1yul49XZtfbCw2Zpup0h5teTwDUYmhFDEXEUvFdg+enaY3ing1Utz83lKajIiiMw9eeG3sjcGjG2/Y8wAHucHuB4qI6/EQzFnYoXZHEb8TKd6dGIyzeV717o6IDyI+Xxa8EvFWmddSXM7LqTxBDEV82+sJPNR6ooi/jRSzaSlNta4HOteVp75c/VLz3GxXbee68qF6f/DRa4D+B7HbFa5N2MH6oojJ1hX/Urrz/9gFAAAAAAAAAAAAADwYRXw9Ulyd2ZfmoruntNE8Xz1Tm5xufyq489n/at5qeXl5eSC1s5pzMOdwztM5J3LO5byU83LOKzmv5ryW83rOGzmXckYl7z9nNedgzuGcp3NO5JzLeSnn5ZxX2tnpaFy+1pf3n++/kXMpZ+h7AgAAAAAAAAAAAAAAAAAA4B7rjyJ+M1L8xx98pfW70tH6XfpPHx86eepT3b8Z/8wmj1PWHoqIr8fWfpN3V/6t8VQp/3fvjwvYXF8U8dX8+3+/st2DAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdoRKFPGrkeJr31lKkSJiOGIi2nmj2O7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl3amIVyPFz/7e8Mq6nohIrf+37Sv/OhbDRc4nynwlhg+3sjJ8osy+iEPbMH7gzi28/c6btenp+rwbbrjhxsqN7T4zAQAAAAAAAAAAAAAAAMAjLBXxD5HiJ39/KQ1ExMWBm7sf2ztwfOjZA88XUbS+BCB1178+duZE9eTszNx8fWGhPlUdbzbOzk7Vt7q7vlON5oWL4yOj9+VgNtV/n8ff33dydu7t+cb5X1i85f17+k5MLizO187e+u7oj56Iwe41+1sDHh8ZbQ16ulFrtjZNlQ0G2BNR3erB8Mjbk4r4v0jx3sFvxuN5Xf7+j9720urs/6NfXF364Z61ufKvY+v88enjQyf3PLeV22mrA93fmnjlRBgd61rdk0f5Q13rBvK4tvzY8Igq5/8LkeLn/7hInTmU5/8PtJeKldn9v19dnVPH1+WKbZr/T3StO57PWr09EX2LM3O9T0f0Lbz9zsHGTO18/Xy9eezIyy8NHXv5xWMv9e6K6DvXmK4Prt7a6oh2b7UQAAAAAAAAAAAAAAAAAD6u3lTEFyLFL/39X630jef+v0+1l4qV2u7+333rHqf7ewM2un3LXr9N+vq6lftMqYinIsWzf/5Ma7wp9uh5hzu0JxXx3XI+TX0xfS6vy/M/d/bfev5fWpcr7mn/b1eL7Sbnice71l3K54n/jBSP/+Ez8bmu88T67t6y7i8jxeSPfDbXxa6yrvN47Z7odmNwWfuVSPH+6bW1nb7pJ1ZrD9/2sGCHKOf/TKT4x9/+u/jRvG7t93/cev7vWZcrtqn//8nuY4qIhbffebM2PV2fX9jyUwGPnHL+/0ak+Js//WY8l9fd7vt/Ot/zs++5tdnfKdqm+f9U17qUx/VjH/O5AAAAAAAAAAAAgIfFnlTEP0eKv/izA+lgXreVz/9OrcsV2/T5v6e71k2t+fzv/bux5ScZAAB2iN5UxE9Eij+Z+iB1emM37P99ZbX/Z2T9hXvrmv4HW33+H+ta/2P0/5f7TKmI7+e+3sFN+np/PFL8+k8dyHVpb1k33Blu6+++12abB09MT8+erS3WJqfr1bG52tl6ue3+SPFv//7ZvG2l1efb6Y9u9wav9gT/bqT4uQ87te2e4E4v5ZOrtYfL2oOR4rvvr63t9F09tVp7pKz9rUgx+j+3rt27Wnu0rP2nSPFf71Y7tXvK2s77uadXaw+dnZ3+yFs2AAAAAAAAAAAAAAAAAAAAtl9vKiJFims/c2WlN37t9391vgdg7fd/rXe/fv9/4N4cJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FFIU8d+R4r3RpXSjKJfb+k41mhcujo+M3nqz/hQpKlG06ss/fYePHD324ksvD3Xy9tvfa5+J18fOnKienJ2Zm68vLNSnquPNxtnZqfqWH+HOti82vGd/6wmozrx5YercuYXqkUNH19x9ceDm7sf2DhwfevbA853a8ZHR0bGump7eLY9+U+nePRSfILuiiL+OFN84+K30L0VEpbUu4m7m0ibnjvutP3rK+dea0OMjo60DmW7UmovlnamSq3oiBro2Gu7MkQcwF+/KcMSliKiUA95fHt7YXG2+Njldr56uzS82FhuzzVRpj7Y8noGoxFCKmIuIpY3PVjyieqOIa5Hi5veW0r8W7Re01jx44bWxNwaPbrxhzwMc5Aa7HygirsdDMGdhh9odRTwZKd6dGIz3i/a8ak2bDyI+X+YrEW+VeS3F5bycyhPEUMS3vZ7AQ60nijgdKWbTUvqgyHO/dV156svVLzXPzXbVdq4r7/a99ra/P3iQXJuwg/VFER+2rviX0odezwEAAAAAAAAAAABghyvi1UhxdWZfavWHrvSUNprnq2dqk9Ptj/V3PvtfzVstLy8vD6R2VnMO5hzOeTrnRM65nJdyXk7x/TKv5OWrZf7y6g6u5/U3Wrm71ZhYLkcl7z9nNedgzuGcp3NO5JzLeSnn5ZxXcl7NeS3n9Zw3ci7lvE3XPwAAAAAAAAAAAAAAAAAA3JVKFPFrkeJr31lKy0X792Unop031va57tquMQL3x/8HAAD//+M8F98=")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0)
unshare(0x22020600)
openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsync(r1)

14m44.144665729s ago: executing program 7 (id=570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002007f01010008000100ac14143308000300"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e)

14m42.921875849s ago: executing program 38 (id=570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002007f01010008000100ac14143308000300"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e)

14m42.897735279s ago: executing program 6 (id=574):
r0 = gettid()
timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000340), 0x0, 0x4c001, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

14m40.912174898s ago: executing program 6 (id=579):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0)

14m39.119455631s ago: executing program 39 (id=579):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0)

11m14.235983979s ago: executing program 1 (id=1085):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x7f)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000004, 0x1000005, 0x80010, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002c80)="$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")
fallocate(r1, 0x5b, 0x8000000000000000, 0x6)
syz_create_resource$binfmt(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8100, 0x101)
lseek(r2, 0xffffffffffffffff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r6, 0x107, 0x11, 0x0, &(0x7f0000001600))
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x8efb, 0xb91, 0xec, 0x951, 0x0})

11m10.9238397s ago: executing program 1 (id=1091):
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8)
write(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x900, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141081, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r3 = dup(r2)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

11m5.598183319s ago: executing program 1 (id=1100):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10)
syz_mount_image$fuse(0x0, 0x0, 0x100801, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = memfd_create(0x0, 0x0)
ftruncate(r4, 0x80079a0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendfile(0xffffffffffffffff, r4, 0x0, 0x10000000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x10000, 0x8, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c0014", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x448f0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

11m4.051978466s ago: executing program 1 (id=1104):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f0000000bc0)="$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")
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
read$FUSE(r4, &(0x7f0000000a80)={0x2020}, 0x2020)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0))
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)

11m1.723363563s ago: executing program 1 (id=1107):
setitimer(0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x6)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='io\x00')
read$rfkill(r4, &(0x7f0000000040), 0x8)

11m1.112801988s ago: executing program 1 (id=1109):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
splice(r0, &(0x7f00000001c0)=0xb, 0xffffffffffffffff, &(0x7f0000000240)=0x1, 0x6, 0x8)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00030004fcff", 0x58}], 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000180)=0x5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x1}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040044)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x48)

11m0.592976041s ago: executing program 40 (id=1109):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
splice(r0, &(0x7f00000001c0)=0xb, 0xffffffffffffffff, &(0x7f0000000240)=0x1, 0x6, 0x8)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00030004fcff", 0x58}], 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000180)=0x5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x1}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040044)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x48)

9m49.144041027s ago: executing program 4 (id=1268):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000200)={'veth0_to_bond\x00', 0x400})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x91], 0xeeee8000, 0x2018d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m47.531960046s ago: executing program 4 (id=1273):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000d00)={[{@grpjquota}, {@dioread_lock}, {@nobarrier}]}, 0xfe, 0x244, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x28)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r4 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%:r\xb2\x81\x99\xaf;]\x8e\xe6\xa7_\x8cZ7\xcda\x9b\x11\x9e\n\xd3d\xf0\xb6>\xa4\xa2', 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0xe0000014})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r7=>0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7004fddbdf253b000000080003", @ANYRES32=r7, @ANYBLOB="04006c002a0033006f1c0600080211000001080211000000505050505050f2ff0006b1080006010101010101010000000800260080090000"], 0x54}}, 0x8800)

9m46.250333367s ago: executing program 4 (id=1275):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1, &(0x7f0000000440)={[{@rodir}, {@rodir}, {@fat=@flush}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@fat=@check_strict}, {@rodir}, {@fat=@nfs}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@uni_xlate}, {@numtail}, {@shortname_winnt}, {@rodir}]}, 0x3, 0x27b, &(0x7f00000008c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6042, 0x101)

9m45.244816091s ago: executing program 4 (id=1277):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
sendmsg$key(r3, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001040)={0x2, 0x13, 0x8, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x10)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)

9m44.06034914s ago: executing program 4 (id=1279):
setitimer(0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x6)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$rfkill(r4, &(0x7f0000000040), 0x8)

9m42.82290834s ago: executing program 4 (id=1280):
syz_open_dev$tty20(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100000', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x40)
syz_open_dev$dri(0x0, 0x5, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000440)='./file0\x00', 0x200041a, &(0x7f0000000200)={[{}, {@nobarrier}, {@force}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==")
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x1d2)

9m25.53512087s ago: executing program 41 (id=1280):
syz_open_dev$tty20(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100000', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x40)
syz_open_dev$dri(0x0, 0x5, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000440)='./file0\x00', 0x200041a, &(0x7f0000000200)={[{}, {@nobarrier}, {@force}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x1d2)

38.530145484s ago: executing program 3 (id=2644):
socket$key(0xf, 0x3, 0x2)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x50)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
bpf$MAP_CREATE(0x0, 0x0, 0x50)

37.496049659s ago: executing program 3 (id=2647):
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x2a, 0x0, 0x9, 0xfffffffe}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x23, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYRES16], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f4, &(0x7f0000000000))
ioctl$int_in(r1, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
close(r1)

37.225572666s ago: executing program 3 (id=2652):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x8914, &(0x7f0000000040)='dummy0\x00')
ioctl(r0, 0x8914, &(0x7f0000000080)='dummy0\x00\x00\x00\x00')

37.03209375s ago: executing program 3 (id=2654):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0)

36.113368283s ago: executing program 3 (id=2657):
socket$key(0xf, 0x3, 0x2)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x50)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
bpf$MAP_CREATE(0x0, 0x0, 0x50)

34.959962741s ago: executing program 3 (id=2665):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

34.355770355s ago: executing program 42 (id=2665):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

20.732020597s ago: executing program 8 (id=2714):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "e7ffff7f00000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}}, 0x0)

20.530950351s ago: executing program 8 (id=2716):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e24, 0x0, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @empty, 0x4f1}}}, 0x108)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@var, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x5a}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYRESOCT], 0x0, 0x26, 0x0, 0x1, 0x2}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000)

20.375952535s ago: executing program 8 (id=2717):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

20.141932561s ago: executing program 8 (id=2718):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100040000000480000001000000000000000c410000001400"], 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x0)

19.892585657s ago: executing program 8 (id=2719):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r4, &(0x7f0000000200)='md', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r5, 0x40480923, &(0x7f0000000380))
ioctl(r5, 0x40140921, &(0x7f0000000420)="00000000010000000000000000000000060000")
ioctl(r5, 0x400c0930, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40)

19.660743902s ago: executing program 8 (id=2720):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f0000000300)='1', 0x1)
unshare(0x60000600)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)

10.564980403s ago: executing program 0 (id=2735):
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
socket$pptp(0x18, 0x1, 0x2)

9.778124163s ago: executing program 0 (id=2739):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="0100040000000480000001000000000000000c41000000140014"], 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x0)

8.538840673s ago: executing program 0 (id=2740):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r4, &(0x7f0000000200)='md', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r5, 0x40480923, &(0x7f0000000380))
ioctl(r5, 0x40140921, &(0x7f0000000420)="00000000010000000000000000000000060000")
ioctl(r5, 0x400c0930, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40)

6.805522935s ago: executing program 0 (id=2741):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000300)='1', 0x1)
r5 = socket$inet6(0xa, 0x1, 0x0)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r6, &(0x7f0000000300)='1', 0x1)
unshare(0x60000600)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)

6.715990227s ago: executing program 9 (id=2742):
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'bond0\x00', @ifru_flags})
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00', @ifru_names='bond_slave_0\x00'})

4.999085279s ago: executing program 9 (id=2743):
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x1a}]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x8103, 0x0, 0xbd}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

4.836831223s ago: executing program 9 (id=2744):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = dup2(r4, r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{r5}, 0x0, 0x0}, 0x20)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_clone(0x100, &(0x7f0000000300), 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)="a4b2bc2e1eca03a02926be8212255968516f317de9fa8e")
futex(0x0, 0x80, 0x2, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5e9, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)

4.665363956s ago: executing program 0 (id=2745):
syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x181102, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x3, 0x7, 0xfffffffe, 0xde9a, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x6, 0x10})

4.665088596s ago: executing program 2 (id=2746):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
socket(0x2, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)

4.633697428s ago: executing program 43 (id=2720):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f0000000300)='1', 0x1)
unshare(0x60000600)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)

3.052794796s ago: executing program 9 (id=2748):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
socket$pptp(0x18, 0x1, 0x2)

1.999357671s ago: executing program 2 (id=2749):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="0100040000000480000001000000000000000c41000000140014"], 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x0)

1.734936588s ago: executing program 2 (id=2750):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r4, &(0x7f0000000200)='md', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r5, 0x40480923, &(0x7f0000000380))
ioctl(r5, 0x40140921, &(0x7f0000000420)="00000000010000000000000000000000060000")
ioctl(r5, 0x400c0930, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40)

1.2421672s ago: executing program 9 (id=2751):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
connect$inet(r0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0)

945.213457ms ago: executing program 2 (id=2752):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x8915)

407.78348ms ago: executing program 2 (id=2753):
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071182d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x1a}]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x8103, 0x0, 0xbd}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

205.983135ms ago: executing program 9 (id=2754):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

48.162479ms ago: executing program 2 (id=2755):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
shutdown(r0, 0x1)

0s ago: executing program 0 (id=2756):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0)

kernel console output (not intermixed with test programs):

