last executing test programs:

7.119548486s ago: executing program 0 (id=491):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x400, &(0x7f00000005c0)={[{@space_cache_v1}, {@clear_cache}, {@noenospc_debug}], [{@appraise}, {@subj_user={'subj_user', 0x3d, 'space_cache=v1'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_lt}, {@euid_eq}]}, 0x2, 0x5101, &(0x7f000000a2c0)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x4000)
r1 = socket$kcm(0x2, 0x200000000000003, 0x106)
r2 = accept$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40000141, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r1, 0x0, 0x30006041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, 0x0, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00176a0000fcf7ffffa5e8673608f7ecfeff00"})
syz_open_pts(r6, 0x4100)

5.77121875s ago: executing program 3 (id=499):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x6) (fail_nth: 1)

5.206143619s ago: executing program 3 (id=502):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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")
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x80000000, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r4, 0xbc7ae000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0)

4.574129073s ago: executing program 1 (id=505):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

4.354546798s ago: executing program 1 (id=506):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000300000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38)
pipe2$9p(&(0x7f00000001c0), 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x203, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x10000, 0x100)
mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [], 0x3a})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x30f282, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x3)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff])
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==")
rmdir(&(0x7f0000000200)='./file2\x00')

4.101305556s ago: executing program 0 (id=507):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) (fail_nth: 1)

3.779735678s ago: executing program 3 (id=509):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

3.434690962s ago: executing program 1 (id=510):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000000c0)=0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
statfs(0x0, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB='data=writeback,heartbeat=none,coherency=full,resv_level=00000000000000000006,nouser_xattr,localflocks,coherency=full,commit=00000000201613114240,\x00'], 0x1, 0x443f, &(0x7f0000004480)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810)

3.355111937s ago: executing program 0 (id=511):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003c40)=ANY=[], 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

3.31416854s ago: executing program 2 (id=512):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x80000, 0xffbffffd)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000600000004000000000000120300000002030000000000110300000003000000ec99db5fa3933be271000200000000000201"], 0x0, 0x46, 0x0, 0x1, 0xe988}, 0x28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x77c, &(0x7f0000001900)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
pwrite64(r5, &(0x7f0000000140)='.', 0x1, 0xfecc)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000003c0)={0x11, @remote, 0x0, 0x0, 'lc\x00', 0x1a, 0xa}, 0x2c)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x201, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000300)=[0x2], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x8, 0x6], 0x0, 0x1})

3.123361954s ago: executing program 3 (id=513):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000004c0)={<r1=>0x0, 0x8, 0x3ff})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000008c0)={<r2=>0x0, 0xacc4, 0x10000, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000cc0)={0x5, 0x6, {0xf, @usage=0x5fb, r1, 0x1, 0x4, 0x4, 0x3037, 0x2, 0x42a, @usage=0x6, 0x0, 0x7f, [0x3992, 0x2, 0xc, 0xe, 0x5, 0xffffffffffff6abc]}, {0x5, @struct={0x1, 0xf23c}, r2, 0x5, 0xe, 0x6, 0x5, 0x7f, 0x4, @struct={0x5, 0x4}, 0x49, 0x6, [0x4cf, 0x0, 0x3ff, 0xf60, 0x9, 0x4]}, {0xd, @struct={0xffffffff, 0x3ff}, 0x0, 0xc, 0x7, 0x4, 0x35b9289e, 0xfffffffffffffffc, 0x22, @struct={0x1, 0x6}, 0x10, 0x4, [0x10001, 0x7f3, 0x92, 0x2, 0x5, 0x6]}, {0x100000000, 0xc68f, 0x263}})
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0xd, 0x4)

2.260414783s ago: executing program 3 (id=514):
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000240)=0x7, 0x8000, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000400001800c00010062697477697365003000028008000340000000020800014000000014080002400000001208000580040001000c000480060002008a9500000900010073797a30"], 0x114}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000400001800c00010062697477697365003000028008000340000000020800014000000014080002400000001208000580040001000c000480060002008a9500000900010073797a30"], 0x114}}, 0x0)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000001200)=0x6, 0x800, 0x0)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

2.259539443s ago: executing program 0 (id=515):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x400, &(0x7f00000005c0)={[{@space_cache_v1}, {@clear_cache}, {@noenospc_debug}], [{@appraise}, {@subj_user={'subj_user', 0x3d, 'space_cache=v1'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_lt}, {@euid_eq}]}, 0x2, 0x5101, &(0x7f000000a2c0)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x4000)
r1 = socket$kcm(0x2, 0x200000000000003, 0x106)
r2 = accept$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40000141, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r1, 0x0, 0x30006041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, 0x0, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0)
write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00176a0000fcf7ffffa5e8673608f7ecfeff00"})
syz_open_pts(r6, 0x4100)

2.203146687s ago: executing program 2 (id=516):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r0, 0x4)
r1 = accept4$unix(r0, 0x0, 0x0, 0x800)
recvfrom(r1, &(0x7f0000000180)=""/102, 0xffffffffffffffd0, 0x40000000, 0x0, 0x0)

1.994755372s ago: executing program 1 (id=517):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==")
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x80000000, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r4, 0xbc7ae000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0)

1.569685031s ago: executing program 3 (id=518):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000001080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x10000, 0x7, 0x0, 0x390, 0xc, "af2ce8a2db7efd71fc68433008041ae3d15b39", 0xfffffff7, 0x90c})
pipe2(&(0x7f00000010c0), 0x186880)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, &(0x7f0000000080))
r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
copy_file_range(r4, &(0x7f0000000000)=0x7, r4, 0x0, 0x7, 0x0)
ioctl$I2C_TENBIT(r3, 0x704, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
r6 = dup(r0)
write$UHID_INPUT(r6, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000001080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) (async)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x10000, 0x7, 0x0, 0x390, 0xc, "af2ce8a2db7efd71fc68433008041ae3d15b39", 0xfffffff7, 0x90c}) (async)
pipe2(&(0x7f00000010c0), 0x186880) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
getsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, &(0x7f0000000080)) (async)
syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) (async)
copy_file_range(r4, &(0x7f0000000000)=0x7, r4, 0x0, 0x7, 0x0) (async)
ioctl$I2C_TENBIT(r3, 0x704, 0x1) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) (async)
dup(r0) (async)
write$UHID_INPUT(r6, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) (async)

871.082779ms ago: executing program 2 (id=519):
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x8, 0x4, 0x5, 0x1, @time={0xfc, 0xc}, {0x1, 0xdc}, {0x3, 0x10}, @raw32={[0x0, 0x1, 0x81]}}, {0x3, 0x5, 0xff, 0x0, @time={0x28d5, 0x40}, {0x1}, {0x9, 0x81}, @time=@tick=0x5}], 0x38)

797.391035ms ago: executing program 1 (id=520):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001100)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="185700000400000000000000000000008500000008000000185a00000500000000000000000000004d20f4ff1000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000006f05000012810118110000", @ANYRES32, @ANYBLOB="000000000029000020b702000000000000850000008600004a5a8e85d4bff7eb10d302d17d19a79b672979a580355a02a124a025b48cf67b196b099c471fe09669d08ade818c124bf597d355"], &(0x7f0000000d80)='GPL\x00', 0x7fffffff, 0x27, &(0x7f0000000dc0)=""/39, 0x41000, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f40)={0x2, 0x7, 0x401, 0xa2b}, 0xfffffffffffffffc, 0x29772, 0xffffffffffffffff, 0x6, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001080)=[{0x5, 0x2, 0x10, 0xc}, {0x1, 0x3, 0x1, 0xb}, {0x3, 0x3, 0x1, 0xb}, {0x4, 0x5, 0x4, 0x7}, {0x0, 0x5, 0xd, 0x1}, {0x0, 0x5, 0xa, 0x3}], 0x10, 0x2fe2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
pread64(r0, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000800000005000000000077cb00000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
syz_emit_ethernet(0x6a, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004503005c00000000002f907800000000e0000001248088a80000000000ff000010000800000086dd080088be00000000100000400100000000000000996a22eb00000000200000000200000000000000000000100800655800000000106e9f87bb10bfceb5038b72147dac099f66b67bb1cdfff51e6d1540ca7d9cc8f525601025715bb1b5cef4805e8ac439a27ca6ef8d91adbfa6b05baf8be76662869d3a4eb6b0aade99638751249b1040cbe8e88fbea58ed2f9d012b9688dbcb93105c92073e582b74dc47e1318568d8087beca3815f531cb84fdbb188564"], 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x105001, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
mmap(&(0x7f0000f47000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x3e000)
close_range(r1, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000100)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x339, &(0x7f0000000a40)="$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")
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc)
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000200), 0x0, 0x0})
syz_open_dev$dri(0x0, 0xd21, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
write$P9_RGETLOCK(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="200000003702000102000000000000000600000000000000", @ANYRES32=r8, @ANYBLOB="02005b2d1495ac5e576992adcd712f544953c046ea53fbcfff7c89e31e8d60c8768a61811faa2be850cb7303bbd34940c13a3e87e084a6eb876e0481006bb4a09e"], 0x20)
ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000080)={0x0, 0x7f})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

654.653714ms ago: executing program 2 (id=521):
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x8, 0x4, 0x5, 0x1, @time={0xfc, 0xc}, {0x1, 0xdc}, {0x3, 0x10}, @raw32={[0x0, 0x1, 0x81]}}, {0x3, 0x5, 0xff, 0x0, @time={0x28d5, 0x40}, {0x1}, {0x9, 0x81}, @time=@tick=0x5}], 0x38) (fail_nth: 1)

391.027133ms ago: executing program 2 (id=522):
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa)
chdir(&(0x7f0000000240)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$sndseq(r3, &(0x7f0000000180)=[{0x8, 0x4, 0x5, 0x1, @time={0xfc, 0xc}, {0x1, 0xdc}, {0x3, 0x10}, @raw32={[0x0, 0x1, 0x81]}}, {0x3, 0x5, 0xff, 0x0, @time={0x28d5, 0x40}, {0x1}, {0x9, 0x81}, @time=@tick=0x5}], 0x38)
ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000000)=0x800)

327.284807ms ago: executing program 0 (id=523):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003c40)=ANY=[], 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

191.994297ms ago: executing program 1 (id=524):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 1)

111.001252ms ago: executing program 2 (id=525):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000300)=0x1)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0)
syz_io_uring_setup(0x183a, &(0x7f00000003c0)={0x0, 0x6675, 0x20000, 0x1, 0x302}, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000480), &(0x7f00000004c0))
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x110, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000500)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000140)={0xfffffffffffffffe, <r4=>r1})
io_uring_enter(r4, 0x102f, 0xb2cd, 0x39, &(0x7f00000001c0)={[0x6]}, 0x8)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r5=>r0, 0x2})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x270, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0xfd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', <r9=>0x0})
setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r10, 0x7a4, &(0x7f0000000540)={{@local, 0x5}, 0x100000001, 0x9, 0x1, 0x40})
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000020601020000000000000000000000080000000000000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x44}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000180)=0x6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000080), 0x4)

0s ago: executing program 0 (id=526):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000001c80)={0x5, 0xd9a1, 0x9})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_ep_write(r1, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1")

kernel console output (not intermixed with test programs):

lock: blocknr=0, size=1024
[  182.025835][ T1093] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  182.033286][ T1093] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  182.045336][ T6995] Remounting filesystem read-only
[  182.050584][ T1093] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  182.050620][ T1146] NILFS (loop0): discard dirty page: offset=0, ino=6
[  182.057943][ T1093] NILFS (loop1): discard dirty page: offset=134283264, ino=15
[  182.057960][ T1093] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  182.057973][ T1093] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  182.057985][ T1093] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  182.057998][ T1093] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.065633][ T1146] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.072438][ T1093] NILFS (loop1): discard dirty page: offset=0, ino=5
[  182.093936][ T1146] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.102850][ T1093] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  182.102868][ T1093] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.102882][ T1093] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.102896][ T1093] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.102947][ T1093] NILFS (loop1): discard dirty page: offset=0, ino=4
[  182.153145][ T1146] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[  182.165556][ T1093] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  182.195066][ T1093] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.204571][ T1146] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[  182.205317][ T1093] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.226796][ T1093] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.230841][ T1146] NILFS (loop0): discard dirty page: offset=0, ino=5
[  182.261394][ T1146] NILFS (loop0): discard dirty block: blocknr=41, size=1024
[  182.270879][ T5763] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  182.288439][ T1146] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.302207][ T5763] NILFS (loop1): discard dirty page: offset=0, ino=3
[  182.309212][ T1146] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.318232][ T5763] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  182.322928][ T6998] loop3: detected capacity change from 0 to 2048
[  182.327081][ T1146] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.347942][ T5763] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  182.362344][ T6999] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.366917][ T5763] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  182.384316][ T5775] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  182.405613][ T5775] NILFS (loop0): discard dirty page: offset=0, ino=4
[  182.412846][ T5763] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.432777][ T5775] NILFS (loop0): discard dirty block: blocknr=40, size=1024
[  182.454251][ T5775] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.514413][ T5775] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.542419][ T5775] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.566567][ T5775] NILFS (loop0): discard dirty page: offset=0, ino=3
[  182.571733][ T7001] loop1: detected capacity change from 0 to 4096
[  182.574740][ T5775] NILFS (loop0): discard dirty block: blocknr=42, size=1024
[  182.591985][ T5775] NILFS (loop0): discard dirty block: blocknr=43, size=1024
[  182.603622][ T5775] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[  182.615609][ T5775] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  182.656290][ T7001] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  182.823057][ T5775] NILFS (loop0): discard dirty page: offset=229376, ino=3
[  182.840173][ T7001] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  182.970782][ T5775] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.026742][ T6999] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  183.098508][ T7001] ntfs3: loop1: volume is dirty and "force" flag is not set!
[  183.128434][ T5775] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.175270][ T6999] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  183.186541][ T5775] NILFS (loop0): discard dirty block: blocknr=50, size=1024
[  183.193960][ T5775] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.273798][ T6999] Remounting filesystem read-only
[  183.286908][ T6420] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  183.313874][ T6420] NILFS (loop3): discard dirty page: offset=134275072, ino=15
[  183.346533][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.356535][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.364216][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.377982][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.385242][ T6420] NILFS (loop3): discard dirty page: offset=134279168, ino=15
[  183.415896][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.443764][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.466601][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.535591][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.547025][ T6420] NILFS (loop3): discard dirty page: offset=134283264, ino=15
[  183.555313][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.571464][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.608698][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  183.615957][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.697267][ T6420] NILFS (loop3): discard dirty page: offset=0, ino=6
[  183.733328][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.742418][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.752181][ T6420] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  183.761035][ T6420] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  183.772121][ T6420] NILFS (loop3): discard dirty page: offset=0, ino=5
[  184.283965][ T7017] overlayfs: overlapping lowerdir path
[  185.168387][ T6420] NILFS (loop3): discard dirty block: blocknr=41, size=1024
[  185.197988][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.218423][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.239463][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.249621][ T6420] NILFS (loop3): discard dirty page: offset=0, ino=4
[  185.256448][ T6420] NILFS (loop3): discard dirty block: blocknr=40, size=1024
[  185.274431][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.284151][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.295408][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.305539][ T6420] NILFS (loop3): discard dirty page: offset=0, ino=3
[  185.312763][ T6420] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[  185.320302][ T5770] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  185.344694][ T6420] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[  185.352697][ T6420] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[  185.360341][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.369545][ T6420] NILFS (loop3): discard dirty page: offset=229376, ino=3
[  185.376693][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.387273][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.401232][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'.
[  185.410542][ T6420] NILFS (loop3): discard dirty block: blocknr=50, size=1024
[  185.420047][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  185.427385][ T6420] NILFS (loop3): discard dirty page: offset=233472, ino=3
[  185.444990][ T6420] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  185.457935][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.477890][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.488495][ T6420] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.517969][ T5770] usb 1-1: Using ep0 maxpacket: 8
[  185.528473][ T5770] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  185.555222][ T5770] usb 1-1: config 0 has no interface number 0
[  185.577925][ T5770] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  185.597883][ T5770] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  185.628123][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.828156][ T5770] usb 1-1: config 0 descriptor??
[  185.842603][ T5770] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  186.057177][ T1199] usb 1-1: USB disconnect, device number 16
[  186.535916][ T7036] FAULT_INJECTION: forcing a failure.
[  186.535916][ T7036] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.632021][ T7036] CPU: 1 PID: 7036 Comm: syz.0.274 Not tainted syzkaller #0
[  186.639377][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  186.649973][ T7036] Call Trace:
[  186.653252][ T7036]  <TASK>
[  186.656176][ T7036]  dump_stack_lvl+0x18c/0x250
[  186.660860][ T7036]  ? show_regs_print_info+0x20/0x20
[  186.666070][ T7036]  ? load_image+0x420/0x420
[  186.670571][ T7036]  ? __lock_acquire+0x7d40/0x7d40
[  186.675587][ T7036]  ? snprintf+0xe9/0x140
[  186.679918][ T7036]  should_fail_ex+0x39d/0x4d0
[  186.684632][ T7036]  _copy_to_user+0x2f/0xa0
[  186.689221][ T7036]  simple_read_from_buffer+0xe7/0x150
[  186.694605][ T7036]  proc_fail_nth_read+0x1e8/0x260
[  186.699647][ T7036]  ? proc_fault_inject_write+0x360/0x360
[  186.705277][ T7036]  ? fsnotify_perm+0x271/0x5e0
[  186.710038][ T7036]  ? proc_fault_inject_write+0x360/0x360
[  186.715664][ T7036]  vfs_read+0x28b/0x970
[  186.719910][ T7036]  ? kernel_read+0x1e0/0x1e0
[  186.724501][ T7036]  ? __fget_files+0x28/0x4b0
[  186.729175][ T7036]  ? __fget_files+0x28/0x4b0
[  186.733791][ T7036]  ? __fget_files+0x43d/0x4b0
[  186.738619][ T7036]  ? __fdget_pos+0x2a3/0x330
[  186.743226][ T7036]  ? ksys_read+0x75/0x260
[  186.747578][ T7036]  ksys_read+0x150/0x260
[  186.751856][ T7036]  ? vfs_write+0x990/0x990
[  186.756300][ T7036]  ? lockdep_hardirqs_on+0x98/0x150
[  186.761683][ T7036]  do_syscall_64+0x55/0xa0
[  186.766113][ T7036]  ? clear_bhb_loop+0x40/0x90
[  186.770809][ T7036]  ? clear_bhb_loop+0x40/0x90
[  186.775488][ T7036]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  186.781485][ T7036] RIP: 0033:0x7f86d975d04e
[  186.785895][ T7036] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  186.805931][ T7036] RSP: 002b:00007f86da5c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  186.814428][ T7036] RAX: ffffffffffffffda RBX: 00007f86da5c56c0 RCX: 00007f86d975d04e
[  186.822395][ T7036] RDX: 000000000000000f RSI: 00007f86da5c50a0 RDI: 0000000000000004
[  186.830455][ T7036] RBP: 00007f86da5c5090 R08: 0000000000000000 R09: 0000000000000000
[  186.838418][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.846553][ T7036] R13: 00007f86d9a16038 R14: 00007f86d9a15fa0 R15: 00007ffda1d625d8
[  186.854532][ T7036]  </TASK>
[  186.927972][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  187.270984][ T7044] netem: incorrect ge model size
[  187.276387][ T7044] netem: change failed
[  188.028820][ T7038] loop3: detected capacity change from 0 to 4096
[  188.080243][ T7038] ntfs3: loop3: ino=3, Correct links count -> 2.
[  188.186763][ T7038] ntfs3: loop3: Failed to initialize $Secure::$SII (-22).
[  188.196583][ T7038] ntfs3: loop3: Failed to initialize $Secure (-22).
[  191.060483][ T7058] xt_hashlimit: max too large, truncated to 1048576
[  191.226986][ T7064] loop3: detected capacity change from 0 to 128
[  191.260057][ T7064] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  191.294772][ T7064] warn_alloc: 1 callbacks suppressed
[  191.294788][ T7064] syz.3.282: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  191.352362][ T7064] CPU: 0 PID: 7064 Comm: syz.3.282 Not tainted syzkaller #0
[  191.359716][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  191.369888][ T7064] Call Trace:
[  191.373181][ T7064]  <TASK>
[  191.376123][ T7064]  dump_stack_lvl+0x18c/0x250
[  191.380848][ T7064]  ? show_regs_print_info+0x20/0x20
[  191.386081][ T7064]  ? load_image+0x420/0x420
[  191.390620][ T7064]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  191.397062][ T7064]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  191.403595][ T7064]  warn_alloc+0x246/0x340
[  191.407963][ T7064]  ? stack_trace_save+0xaa/0x100
[  191.412928][ T7064]  ? zone_watermark_ok_safe+0x230/0x230
[  191.418534][ T7064]  ? kasan_set_track+0x5f/0x70
[  191.423323][ T7064]  ? kasan_set_track+0x4e/0x70
[  191.428103][ T7064]  ? __kasan_kmalloc+0x8f/0xa0
[  191.432887][ T7064]  ? xsk_init_queue+0xad/0x100
[  191.437863][ T7064]  ? xsk_setsockopt+0x42e/0x760
[  191.442741][ T7064]  ? do_sock_setsockopt+0x175/0x1a0
[  191.447966][ T7064]  ? __x64_sys_setsockopt+0x182/0x200
[  191.453451][ T7064]  __vmalloc_node_range+0x126/0x1330
[  191.458844][ T7064]  ? free_vm_area+0x50/0x50
[  191.463396][ T7064]  vmalloc_user+0x74/0x80
[  191.467805][ T7064]  ? xskq_create+0xbf/0x170
[  191.472331][ T7064]  xskq_create+0xbf/0x170
[  191.476688][ T7064]  xsk_init_queue+0xad/0x100
[  191.481328][ T7064]  xsk_setsockopt+0x42e/0x760
[  191.486051][ T7064]  ? xsk_poll+0x680/0x680
[  191.491366][ T7064]  ? __fget_files+0x28/0x4b0
[  191.495980][ T7064]  ? __fget_files+0x28/0x4b0
[  191.500597][ T7064]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  191.506164][ T7064]  ? security_socket_setsockopt+0x7e/0xa0
[  191.511906][ T7064]  ? xsk_poll+0x680/0x680
[  191.516266][ T7064]  do_sock_setsockopt+0x175/0x1a0
[  191.521329][ T7064]  ? __fdget+0x180/0x210
[  191.525601][ T7064]  __x64_sys_setsockopt+0x182/0x200
[  191.531258][ T7064]  do_syscall_64+0x55/0xa0
[  191.535690][ T7064]  ? clear_bhb_loop+0x40/0x90
[  191.540399][ T7064]  ? clear_bhb_loop+0x40/0x90
[  191.545116][ T7064]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  191.551035][ T7064] RIP: 0033:0x7fb012f9c819
[  191.555552][ T7064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.575967][ T7064] RSP: 002b:00007fb013eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  191.584405][ T7064] RAX: ffffffffffffffda RBX: 00007fb013215fa0 RCX: 00007fb012f9c819
[  191.592407][ T7064] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  191.600396][ T7064] RBP: 00007fb013032c91 R08: 0000000000000004 R09: 0000000000000000