EXT4-fs (loop8): unmounting filesystem.
[  971.704722][    C0] net_ratelimit: 25 callbacks suppressed
[  971.779548][T14977] loop2: detected capacity change from 0 to 512
[  972.366032][T14977] EXT4-fs (loop2): Test dummy encryption mode enabled
[  972.372840][T14977] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  972.407536][T14977] EXT4-fs (loop2): 1 truncate cleaned up
[  972.413206][T14977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  973.028883][T14991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2170'.
[  973.039040][T14991] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2170'.
[  973.410070][T11603] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  973.858719][ T9766] EXT4-fs (loop2): unmounting filesystem.
[  976.366184][T15005] loop2: detected capacity change from 0 to 128
[  976.515926][T15009] loop3: detected capacity change from 0 to 164
[  976.533375][T15007] loop8: detected capacity change from 0 to 512
[  977.023290][    C0] net_ratelimit: 18 callbacks suppressed
[  977.941387][T15007] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  977.965514][T15007] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2176: invalid indirect mapped block 256 (level 1)
[  978.031465][T15007] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2176: invalid indirect mapped block 2683928664 (level 1)
[  978.126942][T15007] EXT4-fs (loop8): 1 truncate cleaned up
[  978.174963][T15007] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  978.716485][T15029] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2176'.
[  978.727796][T15029] EXT4-fs error (device loop8): ext4_find_dest_de:2117: inode #2: block 13: comm syz.8.2176: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  979.192847][T15031] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[9766] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[15031]
[  979.236554][ T6595] EXT4-fs (loop8): unmounting filesystem.
[  981.461341][T15044] loop3: detected capacity change from 0 to 1024
[  982.194050][    C1] net_ratelimit: 30 callbacks suppressed
[  983.467509][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'.
[  983.479329][T15070] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2185'.
[  985.307723][T15078] loop9: detected capacity change from 0 to 4096
[  987.129853][T15078] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  987.488395][ T9099] net_ratelimit: 26 callbacks suppressed
[  987.658409][ T6489] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  988.751177][ T6225] EXT4-fs (loop9): unmounting filesystem.
[  988.850904][T15123] loop8: detected capacity change from 0 to 512
[  988.929998][T15123] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  988.967402][T15123] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2193: invalid indirect mapped block 256 (level 1)
[  989.077731][T15123] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2193: invalid indirect mapped block 2683928664 (level 1)
[  989.133409][T15123] EXT4-fs (loop8): 1 truncate cleaned up
[  989.153655][ T4282] Bluetooth: hci2: Malformed LE Event: 0x1b
[  989.167785][T15132] loop9: detected capacity change from 0 to 512
[  989.175957][T15132] EXT4-fs (loop9): Test dummy encryption mode enabled
[  989.182877][T15132] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  989.193612][T15123] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  989.255152][T15132] EXT4-fs (loop9): 1 truncate cleaned up
[  989.260860][T15132] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  989.719927][T15142] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2193'.
[  989.731435][T15142] EXT4-fs error (device loop8): ext4_find_dest_de:2117: inode #2: block 13: comm syz.8.2193: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  990.213168][ T6595] EXT4-fs (loop8): unmounting filesystem.
[  990.528253][ T6225] EXT4-fs (loop9): unmounting filesystem.
[  990.855124][T15149] loop8: detected capacity change from 0 to 512
[  990.901923][T15149] EXT4-fs (loop8): Test dummy encryption mode enabled
[  990.908745][T15149] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  991.412776][T15149] EXT4-fs (loop8): 1 truncate cleaned up
[  991.418439][T15149] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  992.521819][    C1] net_ratelimit: 20 callbacks suppressed
[  993.007766][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2197'.
[  993.019340][T15161] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2197'.
[  993.337267][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  993.343585][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  993.546654][ T6595] EXT4-fs (loop8): unmounting filesystem.
[  994.348931][T15170] loop8: detected capacity change from 0 to 128
[  997.244420][T15184] loop2: detected capacity change from 0 to 1024
[  997.267419][T15184] hfsplus: unknown catalog record type 65281
[  997.277778][T15189] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6595] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[15189]
[  997.565182][    C0] net_ratelimit: 38 callbacks suppressed
[  998.541932][ T4282] Bluetooth: hci2: Malformed LE Event: 0x1b
[  998.583725][T15207] loop9: detected capacity change from 0 to 512
[  998.605704][T15208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2206'.
[  998.677306][T15207] EXT4-fs (loop9): Test dummy encryption mode enabled
[  998.684199][T15207] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  998.738322][T15207] EXT4-fs (loop9): 1 truncate cleaned up
[  998.744536][T15207] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1000.619806][ T6225] EXT4-fs (loop9): unmounting filesystem.
[ 1000.650743][T15218] loop2: detected capacity change from 0 to 4096
[ 1000.699367][T15218] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1001.144509][T15226] loop9: detected capacity change from 0 to 512
[ 1001.171367][T15226] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1001.178256][T15226] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1001.860442][T15226] EXT4-fs (loop9): 1 truncate cleaned up
[ 1001.866127][T15226] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1001.994372][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'.
[ 1002.006054][T15232] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2211'.
[ 1002.612944][    C1] net_ratelimit: 29 callbacks suppressed
[ 1002.790116][T15218] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[ 1002.798225][ T6225] EXT4-fs (loop9): unmounting filesystem.
[ 1003.931395][ T9766] EXT4-fs (loop2): unmounting filesystem.
[ 1004.036774][T15254] loop8: detected capacity change from 0 to 1024
[ 1005.987548][T15266] loop2: detected capacity change from 0 to 512
[ 1006.109934][T15266] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[ 1006.131802][T15266] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2219: invalid indirect mapped block 256 (level 1)
[ 1006.246657][T15266] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2219: invalid indirect mapped block 2683928664 (level 1)
[ 1006.417607][T15266] EXT4-fs (loop2): 1 truncate cleaned up
[ 1006.435096][T15266] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1006.944512][T15275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2219'.
[ 1006.956008][T15275] EXT4-fs error (device loop2): ext4_find_dest_de:2117: inode #2: block 13: comm syz.2.2219: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 1007.581571][ T9766] EXT4-fs (loop2): unmounting filesystem.
[ 1007.588183][ T4282] Bluetooth: hci2: Malformed LE Event: 0x1b
[ 1007.599274][T15278] loop9: detected capacity change from 0 to 512
[ 1007.611938][T15278] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1007.618738][T15278] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1007.652568][    C1] net_ratelimit: 48 callbacks suppressed
[ 1007.670312][T15278] EXT4-fs (loop9): 1 truncate cleaned up
[ 1007.676014][T15278] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1008.625277][ T4318] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1008.689703][T15294] loop3: detected capacity change from 0 to 164
[ 1008.874163][ T6225] EXT4-fs (loop9): unmounting filesystem.
[ 1010.847596][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2223'.
[ 1012.447729][T15315] loop9: detected capacity change from 0 to 128
[ 1012.791619][T15319] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6225] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[15319]
[ 1013.334145][    C0] net_ratelimit: 23 callbacks suppressed
[ 1015.663343][T15336] loop3: detected capacity change from 0 to 512
[ 1015.709368][T15336] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1015.716262][T15336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1015.943356][T15336] EXT4-fs (loop3): 1 truncate cleaned up
[ 1015.949221][T15336] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1017.419579][ T6261] EXT4-fs (loop3): unmounting filesystem.
[ 1018.142528][T15363] loop3: detected capacity change from 0 to 512
[ 1018.376609][    C0] net_ratelimit: 18 callbacks suppressed
[ 1018.628769][ T4282] Bluetooth: hci3: Malformed LE Event: 0x1b
[ 1018.679670][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'.
[ 1018.902903][T15363] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1018.909755][T15363] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1018.977495][T15363] EXT4-fs (loop3): 1 truncate cleaned up
[ 1018.983170][T15363] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1020.158639][ T6261] EXT4-fs (loop3): unmounting filesystem.
[ 1020.811856][T15379] loop3: detected capacity change from 0 to 1024
[ 1022.318529][T15379] hfsplus: unknown catalog record type 65281
[ 1022.326531][T15387] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[10683] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[15387]
[ 1022.866294][T15390] loop2: detected capacity change from 0 to 8
[ 1023.547490][    C1] net_ratelimit: 25 callbacks suppressed
[ 1024.112618][T15397] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1025.062581][T15411] loop9: detected capacity change from 0 to 164
[ 1026.665077][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2247'.
[ 1027.641225][ T4282] Bluetooth: hci5: Malformed LE Event: 0x1b
[ 1028.498870][T15437] loop2: detected capacity change from 0 to 1024
[ 1030.723788][    C1] net_ratelimit: 33 callbacks suppressed
[ 1031.036604][T15457] loop3: detected capacity change from 0 to 8
[ 1032.156768][T15463] syz.2.2256: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[ 1032.213670][T15463] CPU: 1 PID: 15463 Comm: syz.2.2256 Not tainted syzkaller #0
[ 1032.221165][T15463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1032.231269][T15463] Call Trace:
[ 1032.234557][T15463]  <TASK>
[ 1032.237501][T15463]  dump_stack_lvl+0x188/0x24e
[ 1032.242200][T15463]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1032.248636][T15463]  ? show_regs_print_info+0x12/0x12
[ 1032.253854][T15463]  ? load_image+0x410/0x410
[ 1032.258386][T15463]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1032.264814][T15463]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1032.271348][T15463]  warn_alloc+0x242/0x330
[ 1032.275685][T15463]  ? __get_vm_area_node+0x122/0x330
[ 1032.280915][T15463]  ? zone_watermark_ok_safe+0x270/0x270
[ 1032.286490][T15463]  ? rcu_is_watching+0x11/0xa0
[ 1032.291297][T15463]  ? __get_vm_area_node+0x318/0x330
[ 1032.296547][T15463]  ? kasan_set_track+0x60/0x70
[ 1032.301334][T15463]  ? __kasan_kmalloc+0x8e/0xa0
[ 1032.306128][T15463]  __vmalloc_node_range+0x37c/0x1380
[ 1032.311437][T15463]  ? __se_sys_ioctl+0xfa/0x170
[ 1032.316222][T15463]  ? do_syscall_64+0x4c/0xa0
[ 1032.320827][T15463]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1032.326951][T15463]  ? free_vm_area+0x50/0x50
[ 1032.331461][T15463]  ? vidtv_s302m_encoder_init+0x174/0x770
[ 1032.337180][T15463]  vzalloc+0x75/0x80
[ 1032.341069][T15463]  ? vidtv_s302m_encoder_init+0x174/0x770
[ 1032.346831][T15463]  vidtv_s302m_encoder_init+0x174/0x770
[ 1032.352379][T15463]  ? vidtv_pes_write_into+0x11e0/0x11e0
[ 1032.357924][T15463]  ? rcu_is_watching+0x11/0xa0
[ 1032.362687][T15463]  ? vidtv_psi_registration_desc_init+0x30/0x2a0
[ 1032.369019][T15463]  ? __kmalloc+0xe4/0x240
[ 1032.373349][T15463]  vidtv_channel_s302m_init+0x357/0x830
[ 1032.378897][T15463]  ? vidtv_mux_init+0x3ad/0x1950
[ 1032.383848][T15463]  vidtv_channels_init+0x41/0x90
[ 1032.388785][T15463]  vidtv_mux_init+0x4d0/0x1950
[ 1032.393566][T15463]  vidtv_start_feed+0x368/0x590
[ 1032.398413][T15463]  ? vidtv_i2c_func+0x10/0x10
[ 1032.403097][T15463]  ? vidtv_stop_feed+0x250/0x250
[ 1032.408042][T15463]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1032.413232][T15463]  ? lockdep_hardirqs_on+0x94/0x140
[ 1032.418428][T15463]  dmx_ts_feed_start_filtering+0x11c/0x210
[ 1032.424237][T15463]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1032.430137][T15463]  dvb_dmxdev_filter_start+0x422/0x1060
[ 1032.435691][T15463]  dvb_demux_do_ioctl+0x48d/0x530
[ 1032.440713][T15463]  dvb_usercopy+0x191/0x2b0
[ 1032.445209][T15463]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1032.450746][T15463]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1032.455687][T15463]  ? dvb_demux_poll+0x210/0x210
[ 1032.460525][T15463]  dvb_demux_ioctl+0x25/0x30
[ 1032.465107][T15463]  __se_sys_ioctl+0xfa/0x170
[ 1032.469704][T15463]  do_syscall_64+0x4c/0xa0
[ 1032.474152][T15463]  ? clear_bhb_loop+0x60/0xb0
[ 1032.478825][T15463]  ? clear_bhb_loop+0x60/0xb0
[ 1032.483509][T15463]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1032.489407][T15463] RIP: 0033:0x7f973e59e199
[ 1032.493821][T15463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1032.513418][T15463] RSP: 002b:00007f973f519028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1032.521827][T15463] RAX: ffffffffffffffda RBX: 00007f973e825fa0 RCX: 00007f973e59e199
[ 1032.529808][T15463] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004
[ 1032.537784][T15463] RBP: 00007f973e6358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1032.545755][T15463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1032.553718][T15463] R13: 00007f973e826038 R14: 00007f973e825fa0 R15: 00007ffc9bed4418
[ 1032.561693][T15463]  </TASK>
[ 1032.583429][T15463] Mem-Info:
[ 1032.586575][T15463] active_anon:7386 inactive_anon:18995 isolated_anon:0
[ 1032.586575][T15463]  active_file:22962 inactive_file:39077 isolated_file:0
[ 1032.586575][T15463]  unevictable:768 dirty:34 writeback:0
[ 1032.586575][T15463]  slab_reclaimable:24206 slab_unreclaimable:102589
[ 1032.586575][T15463]  mapped:30229 shmem:19822 pagetables:878
[ 1032.586575][T15463]  sec_pagetables:0 bounce:0
[ 1032.586575][T15463]  kernel_misc_reclaimable:0
[ 1032.586575][T15463]  free:1277793 free_pcp:14441 free_cma:0
[ 1032.662161][T15463] Node 0 active_anon:29544kB inactive_anon:69480kB active_file:91844kB inactive_file:156112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120916kB dirty:136kB writeback:0kB shmem:71252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12608kB pagetables:3712kB sec_pagetables:0kB all_unreclaimable? no
[ 1032.871727][T15463] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1033.088669][T15476] loop8: detected capacity change from 0 to 512
[ 1033.393733][T15463] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1033.522033][T15463] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1033.537425][T15476] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1033.545652][T15476] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1033.556841][T15463] Node 0 DMA32 free:1249688kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:29544kB inactive_anon:58100kB active_file:91852kB inactive_file:156112kB unevictable:1536kB writepending:148kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:2724kB local_pcp:240kB free_cma:0kB
[ 1033.601298][T15476] EXT4-fs (loop8): 1 truncate cleaned up
[ 1033.607803][T15476] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1033.682892][T15463] lowmem_reserve[]: 0 0 1 1 1
[ 1033.687654][T15463] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[ 1033.893140][T15463] lowmem_reserve[]: 0 0 0 0 0
[ 1033.901811][T15463] Node 1 Normal free:3901132kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:15072kB local_pcp:6720kB free_cma:0kB
[ 1034.057082][T15487] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[10683] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[15487]
[ 1034.714618][ T6595] EXT4-fs (loop8): unmounting filesystem.
[ 1034.720636][T15463] lowmem_reserve[]: 0 0 0 0 0
[ 1034.725431][T15463] Node 0 DMA: 0*4kB 0*8kB 0*16kB 
[ 1034.731289][T15463] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB 
[ 1034.731361][T15463] (U) 
[ 1034.737802][T15463] 1*2048kB (M) 3*4096kB 
[ 1034.740493][T15463] (M) 
[ 1034.745241][T15463] = 15360kB
[ 1034.750526][T15463] Node 0 DMA32: 2469*4kB (UME) 
[ 1034.750565][T15463] 2215*8kB 
[ 1035.219238][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'.
[ 1035.499059][T15463] (UME) 1540*16kB (UME) 1337*32kB (UME) 801*64kB (UME) 332*128kB (UME) 255*256kB (UME) 306*512kB (UME) 204*1024kB (UM) 20*2048kB (UM) 149*4096kB (M) = 1270892kB
[ 1035.544547][T15499] loop8: detected capacity change from 0 to 164
[ 1035.753595][    C0] net_ratelimit: 32 callbacks suppressed
[ 1036.756063][T15463] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[ 1036.814013][T15463] Node 1 Normal: 263*4kB (UME) 56*8kB (UE) 29*16kB (UME) 105*32kB (UME) 48*64kB (UME) 20*128kB (UME) 11*256kB (UM) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3901388kB
[ 1038.404803][T15463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1038.484674][T15463] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1038.494005][T15463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1038.514082][T15463] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1038.525561][ T4282] Bluetooth: hci3: Malformed LE Event: 0x1b