[  191.608407][ T7064] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.616397][ T7064] R13: 00007fb013216038 R14: 00007fb013215fa0 R15: 00007fffe69396a8
[  191.624510][ T7064]  </TASK>
[  191.704459][ T7064] Mem-Info:
[  191.708255][ T7064] active_anon:16402 inactive_anon:0 isolated_anon:0
[  191.708255][ T7064]  active_file:22628 inactive_file:40014 isolated_file:0
[  191.708255][ T7064]  unevictable:768 dirty:692 writeback:0
[  191.708255][ T7064]  slab_reclaimable:10632 slab_unreclaimable:92642
[  191.708255][ T7064]  mapped:27069 shmem:11455 pagetables:621
[  191.708255][ T7064]  sec_pagetables:0 bounce:0
[  191.708255][ T7064]  kernel_misc_reclaimable:0
[  191.708255][ T7064]  free:1325416 free_pcp:11453 free_cma:0
[  191.815362][ T7064] Node 0 active_anon:67608kB inactive_anon:0kB active_file:90512kB inactive_file:159852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108276kB dirty:2768kB writeback:0kB shmem:43284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10640kB pagetables:2484kB sec_pagetables:0kB all_unreclaimable? no
[  192.198432][ T7064] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  192.277902][ T7064] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  192.353128][ T7064] lowmem_reserve[]: 0 2521 2522 2522 2522
[  192.359379][ T7064] Node 0 DMA32 free:1407084kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:49568kB inactive_anon:0kB active_file:90512kB inactive_file:159028kB unevictable:1536kB writepending:2868kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:27992kB local_pcp:9412kB free_cma:0kB
[  192.428007][ T7064] lowmem_reserve[]: 0 0 0 0 0
[  192.432809][ T7064] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  192.487941][ T7064] lowmem_reserve[]: 0 0 0 0 0
[  192.492815][ T7064] Node 1 Normal free:3893576kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20884kB local_pcp:9044kB free_cma:0kB
[  192.577902][ T7064] lowmem_reserve[]: 0 0 0 0 0
[  192.582796][ T7064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  192.627930][ T7064] Node 0 DMA32: 3*4kB (UE) 644*8kB (UME) 665*16kB (UM) 432*32kB (UM) 50*64kB (UME) 71*128kB (UME) 41*256kB (UME) 17*512kB (ME) 12*1024kB (UME) 4*2048kB (UM) 327*4096kB (UM) = 1420988kB
[  192.687941][ T7064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  192.717960][ T7064] Node 1 Normal: 244*4kB (UME) 55*8kB (UME) 34*16kB (UME) 75*32kB (UME) 29*64kB (UME) 6*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 948*4096kB (M) = 3893832kB
[  192.747931][ T7064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  192.757548][ T7064] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.780723][ T7064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  192.808057][ T7064] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.826560][ T7064] 68748 total pagecache pages
[  192.832705][ T7064] 0 pages in swap cache
[  192.837522][ T7064] Free swap  = 124984kB
[  192.845155][ T7064] Total swap = 124996kB
[  192.849565][ T7064] 2097051 pages RAM
[  192.863928][ T7067] loop0: detected capacity change from 0 to 40427
[  192.870939][ T7064] 0 pages HighMem/MovableOnly
[  192.894927][ T7064] 416926 pages reserved
[  192.907090][ T7064] 0 pages cma reserved
[  192.942644][ T7067] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[  192.967189][ T7067] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  193.013508][ T7067] F2FS-fs (loop0): invalid crc value
[  193.061544][ T7067] F2FS-fs (loop0): Found nat_bits in checkpoint
[  193.123767][ T7083] FAULT_INJECTION: forcing a failure.
[  193.123767][ T7083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.138111][ T5772] Bluetooth: hci0: command tx timeout
[  193.186293][ T7086] FAULT_INJECTION: forcing a failure.
[  193.186293][ T7086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.207869][ T7083] CPU: 0 PID: 7083 Comm: syz.1.286 Not tainted syzkaller #0
[  193.215471][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  193.225554][ T7083] Call Trace:
[  193.228936][ T7083]  <TASK>
[  193.231883][ T7083]  dump_stack_lvl+0x18c/0x250
[  193.236586][ T7083]  ? show_regs_print_info+0x20/0x20
[  193.241833][ T7083]  ? load_image+0x420/0x420
[  193.246464][ T7083]  ? __lock_acquire+0x7d40/0x7d40
[  193.251607][ T7083]  ? snprintf+0xe9/0x140
[  193.255880][ T7083]  should_fail_ex+0x39d/0x4d0
[  193.260586][ T7083]  _copy_to_user+0x2f/0xa0
[  193.265216][ T7083]  simple_read_from_buffer+0xe7/0x150
[  193.270645][ T7083]  proc_fail_nth_read+0x1e8/0x260
[  193.275713][ T7083]  ? proc_fault_inject_write+0x360/0x360
[  193.281493][ T7083]  ? fsnotify_perm+0x271/0x5e0
[  193.286479][ T7083]  ? proc_fault_inject_write+0x360/0x360
[  193.292207][ T7083]  vfs_read+0x28b/0x970
[  193.296418][ T7083]  ? kernel_read+0x1e0/0x1e0
[  193.301045][ T7083]  ? __fget_files+0x28/0x4b0
[  193.305676][ T7083]  ? __fget_files+0x28/0x4b0
[  193.310401][ T7083]  ? __fget_files+0x43d/0x4b0
[  193.315112][ T7083]  ? __fdget_pos+0x2a3/0x330
[  193.319734][ T7083]  ? ksys_read+0x75/0x260
[  193.324105][ T7083]  ksys_read+0x150/0x260
[  193.328581][ T7083]  ? vfs_write+0x990/0x990
[  193.333043][ T7083]  ? lockdep_hardirqs_on+0x98/0x150
[  193.338263][ T7083]  do_syscall_64+0x55/0xa0
[  193.342877][ T7083]  ? clear_bhb_loop+0x40/0x90
[  193.347601][ T7083]  ? clear_bhb_loop+0x40/0x90
[  193.352334][ T7083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.358348][ T7083] RIP: 0033:0x7fe33e95d04e
[  193.363236][ T7083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  193.383484][ T7083] RSP: 002b:00007fe33f7d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  193.392211][ T7083] RAX: ffffffffffffffda RBX: 00007fe33f7d56c0 RCX: 00007fe33e95d04e
[  193.400466][ T7083] RDX: 000000000000000f RSI: 00007fe33f7d50a0 RDI: 0000000000000004
[  193.408460][ T7083] RBP: 00007fe33f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  193.416799][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.426123][ T7083] R13: 00007fe33ec16038 R14: 00007fe33ec15fa0 R15: 00007ffc137d5408
[  193.434316][ T7083]  </TASK>
[  193.437569][ T7086] CPU: 1 PID: 7086 Comm: syz.3.288 Not tainted syzkaller #0
[  193.445258][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  193.455607][ T7086] Call Trace:
[  193.458914][ T7086]  <TASK>
[  193.461856][ T7086]  dump_stack_lvl+0x18c/0x250
[  193.466623][ T7086]  ? show_regs_print_info+0x20/0x20
[  193.471847][ T7086]  ? load_image+0x420/0x420
[  193.476358][ T7086]  ? __might_fault+0xaa/0x120
[  193.481045][ T7086]  ? __lock_acquire+0x7d40/0x7d40
[  193.486094][ T7086]  should_fail_ex+0x39d/0x4d0
[  193.490871][ T7086]  _copy_from_user+0x2f/0xe0
[  193.495552][ T7086]  do_sys_poll+0x2bf/0x1230
[  193.500206][ T7086]  ? __lock_acquire+0x1347/0x7d40
[  193.505265][ T7086]  ? poll_select_finish+0x630/0x630
[  193.510541][ T7086]  ? lock_chain_count+0x20/0x20
[  193.515388][ T7086]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  193.521732][ T7086]  ? nsecs_to_jiffies+0x30/0x30
[  193.526585][ T7086]  __se_sys_poll+0x131/0x330
[  193.531177][ T7086]  ? __x64_sys_poll+0x80/0x80
[  193.535853][ T7086]  ? lockdep_hardirqs_on+0x98/0x150
[  193.541137][ T7086]  do_syscall_64+0x55/0xa0
[  193.545633][ T7086]  ? clear_bhb_loop+0x40/0x90
[  193.550312][ T7086]  ? clear_bhb_loop+0x40/0x90
[  193.554987][ T7086]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.560962][ T7086] RIP: 0033:0x7fb012f9c819
[  193.565369][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.591189][ T7086] RSP: 002b:00007fb013ecc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  193.600133][ T7086] RAX: ffffffffffffffda RBX: 00007fb013216090 RCX: 00007fb012f9c819
[  193.608294][ T7086] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000200000000180
[  193.616278][ T7086] RBP: 00007fb013ecc090 R08: 0000000000000000 R09: 0000000000000000
[  193.624636][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.633424][ T7086] R13: 00007fb013216128 R14: 00007fb013216090 R15: 00007fffe69396a8
[  193.641844][ T7086]  </TASK>
[  193.807625][ T7067] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  193.823587][ T7067] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  193.877878][   T28] audit: type=1800 audit(1775887744.887:19): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.284" name="bus" dev="loop0" ino=10 res=0 errno=0
[  193.917438][ T7067] syz.0.284: attempt to access beyond end of device
[  193.917438][ T7067] loop0: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  194.098628][ T7101] xt_hashlimit: max too large, truncated to 1048576
[  195.339706][ T7111] vivid-000: kernel_thread() failed
[  195.614573][ T5775] syz-executor: attempt to access beyond end of device
[  195.614573][ T5775] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  195.683825][ T7119] FAULT_INJECTION: forcing a failure.
[  195.683825][ T7119] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.714294][ T5775] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  195.731147][ T7119] CPU: 1 PID: 7119 Comm: syz.3.295 Not tainted syzkaller #0
[  195.738490][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  195.748645][ T7119] Call Trace:
[  195.751934][ T7119]  <TASK>
[  195.754874][ T7119]  dump_stack_lvl+0x18c/0x250
[  195.759576][ T7119]  ? show_regs_print_info+0x20/0x20
[  195.764793][ T7119]  ? load_image+0x420/0x420
[  195.769311][ T7119]  ? __might_fault+0xaa/0x120
[  195.774005][ T7119]  ? __lock_acquire+0x7d40/0x7d40
[  195.779051][ T7119]  should_fail_ex+0x39d/0x4d0
[  195.783769][ T7119]  _copy_from_user+0x2f/0xe0
[  195.788466][ T7119]  ___sys_sendmsg+0x1c7/0x360
[  195.793161][ T7119]  ? get_pid_task+0x20/0x1e0
[  195.797766][ T7119]  ? __sys_sendmsg+0x2a0/0x2a0
[  195.802557][ T7119]  ? __lock_acquire+0x7d40/0x7d40
[  195.807612][ T7119]  __se_sys_sendmsg+0x1c2/0x2b0
[  195.812569][ T7119]  ? __x64_sys_sendmsg+0x80/0x80
[  195.817540][ T7119]  ? lockdep_hardirqs_on+0x98/0x150
[  195.822852][ T7119]  do_syscall_64+0x55/0xa0
[  195.827275][ T7119]  ? clear_bhb_loop+0x40/0x90
[  195.831960][ T7119]  ? clear_bhb_loop+0x40/0x90
[  195.836664][ T7119]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  195.842585][ T7119] RIP: 0033:0x7fb012f9c819
[  195.847018][ T7119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.866644][ T7119] RSP: 002b:00007fb013eed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.875095][ T7119] RAX: ffffffffffffffda RBX: 00007fb013215fa0 RCX: 00007fb012f9c819
[  195.883117][ T7119] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  195.891184][ T7119] RBP: 00007fb013eed090 R08: 0000000000000000 R09: 0000000000000000
[  195.899179][ T7119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.907180][ T7119] R13: 00007fb013216038 R14: 00007fb013215fa0 R15: 00007fffe69396a8
[  195.915291][ T7119]  </TASK>
[  197.088100][ T5770] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  197.131903][ T7140] netlink: 71 bytes leftover after parsing attributes in process `syz.2.301'.
[  197.154552][ T7140] netlink: 666 bytes leftover after parsing attributes in process `syz.2.301'.
[  197.288262][ T5770] usb 2-1: Using ep0 maxpacket: 32
[  197.334851][ T5770] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  197.344835][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.346165][ T7148] xt_hashlimit: max too large, truncated to 1048576
[  197.353727][ T5770] usb 2-1: Product: syz
[  197.367282][ T5770] usb 2-1: Manufacturer: syz
[  197.376153][ T5770] usb 2-1: SerialNumber: syz
[  197.402256][ T5770] usb 2-1: config 0 descriptor??
[  197.962679][ T7154] FAULT_INJECTION: forcing a failure.
[  197.962679][ T7154] name failslab, interval 1, probability 0, space 0, times 0
[  197.978221][ T7154] CPU: 0 PID: 7154 Comm: syz.3.305 Not tainted syzkaller #0
[  197.985584][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  197.995653][ T7154] Call Trace:
[  197.998963][ T7154]  <TASK>
[  198.001885][ T7154]  dump_stack_lvl+0x18c/0x250
[  198.006778][ T7154]  ? show_regs_print_info+0x20/0x20
[  198.012185][ T7154]  ? load_image+0x420/0x420
[  198.016706][ T7154]  ? __might_sleep+0xe0/0xe0
[  198.021559][ T7154]  ? __lock_acquire+0x7d40/0x7d40
[  198.026581][ T7154]  should_fail_ex+0x39d/0x4d0
[  198.031734][ T7154]  should_failslab+0x9/0x20
[  198.036233][ T7154]  slab_pre_alloc_hook+0x59/0x310
[  198.041254][ T7154]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  198.046989][ T7154]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  198.052761][ T7154]  __kmem_cache_alloc_node+0x53/0x250
[  198.058140][ T7154]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  198.063892][ T7154]  __kmalloc+0xa4/0x230
[  198.068052][ T7154]  tomoyo_realpath_from_path+0xe3/0x5d0
[  198.073617][ T7154]  tomoyo_path_number_perm+0x248/0x620
[  198.079181][ T7154]  ? tomoyo_path_number_perm+0x217/0x620
[  198.084952][ T7154]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  198.090430][ T7154]  ? ksys_write+0x1c4/0x260
[  198.094981][ T7154]  ? __fget_files+0x28/0x4b0
[  198.099582][ T7154]  ? __fget_files+0x28/0x4b0
[  198.104175][ T7154]  security_file_ioctl+0x70/0xa0
[  198.109104][ T7154]  __se_sys_ioctl+0x48/0x170
[  198.113709][ T7154]  do_syscall_64+0x55/0xa0
[  198.118214][ T7154]  ? clear_bhb_loop+0x40/0x90
[  198.123070][ T7154]  ? clear_bhb_loop+0x40/0x90
[  198.127750][ T7154]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.133675][ T7154] RIP: 0033:0x7fb012f9c819
[  198.138086][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.157687][ T7154] RSP: 002b:00007fb013eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  198.166091][ T7154] RAX: ffffffffffffffda RBX: 00007fb013215fa0 RCX: 00007fb012f9c819
[  198.174138][ T7154] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004
[  198.182108][ T7154] RBP: 00007fb013eed090 R08: 0000000000000000 R09: 0000000000000000
[  198.190152][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.198203][ T7154] R13: 00007fb013216038 R14: 00007fb013215fa0 R15: 00007fffe69396a8
[  198.206198][ T7154]  </TASK>
[  198.223554][ T5770] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  198.239811][ T7156] FAULT_INJECTION: forcing a failure.
[  198.239811][ T7156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  198.254029][ T5770] peak_usb 2-1:0.0 can0: sending command failure: -22
[  198.262264][ T7154] ERROR: Out of memory at tomoyo_realpath_from_path.
[  198.269201][ T5770] peak_usb 2-1:0.0 can0: sending command failure: -22
[  198.280666][ T7156] CPU: 1 PID: 7156 Comm: syz.0.306 Not tainted syzkaller #0
[  198.287987][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  198.298041][ T7156] Call Trace:
[  198.301319][ T7156]  <TASK>
[  198.304241][ T7156]  dump_stack_lvl+0x18c/0x250
[  198.308919][ T7156]  ? show_regs_print_info+0x20/0x20
[  198.314121][ T7156]  ? load_image+0x420/0x420
[  198.318616][ T7156]  ? __might_fault+0xaa/0x120
[  198.323301][ T7156]  ? __lock_acquire+0x7d40/0x7d40
[  198.328347][ T7156]  should_fail_ex+0x39d/0x4d0
[  198.333046][ T7156]  _copy_from_user+0x2f/0xe0
[  198.337652][ T7156]  ___sys_sendmsg+0x1c7/0x360
[  198.342344][ T7156]  ? get_pid_task+0x20/0x1e0
[  198.346956][ T7156]  ? __sys_sendmsg+0x2a0/0x2a0
[  198.351756][ T7156]  ? __lock_acquire+0x7d40/0x7d40
[  198.356997][ T7156]  __se_sys_sendmsg+0x1c2/0x2b0
[  198.361875][ T7156]  ? __x64_sys_sendmsg+0x80/0x80
[  198.366935][ T7156]  ? lockdep_hardirqs_on+0x98/0x150
[  198.372261][ T7156]  do_syscall_64+0x55/0xa0
[  198.376721][ T7156]  ? clear_bhb_loop+0x40/0x90
[  198.381520][ T7156]  ? clear_bhb_loop+0x40/0x90
[  198.386240][ T7156]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.392172][ T7156] RIP: 0033:0x7f86d979c819
[  198.396622][ T7156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.416258][ T7156] RSP: 002b:00007f86da5c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  198.424677][ T7156] RAX: ffffffffffffffda RBX: 00007f86d9a15fa0 RCX: 00007f86d979c819
[  198.432661][ T7156] RDX: 0000000000000800 RSI: 0000200000000380 RDI: 0000000000000003
[  198.440636][ T7156] RBP: 00007f86da5c5090 R08: 0000000000000000 R09: 0000000000000000
[  198.448615][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.456589][ T7156] R13: 00007f86d9a16038 R14: 00007f86d9a15fa0 R15: 00007ffda1d625d8
[  198.464576][ T7156]  </TASK>
[  198.526851][ T5770] peak_usb: probe of 2-1:0.0 failed with error -22
[  198.542941][ T5770] usb 2-1: USB disconnect, device number 11
[  198.563120][ T7160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.308'.
[  199.102322][ T7160] netlink: 'syz.2.308': attribute type 10 has an invalid length.
[  199.158805][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  199.165721][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  199.290088][ T7160] hsr0: entered promiscuous mode
[  199.317367][ T7160] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  199.338386][ T7160] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  199.408787][ T7160] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  199.423262][ T7160] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  200.120033][ T7182] overlayfs: overlapping lowerdir path
[  201.454298][ T7189] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  201.878410][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  203.756659][ T7212] FAULT_INJECTION: forcing a failure.
[  203.756659][ T7212] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.784675][ T7212] CPU: 1 PID: 7212 Comm: syz.1.318 Not tainted syzkaller #0
[  203.792029][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  203.802209][ T7212] Call Trace:
[  203.805504][ T7212]  <TASK>
[  203.808518][ T7212]  dump_stack_lvl+0x18c/0x250
[  203.813203][ T7212]  ? show_regs_print_info+0x20/0x20
[  203.818409][ T7212]  ? load_image+0x420/0x420
[  203.822922][ T7212]  ? __might_fault+0xaa/0x120
[  203.827600][ T7212]  ? __lock_acquire+0x7d40/0x7d40
[  203.832633][ T7212]  should_fail_ex+0x39d/0x4d0
[  203.837386][ T7212]  _copy_from_user+0x2f/0xe0
[  203.841989][ T7212]  ___sys_sendmsg+0x1c7/0x360
[  203.846667][ T7212]  ? get_pid_task+0x20/0x1e0
[  203.851261][ T7212]  ? __sys_sendmsg+0x2a0/0x2a0
[  203.856043][ T7212]  ? __lock_acquire+0x7d40/0x7d40
[  203.861087][ T7212]  __se_sys_sendmsg+0x1c2/0x2b0
[  203.865956][ T7212]  ? __x64_sys_sendmsg+0x80/0x80
[  203.870896][ T7212]  ? lockdep_hardirqs_on+0x98/0x150
[  203.876089][ T7212]  do_syscall_64+0x55/0xa0
[  203.880493][ T7212]  ? clear_bhb_loop+0x40/0x90
[  203.885184][ T7212]  ? clear_bhb_loop+0x40/0x90
[  203.889948][ T7212]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.895852][ T7212] RIP: 0033:0x7fe33e99c819
[  203.900298][ T7212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.919933][ T7212] RSP: 002b:00007fe33f7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.928396][ T7212] RAX: ffffffffffffffda RBX: 00007fe33ec15fa0 RCX: 00007fe33e99c819
[  203.936480][ T7212] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003
[  203.944656][ T7212] RBP: 00007fe33f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  203.952653][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.960658][ T7212] R13: 00007fe33ec16038 R14: 00007fe33ec15fa0 R15: 00007ffc137d5408
[  203.968703][ T7212]  </TASK>
[  204.438377][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  204.482036][ T7215] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  204.824999][   T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  205.048137][   T23] usb 4-1: Using ep0 maxpacket: 8
[  205.088927][   T23] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56
[  205.107948][   T23] usb 4-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3
[  205.127924][   T23] usb 4-1: Product: syz
[  205.132247][   T23] usb 4-1: Manufacturer: syz
[  205.137058][   T23] usb 4-1: SerialNumber: syz
[  205.151119][   T23] usb 4-1: config 0 descriptor??
[  205.170778][   T23] pwc: Logitech ViewPort AV 100 webcam detected.
[  205.363624][ T7202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.384649][ T7202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.384755][ T7229] FAULT_INJECTION: forcing a failure.
[  205.384755][ T7229] name failslab, interval 1, probability 0, space 0, times 0
[  205.436858][   T23] pwc: Failed to set LED on/off time (-71)
[  205.438376][ T7229] CPU: 0 PID: 7229 Comm: syz.1.327 Not tainted syzkaller #0
[  205.450039][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  205.460123][ T7229] Call Trace:
[  205.463439][ T7229]  <TASK>
[  205.466401][ T7229]  dump_stack_lvl+0x18c/0x250
[  205.468071][   T23] pwc: send_video_command error -71
[  205.471098][ T7229]  ? show_regs_print_info+0x20/0x20
[  205.476287][   T23] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  205.481470][ T7229]  ? load_image+0x420/0x420
[  205.481500][ T7229]  ? __might_sleep+0xe0/0xe0
[  205.481519][ T7229]  ? __lock_acquire+0x7d40/0x7d40
[  205.481539][ T7229]  should_fail_ex+0x39d/0x4d0
[  205.481565][ T7229]  should_failslab+0x9/0x20
[  205.481585][ T7229]  slab_pre_alloc_hook+0x59/0x310
[  205.481605][ T7229]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  205.481625][ T7229]  kmem_cache_alloc+0x5a/0x2d0
[  205.481643][ T7229]  ? getname_flags+0xbb/0x500
[  205.481668][ T7229]  getname_flags+0xbb/0x500
[  205.518045][   T23] Philips webcam: probe of 4-1:0.0 failed with error -71
[  205.523064][ T7229]  user_path_at_empty+0x2c/0x60
[  205.523096][ T7229]  __x64_sys_umount+0xfd/0x180
[  205.523114][ T7229]  ? path_umount+0xf10/0xf10
[  205.544157][   T23] usb 4-1: USB disconnect, device number 10
[  205.548895][ T7229]  ? lockdep_hardirqs_on+0x98/0x150
[  205.548928][ T7229]  do_syscall_64+0x55/0xa0
[  205.548954][ T7229]  ? clear_bhb_loop+0x40/0x90
[  205.548971][ T7229]  ? clear_bhb_loop+0x40/0x90
[  205.548990][ T7229]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.549008][ T7229] RIP: 0033:0x7fe33e99c819
[  205.549025][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.549038][ T7229] RSP: 002b:00007fe33f7b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  205.549055][ T7229] RAX: ffffffffffffffda RBX: 00007fe33ec16090 RCX: 00007fe33e99c819
[  205.549067][ T7229] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0
[  205.549078][ T7229] RBP: 00007fe33f7b4090 R08: 0000000000000000 R09: 0000000000000000
[  205.549088][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.655172][ T7229] R13: 00007fe33ec16128 R14: 00007fe33ec16090 R15: 00007ffc137d5408
[  205.663283][ T7229]  </TASK>
[  206.386039][ T7244] xt_hashlimit: max too large, truncated to 1048576
[  206.920048][ T5766] Bluetooth: hci1: command 0x0406 tx timeout
[  206.926427][ T5766] Bluetooth: hci0: command 0x0406 tx timeout
[  206.935069][ T5768] Bluetooth: hci3: command 0x0406 tx timeout
[  207.292418][ T7256] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.331'.
[  208.887925][   T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  208.907166][ T7276] xt_hashlimit: max too large, truncated to 1048576
[  209.068325][   T23] usb 2-1: device descriptor read/64, error -71
[  209.339667][   T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  209.542181][ T7281] IPVS: dh: FWM 3 0x00000003 - no destination available
[  209.555588][ T7281] loop3: detected capacity change from 0 to 256
[  209.563356][ T7281] exfat: Deprecated parameter 'utf8'
[  209.638765][ T7281] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  209.684466][   T23] usb 2-1: device descriptor read/64, error -71
[  209.685273][ T1199] IPVS: starting estimator thread 0...
[  209.822123][   T23] usb usb2-port1: attempt power cycle
[  209.844208][ T7282] IPVS: using max 18 ests per chain, 43200 per kthread
[  210.437976][   T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  210.560800][   T23] usb 2-1: device descriptor read/8, error -71
[  210.827987][   T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  210.837874][ T7290] xt_hashlimit: max too large, truncated to 1048576
[  210.862144][   T23] usb 2-1: device descriptor read/8, error -71
[  210.989637][   T23] usb usb2-port1: unable to enumerate USB device
[  211.318195][ T7302] loop3: detected capacity change from 0 to 256
[  211.343191][ T7302] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  211.647948][    T8] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  211.840311][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  211.861282][    T8] usb 4-1: config 8 has an invalid interface number: 109 but max is 0
[  211.898023][    T8] usb 4-1: config 8 has an invalid descriptor of length 188, skipping remainder of the config
[  211.920891][    T8] usb 4-1: config 8 has no interface number 0
[  211.927230][    T8] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[  211.927989][   T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  211.964370][    T8] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 20297, setting to 8
[  212.007991][    T8] usb 4-1: string descriptor 0 read error: -22
[  212.014431][    T8] usb 4-1: New USB device found, idVendor=1a2e, idProduct=0720, bcdDevice=d4.29
[  212.034381][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.051906][ T7302] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  212.148021][   T27] usb 1-1: Using ep0 maxpacket: 8
[  212.161256][   T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  212.180081][   T27] usb 1-1: config 0 has no interface number 0
[  212.196475][   T27] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  212.228056][   T27] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  212.245659][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.266703][   T27] usb 1-1: config 0 descriptor??
[  212.301773][    T8] usb 4-1: USB disconnect, device number 11
[  212.305008][   T27] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  212.719795][ T7321] loop1: detected capacity change from 0 to 32768
[  212.744742][ T7321] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  213.194386][ T5779] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  213.440427][ T7338] FAULT_INJECTION: forcing a failure.
[  213.440427][ T7338] name failslab, interval 1, probability 0, space 0, times 0
[  214.561879][    T8] usb 1-1: USB disconnect, device number 17
[  214.609361][ T7338] CPU: 0 PID: 7338 Comm: syz.1.359 Not tainted syzkaller #0
[  214.616751][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  214.626852][ T7338] Call Trace:
[  214.630160][ T7338]  <TASK>
[  214.633090][ T7338]  dump_stack_lvl+0x18c/0x250
[  214.637871][ T7338]  ? show_regs_print_info+0x20/0x20
[  214.643072][ T7338]  ? load_image+0x420/0x420
[  214.647576][ T7338]  ? __might_sleep+0xe0/0xe0
[  214.652202][ T7338]  ? __lock_acquire+0x7d40/0x7d40
[  214.657365][ T7338]  should_fail_ex+0x39d/0x4d0
[  214.662079][ T7338]  should_failslab+0x9/0x20
[  214.666700][ T7338]  slab_pre_alloc_hook+0x59/0x310
[  214.671735][ T7338]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  214.677575][ T7338]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  214.683464][ T7338]  __kmem_cache_alloc_node+0x53/0x250
[  214.688869][ T7338]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  214.694596][ T7338]  __kmalloc+0xa4/0x230
[  214.698941][ T7338]  tomoyo_realpath_from_path+0xe3/0x5d0
[  214.704498][ T7338]  tomoyo_path_number_perm+0x248/0x620
[  214.710144][ T7338]  ? tomoyo_path_number_perm+0x217/0x620
[  214.715816][ T7338]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  214.721299][ T7338]  ? ksys_write+0x1c4/0x260
[  214.725826][ T7338]  ? __fget_files+0x28/0x4b0
[  214.730434][ T7338]  ? __fget_files+0x28/0x4b0
[  214.735028][ T7338]  security_file_ioctl+0x70/0xa0
[  214.739972][ T7338]  __se_sys_ioctl+0x48/0x170
[  214.744905][ T7338]  do_syscall_64+0x55/0xa0
[  214.749317][ T7338]  ? clear_bhb_loop+0x40/0x90
[  214.753994][ T7338]  ? clear_bhb_loop+0x40/0x90
[  214.759115][ T7338]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.765019][ T7338] RIP: 0033:0x7fe33e99c819
[  214.769430][ T7338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.789486][ T7338] RSP: 002b:00007fe33f7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  214.797906][ T7338] RAX: ffffffffffffffda RBX: 00007fe33ec15fa0 RCX: 00007fe33e99c819