[ 1038.583428][T15515] loop3: detected capacity change from 0 to 512
[ 1038.592133][T15515] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1038.598985][T15515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1039.186316][T15463] 96381 total pagecache pages
[ 1039.191035][T15463] 2 pages in swap cache
[ 1039.207358][T15463] Free swap  = 124100kB
[ 1039.211801][T15463] Total swap = 124996kB
[ 1039.218025][T15463] 2097051 pages RAM
[ 1039.221851][T15463] 0 pages HighMem/MovableOnly
[ 1039.228949][T15463] 415230 pages reserved
[ 1039.233171][T15463] 0 pages cma reserved
[ 1039.259874][T15515] EXT4-fs (loop3): 1 truncate cleaned up
[ 1039.265607][T15515] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1039.476082][T15524] loop2: detected capacity change from 0 to 1024
[ 1039.614966][ T4314] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1040.116454][ T6261] EXT4-fs (loop3): unmounting filesystem.
[ 1041.345478][    C1] net_ratelimit: 27 callbacks suppressed
[ 1041.632512][ T4282] Bluetooth: hci4: Malformed LE Event: 0x1b
[ 1041.644672][T15555] loop2: detected capacity change from 0 to 512
[ 1041.653544][T15555] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1041.660416][T15555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1041.984898][T15555] EXT4-fs (loop2): 1 truncate cleaned up
[ 1041.990852][T15555] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1042.198061][T15558] loop8: detected capacity change from 0 to 164
[ 1042.870565][ T9766] EXT4-fs (loop2): unmounting filesystem.
[ 1045.489661][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2273'.
[ 1046.631449][T15593] loop2: detected capacity change from 0 to 1024
[ 1047.027577][ T5721] net_ratelimit: 41 callbacks suppressed
[ 1050.664655][ T4282] Bluetooth: hci3: Malformed LE Event: 0x1b
[ 1050.681392][T15621] loop3: detected capacity change from 0 to 512
[ 1050.690808][T15621] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1050.698071][T15621] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1050.793366][T15621] EXT4-fs (loop3): 1 truncate cleaned up
[ 1050.799157][T15621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1051.182096][T15634] bond0: (slave bond_slave_0): Releasing backup interface
[ 1051.525346][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2288'.
[ 1052.157150][    C1] net_ratelimit: 28 callbacks suppressed
[ 1052.336266][T15646] syz.9.2290: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0-1
[ 1052.394495][T15646] CPU: 1 PID: 15646 Comm: syz.9.2290 Not tainted syzkaller #0
[ 1052.401990][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1052.412052][T15646] Call Trace:
[ 1052.415342][T15646]  <TASK>
[ 1052.418283][T15646]  dump_stack_lvl+0x188/0x24e
[ 1052.422981][T15646]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1052.429426][T15646]  ? show_regs_print_info+0x12/0x12
[ 1052.434679][T15646]  ? load_image+0x410/0x410
[ 1052.439213][T15646]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1052.445642][T15646]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1052.452164][T15646]  warn_alloc+0x242/0x330
[ 1052.456529][T15646]  ? __get_vm_area_node+0x122/0x330
[ 1052.461746][T15646]  ? zone_watermark_ok_safe+0x270/0x270
[ 1052.467315][T15646]  ? rcu_is_watching+0x11/0xa0
[ 1052.472105][T15646]  ? __get_vm_area_node+0x318/0x330
[ 1052.477319][T15646]  ? kasan_set_track+0x60/0x70
[ 1052.482100][T15646]  ? __kasan_kmalloc+0x8e/0xa0
[ 1052.486872][T15646]  __vmalloc_node_range+0x37c/0x1380
[ 1052.492216][T15646]  ? free_vm_area+0x50/0x50
[ 1052.496768][T15646]  ? vidtv_mux_init+0x200/0x1950
[ 1052.501734][T15646]  vzalloc+0x75/0x80
[ 1052.505652][T15646]  ? vidtv_mux_init+0x200/0x1950
[ 1052.510619][T15646]  vidtv_mux_init+0x200/0x1950
[ 1052.515410][T15646]  ? trace_contention_end+0x5f/0x170
[ 1052.520775][T15646]  vidtv_start_feed+0x368/0x590
[ 1052.525668][T15646]  ? vidtv_i2c_func+0x10/0x10
[ 1052.530367][T15646]  ? vidtv_stop_feed+0x250/0x250
[ 1052.535332][T15646]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1052.540558][T15646]  ? lockdep_hardirqs_on+0x94/0x140
[ 1052.545791][T15646]  dmx_ts_feed_start_filtering+0x11c/0x210
[ 1052.551621][T15646]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1052.557515][T15646]  dvb_dmxdev_filter_start+0x422/0x1060
[ 1052.563068][T15646]  dvb_demux_do_ioctl+0x48d/0x530
[ 1052.563095][T15646]  dvb_usercopy+0x191/0x2b0
[ 1052.572625][T15646]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1052.578191][T15646]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1052.583169][T15646]  ? dvb_demux_poll+0x210/0x210
[ 1052.588086][T15646]  dvb_demux_ioctl+0x25/0x30
[ 1052.592695][T15646]  __se_sys_ioctl+0xfa/0x170
[ 1052.597319][T15646]  do_syscall_64+0x4c/0xa0
[ 1052.601750][T15646]  ? clear_bhb_loop+0x60/0xb0
[ 1052.606441][T15646]  ? clear_bhb_loop+0x60/0xb0
[ 1052.611136][T15646]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1052.617047][T15646] RIP: 0033:0x7f599459e199
[ 1052.621495][T15646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1052.641095][T15646] RSP: 002b:00007f5995381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1052.641120][T15646] RAX: ffffffffffffffda RBX: 00007f5994825fa0 RCX: 00007f599459e199
[ 1052.641135][T15646] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003
[ 1052.641148][T15646] RBP: 00007f59946358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1052.641161][T15646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1052.641173][T15646] R13: 00007f5994826038 R14: 00007f5994825fa0 R15: 00007ffd689f61e8
[ 1052.657522][T15646]  </TASK>
[ 1052.807942][ T6261] EXT4-fs (loop3): unmounting filesystem.
[ 1052.833472][T15646] Mem-Info:
[ 1052.836632][T15646] active_anon:7405 inactive_anon:4330 isolated_anon:0
[ 1052.836632][T15646]  active_file:22973 inactive_file:39077 isolated_file:0
[ 1052.836632][T15646]  unevictable:768 dirty:129 writeback:0
[ 1052.836632][T15646]  slab_reclaimable:24338 slab_unreclaimable:104649
[ 1052.836632][T15646]  mapped:33098 shmem:5097 pagetables:922
[ 1052.836632][T15646]  sec_pagetables:0 bounce:0
[ 1052.836632][T15646]  kernel_misc_reclaimable:0
[ 1052.836632][T15646]  free:1296938 free_pcp:7346 free_cma:0
[ 1053.132562][T15646] Node 0 active_anon:29624kB inactive_anon:28888kB active_file:91888kB inactive_file:156112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143864kB dirty:564kB writeback:0kB shmem:30056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12876kB pagetables:4000kB sec_pagetables:0kB all_unreclaimable? no
[ 1054.547505][T15646] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1054.725155][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.736208][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.234274][T15678] netlink: 'syz.8.2297': attribute type 27 has an invalid length.
[ 1055.295993][T15646] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1055.576504][T15678] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1055.875438][T15646] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1055.985190][T15646] Node 0 DMA32 free:1258636kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:40232kB inactive_anon:5976kB active_file:91876kB inactive_file:156112kB unevictable:1536kB writepending:28kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:26020kB local_pcp:19540kB free_cma:0kB
[ 1056.340094][T15646] lowmem_reserve[]: 0 0 1 1 1
[ 1056.359651][T15646] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[ 1056.449322][T15687] loop8: detected capacity change from 0 to 512
[ 1056.504634][T15646] lowmem_reserve[]: 0 0 0 0 0
[ 1056.535731][T15687] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[ 1056.544066][T15646] Node 1 Normal free:3901388kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14816kB local_pcp:6720kB free_cma:0kB
[ 1056.621001][T15687] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2299: invalid indirect mapped block 256 (level 1)
[ 1056.638735][T15646] lowmem_reserve[]: 0 0 0 0 0
[ 1056.646735][T15646] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1056.660771][T15646] Node 0 DMA32: 610*4kB (UME) 1295*8kB (M) 1494*16kB (UME) 1216*32kB (UME) 813*64kB (UME) 339*128kB (UME) 290*256kB (UME) 312*512kB (UME) 206*1024kB (UM) 20*2048kB (UM) 149*4096kB (M) = 1267232kB
[ 1056.681130][T15646] Node 0 
[ 1056.681154][T15687] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2299: invalid indirect mapped block 2683928664 (level 1)
[ 1056.698447][T15646] Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[ 1056.738109][T15687] EXT4-fs (loop8): 1 truncate cleaned up
[ 1056.745069][T15646] Node 1 Normal: 263*4kB (UME) 56*8kB (UE) 29*16kB (UME) 105*32kB (UME) 48*64kB (UME) 20*128kB (UME) 11*256kB (UM) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3901388kB
[ 1056.787741][T15687] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1056.845812][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'.
[ 1056.915427][T15646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1057.174860][T15646] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1057.270200][    C1] net_ratelimit: 26 callbacks suppressed
[ 1057.525048][T15646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1057.548022][T15646] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1057.607007][T15646] 64475 total pagecache pages
[ 1057.641712][T15646] 2 pages in swap cache
[ 1057.663563][T15646] Free swap  = 124100kB
[ 1057.700166][T15646] Total swap = 124996kB
[ 1057.704394][T15646] 2097051 pages RAM
[ 1057.704405][T15646] 0 pages HighMem/MovableOnly
[ 1057.730175][T15646] 415230 pages reserved
[ 1057.734421][T15646] 0 pages cma reserved
[ 1057.963035][T15717] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2299'.
[ 1057.972147][T15717] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2299'.
[ 1057.984294][T15717] EXT4-fs error (device loop8): ext4_find_dest_de:2117: inode #2: block 13: comm syz.8.2299: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 1058.529609][ T6595] EXT4-fs (loop8): unmounting filesystem.
[ 1061.652086][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2314'.
[ 1062.383795][    C0] net_ratelimit: 20 callbacks suppressed
[ 1062.797877][T15757] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1062.808727][T15758] loop3: detected capacity change from 0 to 256
[ 1062.854679][T15757] syz.8.2317: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1
[ 1062.920757][T15757] CPU: 0 PID: 15757 Comm: syz.8.2317 Not tainted syzkaller #0
[ 1062.928255][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1062.938339][T15757] Call Trace:
[ 1062.941631][T15757]  <TASK>
[ 1062.944581][T15757]  dump_stack_lvl+0x188/0x24e
[ 1062.949284][T15757]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1062.955725][T15757]  ? show_regs_print_info+0x12/0x12
[ 1062.960943][T15757]  ? load_image+0x410/0x410
[ 1062.965488][T15757]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1062.971921][T15757]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1062.978449][T15757]  warn_alloc+0x242/0x330
[ 1062.982809][T15757]  ? slab_free_freelist_hook+0x133/0x1b0
[ 1062.988464][T15757]  ? zone_watermark_ok_safe+0x270/0x270
[ 1062.994033][T15757]  ? __get_vm_area_node+0x16d/0x330
[ 1062.999257][T15757]  ? __get_vm_area_node+0x16d/0x330
[ 1063.004474][T15757]  ? kasan_set_track+0x60/0x70
[ 1063.009263][T15757]  ? __kasan_kmalloc+0x8e/0xa0
[ 1063.014055][T15757]  __vmalloc_node_range+0x37c/0x1380
[ 1063.019387][T15757]  ? free_vm_area+0x50/0x50
[ 1063.023961][T15757]  ? vidtv_mux_init+0x200/0x1950
[ 1063.028925][T15757]  vzalloc+0x75/0x80
[ 1063.032826][T15757]  ? vidtv_mux_init+0x200/0x1950
[ 1063.032854][T15757]  vidtv_mux_init+0x200/0x1950
[ 1063.042609][T15757]  ? trace_contention_end+0x5f/0x170
[ 1063.047925][T15757]  vidtv_start_feed+0x368/0x590
[ 1063.052804][T15757]  ? vidtv_i2c_func+0x10/0x10
[ 1063.057503][T15757]  ? vidtv_stop_feed+0x250/0x250
[ 1063.062468][T15757]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1063.067688][T15757]  ? lockdep_hardirqs_on+0x94/0x140
[ 1063.072922][T15757]  dmx_ts_feed_start_filtering+0x11c/0x210
[ 1063.078758][T15757]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1063.084676][T15757]  dvb_dmxdev_filter_start+0x422/0x1060
[ 1063.090256][T15757]  dvb_demux_do_ioctl+0x48d/0x530
[ 1063.095321][T15757]  dvb_usercopy+0x191/0x2b0
[ 1063.099844][T15757]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1063.105408][T15757]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1063.110386][T15757]  ? dvb_demux_poll+0x210/0x210
[ 1063.115257][T15757]  dvb_demux_ioctl+0x25/0x30
[ 1063.119867][T15757]  __se_sys_ioctl+0xfa/0x170
[ 1063.124484][T15757]  do_syscall_64+0x4c/0xa0
[ 1063.128920][T15757]  ? clear_bhb_loop+0x60/0xb0
[ 1063.133615][T15757]  ? clear_bhb_loop+0x60/0xb0
[ 1063.138318][T15757]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1063.144233][T15757] RIP: 0033:0x7f0dc879e199
[ 1063.148666][T15757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1063.168297][T15757] RSP: 002b:00007f0dc969c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1063.176709][T15757] RAX: ffffffffffffffda RBX: 00007f0dc8a25fa0 RCX: 00007f0dc879e199
[ 1063.176727][T15757] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003
[ 1063.192645][T15757] RBP: 00007f0dc88358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1063.192661][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1063.192673][T15757] R13: 00007f0dc8a26038 R14: 00007f0dc8a25fa0 R15: 00007ffe69ffcdb8
[ 1063.192704][T15757]  </TASK>
[ 1063.450914][T15767] binfmt_misc: register: failed to install interpreter file ./file2
[ 1063.848692][T15774] loop3: detected capacity change from 0 to 512
[ 1063.889258][T15774] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[ 1063.906381][T15774] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2320: invalid indirect mapped block 256 (level 1)
[ 1063.951981][T15757] Mem-Info:
[ 1063.955121][T15757] active_anon:7418 inactive_anon:5238 isolated_anon:0
[ 1063.955121][T15757]  active_file:22974 inactive_file:39077 isolated_file:0
[ 1063.955121][T15757]  unevictable:768 dirty:122 writeback:0
[ 1063.955121][T15757]  slab_reclaimable:24066 slab_unreclaimable:104344
[ 1063.955121][T15757]  mapped:34145 shmem:5116 pagetables:967
[ 1063.955121][T15757]  sec_pagetables:0 bounce:0
[ 1063.955121][T15757]  kernel_misc_reclaimable:0
[ 1063.955121][T15757]  free:1292484 free_pcp:11073 free_cma:0
[ 1064.006628][T15774] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2320: invalid indirect mapped block 2683928664 (level 1)
[ 1064.032600][T15774] EXT4-fs (loop3): 1 truncate cleaned up
[ 1064.038294][T15774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1064.171763][T15757] Node 0 active_anon:29592kB inactive_anon:22488kB active_file:91912kB inactive_file:156112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136524kB dirty:544kB writeback:0kB shmem:19976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12720kB pagetables:4012kB sec_pagetables:0kB all_unreclaimable? no
[ 1064.245882][T15757] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1064.356683][T15757] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1064.502292][T15785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2320'.
[ 1064.511306][T15785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2320'.
[ 1064.522811][T15785] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.2320: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 1064.731856][T15757] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1064.751182][T15757] Node 0 DMA32 free:1251692kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:29592kB inactive_anon:29188kB active_file:91912kB inactive_file:156112kB unevictable:1536kB writepending:644kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:20316kB local_pcp:11804kB free_cma:0kB
[ 1064.898657][T15757] lowmem_reserve[]: 0 0 1 1 1
[ 1064.928065][T15757] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[ 1064.950076][T10949] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1065.011876][T15757] lowmem_reserve[]: 0 0 0 0 0
[ 1065.016684][T15757] Node 1 Normal free:3901388kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14816kB local_pcp:6720kB free_cma:0kB
[ 1065.110783][ T6261] EXT4-fs (loop3): unmounting filesystem.
[ 1065.157991][T15757] lowmem_reserve[]: 0 0 0 0 0
[ 1065.165919][T10949] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.188661][T15790] loop2: detected capacity change from 0 to 512
[ 1065.196497][T10949] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1065.208497][T15757] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1065.228507][T10949] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1065.255034][T15790] fscrypt (loop2, inode 2): Error -61 getting encryption context
[ 1065.263006][T15790] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[ 1065.271175][T10949] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1065.281150][T15790] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.2324: iget: bad i_size value: 12154757448730
[ 1065.293988][T10949] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1065.307334][T10949] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[ 1065.316604][T15790] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2324: couldn't read orphan inode 13 (err -117)
[ 1065.328690][T10949] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.336864][T15790] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1065.351505][T15779] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1065.418701][T15757] Node 0 DMA32: 123*4kB (UME) 1121*8kB (UME) 1369*16kB (UME) 1417*32kB (UME) 825*64kB (UME) 342*128kB (UME) 292*256kB (UME) 313*512kB (UME) 206*1024kB (UM) 19*2048kB (UM) 149*4096kB (M) = 1268452kB
[ 1065.511762][T10949] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected
[ 1065.521478][T10949] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84