[  214.805881][ T7338] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008
[  214.814020][ T7338] RBP: 00007fe33f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  214.821986][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.830039][ T7338] R13: 00007fe33ec16038 R14: 00007fe33ec15fa0 R15: 00007ffc137d5408
[  214.838019][ T7338]  </TASK>
[  214.889178][ T7338] ERROR: Out of memory at tomoyo_realpath_from_path.
[  215.205041][ T7347] netlink: 'syz.3.362': attribute type 19 has an invalid length.
[  215.237963][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'.
[  215.263899][ T7347] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  215.273347][ T7347] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  215.282361][ T7347] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  215.291158][ T7347] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.355288][ T7347] netlink: 'syz.3.362': attribute type 19 has an invalid length.
[  215.457968][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'.
[  215.585028][ T7354] loop1: detected capacity change from 0 to 32768
[  215.594538][ T7354] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  215.787969][ T5779] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  217.213084][ T7370] FAULT_INJECTION: forcing a failure.
[  217.213084][ T7370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.252354][ T7370] CPU: 1 PID: 7370 Comm: syz.1.368 Not tainted syzkaller #0
[  217.259709][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  217.270494][ T7370] Call Trace:
[  217.273799][ T7370]  <TASK>
[  217.276738][ T7370]  dump_stack_lvl+0x18c/0x250
[  217.281455][ T7370]  ? show_regs_print_info+0x20/0x20
[  217.286762][ T7370]  ? load_image+0x420/0x420
[  217.291293][ T7370]  ? __lock_acquire+0x7d40/0x7d40
[  217.296344][ T7370]  ? snprintf+0xe9/0x140
[  217.300609][ T7370]  should_fail_ex+0x39d/0x4d0
[  217.305320][ T7370]  _copy_to_user+0x2f/0xa0
[  217.309767][ T7370]  simple_read_from_buffer+0xe7/0x150
[  217.315260][ T7370]  proc_fail_nth_read+0x1e8/0x260
[  217.321014][ T7370]  ? proc_fault_inject_write+0x360/0x360
[  217.326678][ T7370]  ? fsnotify_perm+0x271/0x5e0
[  217.331450][ T7370]  ? proc_fault_inject_write+0x360/0x360
[  217.337173][ T7370]  vfs_read+0x28b/0x970
[  217.341341][ T7370]  ? kernel_read+0x1e0/0x1e0
[  217.345947][ T7370]  ? __fget_files+0x28/0x4b0
[  217.350546][ T7370]  ? __fget_files+0x28/0x4b0
[  217.355223][ T7370]  ? __fget_files+0x43d/0x4b0
[  217.360004][ T7370]  ? __fdget_pos+0x2a3/0x330
[  217.364676][ T7370]  ? ksys_read+0x75/0x260
[  217.369008][ T7370]  ksys_read+0x150/0x260
[  217.373267][ T7370]  ? vfs_write+0x990/0x990
[  217.377679][ T7370]  ? lockdep_hardirqs_on+0x98/0x150
[  217.382881][ T7370]  do_syscall_64+0x55/0xa0
[  217.387374][ T7370]  ? clear_bhb_loop+0x40/0x90
[  217.392228][ T7370]  ? clear_bhb_loop+0x40/0x90
[  217.396906][ T7370]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  217.402892][ T7370] RIP: 0033:0x7fe33e95d04e
[  217.407760][ T7370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  217.427484][ T7370] RSP: 002b:00007fe33f7b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  217.436084][ T7370] RAX: ffffffffffffffda RBX: 00007fe33f7b46c0 RCX: 00007fe33e95d04e
[  217.444627][ T7370] RDX: 000000000000000f RSI: 00007fe33f7b40a0 RDI: 0000000000000004
[  217.452712][ T7370] RBP: 00007fe33f7b4090 R08: 0000000000000000 R09: 0000000000000000
[  217.460735][ T7370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.468705][ T7370] R13: 00007fe33ec16128 R14: 00007fe33ec16090 R15: 00007ffc137d5408
[  217.476708][ T7370]  </TASK>
[  217.931392][ T7379] FAULT_INJECTION: forcing a failure.
[  217.931392][ T7379] name failslab, interval 1, probability 0, space 0, times 0
[  217.946081][ T7364] loop3: detected capacity change from 0 to 32768
[  217.958067][ T7379] CPU: 0 PID: 7379 Comm: syz.1.370 Not tainted syzkaller #0
[  217.965461][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  217.975556][ T7379] Call Trace:
[  217.978852][ T7379]  <TASK>
[  217.981808][ T7379]  dump_stack_lvl+0x18c/0x250
[  217.986638][ T7379]  ? show_regs_print_info+0x20/0x20
[  217.991965][ T7379]  ? load_image+0x420/0x420
[  217.996509][ T7379]  ? __might_sleep+0xe0/0xe0
[  218.001136][ T7379]  ? __lock_acquire+0x7d40/0x7d40
[  218.006376][ T7379]  should_fail_ex+0x39d/0x4d0
[  218.011096][ T7379]  should_failslab+0x9/0x20
[  218.015716][ T7379]  slab_pre_alloc_hook+0x59/0x310
[  218.020791][ T7379]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  218.026538][ T7379]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  218.032293][ T7379]  __kmem_cache_alloc_node+0x53/0x250
[  218.037714][ T7379]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  218.043552][ T7379]  __kmalloc+0xa4/0x230
[  218.047750][ T7379]  tomoyo_realpath_from_path+0xe3/0x5d0
[  218.053435][ T7379]  tomoyo_path_number_perm+0x248/0x620
[  218.058967][ T7379]  ? tomoyo_path_number_perm+0x217/0x620
[  218.064730][ T7379]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  218.070241][ T7379]  ? ksys_write+0x1c4/0x260
[  218.075259][ T7379]  ? __fget_files+0x28/0x4b0
[  218.080158][ T7379]  ? __fget_files+0x28/0x4b0
[  218.084913][ T7379]  security_file_ioctl+0x70/0xa0
[  218.086299][ T7364] JBD2: Ignoring recovery information on journal
[  218.089901][ T7379]  __se_sys_ioctl+0x48/0x170
[  218.089934][ T7379]  do_syscall_64+0x55/0xa0
[  218.089951][ T7379]  ? clear_bhb_loop+0x40/0x90
[  218.089977][ T7379]  ? clear_bhb_loop+0x40/0x90
[  218.089995][ T7379]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  218.090012][ T7379] RIP: 0033:0x7fe33e99c819
[  218.090030][ T7379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.090044][ T7379] RSP: 002b:00007fe33f7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  218.090065][ T7379] RAX: ffffffffffffffda RBX: 00007fe33ec15fa0 RCX: 00007fe33e99c819
[  218.090078][ T7379] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000003
[  218.090088][ T7379] RBP: 00007fe33f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  218.090099][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.090109][ T7379] R13: 00007fe33ec16038 R14: 00007fe33ec15fa0 R15: 00007ffc137d5408
[  218.090134][ T7379]  </TASK>
[  218.247333][ T7379] ERROR: Out of memory at tomoyo_realpath_from_path.
[  218.272455][ T7364] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  218.860907][ T6420] ocfs2: Unmounting device (7,3) on (node local)
[  219.273736][ T7417] loop3: detected capacity change from 0 to 1024
[  219.293045][ T7417] EXT4-fs: Ignoring removed bh option
[  219.332931][ T7417] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  219.393920][ T5779] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  219.457993][ T1199] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  219.660215][ T1199] usb 1-1: Using ep0 maxpacket: 8
[  219.672424][ T1199] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  219.690139][ T1199] usb 1-1: config 0 has no interface number 0
[  219.707242][ T1199] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  219.728113][ T1199] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  219.749757][ T1199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.772155][ T1199] usb 1-1: config 0 descriptor??
[  219.828353][ T1199] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  221.379666][ T7431] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  221.636216][    T8] usb 1-1: USB disconnect, device number 18
[  222.098505][ T7452] loop3: detected capacity change from 0 to 1024
[  222.119809][ T7452] hfsplus: unable to parse mount options
[  222.892660][ T7456] loop0: detected capacity change from 0 to 1024
[  223.035955][ T7461] 8021q: VLANs not supported on gre0
[  223.898646][ T7472] FAULT_INJECTION: forcing a failure.
[  223.898646][ T7472] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.932759][ T7472] CPU: 0 PID: 7472 Comm: syz.1.388 Not tainted syzkaller #0
[  223.940201][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  223.950598][ T7472] Call Trace:
[  223.953907][ T7472]  <TASK>
[  223.956855][ T7472]  dump_stack_lvl+0x18c/0x250
[  223.961591][ T7472]  ? show_regs_print_info+0x20/0x20
[  223.966856][ T7472]  ? load_image+0x420/0x420
[  223.971430][ T7472]  ? __might_fault+0xaa/0x120
[  223.976173][ T7472]  ? __lock_acquire+0x7d40/0x7d40
[  223.981245][ T7472]  should_fail_ex+0x39d/0x4d0
[  223.985995][ T7472]  _copy_from_user+0x2f/0xe0
[  223.990809][ T7472]  ___sys_sendmsg+0x1c7/0x360
[  223.995527][ T7472]  ? get_pid_task+0x20/0x1e0
[  224.000264][ T7472]  ? __sys_sendmsg+0x2a0/0x2a0
[  224.005096][ T7472]  ? __lock_acquire+0x7d40/0x7d40
[  224.010186][ T7472]  __se_sys_sendmsg+0x1c2/0x2b0
[  224.015073][ T7472]  ? __x64_sys_sendmsg+0x80/0x80
[  224.020276][ T7472]  ? lockdep_hardirqs_on+0x98/0x150
[  224.025511][ T7472]  do_syscall_64+0x55/0xa0
[  224.029932][ T7472]  ? clear_bhb_loop+0x40/0x90
[  224.034612][ T7472]  ? clear_bhb_loop+0x40/0x90
[  224.039439][ T7472]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.045496][ T7472] RIP: 0033:0x7fe33e99c819
[  224.049929][ T7472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.070208][ T7472] RSP: 002b:00007fe33f7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.079823][ T7472] RAX: ffffffffffffffda RBX: 00007fe33ec15fa0 RCX: 00007fe33e99c819
[  224.088008][ T7472] RDX: 0000000004000000 RSI: 0000200000009b40 RDI: 0000000000000003
[  224.096059][ T7472] RBP: 00007fe33f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  224.104078][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.112097][ T7472] R13: 00007fe33ec16038 R14: 00007fe33ec15fa0 R15: 00007ffc137d5408
[  224.120122][ T7472]  </TASK>
[  224.193787][ T7477] FAULT_INJECTION: forcing a failure.
[  224.193787][ T7477] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.213636][ T7477] CPU: 1 PID: 7477 Comm: syz.0.392 Not tainted syzkaller #0
[  224.221011][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  224.231224][ T7477] Call Trace:
[  224.234537][ T7477]  <TASK>
[  224.237947][ T7477]  dump_stack_lvl+0x18c/0x250
[  224.242706][ T7477]  ? show_regs_print_info+0x20/0x20
[  224.248058][ T7477]  ? load_image+0x420/0x420
[  224.252620][ T7477]  ? __might_fault+0xaa/0x120
[  224.257380][ T7477]  ? __lock_acquire+0x7d40/0x7d40
[  224.262566][ T7477]  should_fail_ex+0x39d/0x4d0
[  224.267669][ T7477]  _copy_from_user+0x2f/0xe0
[  224.272424][ T7477]  ___sys_sendmsg+0x1c7/0x360
[  224.277783][ T7477]  ? get_pid_task+0x20/0x1e0
[  224.282510][ T7477]  ? __sys_sendmsg+0x2a0/0x2a0
[  224.287355][ T7477]  ? __lock_acquire+0x7d40/0x7d40
[  224.292567][ T7477]  __se_sys_sendmsg+0x1c2/0x2b0
[  224.297576][ T7477]  ? __x64_sys_sendmsg+0x80/0x80
[  224.302595][ T7477]  ? lockdep_hardirqs_on+0x98/0x150
[  224.307861][ T7477]  do_syscall_64+0x55/0xa0
[  224.312327][ T7477]  ? clear_bhb_loop+0x40/0x90
[  224.317046][ T7477]  ? clear_bhb_loop+0x40/0x90
[  224.321776][ T7477]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.327713][ T7477] RIP: 0033:0x7f86d979c819
[  224.332178][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.351919][ T7477] RSP: 002b:00007f86da5c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.360771][ T7477] RAX: ffffffffffffffda RBX: 00007f86d9a15fa0 RCX: 00007f86d979c819
[  224.368869][ T7477] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003
[  224.377047][ T7477] RBP: 00007f86da5c5090 R08: 0000000000000000 R09: 0000000000000000
[  224.385075][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.393084][ T7477] R13: 00007f86d9a16038 R14: 00007f86d9a15fa0 R15: 00007ffda1d625d8
[  224.401213][ T7477]  </TASK>
[  224.608863][ T7487] FAULT_INJECTION: forcing a failure.
[  224.608863][ T7487] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.729170][ T7487] CPU: 0 PID: 7487 Comm: syz.1.394 Not tainted syzkaller #0
[  224.736569][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  224.746816][ T7487] Call Trace:
[  224.750151][ T7487]  <TASK>
[  224.753114][ T7487]  dump_stack_lvl+0x18c/0x250
[  224.757879][ T7487]  ? show_regs_print_info+0x20/0x20
[  224.763400][ T7487]  ? load_image+0x420/0x420
[  224.768111][ T7487]  ? __might_fault+0xaa/0x120
[  224.773017][ T7487]  ? __lock_acquire+0x7d40/0x7d40
[  224.778192][ T7487]  should_fail_ex+0x39d/0x4d0
[  224.782945][ T7487]  _copy_from_user+0x2f/0xe0
[  224.787604][ T7487]  __sys_bpf+0x23e/0x890
[  224.792085][ T7487]  ? bpf_link_show_fdinfo+0x390/0x390
[  224.798009][ T7487]  ? lock_chain_count+0x20/0x20
[  224.803118][ T7487]  __x64_sys_bpf+0x7c/0x90
[  224.807603][ T7487]  do_syscall_64+0x55/0xa0
[  224.812425][ T7487]  ? clear_bhb_loop+0x40/0x90
[  224.817353][ T7487]  ? clear_bhb_loop+0x40/0x90
[  224.822098][ T7487]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.828036][ T7487] RIP: 0033:0x7fe33e99c819
[  224.832870][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.852880][ T7487] RSP: 002b:00007fe33f7b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  224.861346][ T7487] RAX: ffffffffffffffda RBX: 00007fe33ec16090 RCX: 00007fe33e99c819
[  224.869363][ T7487] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 0000000000000019
[  224.877609][ T7487] RBP: 00007fe33f7b4090 R08: 0000000000000000 R09: 0000000000000000
[  224.885616][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.893651][ T7487] R13: 00007fe33ec16128 R14: 00007fe33ec16090 R15: 00007ffc137d5408
[  224.901773][ T7487]  </TASK>
[  226.971639][ T7478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  227.177319][ T7523] FAULT_INJECTION: forcing a failure.
[  227.177319][ T7523] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  227.224071][ T7523] CPU: 0 PID: 7523 Comm: syz.1.399 Not tainted syzkaller #0
[  227.231462][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  227.241556][ T7523] Call Trace:
[  227.244863][ T7523]  <TASK>
[  227.247819][ T7523]  dump_stack_lvl+0x18c/0x250
[  227.252550][ T7523]  ? show_regs_print_info+0x20/0x20
[  227.258009][ T7523]  ? load_image+0x420/0x420
[  227.262552][ T7523]  ? __lock_acquire+0x7d40/0x7d40
[  227.267626][ T7523]  should_fail_ex+0x39d/0x4d0
[  227.272358][ T7523]  prepare_alloc_pages+0x1e2/0x5f0
[  227.277515][ T7523]  __alloc_pages+0x134/0x460
[  227.279280][ T7530] FAULT_INJECTION: forcing a failure.
[  227.279280][ T7530] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.282123][ T7523]  ? zone_statistics+0x170/0x170
[  227.300239][ T7523]  ? handle_mm_fault+0xe7/0x4c00
[  227.305207][ T7523]  __folio_alloc+0x10/0x20
[  227.309641][ T7523]  vma_alloc_folio+0x47a/0x8f0
[  227.314451][ T7523]  handle_mm_fault+0x1b3b/0x4c00
[  227.319425][ T7523]  ? handle_mm_fault+0xe7/0x4c00
[  227.324405][ T7523]  ? lock_vma_under_rcu+0x549/0x680
[  227.329624][ T7523]  ? numa_migrate_prep+0x350/0x350
[  227.334821][ T7523]  ? do_user_addr_fault+0x1c3/0x12c0
[  227.340141][ T7523]  do_user_addr_fault+0xac8/0x12c0
[  227.345268][ T7523]  ? rcu_is_watching+0x15/0xb0
[  227.350137][ T7523]  exc_page_fault+0x64/0x100
[  227.354748][ T7523]  asm_exc_page_fault+0x26/0x30
[  227.359612][ T7523] RIP: 0033:0x7fe33e85dfcb
[  227.364032][ T7523] Code: 00 00 00 48 8d 3d bd a6 1a 00 48 89 c1 31 c0 e8 5b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d f1 a6 1a 00 48 89 34 24 48 8b 14 24 48 8b
[  227.383657][ T7523] RSP: 002b:00007fe33f7d3fa0 EFLAGS: 00010206
[  227.389737][ T7523] RAX: 0000000000000000 RBX: 00007fe33ec15fa0 RCX: 0000000000000000
[  227.397809][ T7523] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000040
[  227.405803][ T7523] RBP: 00007fe33f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  227.413801][ T7523] R10: 0000200000000040 R11: 0000000000000000 R12: 0000000000000001
[  227.421784][ T7523] R13: 00007fe33ec16038 R14: 00007fe33ec15fa0 R15: 00007ffc137d5408
[  227.429778][ T7523]  </TASK>
[  227.432799][ T7530] CPU: 1 PID: 7530 Comm: syz.0.403 Not tainted syzkaller #0
[  227.440131][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  227.450208][ T7530] Call Trace:
[  227.453492][ T7530]  <TASK>
[  227.456419][ T7530]  dump_stack_lvl+0x18c/0x250
[  227.461113][ T7530]  ? show_regs_print_info+0x20/0x20
[  227.466310][ T7530]  ? load_image+0x420/0x420
[  227.470813][ T7530]  ? __might_fault+0xaa/0x120
[  227.475486][ T7530]  ? __lock_acquire+0x7d40/0x7d40
[  227.480514][ T7530]  should_fail_ex+0x39d/0x4d0
[  227.485242][ T7530]  _copy_from_user+0x2f/0xe0
[  227.489885][ T7530]  ___sys_sendmsg+0x1c7/0x360
[  227.494588][ T7530]  ? get_pid_task+0x20/0x1e0
[  227.499224][ T7530]  ? __sys_sendmsg+0x2a0/0x2a0
[  227.504030][ T7530]  ? __lock_acquire+0x7d40/0x7d40
[  227.509160][ T7530]  __se_sys_sendmsg+0x1c2/0x2b0
[  227.514020][ T7530]  ? __x64_sys_sendmsg+0x80/0x80
[  227.518987][ T7530]  ? lockdep_hardirqs_on+0x98/0x150
[  227.524235][ T7530]  do_syscall_64+0x55/0xa0
[  227.528672][ T7530]  ? clear_bhb_loop+0x40/0x90
[  227.533359][ T7530]  ? clear_bhb_loop+0x40/0x90
[  227.538039][ T7530]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.544155][ T7530] RIP: 0033:0x7f86d979c819
[  227.548685][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.568413][ T7530] RSP: 002b:00007f86da5c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.576989][ T7530] RAX: ffffffffffffffda RBX: 00007f86d9a15fa0 RCX: 00007f86d979c819
[  227.584965][ T7530] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  227.593037][ T7530] RBP: 00007f86da5c5090 R08: 0000000000000000 R09: 0000000000000000
[  227.601003][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.608968][ T7530] R13: 00007f86d9a16038 R14: 00007f86d9a15fa0 R15: 00007ffda1d625d8
[  227.616953][ T7530]  </TASK>
[  227.622366][ T7523] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  227.772999][ T7535] syz.1.405: attempt to access beyond end of device
[  227.772999][ T7535] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  227.809245][ T7535] (syz.1.405,7535,1):ocfs2_get_sector:1770 ERROR: status = -5
[  227.824413][ T7535] (syz.1.405,7535,1):ocfs2_sb_probe:749 ERROR: status = -5
[  227.824849][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'.
[  227.832052][ T7535] (syz.1.405,7535,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  227.902008][ T7535] (syz.1.405,7535,1):ocfs2_fill_super:1178 ERROR: status = -5
[  228.057943][   T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  228.143523][ T7545] netlink: 460 bytes leftover after parsing attributes in process `syz.1.410'.
[  228.143905][ T7539] loop0: detected capacity change from 0 to 32768
[  228.159278][ T7547] netlink: 460 bytes leftover after parsing attributes in process `syz.1.410'.
[  228.188133][ T7539] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.406 (7539)
[  228.216441][ T7539] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  228.244214][ T7539] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  228.253397][ T7539] BTRFS info (device loop0): enabling disk space caching
[  228.260871][ T7539] BTRFS info (device loop0): force clearing of disk cache
[  228.268428][   T23] usb 4-1: Using ep0 maxpacket: 16
[  228.803538][   T23] usb 4-1: config 0 has no interfaces?
[  228.807960][ T7539] BTRFS error (device loop0): unrecognized mount option 'appraise'
[  228.829207][   T23] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  228.863847][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.872773][ T7539] BTRFS error (device loop0): open_ctree failed: -22
[  228.874790][ T5779] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by udevd (5779)
[  228.887273][   T23] usb 4-1: Product: syz
[  228.920271][   T23] usb 4-1: Manufacturer: syz
[  228.925427][   T23] usb 4-1: SerialNumber: syz
[  228.933945][   T23] usb 4-1: config 0 descriptor??
[  229.071515][ T7551] loop1: detected capacity change from 0 to 4096
[  229.090324][ T7551] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  229.165353][ T5770] usb 4-1: USB disconnect, device number 12
[  229.936156][ T7555] nfs: Unknown parameter 'smackfsroot'
[  230.031475][ T7551] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  230.241364][ T5763] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22.
[  230.280432][ T5763] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  230.553869][ T7562] loop0: detected capacity change from 0 to 4096
[  230.591421][ T7562] EXT4-fs: inline encryption not supported
[  230.621143][ T7562] EXT4-fs (loop0): Test dummy encryption mode enabled
[  230.714498][ T7562] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  230.723010][ T7562] System zones: 0-5
[  230.839819][ T7562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.871403][ T7576] FAULT_INJECTION: forcing a failure.
[  230.871403][ T7576] name failslab, interval 1, probability 0, space 0, times 0
[  230.932208][ T7576] CPU: 0 PID: 7576 Comm: syz.3.419 Not tainted syzkaller #0
[  230.939556][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  230.949723][ T7576] Call Trace:
[  230.953016][ T7576]  <TASK>
[  230.955964][ T7576]  dump_stack_lvl+0x18c/0x250
[  230.960861][ T7576]  ? show_regs_print_info+0x20/0x20
[  230.966095][ T7576]  ? load_image+0x420/0x420
[  230.970618][ T7576]  ? __might_sleep+0xe0/0xe0
[  230.975235][ T7576]  ? __lock_acquire+0x7d40/0x7d40
[  230.980388][ T7576]  should_fail_ex+0x39d/0x4d0
[  230.985104][ T7576]  should_failslab+0x9/0x20
[  230.989626][ T7576]  slab_pre_alloc_hook+0x59/0x310
[  230.994674][ T7576]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  231.000417][ T7576]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  231.006156][ T7576]  __kmem_cache_alloc_node+0x53/0x250
[  231.011736][ T7576]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  231.017480][ T7576]  __kmalloc+0xa4/0x230
[  231.021673][ T7576]  tomoyo_realpath_from_path+0xe3/0x5d0
[  231.027251][ T7576]  tomoyo_path_number_perm+0x248/0x620
[  231.032735][ T7576]  ? tomoyo_path_number_perm+0x217/0x620
[  231.038389][ T7576]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  231.043968][ T7576]  ? ksys_write+0x1c4/0x260
[  231.048522][ T7576]  ? __fget_files+0x28/0x4b0
[  231.053138][ T7576]  ? __fget_files+0x28/0x4b0
[  231.057755][ T7576]  security_file_ioctl+0x70/0xa0
[  231.062714][ T7576]  __se_sys_ioctl+0x48/0x170
[  231.067326][ T7576]  do_syscall_64+0x55/0xa0
[  231.071753][ T7576]  ? clear_bhb_loop+0x40/0x90
[  231.076456][ T7576]  ? clear_bhb_loop+0x40/0x90
[  231.081148][ T7576]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  231.087287][ T7576] RIP: 0033:0x7fb012f9c819
[  231.091802][ T7576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.111436][ T7576] RSP: 002b:00007fb013eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.119871][ T7576] RAX: ffffffffffffffda RBX: 00007fb013215fa0 RCX: 00007fb012f9c819
[  231.127853][ T7576] RDX: 0000000000000000 RSI: 0000000040043d0d RDI: 0000000000000003
[  231.135841][ T7576] RBP: 00007fb013eed090 R08: 0000000000000000 R09: 0000000000000000
[  231.143836][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.151832][ T7576] R13: 00007fb013216038 R14: 00007fb013215fa0 R15: 00007fffe69396a8
[  231.159847][ T7576]  </TASK>
[  231.163033][    C0] vkms_vblank_simulate: vblank timer overrun
[  231.669136][ T7572] loop1: detected capacity change from 0 to 131072
[  231.824832][ T7576] ERROR: Out of memory at tomoyo_realpath_from_path.
[  231.847792][ T7572] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4)
[  232.401317][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.666256][ T7587] loop1: detected capacity change from 0 to 2048
[  232.828833][ T7589] loop0: detected capacity change from 0 to 4096
[  232.877315][ T7589] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  232.928776][ T7589] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  232.963476][ T7589] ntfs: volume version 3.1.
[  233.004342][ T7589] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  233.045584][ T7589] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota.
[  233.087259][ T7589] ntfs: (device loop0): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  233.157962][ T7589] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  233.203846][ T7589] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  233.234666][ T7589] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  233.466626][ T7583] loop3: detected capacity change from 0 to 32768
[  233.533159][ T7583] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  233.573650][ T7583] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  233.608076][ T7583] BTRFS info (device loop3): enabling disk space caching
[  233.615181][ T7583] BTRFS info (device loop3): force clearing of disk cache
[  233.656185][ T7583] BTRFS error (device loop3): unrecognized mount option 'appraise'
[  233.684335][ T7583] BTRFS error (device loop3): open_ctree failed: -22
[  233.797536][ T5779] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by udevd (5779)
[  233.806750][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'.
[  233.876434][ T7611] FAULT_INJECTION: forcing a failure.
[  233.876434][ T7611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.963075][ T7609] bond_slave_0: entered promiscuous mode
[  233.969219][ T7609] bond_slave_1: entered promiscuous mode
[  234.007962][ T7611] CPU: 1 PID: 7611 Comm: syz.0.428 Not tainted syzkaller #0
[  234.008225][ T7609] macvtap1: entered promiscuous mode
[  234.015287][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  234.015299][ T7611] Call Trace:
[  234.015306][ T7611]  <TASK>
[  234.015314][ T7611]  dump_stack_lvl+0x18c/0x250
[  234.015346][ T7611]  ? show_regs_print_info+0x20/0x20
[  234.046851][ T7611]  ? load_image+0x420/0x420
[  234.051385][ T7611]  ? __might_fault+0xaa/0x120
[  234.056082][ T7611]  ? __lock_acquire+0x7d40/0x7d40
[  234.061131][ T7611]  should_fail_ex+0x39d/0x4d0
[  234.065842][ T7611]  _copy_from_user+0x2f/0xe0
[  234.070463][ T7611]  ___sys_sendmsg+0x1c7/0x360
[  234.075160][ T7611]  ? get_pid_task+0x20/0x1e0
[  234.077945][ T7609] bond0: entered promiscuous mode
[  234.079756][ T7611]  ? __sys_sendmsg+0x2a0/0x2a0
[  234.079795][ T7611]  ? __lock_acquire+0x7d40/0x7d40
[  234.094607][ T7611]  __se_sys_sendmsg+0x1c2/0x2b0
[  234.098387][ T7609] macvtap1: entered allmulticast mode
[  234.099482][ T7611]  ? __x64_sys_sendmsg+0x80/0x80
[  234.099520][ T7611]  ? lockdep_hardirqs_on+0x98/0x150
[  234.115057][ T7611]  do_syscall_64+0x55/0xa0
[  234.119492][ T7611]  ? clear_bhb_loop+0x40/0x90
[  234.124178][ T7611]  ? clear_bhb_loop+0x40/0x90
[  234.128851][ T7611]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  234.134811][ T7611] RIP: 0033:0x7f86d979c819
[  234.139222][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.158839][ T7611] RSP: 002b:00007f86da5a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.167252][ T7611] RAX: ffffffffffffffda RBX: 00007f86d9a16090 RCX: 00007f86d979c819
[  234.175215][ T7611] RDX: 0000000004004880 RSI: 0000200000000000 RDI: 000000000000000d
[  234.183262][ T7611] RBP: 00007f86da5a4090 R08: 0000000000000000 R09: 0000000000000000
[  234.191226][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.199189][ T7611] R13: 00007f86d9a16128 R14: 00007f86d9a16090 R15: 00007ffda1d625d8
[  234.207166][ T7611]  </TASK>
[  234.223049][ T7609] bond0: entered allmulticast mode
[  234.246125][ T7609] bond_slave_0: entered allmulticast mode
[  234.276649][ T7609] bond_slave_1: entered allmulticast mode
[  234.298472][ T7609] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  234.449429][ T7603] loop1: detected capacity change from 0 to 32768
[  234.484471][ T7603] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  234.509517][ T7621] FAULT_INJECTION: forcing a failure.
[  234.509517][ T7621] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.548117][ T7603] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  234.553808][ T7621] CPU: 0 PID: 7621 Comm: syz.3.431 Not tainted syzkaller #0
[  234.564142][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  234.574401][ T7621] Call Trace:
[  234.577731][ T7621]  <TASK>
[  234.578680][ T7603] BTRFS info (device loop1): enabling disk space caching
[  234.580734][ T7621]  dump_stack_lvl+0x18c/0x250
[  234.592456][ T7621]  ? show_regs_print_info+0x20/0x20