[ 1065.529313][T10949] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2
[ 1065.537687][T15757] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[ 1065.550595][T10949] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1065.561760][T10949] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88
[ 1065.571779][T15757] Node 1 Normal: 263*4kB (UME) 56*8kB 
[ 1065.591299][T15757] (UE) 29*16kB (UME) 105*32kB (UME) 48*64kB (UME) 20*128kB (UME) 11*256kB (UM) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3901388kB
[ 1065.676325][T10949] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6
[ 1065.736137][T15757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1065.778385][T10949] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1065.874611][T15757] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1065.928950][T15794] loop3: detected capacity change from 0 to 1024
[ 1065.972971][T15757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1066.082144][T15757] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1066.101779][T15757] 70012 total pagecache pages
[ 1066.112946][T15757] 2 pages in swap cache
[ 1066.117201][T15757] Free swap  = 123332kB
[ 1066.131539][T15757] Total swap = 124996kB
[ 1066.135872][T15757] 2097051 pages RAM
[ 1066.145984][T15757] 0 pages HighMem/MovableOnly
[ 1066.172112][T15757] 415230 pages reserved
[ 1066.226780][ T9766] EXT4-fs (loop2): unmounting filesystem.
[ 1066.232234][T15757] 0 pages cma reserved
[ 1066.265986][   T26] audit: type=1800 audit(1791289045.891:479): pid=15794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2323" name="file7" dev="loop3" ino=26 res=0 errno=0
[ 1066.529568][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2325'.
[ 1067.306368][T10949] usb 10-1: USB disconnect, device number 19
[ 1067.350666][T10949] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1067.459202][T10949] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1067.512499][ T8950] net_ratelimit: 31 callbacks suppressed
[ 1067.572013][T10949] keyspan 10-1:1.0: device disconnected
[ 1070.167268][T15837] FAULT_INJECTION: forcing a failure.
[ 1070.167268][T15837] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1070.203438][T15837] CPU: 0 PID: 15837 Comm: syz.0.2334 Not tainted syzkaller #0
[ 1070.210917][T15837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1070.210931][T15837] Call Trace:
[ 1070.210940][T15837]  <TASK>
[ 1070.210949][T15837]  dump_stack_lvl+0x188/0x24e
[ 1070.224274][T15837]  ? show_regs_print_info+0x12/0x12
[ 1070.231848][T15837]  ? load_image+0x410/0x410
[ 1070.231882][T15837]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1070.241542][T15837]  ? do_futex+0x310/0x320
[ 1070.250865][T15837]  should_fail_ex+0x390/0x4c0
[ 1070.250898][T15837]  strncpy_from_user+0x32/0x340
[ 1070.260374][T15837]  __se_sys_add_key+0xd8/0x410
[ 1070.260401][T15837]  ? __x64_sys_add_key+0xc0/0xc0
[ 1070.270084][T15837]  ? lockdep_hardirqs_on+0x94/0x140
[ 1070.270111][T15837]  ? __x64_sys_add_key+0x1c/0xc0
[ 1070.280224][T15837]  do_syscall_64+0x4c/0xa0
[ 1070.284640][T15837]  ? clear_bhb_loop+0x60/0xb0
[ 1070.289311][T15837]  ? clear_bhb_loop+0x60/0xb0
[ 1070.293990][T15837]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1070.299873][T15837] RIP: 0033:0x7fd4ea19e199
[ 1070.304280][T15837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1070.323880][T15837] RSP: 002b:00007fd4eb14d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1070.332284][T15837] RAX: ffffffffffffffda RBX: 00007fd4ea425fa0 RCX: 00007fd4ea19e199
[ 1070.340246][T15837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200
[ 1070.348210][T15837] RBP: 00007fd4ea2358e0 R08: ffffffffffffffff R09: 0000000000000000
[ 1070.356170][T15837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1070.364129][T15837] R13: 00007fd4ea426038 R14: 00007fd4ea425fa0 R15: 00007ffe380c6b68
[ 1070.372101][T15837]  </TASK>
[ 1070.579171][T15843] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1070.716136][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'.
[ 1070.727721][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'.
[ 1071.547116][T15852] loop3: detected capacity change from 0 to 8
[ 1072.553430][    C0] net_ratelimit: 36 callbacks suppressed
[ 1073.676991][T15876] loop9: detected capacity change from 0 to 512
[ 1073.778994][T15883] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801
[ 1073.905500][T15886] binfmt_misc: register: failed to install interpreter file ./file2
[ 1073.947998][T15889] FAULT_INJECTION: forcing a failure.
[ 1073.947998][T15889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1074.024922][T15889] CPU: 0 PID: 15889 Comm: syz.8.2347 Not tainted syzkaller #0
[ 1074.032398][T15889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1074.032412][T15889] Call Trace:
[ 1074.045721][T15889]  <TASK>
[ 1074.045731][T15889]  dump_stack_lvl+0x188/0x24e
[ 1074.045762][T15889]  ? show_regs_print_info+0x12/0x12
[ 1074.053664][T15889]  ? load_image+0x410/0x410
[ 1074.053698][T15889]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1074.053723][T15889]  ? do_futex+0x310/0x320
[ 1074.053747][T15889]  should_fail_ex+0x390/0x4c0
[ 1074.063811][T15889]  strncpy_from_user+0x32/0x340
[ 1074.063843][T15889]  __se_sys_add_key+0xd8/0x410
[ 1074.073149][T15889]  ? __x64_sys_add_key+0xc0/0xc0
[ 1074.073180][T15889]  ? lockdep_hardirqs_on+0x94/0x140
[ 1074.083006][T15889]  ? __x64_sys_add_key+0x1c/0xc0
[ 1074.092673][T15889]  do_syscall_64+0x4c/0xa0
[ 1074.092696][T15889]  ? clear_bhb_loop+0x60/0xb0
[ 1074.102800][T15889]  ? clear_bhb_loop+0x60/0xb0
[ 1074.107215][T15889]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1074.107237][T15889] RIP: 0033:0x7f0dc879e199
[ 1074.107254][T15889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1074.146522][T15889] RSP: 002b:00007f0dc969c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1074.154934][T15889] RAX: ffffffffffffffda RBX: 00007f0dc8a25fa0 RCX: 00007f0dc879e199
[ 1074.162914][T15889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200
[ 1074.170937][T15889] RBP: 00007f0dc88358e0 R08: ffffffffffffffff R09: 0000000000000000
[ 1074.178903][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1074.186864][T15889] R13: 00007f0dc8a26038 R14: 00007f0dc8a25fa0 R15: 00007ffe69ffcdb8
[ 1074.194835][T15889]  </TASK>
[ 1074.582790][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'.
[ 1074.594458][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'.
[ 1075.200615][T15897] syz.9.2349: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0-1
[ 1075.304007][T15897] CPU: 0 PID: 15897 Comm: syz.9.2349 Not tainted syzkaller #0
[ 1075.311504][T15897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1075.321573][T15897] Call Trace:
[ 1075.324867][T15897]  <TASK>
[ 1075.327813][T15897]  dump_stack_lvl+0x188/0x24e
[ 1075.332515][T15897]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1075.338929][T15897]  ? show_regs_print_info+0x12/0x12
[ 1075.344152][T15897]  ? load_image+0x410/0x410
[ 1075.348702][T15897]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1075.355175][T15897]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1075.361704][T15897]  warn_alloc+0x242/0x330
[ 1075.366056][T15897]  ? slab_free_freelist_hook+0x133/0x1b0
[ 1075.371693][T15897]  ? zone_watermark_ok_safe+0x270/0x270
[ 1075.377238][T15897]  ? __get_vm_area_node+0x16d/0x330
[ 1075.382452][T15897]  ? __get_vm_area_node+0x16d/0x330
[ 1075.387653][T15897]  ? kasan_set_track+0x60/0x70
[ 1075.392417][T15897]  ? __kasan_kmalloc+0x8e/0xa0
[ 1075.397199][T15897]  __vmalloc_node_range+0x37c/0x1380
[ 1075.402504][T15897]  ? free_vm_area+0x50/0x50
[ 1075.407006][T15897]  ? vidtv_mux_init+0x200/0x1950
[ 1075.411943][T15897]  vzalloc+0x75/0x80
[ 1075.415834][T15897]  ? vidtv_mux_init+0x200/0x1950
[ 1075.420768][T15897]  vidtv_mux_init+0x200/0x1950
[ 1075.425528][T15897]  ? trace_contention_end+0x5f/0x170
[ 1075.430814][T15897]  vidtv_start_feed+0x368/0x590
[ 1075.435671][T15897]  ? vidtv_i2c_func+0x10/0x10
[ 1075.440340][T15897]  ? vidtv_stop_feed+0x250/0x250
[ 1075.445274][T15897]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1075.450465][T15897]  ? lockdep_hardirqs_on+0x94/0x140
[ 1075.455674][T15897]  dmx_ts_feed_start_filtering+0x11c/0x210
[ 1075.461475][T15897]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1075.467365][T15897]  dvb_dmxdev_filter_start+0x422/0x1060
[ 1075.472911][T15897]  dvb_demux_do_ioctl+0x48d/0x530
[ 1075.477949][T15897]  dvb_usercopy+0x191/0x2b0
[ 1075.482448][T15897]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1075.487990][T15897]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1075.492945][T15897]  ? dvb_demux_poll+0x210/0x210
[ 1075.497790][T15897]  dvb_demux_ioctl+0x25/0x30
[ 1075.502371][T15897]  __se_sys_ioctl+0xfa/0x170
[ 1075.506965][T15897]  do_syscall_64+0x4c/0xa0
[ 1075.511377][T15897]  ? clear_bhb_loop+0x60/0xb0
[ 1075.516047][T15897]  ? clear_bhb_loop+0x60/0xb0
[ 1075.520717][T15897]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1075.526601][T15897] RIP: 0033:0x7f599459e199
[ 1075.531008][T15897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1075.550605][T15897] RSP: 002b:00007f5995381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1075.559011][T15897] RAX: ffffffffffffffda RBX: 00007f5994825fa0 RCX: 00007f599459e199
[ 1075.566974][T15897] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003
[ 1075.574934][T15897] RBP: 00007f59946358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1075.582899][T15897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1075.590861][T15897] R13: 00007f5994826038 R14: 00007f5994825fa0 R15: 00007ffd689f61e8
[ 1075.598843][T15897]  </TASK>
[ 1075.615451][T15907] loop3: detected capacity change from 0 to 8
[ 1075.744147][T15897] Mem-Info:
[ 1075.751338][T15897] active_anon:7396 inactive_anon:4532 isolated_anon:0
[ 1075.751338][T15897]  active_file:22978 inactive_file:39077 isolated_file:0
[ 1075.751338][T15897]  unevictable:768 dirty:230 writeback:0
[ 1075.751338][T15897]  slab_reclaimable:24068 slab_unreclaimable:104656
[ 1075.751338][T15897]  mapped:34145 shmem:5214 pagetables:974
[ 1075.751338][T15897]  sec_pagetables:0 bounce:0
[ 1075.751338][T15897]  kernel_misc_reclaimable:0
[ 1075.751338][T15897]  free:1297684 free_pcp:6033 free_cma:0
[ 1076.550522][T15897] Node 0 active_anon:29560kB inactive_anon:67408kB active_file:91908kB inactive_file:156112kB unevictable:1636kB isolated(anon):0kB isolated(file):0kB mapped:174996kB dirty:944kB writeback:0kB shmem:68248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12664kB pagetables:4112kB sec_pagetables:0kB all_unreclaimable? no
[ 1076.858376][T15914] loop2: detected capacity change from 0 to 1024
[ 1077.078322][T15897] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1077.164999][    C1] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1077.174182][    C1] Buffer I/O error on dev loop2, logical block 4, async page read
[ 1077.264719][    C1] I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1077.273993][    C1] Buffer I/O error on dev loop2, logical block 5, async page read
[ 1077.281853][    C1] I/O error, dev loop2, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1077.291079][    C1] Buffer I/O error on dev loop2, logical block 6, async page read
[ 1077.302459][T15914] hfsplus: failed to load extents file
[ 1077.599554][T15897] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1077.760708][T15897] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1077.791003][T15897] Node 0 DMA32 free:1261692kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:29544kB inactive_anon:17220kB active_file:91908kB inactive_file:156116kB unevictable:1604kB writepending:944kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:23736kB local_pcp:7216kB free_cma:0kB
[ 1077.893130][T15897] lowmem_reserve[]: 0 0 1 1 1
[ 1077.903241][T15897] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[ 1077.921827][T15940] net_ratelimit: 33 callbacks suppressed
[ 1077.921840][T15940] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1077.980921][T15897] lowmem_reserve[]: 0 0 0 0 0
[ 1077.991425][T15897] Node 1 Normal free:3901388kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14816kB local_pcp:8096kB free_cma:0kB
[ 1078.070515][T15897] lowmem_reserve[]: 0 0 0 0 0
[ 1078.090943][T15897] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1078.114614][T15897] Node 0 DMA32: 1669*4kB (ME) 1070*8kB (M) 1304*16kB (UME) 1093*32kB (UME) 750*64kB (UME) 343*128kB (UME) 291*256kB (UME) 314*512kB (UME) 206*1024kB (UM) 20*2048kB (UM) 149*4096kB (M) = 1260452kB
[ 1078.178242][T15897] Node 0 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[ 1078.210125][T15897] Node 1 Normal: 263*4kB (UME) 56*8kB (UE) 29*16kB (UME) 105*32kB (UME) 48*64kB (UME) 20*128kB (UME) 11*256kB (UM) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3901388kB
[ 1078.266468][T15946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2359'.
[ 1078.324204][T15897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1078.384233][T15897] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1078.443106][T15897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1078.487795][T15897] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1078.532955][T15897] 67059 total pagecache pages
[ 1078.554295][T15897] 2 pages in swap cache
[ 1078.582642][T15897] Free swap  = 123844kB
[ 1078.622931][T15897] Total swap = 124996kB
[ 1078.668863][T15897] 2097051 pages RAM
[ 1078.673923][T15897] 0 pages HighMem/MovableOnly
[ 1078.700814][T15897] 415230 pages reserved
[ 1078.710917][T15897] 0 pages cma reserved
[ 1078.902689][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'.
[ 1078.914391][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'.
[ 1079.130431][T15961] loop2: detected capacity change from 0 to 8
[ 1080.916516][T15983] loop8: detected capacity change from 0 to 128
[ 1080.982106][T15983] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1081.010482][T15983] ext4 filesystem being mounted at /376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1081.119944][T15984] loop2: detected capacity change from 0 to 1024
[ 1081.214299][ T6595] EXT4-fs (loop8): unmounting filesystem.
[ 1081.216641][   T26] audit: type=1800 audit(1791289060.839:480): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2367" name="file7" dev="loop2" ino=26 res=0 errno=0
[ 1081.713477][T16007] loop2: detected capacity change from 0 to 8
[ 1083.152737][    C1] net_ratelimit: 29 callbacks suppressed
[ 1083.290815][   T26] audit: type=1326 audit(1791289062.908:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.8.2383" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc879e199 code=0x7ffc0000
[ 1083.376361][   T26] audit: type=1326 audit(1791289062.918:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.8.2383" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc879e199 code=0x7ffc0000
[ 1083.530851][   T26] audit: type=1326 audit(1791289062.918:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.8.2383" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc879e199 code=0x7ffc0000
[ 1083.633157][   T26] audit: type=1326 audit(1791289062.918:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.8.2383" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc879e199 code=0x7ffc0000
[ 1083.766329][   T26] audit: type=1326 audit(1791289062.918:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.8.2383" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0dc879e199 code=0x7ffc0000
[ 1083.871133][   T26] audit: type=1326 audit(1791289062.928:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.8.2383" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc879e199 code=0x7ffc0000
[ 1083.953646][   T26] audit: type=1326 audit(1791289062.928:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.8.2383" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc879e199 code=0x7ffc0000
[ 1085.039998][   T26] audit: type=1326 audit(1791289062.928:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.8.2383" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc879e199 code=0x7ffc0000
[ 1085.070053][T16060] loop3: detected capacity change from 0 to 512
[ 1085.125928][   T26] audit: type=1326 audit(1791289062.928:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.8.2383" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc879e199 code=0x7ffc0000
[ 1085.162690][T16060] fscrypt (loop3, inode 2): Error -61 getting encryption context
[ 1085.195833][T16060] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[ 1085.225320][T16060] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #13: comm syz.3.2392: iget: bad i_size value: 12154757448730
[ 1085.296340][T16060] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.2392: couldn't read orphan inode 13 (err -117)
[ 1085.328363][T16060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1086.192236][ T6261] EXT4-fs (loop3): unmounting filesystem.
[ 1086.880329][T16096] loop2: detected capacity change from 0 to 8
[ 1086.971070][T16098] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1086.999925][T16098] warn_alloc: 2 callbacks suppressed
[ 1086.999936][T16098] syz.3.2401: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3
[ 1087.145733][T16098] ,mems_allowed=0-1
[ 1087.370976][T16098] 
[ 1087.573817][T16098] CPU: 1 PID: 16098 Comm: syz.3.2401 Not tainted syzkaller #0
[ 1087.581323][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1087.591392][T16098] Call Trace:
[ 1087.594689][T16098]  <TASK>
[ 1087.597643][T16098]  dump_stack_lvl+0x188/0x24e
[ 1087.602344][T16098]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1087.608776][T16098]  ? show_regs_print_info+0x12/0x12
[ 1087.614004][T16098]  ? load_image+0x410/0x410
[ 1087.618536][T16098]  ? __rcu_read_unlock+0x78/0xd0
[ 1087.623488][T16098]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1087.629926][T16098]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1087.636452][T16098]  warn_alloc+0x242/0x330