[  234.597774][ T7621]  ? load_image+0x420/0x420
[  234.602307][ T7621]  ? __might_fault+0xaa/0x120
[  234.607013][ T7621]  ? __lock_acquire+0x7d40/0x7d40
[  234.612070][ T7621]  should_fail_ex+0x39d/0x4d0
[  234.616792][ T7621]  _copy_from_user+0x2f/0xe0
[  234.620871][ T7603] BTRFS info (device loop1): force clearing of disk cache
[  234.621467][ T7621]  ___sys_sendmsg+0x1c7/0x360
[  234.633295][ T7621]  ? get_pid_task+0x20/0x1e0
[  234.638013][ T7621]  ? __sys_sendmsg+0x2a0/0x2a0
[  234.642819][ T7621]  ? __lock_acquire+0x7d40/0x7d40
[  234.646529][ T7603] BTRFS error (device loop1): unrecognized mount option 'appraise'
[  234.648086][ T7621]  __se_sys_sendmsg+0x1c2/0x2b0
[  234.648112][ T7621]  ? __x64_sys_sendmsg+0x80/0x80
[  234.648140][ T7621]  ? lockdep_hardirqs_on+0x98/0x150
[  234.648161][ T7621]  do_syscall_64+0x55/0xa0
[  234.648175][ T7621]  ? clear_bhb_loop+0x40/0x90
[  234.680694][ T7621]  ? clear_bhb_loop+0x40/0x90
[  234.685675][ T7621]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  234.691708][ T7621] RIP: 0033:0x7fb012f9c819
[  234.696141][ T7621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.716185][ T7621] RSP: 002b:00007fb013eed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.724866][ T7621] RAX: ffffffffffffffda RBX: 00007fb013215fa0 RCX: 00007fb012f9c819
[  234.732837][ T7621] RDX: 0000000004000000 RSI: 0000200000009b40 RDI: 0000000000000003
[  234.740884][ T7621] RBP: 00007fb013eed090 R08: 0000000000000000 R09: 0000000000000000
[  234.748967][ T7621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.756972][ T7621] R13: 00007fb013216038 R14: 00007fb013215fa0 R15: 00007fffe69396a8
[  234.765178][ T7621]  </TASK>
[  234.768290][    C0] vkms_vblank_simulate: vblank timer overrun
[  234.778688][ T7603] BTRFS error (device loop1): open_ctree failed: -22
[  235.183923][ T7628] loop3: detected capacity change from 0 to 512
[  235.208551][ T7628] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  235.302563][ T7628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=801cc118, mo2=0006]
[  235.340695][ T7628] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.433: Invalid inode bitmap blk 4 in block_group 0
[  235.357961][ T1199] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  235.444235][ T7628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.503444][ T7628] EXT4-fs warning (device loop3): ext4_resize_begin:74: won't resize using backup superblock at 1
[  235.556684][ T7638] EXT4-fs warning (device loop3): ext4_resize_begin:74: won't resize using backup superblock at 1
[  235.568335][ T1199] usb 1-1: Using ep0 maxpacket: 8
[  235.597628][ T1199] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  235.653269][ T1199] usb 1-1: config 0 has no interface number 0
[  235.717888][ T1199] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  235.756737][ T1199] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  235.772835][ T1199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.785836][ T1199] usb 1-1: config 0 descriptor??
[  235.826717][ T6420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.844671][ T1199] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  237.196282][ T1199] usb 1-1: USB disconnect, device number 19
[  237.349244][ T7653] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  238.169208][ T7662] loop0: detected capacity change from 0 to 512
[  238.185478][ T7662] EXT4-fs: Ignoring removed bh option
[  238.194223][ T7662] EXT4-fs (loop0): bad s_min_extra_isize: 172
[  238.248221][ T7665] loop3: detected capacity change from 0 to 128
[  238.270707][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'.
[  238.284793][ T7662] dummy0: entered promiscuous mode
[  238.290513][ T7662] macvtap2: entered promiscuous mode
[  238.295964][ T7662] macvtap2: entered allmulticast mode
[  238.301410][ T7662] dummy0: entered allmulticast mode
[  238.318295][ T7662] macvtap2: left promiscuous mode
[  238.323487][ T7662] macvtap2: left allmulticast mode
[  238.328660][ T7662] dummy0: left allmulticast mode
[  238.337234][ T7665] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  238.375877][ T5779] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  238.436032][ T7665] warn_alloc: 1 callbacks suppressed
[  238.436052][ T7665] syz.3.441: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  238.558536][ T7665] CPU: 1 PID: 7665 Comm: syz.3.441 Not tainted syzkaller #0
[  238.566511][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  238.576780][ T7665] Call Trace:
[  238.580104][ T7665]  <TASK>
[  238.583079][ T7665]  dump_stack_lvl+0x18c/0x250
[  238.588179][ T7665]  ? show_regs_print_info+0x20/0x20
[  238.593609][ T7665]  ? load_image+0x420/0x420
[  238.598278][ T7665]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  238.604749][ T7665]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  238.611356][ T7665]  warn_alloc+0x246/0x340
[  238.615737][ T7665]  ? stack_trace_save+0xaa/0x100
[  238.620714][ T7665]  ? zone_watermark_ok_safe+0x230/0x230
[  238.626498][ T7665]  ? kasan_set_track+0x5f/0x70
[  238.631298][ T7665]  ? kasan_set_track+0x4e/0x70
[  238.636247][ T7665]  ? __kasan_kmalloc+0x8f/0xa0
[  238.641043][ T7665]  ? xsk_init_queue+0xad/0x100
[  238.646007][ T7665]  ? xsk_setsockopt+0x42e/0x760
[  238.650883][ T7665]  ? do_sock_setsockopt+0x175/0x1a0
[  238.656535][ T7665]  ? __x64_sys_setsockopt+0x182/0x200
[  238.661961][ T7665]  __vmalloc_node_range+0x126/0x1330
[  238.667417][ T7665]  ? free_vm_area+0x50/0x50
[  238.672159][ T7665]  vmalloc_user+0x74/0x80
[  238.676594][ T7665]  ? xskq_create+0xbf/0x170
[  238.681195][ T7665]  xskq_create+0xbf/0x170
[  238.685541][ T7665]  xsk_init_queue+0xad/0x100
[  238.690251][ T7665]  xsk_setsockopt+0x42e/0x760
[  238.695182][ T7665]  ? xsk_poll+0x680/0x680
[  238.699733][ T7665]  ? __fget_files+0x28/0x4b0
[  238.704424][ T7665]  ? __fget_files+0x28/0x4b0
[  238.709027][ T7665]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  238.714599][ T7665]  ? security_socket_setsockopt+0x7e/0xa0
[  238.720900][ T7665]  ? xsk_poll+0x680/0x680
[  238.725939][ T7665]  do_sock_setsockopt+0x175/0x1a0
[  238.731169][ T7665]  ? __fdget+0x180/0x210
[  238.735422][ T7665]  __x64_sys_setsockopt+0x182/0x200
[  238.740626][ T7665]  do_syscall_64+0x55/0xa0
[  238.745119][ T7665]  ? clear_bhb_loop+0x40/0x90
[  238.749831][ T7665]  ? clear_bhb_loop+0x40/0x90
[  238.754542][ T7665]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  238.760444][ T7665] RIP: 0033:0x7fb012f9c819
[  238.764946][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.784808][ T7665] RSP: 002b:00007fb013eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  238.793238][ T7665] RAX: ffffffffffffffda RBX: 00007fb013215fa0 RCX: 00007fb012f9c819
[  238.801214][ T7665] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  238.809181][ T7665] RBP: 00007fb013032c91 R08: 0000000000000004 R09: 0000000000000000
[  238.817173][ T7665] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.825295][ T7665] R13: 00007fb013216038 R14: 00007fb013215fa0 R15: 00007fffe69396a8
[  238.833496][ T7665]  </TASK>
[  238.908026][ T7665] Mem-Info:
[  238.911219][ T7665] active_anon:14857 inactive_anon:0 isolated_anon:0
[  238.911219][ T7665]  active_file:24822 inactive_file:40088 isolated_file:0
[  238.911219][ T7665]  unevictable:768 dirty:150 writeback:0
[  238.911219][ T7665]  slab_reclaimable:10755 slab_unreclaimable:93555
[  238.911219][ T7665]  mapped:26154 shmem:10230 pagetables:647
[  238.911219][ T7665]  sec_pagetables:0 bounce:0
[  238.911219][ T7665]  kernel_misc_reclaimable:0
[  238.911219][ T7665]  free:1323216 free_pcp:7807 free_cma:0
[  238.979435][ T7665] Node 0 active_anon:57628kB inactive_anon:0kB active_file:99288kB inactive_file:160148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104616kB dirty:596kB writeback:0kB shmem:37684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10588kB pagetables:2488kB sec_pagetables:0kB all_unreclaimable? no
[  239.108423][ T7665] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  239.204608][ T7665] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  239.293139][ T7665] lowmem_reserve[]: 0 2521 2522 2522 2522
[  239.317939][ T7665] Node 0 DMA32 free:1394248kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:37188kB inactive_anon:0kB active_file:99288kB inactive_file:159324kB unevictable:1536kB writepending:596kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:22116kB local_pcp:19420kB free_cma:0kB
[  239.416627][ T7665] lowmem_reserve[]: 0 0 0 0 0
[  239.444708][ T7665] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  239.507883][ T7665] lowmem_reserve[]: 0 0 0 0 0
[  239.543886][ T7665] Node 1 Normal free:3894876kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19616kB local_pcp:11360kB free_cma:0kB
[  239.575588][ T7665] lowmem_reserve[]: 0 0 0 0 0
[  239.580767][ T7665] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  239.593621][ T7665] Node 0 DMA32: 1230*4kB (UME) 1641*8kB (UME) 990*16kB (UME) 656*32kB (UME) 103*64kB (UME) 58*128kB (UM) 58*256kB (UM) 36*512kB (M) 18*1024kB (ME) 14*2048kB (UM) 311*4096kB (UM) = 1423136kB
[  239.612649][ T7665] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  239.624473][ T7665] Node 1 Normal: 245*4kB (UME) 55*8kB (UME) 35*16kB (UME) 99*32kB (UME) 33*64kB (UME) 6*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 948*4096kB (M) = 3894876kB
[  239.643355][ T7665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  239.653173][ T7665] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  239.662676][ T7665] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  239.706740][ T7665] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  239.716171][ T7665] 66241 total pagecache pages
[  239.720938][ T7665] 0 pages in swap cache
[  239.725112][ T7665] Free swap  = 124984kB
[  239.729379][ T7665] Total swap = 124996kB
[  239.733586][ T7665] 2097051 pages RAM
[  239.738443][ T7665] 0 pages HighMem/MovableOnly
[  239.743484][ T7665] 416926 pages reserved
[  239.748369][ T7665] 0 pages cma reserved
[  239.879052][ T7702] loop1: detected capacity change from 0 to 256
[  239.889523][ T7702] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  239.906800][   T28] audit: type=1800 audit(1775887790.927:20): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.455" name="bus" dev="loop1" ino=1048627 res=0 errno=0
[  240.001350][ T7708] loop0: detected capacity change from 0 to 128
[  240.028016][ T7708] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  242.040821][ T7716] xt_hashlimit: max too large, truncated to 1048576
[  242.271185][ T7718] loop1: detected capacity change from 0 to 4096
[  242.313802][ T7718] EXT4-fs: inline encryption not supported
[  244.054758][ T7718] EXT4-fs (loop1): Test dummy encryption mode enabled
[  244.116911][ T7718] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  244.178238][ T7718] System zones: 0-5
[  244.211957][ T7718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.369957][ T7732] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  244.436709][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'.
[  244.497286][ T7732] vlan2: entered promiscuous mode
[  244.502525][ T7732] batadv0: entered promiscuous mode
[  244.544706][ T7739] FAULT_INJECTION: forcing a failure.
[  244.544706][ T7739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  244.652110][ T7739] CPU: 0 PID: 7739 Comm: syz.0.466 Not tainted syzkaller #0
[  244.659465][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  244.669549][ T7739] Call Trace:
[  244.672918][ T7739]  <TASK>
[  244.675873][ T7739]  dump_stack_lvl+0x18c/0x250
[  244.680577][ T7739]  ? show_regs_print_info+0x20/0x20
[  244.685799][ T7739]  ? load_image+0x420/0x420
[  244.690322][ T7739]  ? __might_fault+0xaa/0x120
[  244.695009][ T7739]  ? __lock_acquire+0x7d40/0x7d40
[  244.700049][ T7739]  should_fail_ex+0x39d/0x4d0
[  244.704750][ T7739]  _copy_from_user+0x2f/0xe0
[  244.709359][ T7739]  ___sys_sendmsg+0x1c7/0x360
[  244.714045][ T7739]  ? get_pid_task+0x20/0x1e0
[  244.718659][ T7739]  ? __sys_sendmsg+0x2a0/0x2a0
[  244.723464][ T7739]  ? __lock_acquire+0x7d40/0x7d40
[  244.728534][ T7739]  __se_sys_sendmsg+0x1c2/0x2b0
[  244.733464][ T7739]  ? __x64_sys_sendmsg+0x80/0x80
[  244.738438][ T7739]  ? lockdep_hardirqs_on+0x98/0x150
[  244.743662][ T7739]  do_syscall_64+0x55/0xa0
[  244.748089][ T7739]  ? clear_bhb_loop+0x40/0x90
[  244.752777][ T7739]  ? clear_bhb_loop+0x40/0x90
[  244.757472][ T7739]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  244.763547][ T7739] RIP: 0033:0x7f86d979c819
[  244.767973][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.787602][ T7739] RSP: 002b:00007f86da5c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  244.796139][ T7739] RAX: ffffffffffffffda RBX: 00007f86d9a15fa0 RCX: 00007f86d979c819
[  244.804131][ T7739] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000015
[  244.812120][ T7739] RBP: 00007f86da5c5090 R08: 0000000000000000 R09: 0000000000000000
[  244.820141][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.828223][ T7739] R13: 00007f86d9a16038 R14: 00007f86d9a15fa0 R15: 00007ffda1d625d8
[  244.836239][ T7739]  </TASK>
[  245.179310][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.954781][ T7746] loop3: detected capacity change from 0 to 128
[  245.990864][ T7746] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  246.265151][ T7759] loop1: detected capacity change from 0 to 256
[  246.313140][ T7759] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  246.360122][   T28] audit: type=1800 audit(1775887797.347:21): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.468" name="bus" dev="loop1" ino=1048630 res=0 errno=0
[  246.931048][ T7763] xt_hashlimit: max too large, truncated to 1048576
[  247.151747][   T51] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  248.176608][ T7776] loop0: detected capacity change from 0 to 4096
[  248.219144][ T7776] EXT4-fs: inline encryption not supported
[  248.291620][ T7776] EXT4-fs (loop0): Test dummy encryption mode enabled