[ 1087.640863][T16098]  ? __get_vm_area_node+0x122/0x330
[ 1087.646083][T16098]  ? zone_watermark_ok_safe+0x270/0x270
[ 1087.651648][T16098]  ? rcu_is_watching+0x11/0xa0
[ 1087.656435][T16098]  ? __get_vm_area_node+0x318/0x330
[ 1087.661668][T16098]  __vmalloc_node_range+0x37c/0x1380
[ 1087.666980][T16098]  ? __mutex_trylock_common+0x15c/0x260
[ 1087.672557][T16098]  ? __mutex_lock+0x1ab/0xae0
[ 1087.677256][T16098]  ? free_vm_area+0x50/0x50
[ 1087.681776][T16098]  ? tomoyo_path_number_perm+0x5a4/0x650
[ 1087.687425][T16098]  ? tomoyo_path_number_perm+0x205/0x650
[ 1087.693125][T16098]  ? dvb_dmxdev_filter_start+0x107/0x1060
[ 1087.698865][T16098]  vmalloc+0x75/0x80
[ 1087.702778][T16098]  ? dvb_dmxdev_filter_start+0x107/0x1060
[ 1087.708513][T16098]  dvb_dmxdev_filter_start+0x107/0x1060
[ 1087.714091][T16098]  dvb_demux_do_ioctl+0x48d/0x530
[ 1087.719134][T16098]  dvb_usercopy+0x191/0x2b0
[ 1087.723651][T16098]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1087.729211][T16098]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1087.734182][T16098]  ? dvb_demux_poll+0x210/0x210
[ 1087.739046][T16098]  dvb_demux_ioctl+0x25/0x30
[ 1087.743674][T16098]  __se_sys_ioctl+0xfa/0x170
[ 1087.748295][T16098]  do_syscall_64+0x4c/0xa0
[ 1087.752725][T16098]  ? clear_bhb_loop+0x60/0xb0
[ 1087.757417][T16098]  ? clear_bhb_loop+0x60/0xb0
[ 1087.762119][T16098]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1087.768037][T16098] RIP: 0033:0x7ff16579e199
[ 1087.772498][T16098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1087.792116][T16098] RSP: 002b:00007ff1665e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1087.800547][T16098] RAX: ffffffffffffffda RBX: 00007ff165a25fa0 RCX: 00007ff16579e199
[ 1087.808531][T16098] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004
[ 1087.816520][T16098] RBP: 00007ff1658358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1087.824501][T16098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1087.832480][T16098] R13: 00007ff165a26038 R14: 00007ff165a25fa0 R15: 00007ffee31d78d8
[ 1087.840480][T16098]  </TASK>
[ 1088.051988][T16111] loop2: detected capacity change from 0 to 512
[ 1088.361535][    C0] net_ratelimit: 29 callbacks suppressed
[ 1088.367789][T16098] Mem-Info:
[ 1088.370904][T16098] active_anon:7388 inactive_anon:7246 isolated_anon:0
[ 1088.370904][T16098]  active_file:22986 inactive_file:39077 isolated_file:0
[ 1088.370904][T16098]  unevictable:768 dirty:61 writeback:0
[ 1088.370904][T16098]  slab_reclaimable:23980 slab_unreclaimable:103790
[ 1088.370904][T16098]  mapped:36981 shmem:7953 pagetables:984
[ 1088.370904][T16098]  sec_pagetables:0 bounce:0
[ 1088.370904][T16098]  kernel_misc_reclaimable:0
[ 1088.370904][T16098]  free:1295305 free_pcp:8445 free_cma:0
[ 1088.416851][T16098] Node 0 active_anon:29552kB inactive_anon:28984kB active_file:91940kB inactive_file:156112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147924kB dirty:240kB writeback:0kB shmem:30276kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12616kB pagetables:3936kB sec_pagetables:0kB all_unreclaimable? no
[ 1088.449872][T16098] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1088.449922][T16098] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1088.506358][T16098] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1088.517866][T16098] Node 0 DMA32 free:1264204kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:29552kB inactive_anon:28984kB active_file:91940kB inactive_file:156112kB unevictable:1536kB writepending:240kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:18016kB local_pcp:14484kB free_cma:0kB
[ 1088.579515][T16111] fscrypt (loop2, inode 2): Error -61 getting encryption context
[ 1088.616257][T16111] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[ 1088.646423][T16111] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.2404: iget: bad i_size value: 12154757448730
[ 1088.666351][T16098] lowmem_reserve[]: 0 0 1 1 1
[ 1088.685857][T16098] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[ 1088.738834][T16111] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2404: couldn't read orphan inode 13 (err -117)
[ 1088.799150][T16111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1088.843273][T16098] lowmem_reserve[]: 0 0 0 0 0
[ 1088.869130][T16098] Node 1 Normal free:3901644kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14560kB local_pcp:6720kB free_cma:0kB
[ 1089.113800][T16098] lowmem_reserve[]: 0 0 0 0 0
[ 1089.282301][T16098] Node 0 DMA: 0*4kB 0*8kB 
[ 1089.358045][T16098] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1089.518416][T16098] Node 0 DMA32: 1042*4kB (UME) 1074*8kB (UME) 1380*16kB (UME) 899*32kB (UME) 866*64kB (UME) 339*128kB (UME) 294*256kB (UME) 314*512kB (UME) 207*1024kB (UM) 20*2048kB (UM) 149*4096kB (M) = 1261688kB
[ 1089.652845][T16098] Node 0 Normal: 4*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32kB
[ 1089.666819][T16098] Node 1 Normal: 263*4kB (UME) 56*8kB (UE) 29*16kB (UME) 113*32kB (UME) 48*64kB (UME) 20*128kB (UME) 11*256kB (UM) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3901644kB
[ 1089.685356][T16098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1089.705827][ T9766] EXT4-fs (loop2): unmounting filesystem.
[ 1089.716749][T16098] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1089.757672][T16098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1089.815843][T16098] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1089.859287][T16098] 69945 total pagecache pages
[ 1089.880254][T16098] 2 pages in swap cache
[ 1089.898565][T16098] Free swap  = 124100kB
[ 1089.918016][T16098] Total swap = 124996kB
[ 1089.937251][T16098] 2097051 pages RAM
[ 1089.956698][T16098] 0 pages HighMem/MovableOnly
[ 1089.976031][T16098] 415230 pages reserved
[ 1089.994795][T16098] 0 pages cma reserved
[ 1090.469199][T16147] loop2: detected capacity change from 0 to 1024
[ 1091.158476][   T26] kauditd_printk_skb: 10 callbacks suppressed
[ 1091.158488][   T26] audit: type=1800 audit(1791289070.687:500): pid=16147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2412" name="file7" dev="loop2" ino=26 res=0 errno=0
[ 1092.122997][   T26] audit: type=1800 audit(1791289071.747:501): pid=16177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2419" name=08 dev="sda1" ino=2069 res=0 errno=0
[ 1092.172016][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2421'.
[ 1092.183397][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'.
[ 1092.206201][T16182] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2421'.
[ 1092.217006][T16182] netlink: 31 bytes leftover after parsing attributes in process `syz.8.2421'.
[ 1092.411884][T16189] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1092.568078][   T26] audit: type=1326 audit(1791289072.197:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.9.2424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599459e199 code=0x7ffc0000
[ 1092.609586][T16196] loop2: detected capacity change from 0 to 8
[ 1092.646065][   T26] audit: type=1326 audit(1791289072.197:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.9.2424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599459e199 code=0x7ffc0000
[ 1093.643647][   T26] audit: type=1326 audit(1791289072.217:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.9.2424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599459e199 code=0x7ffc0000
[ 1093.906438][    C0] net_ratelimit: 29 callbacks suppressed
[ 1093.912319][   T26] audit: type=1326 audit(1791289072.217:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.9.2424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599459e199 code=0x7ffc0000
[ 1093.936815][   T26] audit: type=1326 audit(1791289072.217:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.9.2424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f599459e199 code=0x7ffc0000
[ 1093.960919][   T26] audit: type=1326 audit(1791289072.217:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.9.2424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599459e199 code=0x7ffc0000
[ 1093.987061][   T26] audit: type=1326 audit(1791289072.217:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.9.2424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599459e199 code=0x7ffc0000
[ 1094.011405][   T26] audit: type=1326 audit(1791289072.217:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.9.2424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599459e199 code=0x7ffc0000
[ 1094.463010][T16230] kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers)
[ 1094.547312][T16230] UDC core: USB Raw Gadget: driver registration failed: -12
[ 1094.562086][T16230] misc raw-gadget: fail, usb_gadget_register_driver returned -12
[ 1094.952000][T16239] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1095.285074][T16245] loop8: detected capacity change from 0 to 8
[ 1096.103830][T16254] device dummy0 left promiscuous mode
[ 1097.000329][T16275] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1097.081214][T16277] kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers)
[ 1097.107555][T16277] UDC core: USB Raw Gadget: driver registration failed: -12
[ 1097.166208][T16277] misc raw-gadget: fail, usb_gadget_register_driver returned -12
[ 1097.201553][T16283] loop3: detected capacity change from 0 to 8
[ 1097.276555][T16280] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96
[ 1098.528000][T16308] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2456'.
[ 1098.586518][T16306] loop3: detected capacity change from 0 to 1024
[ 1098.707664][T16306] __quota_error: 7 callbacks suppressed
[ 1098.707678][T16306] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5
[ 1098.753545][T16306] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[ 1098.808922][T16306] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.2455: Failed to acquire dquot type 0
[ 1098.917318][T16306] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[ 1099.016623][T16306] EXT4-fs (loop3): 1 truncate cleaned up
[ 1099.037691][    C1] net_ratelimit: 28 callbacks suppressed
[ 1099.063261][T16306] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1099.122921][T16331] loop2: detected capacity change from 0 to 8
[ 1100.061356][ T6261] EXT4-fs (loop3): unmounting filesystem.
[ 1100.457950][T11603] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1100.654208][T11603] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1100.688332][T11603] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1100.740211][T11603] usb 9-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[ 1100.766571][T11603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1100.793425][T11603] usb 9-1: Product: syz
[ 1100.806938][T11603] usb 9-1: Manufacturer: syz
[ 1100.854236][T11603] iuu_phoenix 9-1:1.0: iuu_phoenix converter detected
[ 1100.884729][T11603] usb 9-1: iuu_phoenix converter now attached to ttyUSB0
[ 1101.055783][T11609] usb 9-1: USB disconnect, device number 26
[ 1101.099712][T11609] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[ 1101.143395][T11609] iuu_phoenix 9-1:1.0: device disconnected
[ 1102.430180][T16401] loop2: detected capacity change from 0 to 512
[ 1102.474308][T16401] fscrypt (loop2, inode 2): Error -61 getting encryption context
[ 1102.529477][T16401] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[ 1102.593677][T16401] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.2477: iget: bad i_size value: 12154757448730
[ 1102.607936][T16409] loop3: detected capacity change from 0 to 2048
[ 1102.625038][T16401] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2477: couldn't read orphan inode 13 (err -117)
[ 1102.671547][T16401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1102.909385][T16409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1103.586206][T16431] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1103.593608][T16431] syz.8.2484: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1
[ 1103.631554][ T9766] EXT4-fs (loop2): unmounting filesystem.
[ 1103.637586][T16431] CPU: 0 PID: 16431 Comm: syz.8.2484 Not tainted syzkaller #0
[ 1103.645072][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1103.655146][T16431] Call Trace:
[ 1103.658435][T16431]  <TASK>
[ 1103.661380][T16431]  dump_stack_lvl+0x188/0x24e
[ 1103.666097][T16431]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1103.672574][T16431]  ? show_regs_print_info+0x12/0x12
[ 1103.677777][T16431]  ? load_image+0x410/0x410
[ 1103.682293][T16431]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1103.688707][T16431]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1103.688733][T16431]  warn_alloc+0x242/0x330
[ 1103.688760][T16431]  ? __get_vm_area_node+0x122/0x330
[ 1103.705140][T16431]  ? zone_watermark_ok_safe+0x270/0x270
[ 1103.710697][T16431]  ? rcu_is_watching+0x11/0xa0
[ 1103.710734][T16431]  ? __get_vm_area_node+0x318/0x330
[ 1103.710758][T16431]  ? kasan_set_track+0x60/0x70
[ 1103.720686][T16431]  ? __kasan_kmalloc+0x8e/0xa0
[ 1103.730263][T16431]  __vmalloc_node_range+0x37c/0x1380
[ 1103.735595][T16431]  ? free_vm_area+0x50/0x50
[ 1103.740134][T16431]  ? vidtv_mux_init+0x200/0x1950
[ 1103.745103][T16431]  vzalloc+0x75/0x80
[ 1103.749016][T16431]  ? vidtv_mux_init+0x200/0x1950
[ 1103.753979][T16431]  vidtv_mux_init+0x200/0x1950
[ 1103.758742][T16431]  ? trace_contention_end+0x5f/0x170
[ 1103.758774][T16431]  vidtv_start_feed+0x368/0x590
[ 1103.758800][T16431]  ? vidtv_i2c_func+0x10/0x10
[ 1103.768920][T16431]  ? vidtv_stop_feed+0x250/0x250
[ 1103.778532][T16431]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1103.778555][T16431]  ? lockdep_hardirqs_on+0x94/0x140
[ 1103.778585][T16431]  dmx_ts_feed_start_filtering+0x11c/0x210
[ 1103.788925][T16431]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1103.788951][T16431]  dvb_dmxdev_filter_start+0x422/0x1060
[ 1103.800624][T16431]  dvb_demux_do_ioctl+0x48d/0x530
[ 1103.800650][T16431]  dvb_usercopy+0x191/0x2b0
[ 1103.811167][T16431]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1103.811189][T16431]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1103.821222][T16431]  ? dvb_demux_poll+0x210/0x210
[ 1103.831088][T16431]  dvb_demux_ioctl+0x25/0x30
[ 1103.835694][T16431]  __se_sys_ioctl+0xfa/0x170
[ 1103.840340][T16431]  do_syscall_64+0x4c/0xa0
[ 1103.844776][T16431]  ? clear_bhb_loop+0x60/0xb0
[ 1103.849452][T16431]  ? clear_bhb_loop+0x60/0xb0
[ 1103.849478][T16431]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1103.849498][T16431] RIP: 0033:0x7f0dc879e199
[ 1103.864455][T16431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1103.884089][T16431] RSP: 002b:00007f0dc969c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1103.892498][T16431] RAX: ffffffffffffffda RBX: 00007f0dc8a25fa0 RCX: 00007f0dc879e199
[ 1103.900467][T16431] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003
[ 1103.900483][T16431] RBP: 00007f0dc88358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1103.916412][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1103.924394][T16431] R13: 00007f0dc8a26038 R14: 00007f0dc8a25fa0 R15: 00007ffe69ffcdb8
[ 1103.932394][T16431]  </TASK>
[ 1104.078420][T16431] Mem-Info:
[ 1104.081580][T16431] active_anon:7395 inactive_anon:6666 isolated_anon:0
[ 1104.081580][T16431]  active_file:22461 inactive_file:39320 isolated_file:0
[ 1104.081580][T16431]  unevictable:768 dirty:144 writeback:0
[ 1104.081580][T16431]  slab_reclaimable:24168 slab_unreclaimable:104457
[ 1104.081580][T16431]  mapped:37639 shmem:7459 pagetables:943
[ 1104.081580][T16431]  sec_pagetables:0 bounce:0
[ 1104.081580][T16431]  kernel_misc_reclaimable:0
[ 1104.081580][T16431]  free:1296526 free_pcp:6947 free_cma:0
[ 1104.356602][T16431] Node 0 active_anon:29576kB inactive_anon:33728kB active_file:89836kB inactive_file:157084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160008kB dirty:580kB writeback:0kB shmem:35080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12540kB pagetables:3968kB sec_pagetables:0kB all_unreclaimable? no
[ 1104.419641][T16447] binfmt_misc: register: failed to install interpreter file ./file2
[ 1104.503195][T16431] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1104.562970][T16447] EXT4-fs (loop3): re-mounted. Quota mode: none.
[ 1104.638870][ T5721] net_ratelimit: 43 callbacks suppressed
[ 1104.719409][T16431] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1105.308530][T16431] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1105.316679][T16431] Node 0 DMA32 free:1255792kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:29584kB inactive_anon:29648kB active_file:89852kB inactive_file:157084kB unevictable:1536kB writepending:648kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:21244kB local_pcp:17312kB free_cma:0kB
[ 1105.393965][T16310] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 1105.481912][T16431] lowmem_reserve[]: 0 0 1 1 1
[ 1105.505120][T16431] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB
[ 1105.568834][T16431] lowmem_reserve[]: 0 0 0 0 0
[ 1105.573604][T16431] Node 1 Normal free:3901644kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14560kB local_pcp:6720kB free_cma:0kB
[ 1105.679897][T16431] lowmem_reserve[]: 0 0 0 0 0
[ 1105.684639][T16431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1105.748584][T16431] Node 0 DMA32: 586*4kB (UE) 2*8kB (UM) 524*16kB (UME) 1377*32kB (UME) 874*64kB (UME) 344*128kB (UME) 297*256kB (UME) 313*512kB (UME) 206*1024kB (UM) 21*2048kB (UM) 149*4096kB (M) = 1255320kB
[ 1105.859463][T16431] Node 0 Normal: 0*4kB 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[ 1105.888181][T16431] Node 1 Normal: 263*4kB (UME) 56*8kB (UE) 29*16kB (UME) 113*32kB (UME) 48*64kB (UME) 20*128kB (UME) 11*256kB (UM) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3901644kB
[ 1105.957796][T16431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1105.992153][T16431] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1106.028636][T16431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1106.086221][T16431] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1106.117342][T16431] 67062 total pagecache pages
[ 1106.122791][T16431] 2 pages in swap cache
[ 1106.126968][T16431] Free swap  = 124100kB
[ 1106.148616][T16431] Total swap = 124996kB
[ 1106.152777][T16431] 2097051 pages RAM
[ 1106.152788][T16431] 0 pages HighMem/MovableOnly
[ 1106.197281][T16485] loop2: detected capacity change from 0 to 512
[ 1106.198575][T16431] 415230 pages reserved
[ 1106.218124][T16431] 0 pages cma reserved
[ 1106.304713][T16485] fscrypt (loop2, inode 2): Error -61 getting encryption context
[ 1106.304780][T16485] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[ 1106.310627][T16485] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.2496: iget: bad i_size value: 12154757448730
[ 1106.344457][T16491] block device autoloading is deprecated and will be removed.
[ 1106.409019][T16485] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2496: couldn't read orphan inode 13 (err -117)
[ 1106.461499][T16485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1107.096212][ T6261] EXT4-fs (loop3): unmounting filesystem.
[ 1107.365591][ T9766] EXT4-fs (loop2): unmounting filesystem.
[ 1107.758171][T16526] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1107.771047][T16523] loop2: detected capacity change from 0 to 512
[ 1107.883394][T16523] fscrypt (loop2, inode 2): Error -61 getting encryption context
[ 1107.931311][T16523] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[ 1108.000265][T16523] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.2508: iget: bad i_size value: 12154757448730
[ 1108.085892][T16523] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.2508: couldn't read orphan inode 13 (err -117)
[ 1108.124491][T16523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1108.366041][ T4282] Bluetooth: hci3: Malformed LE Event: 0x1b
[ 1109.137216][T16543] loop3: detected capacity change from 0 to 512
[ 1109.339071][T16543] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1109.345877][T16543] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1109.388800][ T9766] EXT4-fs (loop2): unmounting filesystem.
[ 1109.421876][T16543] EXT4-fs (loop3): 1 truncate cleaned up
[ 1109.427600][T16543] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1109.486143][T16550] loop8: detected capacity change from 0 to 8
[ 1109.759072][ T5703] net_ratelimit: 25 callbacks suppressed
[ 1110.336452][ T6261] EXT4-fs (loop3): unmounting filesystem.
[ 1110.938658][T16568] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1111.374345][T16581] loop3: detected capacity change from 0 to 512
[ 1112.424219][T16581] fscrypt (loop3, inode 2): Error -61 getting encryption context
[ 1112.462581][T16601] loop8: detected capacity change from 0 to 8
[ 1112.501702][T16581] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[ 1112.542745][T16581] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #13: comm syz.3.2523: iget: bad i_size value: 12154757448730
[ 1112.678320][T16581] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.2523: couldn't read orphan inode 13 (err -117)
[ 1112.868710][T16581] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1114.127756][ T6261] EXT4-fs (loop3): unmounting filesystem.
[ 1114.720692][T16624] syz.2.2532: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[ 1114.759738][T16624] CPU: 0 PID: 16624 Comm: syz.2.2532 Not tainted syzkaller #0
[ 1114.767224][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1114.777256][T16624] Call Trace:
[ 1114.777266][T16624]  <TASK>
[ 1114.777275][T16624]  dump_stack_lvl+0x188/0x24e
[ 1114.783462][T16624]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1114.794533][T16624]  ? show_regs_print_info+0x12/0x12
[ 1114.794560][T16624]  ? load_image+0x410/0x410
[ 1114.804230][T16624]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1114.804257][T16624]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1114.817120][T16624]  warn_alloc+0x242/0x330
[ 1114.817147][T16624]  ? __get_vm_area_node+0x122/0x330
[ 1114.826633][T16624]  ? zone_watermark_ok_safe+0x270/0x270
[ 1114.826661][T16624]  ? rcu_is_watching+0x11/0xa0
[ 1114.836922][T16624]  ? __get_vm_area_node+0x318/0x330
[ 1114.842114][T16624]  ? kasan_set_track+0x60/0x70
[ 1114.842139][T16624]  ? __kasan_kmalloc+0x8e/0xa0
[ 1114.851634][T16624]  __vmalloc_node_range+0x37c/0x1380
[ 1114.851685][T16624]  ? free_vm_area+0x50/0x50
[ 1114.861414][T16624]  ? vidtv_mux_init+0x200/0x1950
[ 1114.861441][T16624]  vzalloc+0x75/0x80
[ 1114.870222][T16624]  ? vidtv_mux_init+0x200/0x1950
[ 1114.870247][T16624]  vidtv_mux_init+0x200/0x1950
[ 1114.879899][T16624]  ? trace_contention_end+0x5f/0x170
[ 1114.879929][T16624]  vidtv_start_feed+0x368/0x590
[ 1114.879956][T16624]  ? vidtv_i2c_func+0x10/0x10
[ 1114.890054][T16624]  ? vidtv_stop_feed+0x250/0x250
[ 1114.890087][T16624]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1114.890106][T16624]  ? lockdep_hardirqs_on+0x94/0x140
[ 1114.899674][T16624]  dmx_ts_feed_start_filtering+0x11c/0x210
[ 1114.899699][T16624]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1114.899722][T16624]  dvb_dmxdev_filter_start+0x422/0x1060
[ 1114.910070][T16624]  dvb_demux_do_ioctl+0x48d/0x530
[ 1114.910095][T16624]  dvb_usercopy+0x191/0x2b0
[ 1114.936783][T16624]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1114.942315][T16624]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1114.947248][T16624]  ? dvb_demux_poll+0x210/0x210
[ 1114.952084][T16624]  dvb_demux_ioctl+0x25/0x30
[ 1114.956659][T16624]  __se_sys_ioctl+0xfa/0x170
[ 1114.961241][T16624]  do_syscall_64+0x4c/0xa0
[ 1114.965659][T16624]  ? clear_bhb_loop+0x60/0xb0
[ 1114.970320][T16624]  ? clear_bhb_loop+0x60/0xb0
[ 1114.974983][T16624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1114.980858][T16624] RIP: 0033:0x7f973e59e199
[ 1114.985256][T16624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1115.004845][T16624] RSP: 002b:00007f973f519028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1115.013242][T16624] RAX: ffffffffffffffda RBX: 00007f973e825fa0 RCX: 00007f973e59e199
[ 1115.021197][T16624] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004
[ 1115.029155][T16624] RBP: 00007f973e6358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1115.037108][T16624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1115.045063][T16624] R13: 00007f973e826038 R14: 00007f973e825fa0 R15: 00007ffc9bed4418
[ 1115.053025][T16624]  </TASK>
[ 1115.059613][ T8857] net_ratelimit: 28 callbacks suppressed
[ 1115.143265][T16624] Mem-Info:
[ 1115.175571][T16624] active_anon:7389 inactive_anon:13389 isolated_anon:0
[ 1115.175571][T16624]  active_file:22457 inactive_file:39320 isolated_file:0
[ 1115.175571][T16624]  unevictable:768 dirty:44 writeback:0
[ 1115.175571][T16624]  slab_reclaimable:24438 slab_unreclaimable:104199
[ 1115.175571][T16624]  mapped:33082 shmem:14183 pagetables:946
[ 1115.175571][T16624]  sec_pagetables:0 bounce:0
[ 1115.175571][T16624]  kernel_misc_reclaimable:0
[ 1115.175571][T16624]  free:1287169 free_pcp:9330 free_cma:0
[ 1115.442205][T16624] Node 0 active_anon:29556kB inactive_anon:40160kB active_file:89824kB inactive_file:157084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132288kB dirty:180kB writeback:0kB shmem:41980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12184kB pagetables:3660kB sec_pagetables:0kB all_unreclaimable? no
[ 1115.705041][T16624] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1115.877002][T16624] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1116.116862][T16624] lowmem_reserve[]:
[ 1116.164907][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.171240][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.241058][T16624]  0 2527 2528 2528 2528
[ 1116.245359][T16624] Node 0 DMA32 free:1268048kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:38236kB inactive_anon:8764kB active_file:89832kB inactive_file:157084kB unevictable:1536kB writepending:188kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:22296kB local_pcp:7584kB free_cma:0kB
[ 1116.528909][T16624] lowmem_reserve[]: 0 0 1 1 1
[ 1116.551580][ T4282] Bluetooth: hci0: Malformed LE Event: 0x1b
[ 1116.568228][T16624] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB
[ 1116.677741][T16653] loop8: detected capacity change from 0 to 512
[ 1116.693997][T16653] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1116.700998][T16653] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1116.911556][T16653] EXT4-fs (loop8): 1 truncate cleaned up
[ 1116.917278][T16653] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1117.136183][T16624] lowmem_reserve[]: 0 0 0 0 0
[ 1117.141052][T16624] Node 1 Normal free:3901644kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14560kB local_pcp:6720kB free_cma:0kB
[ 1117.189448][T16660] loop3: detected capacity change from 0 to 8
[ 1117.304083][T16624] lowmem_reserve[]: 0 0 0 0 0
[ 1117.395491][T16624] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1117.928452][T16624] Node 0 DMA32: 16*4kB (UE) 179*8kB (UME) 50*16kB (ME) 1200*32kB (UME) 830*64kB (UME) 346*128kB (UME) 298*256kB (UME) 313*512kB (UME) 206*1024kB (UM) 21*2048kB (UM) 149*4096kB (M) = 1238904kB
[ 1117.963297][ T6595] EXT4-fs (loop8): unmounting filesystem.
[ 1118.179970][T16624] Node 0 Normal: 1*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[ 1118.314673][T16624] Node 1 Normal: 263*4kB (UME) 56*8kB (UE) 29*16kB (UME) 113*32kB (UME) 48*64kB (UME) 20*128kB (UME) 11*256kB (UM) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3901644kB
[ 1118.516391][T16624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1118.608515][T16624] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1118.708235][T16624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1118.718411][T16624] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1118.727777][T16624] 67669 total pagecache pages
[ 1118.732734][T16624] 2 pages in swap cache
[ 1118.736899][T16624] Free swap  = 124100kB
[ 1118.741126][T16624] Total swap = 124996kB
[ 1118.745288][T16624] 2097051 pages RAM
[ 1118.749106][T16624] 0 pages HighMem/MovableOnly
[ 1118.753867][T16624] 415230 pages reserved
[ 1118.758031][T16624] 0 pages cma reserved
[ 1119.097149][T16684] loop3: detected capacity change from 0 to 128
[ 1119.350358][T16684] syz.3.2543: attempt to access beyond end of device
[ 1119.350358][T16684] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1119.609491][ T6378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1119.632221][ T6378] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1120.160058][    C0] net_ratelimit: 35 callbacks suppressed
[ 1120.501769][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2560'.
[ 1120.665542][T16744] jffs2: notice: (16744) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1120.805633][T16742] loop8: detected capacity change from 0 to 512
[ 1121.084854][T16742] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1121.094622][T16742] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1121.524638][ T6595] EXT4-fs (loop8): unmounting filesystem.
[ 1121.865812][T16777] loop9: detected capacity change from 0 to 512
[ 1121.930527][T16777] fscrypt (loop9, inode 2): Error -61 getting encryption context
[ 1121.978683][T16777] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61
[ 1122.018900][T16777] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #13: comm syz.9.2570: iget: bad i_size value: 12154757448730
[ 1122.127545][T16777] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.2570: couldn't read orphan inode 13 (err -117)
[ 1122.153732][T16777] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1122.449265][T16800] FAULT_INJECTION: forcing a failure.
[ 1122.449265][T16800] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1122.756960][T16800] CPU: 0 PID: 16800 Comm: syz.0.2579 Not tainted syzkaller #0
[ 1122.764467][T16800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1122.774527][T16800] Call Trace:
[ 1122.777814][T16800]  <TASK>
[ 1122.780751][T16800]  dump_stack_lvl+0x188/0x24e
[ 1122.785449][T16800]  ? show_regs_print_info+0x12/0x12
[ 1122.790657][T16800]  ? load_image+0x410/0x410
[ 1122.795190][T16800]  should_fail_ex+0x390/0x4c0
[ 1122.799893][T16800]  get_futex_key+0x1b1/0x1000
[ 1122.804587][T16800]  ? futex_setup_timer+0xc0/0xc0
[ 1122.809549][T16800]  futex_wake+0x123/0x4f0
[ 1122.813895][T16800]  ? futex_wake_mark+0x150/0x150
[ 1122.818844][T16800]  ? finish_task_switch+0x262/0x8e0
[ 1122.824066][T16800]  ? __schedule+0x1087/0x4030
[ 1122.828760][T16800]  do_futex+0x2e2/0x320
[ 1122.832934][T16800]  ? __ia32_sys_get_robust_list+0x100/0x100
[ 1122.838841][T16800]  __se_sys_futex+0x381/0x410
[ 1122.843557][T16800]  ? __x64_sys_futex+0xf0/0xf0
[ 1122.848344][T16800]  ? __x64_sys_futex+0x1d/0xf0
[ 1122.853117][T16800]  do_syscall_64+0x4c/0xa0
[ 1122.857581][T16800]  ? clear_bhb_loop+0x60/0xb0
[ 1122.862303][T16800]  ? clear_bhb_loop+0x60/0xb0
[ 1122.866990][T16800]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1122.872894][T16800] RIP: 0033:0x7fd4ea19e199
[ 1122.877302][T16800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1122.897095][T16800] RSP: 002b:00007fd4eb14d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1122.905531][T16800] RAX: ffffffffffffffda RBX: 00007fd4ea425fa8 RCX: 00007fd4ea19e199
[ 1122.913519][T16800] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd4ea425fac
[ 1122.921588][T16800] RBP: 00007fd4ea425fa0 R08: 0035ea830d35332c R09: 0000000000000000
[ 1122.929574][T16800] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1122.937555][T16800] R13: 00007fd4ea426038 R14: 00007ffe380c6a80 R15: 00007ffe380c6b68
[ 1122.945553][T16800]  </TASK>
[ 1122.993803][ T6225] EXT4-fs (loop9): unmounting filesystem.
[ 1123.899988][T16833] loop8: detected capacity change from 0 to 512
[ 1123.997044][T16833] fscrypt (loop8, inode 2): Error -61 getting encryption context
[ 1124.039369][T16833] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61
[ 1124.109391][T16833] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #13: comm syz.8.2591: iget: bad i_size value: 12154757448730
[ 1124.171697][T16833] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2591: couldn't read orphan inode 13 (err -117)
[ 1124.232317][T16833] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1125.101922][ T6595] EXT4-fs (loop8): unmounting filesystem.
[ 1125.719501][T16881] md: array md0 already has disks!
[ 1125.725061][T16881] md: could not open device unknown-block(1,0).
[ 1125.731384][T16881] md: error, md_import_device() returned -16
[ 1125.777996][ T9165] net_ratelimit: 39 callbacks suppressed
[ 1125.946052][T16881] md/raid1:md0: active with 1 out of 1 mirrors
[ 1125.953482][T16881] md0: detected capacity change from 0 to 2048
[ 1126.146189][T16898] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1126.168727][T16898] warn_alloc: 1 callbacks suppressed
[ 1126.168737][T16898] syz.9.2608: vmalloc error: size 90164, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[ 1126.214755][T16898] ,cpuset=syz9,mems_allowed=0-1
[ 1126.234661][T16898] CPU: 1 PID: 16898 Comm: syz.9.2608 Not tainted syzkaller #0
[ 1126.242167][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1126.252243][T16898] Call Trace:
[ 1126.255534][T16898]  <TASK>
[ 1126.258474][T16898]  dump_stack_lvl+0x188/0x24e
[ 1126.263175][T16898]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1126.269649][T16898]  ? show_regs_print_info+0x12/0x12
[ 1126.274870][T16898]  ? load_image+0x410/0x410
[ 1126.279401][T16898]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[ 1126.285839][T16898]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1126.292346][T16898]  warn_alloc+0x242/0x330
[ 1126.292379][T16898]  ? slab_free_freelist_hook+0x133/0x1b0
[ 1126.292406][T16898]  ? zone_watermark_ok_safe+0x270/0x270
[ 1126.292429][T16898]  ? __get_vm_area_node+0x16d/0x330
[ 1126.292458][T16898]  ? __get_vm_area_node+0x16d/0x330
[ 1126.292479][T16898]  ? kasan_set_track+0x60/0x70
[ 1126.292500][T16898]  ? __kasan_kmalloc+0x8e/0xa0
[ 1126.292529][T16898]  __vmalloc_node_range+0x37c/0x1380
[ 1126.292577][T16898]  ? free_vm_area+0x50/0x50
[ 1126.292608][T16898]  ? vidtv_mux_init+0x200/0x1950
[ 1126.292633][T16898]  vzalloc+0x75/0x80
[ 1126.292654][T16898]  ? vidtv_mux_init+0x200/0x1950
[ 1126.292677][T16898]  vidtv_mux_init+0x200/0x1950
[ 1126.292702][T16898]  ? trace_contention_end+0x5f/0x170
[ 1126.292730][T16898]  vidtv_start_feed+0x368/0x590
[ 1126.292757][T16898]  ? vidtv_i2c_func+0x10/0x10
[ 1126.292776][T16898]  ? vidtv_stop_feed+0x250/0x250
[ 1126.292804][T16898]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1126.292823][T16898]  ? lockdep_hardirqs_on+0x94/0x140
[ 1126.292855][T16898]  dmx_ts_feed_start_filtering+0x11c/0x210
[ 1126.292878][T16898]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1126.292902][T16898]  dvb_dmxdev_filter_start+0x422/0x1060
[ 1126.292936][T16898]  dvb_demux_do_ioctl+0x48d/0x530
[ 1126.292959][T16898]  dvb_usercopy+0x191/0x2b0
[ 1126.292979][T16898]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1126.292998][T16898]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1126.293038][T16898]  ? dvb_demux_poll+0x210/0x210
[ 1126.293058][T16898]  dvb_demux_ioctl+0x25/0x30
[ 1126.293077][T16898]  __se_sys_ioctl+0xfa/0x170
[ 1126.303014][T16898]  do_syscall_64+0x4c/0xa0
[ 1126.303038][T16898]  ? clear_bhb_loop+0x60/0xb0
[ 1126.303060][T16898]  ? clear_bhb_loop+0x60/0xb0
[ 1126.313757][T16898]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1126.313781][T16898] RIP: 0033:0x7f599459e199
[ 1126.323734][T16898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1126.323751][T16898] RSP: 002b:00007f5995381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1126.323773][T16898] RAX: ffffffffffffffda RBX: 00007f5994825fa0 RCX: 00007f599459e199
[ 1126.333776][T16898] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003
[ 1126.333790][T16898] RBP: 00007f59946358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1126.333803][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1126.343191][T16898] R13: 00007f5994826038 R14: 00007f5994825fa0 R15: 00007ffd689f61e8
[ 1126.343225][T16898]  </TASK>
[ 1126.591851][T16898] Mem-Info:
[ 1126.594998][T16898] active_anon:7387 inactive_anon:1495 isolated_anon:0
[ 1126.594998][T16898]  active_file:22621 inactive_file:39162 isolated_file:0
[ 1126.594998][T16898]  unevictable:768 dirty:182 writeback:0
[ 1126.594998][T16898]  slab_reclaimable:24070 slab_unreclaimable:104829
[ 1126.594998][T16898]  mapped:30222 shmem:2168 pagetables:986
[ 1126.594998][T16898]  sec_pagetables:0 bounce:0
[ 1126.594998][T16898]  kernel_misc_reclaimable:0
[ 1126.594998][T16898]  free:1303341 free_pcp:4327 free_cma:0
[ 1126.760840][T16898] Node 0 active_anon:29548kB inactive_anon:6180kB active_file:90480kB inactive_file:156452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124888kB dirty:728kB writeback:0kB shmem:7136kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12496kB pagetables:3944kB sec_pagetables:0kB all_unreclaimable? no
[ 1126.950622][T16898] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1127.173850][T16898] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1127.314658][T16926] loop2: detected capacity change from 0 to 512
[ 1127.341706][T16927] tipc: Started in network mode
[ 1127.367352][T16927] tipc: Node identity 36955382fbb4, cluster identity 4711
[ 1127.413763][T16898] lowmem_reserve[]: 0 2527 2528 2528 2528
[ 1127.425523][   T26] audit: type=1800 audit(1791289107.043:517): pid=16926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2616" name="file1" dev="loop2" ino=1049227 res=0 errno=0
[ 1127.449002][T16927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1127.473895][T16898] Node 0 DMA32 free:1288280kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:29448kB inactive_anon:5896kB active_file:90480kB inactive_file:156552kB unevictable:1536kB writepending:836kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:7280kB local_pcp:3628kB free_cma:0kB
[ 1127.531519][T16922] device syzkaller0 entered promiscuous mode
[ 1127.589849][T16922] tipc: Resetting bearer <eth:syzkaller0>
[ 1127.636547][T16921] tipc: Resetting bearer <eth:syzkaller0>
[ 1127.696130][T16898] lowmem_reserve[]: 0 0 1 1 1
[ 1127.733275][T16898] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[ 1127.823562][T16921] tipc: Disabling bearer <eth:syzkaller0>
[ 1127.887233][T16898] lowmem_reserve[]:
[ 1127.911394][T16898]  0 0 0 0 0
[ 1127.920887][T16898] Node 1 Normal free:3901900kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:14316kB local_pcp:6720kB free_cma:0kB
[ 1127.926246][T16937] md: couldn't update array info. -22
[ 1128.028737][T16938] md: could not open device unknown-block(1,0).
[ 1128.035913][T16938] md: md_import_device returned -16
[ 1128.045514][T16898] lowmem_reserve[]: 0 0 0 0 0
[ 1128.056744][T16898] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1128.097616][T16898] Node 0 DMA32: 271*4kB (UME) 2002*8kB (UME) 1355*16kB (UME) 1167*32kB (ME) 901*64kB (UME) 347*128kB (UME) 299*256kB (UME) 314*512kB (UME) 204*1024kB (UM) 21*2048kB (UM) 149*4096kB (M) = 1277724kB
[ 1128.170825][T16898] Node 0 
[ 1128.170839][T16898] Normal: 1*4kB 
[ 1128.177329][T16898] (U) 2*8kB (U) 
[ 1128.177358][T16898] 0*16kB 0*32kB 
[ 1128.279690][T16898] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[ 1128.320895][T16898] Node 1 Normal: 263*4kB (UME) 56*8kB (UE) 29*16kB (UME) 119*32kB (UME) 49*64kB (UME) 20*128kB (UME) 11*256kB (UM) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3901900kB
[ 1128.406100][T16898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1128.448966][ T9099] kworker/u4:123: attempt to access beyond end of device
[ 1128.448966][ T9099] loop2: rw=1, sector=2480, nr_sectors = 2048 limit=512
[ 1128.460582][T16898] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1128.529087][T16898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1128.554754][ T9099] kworker/u4:123: attempt to access beyond end of device
[ 1128.554754][ T9099] loop2: rw=1, sector=4528, nr_sectors = 2048 limit=512
[ 1128.581070][T16898] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1128.603746][ T9099] kworker/u4:123: attempt to access beyond end of device
[ 1128.603746][ T9099] loop2: rw=1, sector=6576, nr_sectors = 2048 limit=512
[ 1128.622272][T16898] 65713 total pagecache pages
[ 1128.636489][T16898] 2 pages in swap cache
[ 1128.649249][T16898] Free swap  = 124100kB
[ 1128.662586][ T9099] kworker/u4:123: attempt to access beyond end of device
[ 1128.662586][ T9099] loop2: rw=1, sector=8624, nr_sectors = 2048 limit=512
[ 1128.678816][T16898] Total swap = 124996kB
[ 1128.688710][T16898] 2097051 pages RAM
[ 1128.696842][T16898] 0 pages HighMem/MovableOnly
[ 1128.709498][T16898] 415230 pages reserved
[ 1128.722075][ T9099] kworker/u4:123: attempt to access beyond end of device
[ 1128.722075][ T9099] loop2: rw=1, sector=10672, nr_sectors = 2048 limit=512
[ 1128.737246][T16898] 0 pages cma reserved
[ 1128.784813][ T9099] kworker/u4:123: attempt to access beyond end of device
[ 1128.784813][ T9099] loop2: rw=1, sector=12720, nr_sectors = 1448 limit=512
[ 1128.996317][T16965] loop3: detected capacity change from 0 to 2048
[ 1129.073475][T16965]  loop3: p1 p3 p4
[ 1129.093164][T16965] loop3: p4 size 589824 extends beyond EOD, truncated
[ 1129.138493][ T3638]  loop3: p1 p3 p4
[ 1129.174638][ T3638] loop3: p4 size 589824 extends beyond EOD, truncated
[ 1129.792249][T16990] md: couldn't update array info. -22
[ 1129.798695][T16990] md: could not open device unknown-block(1,0).
[ 1129.805018][T16990] md: md_import_device returned -16
[ 1130.025775][T17000] loop3: detected capacity change from 0 to 1024
[ 1130.892276][    C0] net_ratelimit: 29 callbacks suppressed
[ 1131.365968][T17026] md: couldn't update array info. -22
[ 1131.380364][T17026] md: could not open device unknown-block(1,0).
[ 1131.386865][T17026] md: md_import_device returned -16
[ 1132.501433][   T26] audit: type=1800 audit(1791289112.113:518): pid=17039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2650" name="power" dev="configfs" ino=73055 res=0 errno=0
[ 1132.570183][T17042] loop8: detected capacity change from 0 to 1024
[ 1133.871640][T17073] md: couldn't update array info. -22
[ 1133.878349][T17073] md: could not open device unknown-block(1,0).
[ 1133.884795][T17073] md: md_import_device returned -16
[ 1134.897818][ T5730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1134.924054][   T26] audit: type=1800 audit(1791289114.542:519): pid=17089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2663" name="power" dev="configfs" ino=73126 res=0 errno=0
[ 1135.071897][T17093] loop0: detected capacity change from 0 to 1024
[ 1136.057152][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1136.397765][T17113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1136.407752][T17113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1136.416608][T17113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1136.426291][T17113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1136.435285][T17113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1136.458511][ T5730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.605722][T17123] md: couldn't update array info. -22
[ 1136.612187][T17123] md: could not open device unknown-block(1,0).
[ 1136.618589][T17123] md: md_import_device returned -16
[ 1136.641554][ T9099] net_ratelimit: 43 callbacks suppressed
[ 1137.657762][ T5730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1137.877044][ T5730] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1137.942347][T17135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2676'.
[ 1138.045481][T17141] loop2: detected capacity change from 0 to 256
[ 1138.118503][T17141] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1138.244006][T17146] loop0: detected capacity change from 0 to 512
[ 1138.313329][T17141] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1138.317032][T17146] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1138.379664][T17141] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[ 1138.379846][   T26] audit: type=1800 audit(1791289117.992:520): pid=17141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2679" name="file1" dev="loop2" ino=1049228 res=0 errno=0
[ 1138.465206][T17146] EXT4-fs (loop0): 1 truncate cleaned up
[ 1138.489193][ T4282] Bluetooth: hci1: command 0x0409 tx timeout
[ 1138.501805][T17146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1138.548885][T17158] loop2: detected capacity change from 0 to 1024
[ 1140.449168][T17176] md: couldn't update array info. -22
[ 1140.455405][T17176] md: could not open device unknown-block(1,0).
[ 1140.461766][T17176] md: md_import_device returned -16
[ 1140.561666][ T4282] Bluetooth: hci1: command 0x041b tx timeout
[ 1140.570878][T10683] EXT4-fs (loop0): unmounting filesystem.
[ 1140.719990][T17183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2689'.
[ 1141.186551][T17200] loop9: detected capacity change from 0 to 1024
[ 1141.296098][T17109] chnl_net:caif_netlink_parms(): no params data found
[ 1141.512804][T17205] loop8: detected capacity change from 0 to 128
[ 1142.041642][    C1] net_ratelimit: 22 callbacks suppressed
[ 1142.186085][T17192] device syzkaller0 entered promiscuous mode
[ 1142.324280][T17215] md: couldn't update array info. -22
[ 1142.353753][T17215] md: could not open device unknown-block(1,0).
[ 1142.409797][T17215] md: md_import_device returned -16
[ 1142.569923][T17211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2696'.
[ 1142.590682][T17211] tipc: Invalid UDP bearer configuration
[ 1142.590720][T17211] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1142.641917][ T4282] Bluetooth: hci1: command 0x040f tx timeout
[ 1143.064775][ T4282] Bluetooth: hci2: Malformed LE Event: 0x1b
[ 1143.144744][T17231] loop9: detected capacity change from 0 to 512
[ 1143.236403][T17231] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1143.243288][T17231] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1143.423930][T17231] EXT4-fs (loop9): 1 truncate cleaned up
[ 1143.429680][T17231] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1144.277832][ T6225] EXT4-fs (loop9): unmounting filesystem.
[ 1144.722259][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[ 1144.831532][T17257] loop9: detected capacity change from 0 to 1024
[ 1146.165325][T17264] md: couldn't update array info. -22
[ 1146.171121][T17264] md: could not open device unknown-block(1,0).
[ 1146.177618][T17264] md: md_import_device returned -16
[ 1147.449890][ T9099] net_ratelimit: 29 callbacks suppressed
[ 1148.844311][T17275] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1149.153486][ T4314] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1149.329275][T11609] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1149.484061][ T4314] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1149.502241][T11609] usb 1-1: device descriptor read/64, error -71
[ 1149.502241][ T4314] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1149.520383][ T4314] usb 10-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[ 1149.541055][ T4314] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1149.558069][ T4314] usb 10-1: Product: syz
[ 1149.569099][ T4314] usb 10-1: Manufacturer: syz
[ 1149.599883][ T4314] iuu_phoenix 10-1:1.0: iuu_phoenix converter detected
[ 1149.630372][ T4314] usb 10-1: iuu_phoenix converter now attached to ttyUSB0
[ 1149.798577][ T4314] usb 10-1: USB disconnect, device number 20
[ 1149.799072][T11609] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1149.829068][ T4314] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[ 1149.869323][ T4314] iuu_phoenix 10-1:1.0: device disconnected
[ 1149.916799][T17300] md: couldn't update array info. -22
[ 1149.923556][T17300] md: could not open device unknown-block(1,0).
[ 1149.929853][T17300] md: md_import_device returned -16
[ 1149.944287][T17109] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1149.962162][T17109] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1150.000158][T17109] device bridge_slave_0 entered promiscuous mode
[ 1150.022919][T11609] usb 1-1: device descriptor read/64, error -71
[ 1150.063360][T17109] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1150.070670][T17109] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1150.123650][T17109] device bridge_slave_1 entered promiscuous mode
[ 1150.143428][T11609] usb usb1-port1: attempt power cycle
[ 1150.778560][T17109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1150.842508][T11609] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1151.123050][T11609] usb 1-1: device descriptor read/8, error -71
[ 1151.199214][T17109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1151.295788][T17313] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[ 1151.338951][T17313] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00
[ 1151.356690][T17313] pci 0000:00:07.0: BAR 0 [io  0xc0a0-0xc0bf]
[ 1151.369997][T17313] pci 0000:00:07.0: BAR 1 [mem 0xfe802000-0xfe80203f]
[ 1151.412526][T11609] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1151.479961][T17313] pci 0000:00:07.0: BAR 1 [mem 0xc0000000-0xc000003f]: assigned
[ 1151.492341][T17313] pci 0000:00:07.0: BAR 0 [io  0x1000-0x101f]: assigned
[ 1151.508667][T11609] usb 1-1: device descriptor read/8, error -71
[ 1151.605680][T17313] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver
[ 1151.802984][T11609] usb usb1-port1: unable to enumerate USB device
[ 1152.642915][ T5720] net_ratelimit: 28 callbacks suppressed
[ 1153.008042][T17109] team0: Port device team_slave_0 added
[ 1153.310895][T17109] team0: Port device team_slave_1 added
[ 1154.764127][ T5730] device hsr_slave_0 left promiscuous mode
[ 1154.777734][ T5730] device hsr_slave_1 left promiscuous mode
[ 1154.830996][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1154.847534][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1154.890500][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1154.904770][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1155.085951][ T5730] device veth1_macvtap left promiscuous mode
[ 1155.109803][ T5730] device veth0_macvtap left promiscuous mode
[ 1155.129437][ T5730] device veth1_vlan left promiscuous mode
[ 1155.230262][T17336] md: couldn't update array info. -22
[ 1155.236167][T17336] md: could not open device unknown-block(1,0).
[ 1155.242436][T17336] md: md_import_device returned -16
[ 1155.574149][ T4282] Bluetooth: hci5: Malformed LE Event: 0x1b
[ 1155.651757][T17342] loop0: detected capacity change from 0 to 512
[ 1155.674164][T17342] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1155.681029][T17342] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1156.264170][T17342] EXT4-fs (loop0): 1 truncate cleaned up
[ 1156.269912][T17342] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1156.858574][ T4314] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1157.008243][T10683] EXT4-fs (loop0): unmounting filesystem.
[ 1157.072636][ T4314] usb 10-1: device descriptor read/64, error -71
[ 1158.282179][T17352] loop0: detected capacity change from 0 to 1024
[ 1159.005861][ T5710] net_ratelimit: 34 callbacks suppressed
[ 1159.020458][T17352] hfsplus: unknown catalog record type 65281
[ 1159.093322][ T4314] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1159.287222][ T4314] usb 10-1: device descriptor read/64, error -71
[ 1159.434516][ T4314] usb usb10-port1: attempt power cycle
[ 1159.829477][ T5730] team0 (unregistering): Port device team_slave_1 removed
[ 1160.316579][ T5730] team0 (unregistering): Port device team_slave_0 removed
[ 1161.378604][ T5730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1162.062229][T17370] md: couldn't update array info. -22
[ 1162.069168][T17370] md: could not open device unknown-block(1,0).
[ 1162.075966][T17370] md: md_import_device returned -16
[ 1163.422046][T17378] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[ 1164.416686][ T5730] bond0 (unregistering): Released all slaves
[ 1164.478044][T17109] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1164.486469][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1164.525890][T17109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1164.600802][T17374] device bond0 left promiscuous mode
[ 1164.674065][T17109] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1164.681752][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1164.786007][T17109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1164.803274][ T5711] net_ratelimit: 18 callbacks suppressed
[ 1165.769478][T17385] loop9: detected capacity change from 0 to 1024
[ 1166.490206][T17385] hfsplus: unknown catalog record type 65281
[ 1166.903163][ T4314] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1167.063250][ T4314] usb 1-1: device descriptor read/64, error -71
[ 1167.331231][T17109] device hsr_slave_0 entered promiscuous mode
[ 1167.353426][ T4314] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1167.465741][T17109] device hsr_slave_1 entered promiscuous mode
[ 1167.486792][T17109] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1167.519347][T17109] Cannot create hsr debugfs directory
[ 1167.531317][T17113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1167.602882][ T4314] usb 1-1: device descriptor read/64, error -71
[ 1167.609360][T17113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1167.619014][T17113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1167.630828][T17113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1167.639317][T17113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1167.647026][T17113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1167.733472][ T4314] usb usb1-port1: attempt power cycle
[ 1168.263200][ T4314] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1168.391921][T17410] md: couldn't update array info. -22
[ 1168.408396][ T4314] usb 1-1: device descriptor read/8, error -71
[ 1168.515058][T17413] md: could not open device unknown-block(1,0).
[ 1168.585828][T17413] md: md_import_device returned -16
[ 1168.629795][T17416] FAULT_INJECTION: forcing a failure.
[ 1168.629795][T17416] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1168.713450][ T4314] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1168.735824][T17416] CPU: 0 PID: 17416 Comm: syz.9.2751 Not tainted syzkaller #0
[ 1168.743308][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1168.753351][T17416] Call Trace:
[ 1168.753361][T17416]  <TASK>
[ 1168.753370][T17416]  dump_stack_lvl+0x188/0x24e
[ 1168.753395][T17416]  ? do_syscall_64+0x4c/0xa0
[ 1168.753418][T17416]  ? show_regs_print_info+0x12/0x12
[ 1168.774080][T17416]  ? load_image+0x410/0x410
[ 1168.778616][T17416]  should_fail_ex+0x390/0x4c0
[ 1168.783321][T17416]  get_futex_key+0x1de/0x1000
[ 1168.788026][T17416]  ? futex_setup_timer+0xc0/0xc0
[ 1168.792958][T17416]  ? memset+0x1e/0x40
[ 1168.792986][T17416]  futex_requeue+0x246/0x13a0
[ 1168.801647][T17416]  ? futex_unqueue+0xc7/0xf0
[ 1168.806270][T17416]  ? put_task_struct+0x80/0x80
[ 1168.811051][T17416]  ? futex_wait_setup+0x270/0x270
[ 1168.816117][T17416]  do_futex+0x23d/0x320
[ 1168.820293][T17416]  ? __ia32_sys_get_robust_list+0x100/0x100
[ 1168.826189][T17416]  ? __sys_connect+0x278/0x450
[ 1168.826216][T17416]  __se_sys_futex+0x381/0x410
[ 1168.826241][T17416]  ? __x64_sys_futex+0xf0/0xf0
[ 1168.826265][T17416]  ? __x64_sys_futex+0x1d/0xf0
[ 1168.826287][T17416]  do_syscall_64+0x4c/0xa0
[ 1168.849590][T17416]  ? clear_bhb_loop+0x60/0xb0
[ 1168.854355][T17416]  ? clear_bhb_loop+0x60/0xb0
[ 1168.859029][T17416]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1168.864924][T17416] RIP: 0033:0x7f599459e199
[ 1168.869333][T17416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1168.888929][T17416] RSP: 002b:00007f5995381028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1168.897345][T17416] RAX: ffffffffffffffda RBX: 00007f5994825fa0 RCX: 00007f599459e199
[ 1168.905317][T17416] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc
[ 1168.913285][T17416] RBP: 00007f59946358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1168.921247][T17416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1168.929208][T17416] R13: 00007f5994826038 R14: 00007f5994825fa0 R15: 00007ffd689f61e8
[ 1168.937208][T17416]  </TASK>
[ 1168.944523][ T4314] usb 1-1: device descriptor read/8, error -71
[ 1169.068458][ T4314] usb usb1-port1: unable to enumerate USB device
[ 1169.686811][ T4282] Bluetooth: hci3: command 0x0409 tx timeout
[ 1169.776724][T17434] ==================================================================
[ 1169.784839][T17434] BUG: KASAN: slab-out-of-bounds in string+0x204/0x290
[ 1169.791705][T17434] Read of size 1 at addr ffff8880562e69d0 by task syz.0.2756/17434
[ 1169.799603][T17434] 
[ 1169.801935][T17434] CPU: 0 PID: 17434 Comm: syz.0.2756 Not tainted syzkaller #0
[ 1169.809408][T17434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1169.819463][T17434] Call Trace:
[ 1169.822736][T17434]  <TASK>
[ 1169.825658][T17434]  dump_stack_lvl+0x188/0x24e
[ 1169.830330][T17434]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1169.835375][T17434]  ? show_regs_print_info+0x12/0x12
[ 1169.840579][T17434]  ? load_image+0x410/0x410
[ 1169.845085][T17434]  ? __virt_addr_valid+0x467/0x540
[ 1169.850190][T17434]  ? string+0x204/0x290
[ 1169.854340][T17434]  print_report+0xa8/0x210
[ 1169.858752][T17434]  kasan_report+0x10b/0x140
[ 1169.863250][T17434]  ? string+0x204/0x290
[ 1169.867398][T17434]  string+0x204/0x290
[ 1169.871379][T17434]  vsnprintf+0x10db/0x1c20
[ 1169.875790][T17434]  pointer+0x870/0xfe0
[ 1169.879854][T17434]  ? string+0x290/0x290
[ 1169.884012][T17434]  ? format_decode+0x8b1/0x1330
[ 1169.888855][T17434]  vsnprintf+0xd7c/0x1c20
[ 1169.893182][T17434]  vprintk_store+0x3d7/0xcf0
[ 1169.897773][T17434]  ? printk_parse_prefix+0x310/0x310
[ 1169.903048][T17434]  ? __lock_acquire+0x1359/0x7ea0
[ 1169.908066][T17434]  ? mark_lock+0x94/0x320
[ 1169.912388][T17434]  ? __lock_acquire+0x142d/0x7ea0
[ 1169.917410][T17434]  vprintk_emit+0x114/0x6a0
[ 1169.921920][T17434]  ? printk_sprint+0x460/0x460
[ 1169.926682][T17434]  ? verify_lock_unused+0x140/0x140
[ 1169.931874][T17434]  _printk+0xda/0x130
[ 1169.935853][T17434]  ? load_image+0x410/0x410
[ 1169.940354][T17434]  __dynamic_pr_debug+0x196/0x240
[ 1169.945381][T17434]  ? param_get_dyndbg_classes+0x160/0x160
[ 1169.951103][T17434]  ? __flush_work+0x109/0xac0
[ 1169.955771][T17434]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1169.961340][T17434]  idletimer_tg_checkentry_v1+0xc93/0xe20
[ 1169.967056][T17434]  ? __flush_work+0x109/0xac0
[ 1169.971720][T17434]  xt_check_target+0x49d/0xbf0
[ 1169.976476][T17434]  ? unwind_get_return_address+0x49/0x80
[ 1169.982095][T17434]  ? stack_trace_save+0xf0/0xf0
[ 1169.986938][T17434]  ? xt_find_jump_offset+0xe0/0xe0
[ 1169.992047][T17434]  ? __stack_depot_save+0x35/0x480
[ 1169.997168][T17434]  ? nft_target_init+0x1cc/0x9c0
[ 1170.002128][T17434]  nft_target_init+0x678/0x9c0
[ 1170.006885][T17434]  ? nft_target_release_ops+0x70/0x70
[ 1170.012253][T17434]  ? __kmem_cache_alloc_node+0x19d/0x270
[ 1170.017876][T17434]  ? nf_tables_newrule+0x14d9/0x2810
[ 1170.023154][T17434]  ? rcu_is_watching+0x11/0xa0
[ 1170.027911][T17434]  ? nf_tables_newrule+0x14d9/0x2810
[ 1170.033193][T17434]  ? __kmalloc+0xe4/0x240
[ 1170.037515][T17434]  nf_tables_newrule+0x170a/0x2810
[ 1170.042642][T17434]  ? nf_tables_delchain+0xf00/0xf00
[ 1170.047830][T17434]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1170.052847][T17434]  ? nf_tables_newtable+0xd19/0x16c0
[ 1170.058139][T17434]  ? __nla_parse+0x3c/0x50
[ 1170.062562][T17434]  nfnetlink_rcv+0x1119/0x2470
[ 1170.067325][T17434]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[ 1170.072867][T17434]  ? ref_tracker_free+0x682/0x830
[ 1170.077891][T17434]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1170.083077][T17434]  ? __netlink_deliver_tap+0x7a9/0x7e0
[ 1170.088529][T17434]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1170.093716][T17434]  netlink_unicast+0x7ad/0x920
[ 1170.098475][T17434]  netlink_sendmsg+0x8ad/0xbd0
[ 1170.103231][T17434]  ? netlink_getsockopt+0x550/0x550
[ 1170.108416][T17434]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1170.113957][T17434]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1170.119231][T17434]  ? security_socket_sendmsg+0x7c/0xa0
[ 1170.124679][T17434]  ? netlink_getsockopt+0x550/0x550
[ 1170.129865][T17434]  ____sys_sendmsg+0x5ed/0x9a0
[ 1170.134622][T17434]  ? __sys_sendmsg_sock+0x30/0x30
[ 1170.139634][T17434]  ? __import_iovec+0x306/0x510
[ 1170.144490][T17434]  ? import_iovec+0x6f/0xa0
[ 1170.148986][T17434]  ___sys_sendmsg+0x2a2/0x360
[ 1170.153653][T17434]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1170.158428][T17434]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1170.163266][T17434]  ? __x64_sys_sendmsg+0x80/0x80
[ 1170.168216][T17434]  ? lockdep_hardirqs_on+0x94/0x140
[ 1170.173405][T17434]  do_syscall_64+0x4c/0xa0
[ 1170.177813][T17434]  ? clear_bhb_loop+0x60/0xb0
[ 1170.182480][T17434]  ? clear_bhb_loop+0x60/0xb0
[ 1170.187147][T17434]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1170.193028][T17434] RIP: 0033:0x7fd4ea19e199
[ 1170.197439][T17434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1170.217034][T17434] RSP: 002b:00007fd4eb14d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1170.225440][T17434] RAX: ffffffffffffffda RBX: 00007fd4ea425fa0 RCX: 00007fd4ea19e199
[ 1170.233397][T17434] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1170.241354][T17434] RBP: 00007fd4ea2358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1170.249314][T17434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1170.257278][T17434] R13: 00007fd4ea426038 R14: 00007fd4ea425fa0 R15: 00007ffe380c6b68
[ 1170.265267][T17434]  </TASK>
[ 1170.268275][T17434] 
[ 1170.270584][T17434] Allocated by task 17434:
[ 1170.274981][T17434]  kasan_set_track+0x4b/0x70
[ 1170.279561][T17434]  __kasan_kmalloc+0x8e/0xa0
[ 1170.284140][T17434]  __kmalloc+0xb3/0x240
[ 1170.288282][T17434]  nf_tables_newrule+0x14d9/0x2810
[ 1170.293391][T17434]  nfnetlink_rcv+0x1119/0x2470
[ 1170.298137][T17434]  netlink_unicast+0x7ad/0x920
[ 1170.302884][T17434]  netlink_sendmsg+0x8ad/0xbd0
[ 1170.307634][T17434]  ____sys_sendmsg+0x5ed/0x9a0
[ 1170.312384][T17434]  ___sys_sendmsg+0x2a2/0x360
[ 1170.317046][T17434]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1170.321880][T17434]  do_syscall_64+0x4c/0xa0
[ 1170.326284][T17434]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1170.332167][T17434] 
[ 1170.334477][T17434] The buggy address belongs to the object at ffff8880562e6980
[ 1170.334477][T17434]  which belongs to the cache kmalloc-cg-96 of size 96
[ 1170.348602][T17434] The buggy address is located 80 bytes inside of
[ 1170.348602][T17434]  96-byte region [ffff8880562e6980, ffff8880562e69e0)
[ 1170.361685][T17434] 
[ 1170.363999][T17434] The buggy address belongs to the physical page:
[ 1170.370401][T17434] page:ffffea000158b980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x562e6
[ 1170.380537][T17434] memcg:ffff8880268aaa01
[ 1170.384759][T17434] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 1170.392294][T17434] raw: 00fff00000000200 ffffea0001d13100 dead000000000002 ffff8880174428c0
[ 1170.400868][T17434] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880268aaa01
[ 1170.409432][T17434] page dumped because: kasan: bad access detected
[ 1170.415831][T17434] page_owner tracks the page as allocated
[ 1170.421527][T17434] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 6680, tgid 6680 (syz.3.494), ts 258233854847, free_ts 258181990211
[ 1170.439658][T17434]  post_alloc_hook+0x173/0x1a0
[ 1170.444413][T17434]  get_page_from_freelist+0x206b/0x2180
[ 1170.449950][T17434]  __alloc_pages+0x1ec/0x4f0
[ 1170.454529][T17434]  alloc_slab_page+0x5d/0x180
[ 1170.459194][T17434]  new_slab+0x87/0x2d0
[ 1170.463253][T17434]  ___slab_alloc+0xbc5/0x1240
[ 1170.467916][T17434]  __kmem_cache_alloc_node+0x126/0x270
[ 1170.473362][T17434]  kmalloc_trace+0x26/0xe0
[ 1170.477764][T17434]  copy_semundo+0xb2/0x230
[ 1170.482167][T17434]  copy_process+0x17e3/0x4070
[ 1170.486831][T17434]  kernel_clone+0x24b/0x900
[ 1170.491335][T17434]  __se_sys_clone3+0x32d/0x3f0
[ 1170.496085][T17434]  do_syscall_64+0x4c/0xa0
[ 1170.500487][T17434]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1170.506366][T17434] page last free stack trace:
[ 1170.511021][T17434]  free_unref_page_prepare+0x8e5/0x9e0
[ 1170.516471][T17434]  free_unref_page+0x2e/0x3f0
[ 1170.521143][T17434]  __unfreeze_partials+0x188/0x1e0
[ 1170.526241][T17434]  put_cpu_partial+0x17c/0x250
[ 1170.530990][T17434]  qlist_free_all+0x76/0xe0
[ 1170.535479][T17434]  kasan_quarantine_reduce+0x144/0x160
[ 1170.540925][T17434]  __kasan_slab_alloc+0x1e/0x80
[ 1170.545768][T17434]  slab_post_alloc_hook+0x4b/0x490
[ 1170.550877][T17434]  __kmem_cache_alloc_node+0x19d/0x270
[ 1170.556320][T17434]  kmalloc_trace+0x26/0xe0
[ 1170.560724][T17434]  register_netdevice+0x555/0x1b80
[ 1170.565823][T17434]  veth_newlink+0x8be/0xd60
[ 1170.570403][T17434]  rtnl_newlink+0x14b3/0x1f90
[ 1170.575064][T17434]  rtnetlink_rcv_msg+0x863/0xfb0
[ 1170.579995][T17434]  netlink_rcv_skb+0x1ef/0x440
[ 1170.584747][T17434]  netlink_unicast+0x7ad/0x920
[ 1170.589498][T17434] 
[ 1170.591815][T17434] Memory state around the buggy address:
[ 1170.597435][T17434]  ffff8880562e6880: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 1170.605480][T17434]  ffff8880562e6900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 1170.613523][T17434] >ffff8880562e6980: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 1170.621564][T17434]                                                  ^
[ 1170.628227][T17434]  ffff8880562e6a00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 1170.636273][T17434]  ffff8880562e6a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 1170.644348][T17434] ==================================================================
[ 1170.652402][T17434] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1170.659576][T17434] CPU: 0 PID: 17434 Comm: syz.0.2756 Not tainted syzkaller #0
[ 1170.667020][T17434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1170.677058][T17434] Call Trace:
[ 1170.680323][T17434]  <TASK>
[ 1170.683247][T17434]  dump_stack_lvl+0x188/0x24e
[ 1170.687923][T17434]  ? memcpy+0x3c/0x60
[ 1170.691891][T17434]  ? show_regs_print_info+0x12/0x12
[ 1170.697095][T17434]  ? load_image+0x410/0x410
[ 1170.701595][T17434]  panic+0x2d3/0x710
[ 1170.705483][T17434]  ? bpf_jit_dump+0xd0/0xd0
[ 1170.710016][T17434]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1170.715902][T17434]  ? _raw_spin_unlock+0x40/0x40
[ 1170.720736][T17434]  ? print_memory_metadata+0x314/0x400
[ 1170.726183][T17434]  check_panic_on_warn+0x80/0xa0
[ 1170.731120][T17434]  ? string+0x204/0x290
[ 1170.735264][T17434]  end_report+0x66/0x110
[ 1170.739502][T17434]  kasan_report+0x118/0x140
[ 1170.744005][T17434]  ? string+0x204/0x290
[ 1170.748155][T17434]  string+0x204/0x290
[ 1170.752138][T17434]  vsnprintf+0x10db/0x1c20
[ 1170.756549][T17434]  pointer+0x870/0xfe0
[ 1170.760609][T17434]  ? string+0x290/0x290
[ 1170.764757][T17434]  ? format_decode+0x8b1/0x1330
[ 1170.769603][T17434]  vsnprintf+0xd7c/0x1c20
[ 1170.773925][T17434]  vprintk_store+0x3d7/0xcf0
[ 1170.778524][T17434]  ? printk_parse_prefix+0x310/0x310
[ 1170.783812][T17434]  ? __lock_acquire+0x1359/0x7ea0
[ 1170.788835][T17434]  ? mark_lock+0x94/0x320
[ 1170.793164][T17434]  ? __lock_acquire+0x142d/0x7ea0
[ 1170.798216][T17434]  vprintk_emit+0x114/0x6a0
[ 1170.802713][T17434]  ? printk_sprint+0x460/0x460
[ 1170.807470][T17434]  ? verify_lock_unused+0x140/0x140
[ 1170.812663][T17434]  _printk+0xda/0x130
[ 1170.816640][T17434]  ? load_image+0x410/0x410
[ 1170.821149][T17434]  __dynamic_pr_debug+0x196/0x240
[ 1170.826168][T17434]  ? param_get_dyndbg_classes+0x160/0x160
[ 1170.831879][T17434]  ? __flush_work+0x109/0xac0
[ 1170.836547][T17434]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1170.842098][T17434]  idletimer_tg_checkentry_v1+0xc93/0xe20
[ 1170.847807][T17434]  ? __flush_work+0x109/0xac0
[ 1170.852473][T17434]  xt_check_target+0x49d/0xbf0
[ 1170.857228][T17434]  ? unwind_get_return_address+0x49/0x80
[ 1170.862847][T17434]  ? stack_trace_save+0xf0/0xf0
[ 1170.867689][T17434]  ? xt_find_jump_offset+0xe0/0xe0
[ 1170.872797][T17434]  ? __stack_depot_save+0x35/0x480
[ 1170.877903][T17434]  ? nft_target_init+0x1cc/0x9c0
[ 1170.882832][T17434]  nft_target_init+0x678/0x9c0
[ 1170.887591][T17434]  ? nft_target_release_ops+0x70/0x70
[ 1170.892962][T17434]  ? __kmem_cache_alloc_node+0x19d/0x270
[ 1170.898585][T17434]  ? nf_tables_newrule+0x14d9/0x2810
[ 1170.903867][T17434]  ? rcu_is_watching+0x11/0xa0
[ 1170.908623][T17434]  ? nf_tables_newrule+0x14d9/0x2810
[ 1170.913899][T17434]  ? __kmalloc+0xe4/0x240
[ 1170.918214][T17434]  nf_tables_newrule+0x170a/0x2810
[ 1170.923331][T17434]  ? nf_tables_delchain+0xf00/0xf00
[ 1170.928525][T17434]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1170.933541][T17434]  ? nf_tables_newtable+0xd19/0x16c0
[ 1170.938821][T17434]  ? __nla_parse+0x3c/0x50
[ 1170.943232][T17434]  nfnetlink_rcv+0x1119/0x2470
[ 1170.948026][T17434]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[ 1170.953565][T17434]  ? ref_tracker_free+0x682/0x830
[ 1170.958589][T17434]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1170.963780][T17434]  ? __netlink_deliver_tap+0x7a9/0x7e0
[ 1170.969229][T17434]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1170.974418][T17434]  netlink_unicast+0x7ad/0x920
[ 1170.979178][T17434]  netlink_sendmsg+0x8ad/0xbd0
[ 1170.983944][T17434]  ? netlink_getsockopt+0x550/0x550
[ 1170.989135][T17434]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1170.994676][T17434]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1170.999946][T17434]  ? security_socket_sendmsg+0x7c/0xa0
[ 1171.005394][T17434]  ? netlink_getsockopt+0x550/0x550
[ 1171.010580][T17434]  ____sys_sendmsg+0x5ed/0x9a0
[ 1171.015333][T17434]  ? __sys_sendmsg_sock+0x30/0x30
[ 1171.020349][T17434]  ? __import_iovec+0x306/0x510
[ 1171.025195][T17434]  ? import_iovec+0x6f/0xa0
[ 1171.029690][T17434]  ___sys_sendmsg+0x2a2/0x360
[ 1171.034355][T17434]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1171.039120][T17434]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1171.043960][T17434]  ? __x64_sys_sendmsg+0x80/0x80
[ 1171.048893][T17434]  ? lockdep_hardirqs_on+0x94/0x140
[ 1171.054082][T17434]  do_syscall_64+0x4c/0xa0
[ 1171.058495][T17434]  ? clear_bhb_loop+0x60/0xb0
[ 1171.063172][T17434]  ? clear_bhb_loop+0x60/0xb0
[ 1171.067837][T17434]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1171.073729][T17434] RIP: 0033:0x7fd4ea19e199
[ 1171.078141][T17434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1171.097734][T17434] RSP: 002b:00007fd4eb14d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1171.106138][T17434] RAX: ffffffffffffffda RBX: 00007fd4ea425fa0 RCX: 00007fd4ea19e199
[ 1171.114097][T17434] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1171.122055][T17434] RBP: 00007fd4ea2358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1171.130034][T17434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1171.137991][T17434] R13: 00007fd4ea426038 R14: 00007fd4ea425fa0 R15: 00007ffe380c6b68
[ 1171.145957][T17434]  </TASK>
[ 1171.149203][T17434] Kernel Offset: disabled
[ 1171.153511][T17434] Rebooting in 86400 seconds..