[  248.356341][ T7776] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  248.410278][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'.
[  248.412843][ T7776] System zones: 0-5
[  248.435477][ T7780] bond_slave_0: entered promiscuous mode
[  248.441265][ T7780] bond_slave_1: entered promiscuous mode
[  248.458100][ T7780] macvtap1: entered promiscuous mode
[  248.463461][ T7780] bond0: entered promiscuous mode
[  248.485964][ T7776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.529299][ T7780] macvtap1: entered allmulticast mode
[  248.529444][ T7782] FAULT_INJECTION: forcing a failure.
[  248.529444][ T7782] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  248.534712][ T7780] bond0: entered allmulticast mode
[  248.534725][ T7780] bond_slave_0: entered allmulticast mode
[  248.534737][ T7780] bond_slave_1: entered allmulticast mode
[  248.627169][ T7780] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  248.647122][ T7782] CPU: 0 PID: 7782 Comm: syz.3.478 Not tainted syzkaller #0
[  248.654741][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  248.664996][ T7782] Call Trace:
[  248.668395][ T7782]  <TASK>
[  248.671355][ T7782]  dump_stack_lvl+0x18c/0x250
[  248.676101][ T7782]  ? show_regs_print_info+0x20/0x20
[  248.681327][ T7782]  ? load_image+0x420/0x420
[  248.685854][ T7782]  ? __might_fault+0xaa/0x120
[  248.690548][ T7782]  ? __lock_acquire+0x7d40/0x7d40
[  248.695594][ T7782]  should_fail_ex+0x39d/0x4d0
[  248.700304][ T7782]  _copy_from_user+0x2f/0xe0
[  248.704914][ T7782]  ___sys_sendmsg+0x1c7/0x360
[  248.709607][ T7782]  ? get_pid_task+0x20/0x1e0
[  248.714214][ T7782]  ? __sys_sendmsg+0x2a0/0x2a0
[  248.719011][ T7782]  ? __lock_acquire+0x7d40/0x7d40
[  248.724077][ T7782]  __se_sys_sendmsg+0x1c2/0x2b0
[  248.728950][ T7782]  ? __x64_sys_sendmsg+0x80/0x80
[  248.733922][ T7782]  ? lockdep_hardirqs_on+0x98/0x150
[  248.739146][ T7782]  do_syscall_64+0x55/0xa0
[  248.743574][ T7782]  ? clear_bhb_loop+0x40/0x90
[  248.748272][ T7782]  ? clear_bhb_loop+0x40/0x90
[  248.752961][ T7782]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.759011][ T7782] RIP: 0033:0x7fb012f9c819
[  248.763494][ T7782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.783432][ T7782] RSP: 002b:00007fb013ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  248.792064][ T7782] RAX: ffffffffffffffda RBX: 00007fb013216090 RCX: 00007fb012f9c819
[  248.800062][ T7782] RDX: 0000000004004880 RSI: 0000200000000000 RDI: 000000000000000d
[  248.808057][ T7782] RBP: 00007fb013ecc090 R08: 0000000000000000 R09: 0000000000000000
[  248.816022][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.824006][ T7782] R13: 00007fb013216128 R14: 00007fb013216090 R15: 00007fffe69396a8
[  248.832100][ T7782]  </TASK>
[  249.506764][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.941625][ T7797] FAULT_INJECTION: forcing a failure.
[  249.941625][ T7797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  249.980848][ T7797] CPU: 0 PID: 7797 Comm: syz.3.482 Not tainted syzkaller #0
[  249.988189][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  249.998260][ T7797] Call Trace:
[  250.001534][ T7797]  <TASK>
[  250.004457][ T7797]  dump_stack_lvl+0x18c/0x250
[  250.009147][ T7797]  ? show_regs_print_info+0x20/0x20
[  250.014354][ T7797]  ? load_image+0x420/0x420
[  250.018932][ T7797]  ? __might_fault+0xaa/0x120
[  250.023602][ T7797]  ? __lock_acquire+0x7d40/0x7d40
[  250.028621][ T7797]  should_fail_ex+0x39d/0x4d0
[  250.033325][ T7797]  _copy_from_user+0x2f/0xe0
[  250.037914][ T7797]  ___sys_sendmsg+0x1c7/0x360
[  250.042584][ T7797]  ? get_pid_task+0x20/0x1e0
[  250.047180][ T7797]  ? __sys_sendmsg+0x2a0/0x2a0
[  250.051955][ T7797]  ? __lock_acquire+0x7d40/0x7d40
[  250.056988][ T7797]  __se_sys_sendmsg+0x1c2/0x2b0
[  250.061836][ T7797]  ? __x64_sys_sendmsg+0x80/0x80
[  250.066776][ T7797]  ? lockdep_hardirqs_on+0x98/0x150
[  250.071969][ T7797]  do_syscall_64+0x55/0xa0
[  250.076374][ T7797]  ? clear_bhb_loop+0x40/0x90
[  250.081060][ T7797]  ? clear_bhb_loop+0x40/0x90
[  250.085737][ T7797]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  250.091625][ T7797] RIP: 0033:0x7fb012f9c819
[  250.096034][ T7797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.115660][ T7797] RSP: 002b:00007fb013eed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.124071][ T7797] RAX: ffffffffffffffda RBX: 00007fb013215fa0 RCX: 00007fb012f9c819
[  250.132039][ T7797] RDX: 0000000004000000 RSI: 0000200000009b40 RDI: 0000000000000003
[  250.140090][ T7797] RBP: 00007fb013eed090 R08: 0000000000000000 R09: 0000000000000000
[  250.148057][ T7797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.156119][ T7797] R13: 00007fb013216038 R14: 00007fb013215fa0 R15: 00007fffe69396a8
[  250.164098][ T7797]  </TASK>
[  250.184720][ T7798] loop0: detected capacity change from 0 to 128
[  250.199593][ T7798] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  250.245058][ T7798] warn_alloc: 2 callbacks suppressed
[  250.245074][ T7798] syz.0.481: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  250.590665][ T7798] CPU: 0 PID: 7798 Comm: syz.0.481 Not tainted syzkaller #0
[  250.598022][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  250.608192][ T7798] Call Trace:
[  250.611499][ T7798]  <TASK>
[  250.614459][ T7798]  dump_stack_lvl+0x18c/0x250
[  250.619432][ T7798]  ? show_regs_print_info+0x20/0x20
[  250.624655][ T7798]  ? load_image+0x420/0x420
[  250.629217][ T7798]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  250.635658][ T7798]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  250.642280][ T7798]  warn_alloc+0x246/0x340
[  250.646643][ T7798]  ? stack_trace_save+0xaa/0x100
[  250.651697][ T7798]  ? zone_watermark_ok_safe+0x230/0x230
[  250.657474][ T7798]  ? kasan_set_track+0x5f/0x70
[  250.662627][ T7798]  ? kasan_set_track+0x4e/0x70
[  250.667516][ T7798]  ? __kasan_kmalloc+0x8f/0xa0
[  250.672405][ T7798]  ? xsk_init_queue+0xad/0x100
[  250.677379][ T7798]  ? xsk_setsockopt+0x42e/0x760
[  250.682282][ T7798]  ? do_sock_setsockopt+0x175/0x1a0
[  250.687579][ T7798]  ? __x64_sys_setsockopt+0x182/0x200
[  250.692987][ T7798]  __vmalloc_node_range+0x126/0x1330
[  250.698335][ T7798]  ? free_vm_area+0x50/0x50
[  250.702887][ T7798]  vmalloc_user+0x74/0x80
[  250.707251][ T7798]  ? xskq_create+0xbf/0x170
[  250.711793][ T7798]  xskq_create+0xbf/0x170
[  250.716162][ T7798]  xsk_init_queue+0xad/0x100
[  250.720884][ T7798]  xsk_setsockopt+0x42e/0x760
[  250.725602][ T7798]  ? xsk_poll+0x680/0x680
[  250.729971][ T7798]  ? __fget_files+0x28/0x4b0
[  250.734620][ T7798]  ? __fget_files+0x28/0x4b0
[  250.739274][ T7798]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  250.744884][ T7798]  ? security_socket_setsockopt+0x7e/0xa0
[  250.750647][ T7798]  ? xsk_poll+0x680/0x680
[  250.755020][ T7798]  do_sock_setsockopt+0x175/0x1a0
[  250.760080][ T7798]  ? __fdget+0x180/0x210
[  250.764365][ T7798]  __x64_sys_setsockopt+0x182/0x200
[  250.769598][ T7798]  do_syscall_64+0x55/0xa0
[  250.774042][ T7798]  ? clear_bhb_loop+0x40/0x90
[  250.778754][ T7798]  ? clear_bhb_loop+0x40/0x90
[  250.783459][ T7798]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  250.789476][ T7798] RIP: 0033:0x7f86d979c819
[  250.793917][ T7798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.813559][ T7798] RSP: 002b:00007f86da5c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  250.822101][ T7798] RAX: ffffffffffffffda RBX: 00007f86d9a15fa0 RCX: 00007f86d979c819
[  250.830110][ T7798] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  250.838287][ T7798] RBP: 00007f86d9832c91 R08: 0000000000000004 R09: 0000000000000000
[  250.846389][ T7798] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.854395][ T7798] R13: 00007f86d9a16038 R14: 00007f86d9a15fa0 R15: 00007ffda1d625d8
[  250.862429][ T7798]  </TASK>
[  251.073653][ T7798] Mem-Info:
[  251.076945][ T7798] active_anon:6036 inactive_anon:0 isolated_anon:0
[  251.076945][ T7798]  active_file:24822 inactive_file:40093 isolated_file:0
[  251.076945][ T7798]  unevictable:768 dirty:347 writeback:0
[  251.076945][ T7798]  slab_reclaimable:10808 slab_unreclaimable:93042
[  251.076945][ T7798]  mapped:26144 shmem:1379 pagetables:647
[  251.076945][ T7798]  sec_pagetables:0 bounce:0
[  251.076945][ T7798]  kernel_misc_reclaimable:0
[  251.076945][ T7798]  free:1329413 free_pcp:10875 free_cma:0
[  251.189486][ T7806] xt_hashlimit: max too large, truncated to 1048576
[  251.217395][ T7798] Node 0 active_anon:24244kB inactive_anon:0kB active_file:99288kB inactive_file:160168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104576kB dirty:1384kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10840kB pagetables:2688kB sec_pagetables:0kB all_unreclaimable? no
[  251.502980][ T7798] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  251.659735][ T7798] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  251.698817][ T7798] lowmem_reserve[]: 0 2521 2522 2522 2522
[  251.704712][ T7798] Node 0 DMA32 free:1407192kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24340kB inactive_anon:0kB active_file:99288kB inactive_file:159344kB unevictable:1536kB writepending:712kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:23624kB local_pcp:6188kB free_cma:0kB
[  251.738305][ T7798] lowmem_reserve[]: 0 0 0 0 0
[  251.743079][ T7798] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  251.777634][ T7811] loop3: detected capacity change from 0 to 8
[  251.808097][ T7798] lowmem_reserve[]: 0 0 0 0 0
[  251.825474][ T7798] Node 1 Normal free:3894876kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19616kB local_pcp:11360kB free_cma:0kB
[  251.874280][ T7811] SQUASHFS error: zlib decompression failed, data probably corrupt
[  251.884274][ T7811] SQUASHFS error: Failed to read block 0x9b: -5
[  251.900009][ T7811] SQUASHFS error: Unable to read metadata cache entry [99]
[  251.912206][ T7811] SQUASHFS error: Unable to read inode 0x127
[  251.923045][ T7798] lowmem_reserve[]: 0 0 0 0 0
[  251.930656][ T7798] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  251.944716][ T7798] Node 0 DMA32: 510*4kB (UME) 848*8kB (UME) 1102*16kB (UME) 672*32kB (UME) 121*64kB (UME) 77*128kB (UM) 51*256kB (UM) 32*512kB (M) 15*1024kB (ME) 11*2048kB (UM) 311*4096kB (UM) = 1406744kB
[  252.007099][ T7813] FAULT_INJECTION: forcing a failure.
[  252.007099][ T7813] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.025714][ T7798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  252.039863][ T7813] CPU: 0 PID: 7813 Comm: syz.1.486 Not tainted syzkaller #0
[  252.047183][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  252.057324][ T7813] Call Trace:
[  252.060661][ T7813]  <TASK>
[  252.063604][ T7813]  dump_stack_lvl+0x18c/0x250
[  252.068311][ T7813]  ? show_regs_print_info+0x20/0x20
[  252.073552][ T7813]  ? load_image+0x420/0x420
[  252.078182][ T7813]  ? __might_fault+0xaa/0x120
[  252.082887][ T7813]  ? __lock_acquire+0x7d40/0x7d40
[  252.085796][ T7798] Node 1 
[  252.094745][ T7813]  should_fail_ex+0x39d/0x4d0
[  252.094786][ T7813]  _copy_from_user+0x2f/0xe0
[  252.094809][ T7813]  ___sys_sendmsg+0x1c7/0x360
[  252.094825][ T7813]  ? get_pid_task+0x20/0x1e0
[  252.094848][ T7813]  ? __sys_sendmsg+0x2a0/0x2a0
[  252.094878][ T7813]  ? __lock_acquire+0x7d40/0x7d40
[  252.094918][ T7813]  __se_sys_sendmsg+0x1c2/0x2b0
[  252.094936][ T7813]  ? __x64_sys_sendmsg+0x80/0x80
[  252.102979][ T7798] Normal: 
[  252.107124][ T7813]  ? lockdep_hardirqs_on+0x98/0x150
[  252.113760][ T7798] 245*4kB 
[  252.116798][ T7813]  do_syscall_64+0x55/0xa0
[  252.121891][ T7798] (UME) 
[  252.126683][ T7813]  ? clear_bhb_loop+0x40/0x90
[  252.126717][ T7813]  ? clear_bhb_loop+0x40/0x90
[  252.126738][ T7813]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  252.126758][ T7813] RIP: 0033:0x7fe33e99c819
[  252.136603][ T7798] 55*8kB (UME) 
[  252.139622][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.139639][ T7813] RSP: 002b:00007fe33f7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.139656][ T7813] RAX: ffffffffffffffda RBX: 00007fe33ec15fa0 RCX: 00007fe33e99c819
[  252.139668][ T7813] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005
[  252.139678][ T7813] RBP: 00007fe33f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  252.139687][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.139702][ T7813] R13: 00007fe33ec16038 R14: 00007fe33ec15fa0 R15: 00007ffc137d5408
[  252.139725][ T7813]  </TASK>
[  252.274091][ T7798] 35*16kB (UME) 99*32kB (UME) 33*64kB (UME) 6*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 948*4096kB (M) = 3894876kB
[  252.291417][ T7798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  252.306223][ T7798] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  252.322652][ T7798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  252.345606][ T7798] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  252.356938][ T7798] 66252 total pagecache pages
[  252.382484][ T7798] 0 pages in swap cache
[  252.387111][ T7798] Free swap  = 124984kB
[  252.392342][ T7798] Total swap = 124996kB
[  252.396619][ T7798] 2097051 pages RAM
[  252.417457][ T7798] 0 pages HighMem/MovableOnly
[  252.439316][ T7798] 416926 pages reserved
[  252.443858][ T7798] 0 pages cma reserved
[  252.636025][ T7825] loop1: detected capacity change from 0 to 4096
[  252.648973][ T7827] FAULT_INJECTION: forcing a failure.
[  252.648973][ T7827] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.664207][ T7825] EXT4-fs: inline encryption not supported
[  252.671499][ T7827] CPU: 0 PID: 7827 Comm: syz.0.489 Not tainted syzkaller #0
[  252.678828][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  252.688918][ T7827] Call Trace:
[  252.692218][ T7827]  <TASK>
[  252.695171][ T7827]  dump_stack_lvl+0x18c/0x250
[  252.699883][ T7827]  ? show_regs_print_info+0x20/0x20
[  252.705110][ T7827]  ? load_image+0x420/0x420
[  252.709644][ T7827]  ? __might_fault+0xaa/0x120
[  252.714349][ T7827]  ? __lock_acquire+0x7d40/0x7d40
[  252.719409][ T7827]  should_fail_ex+0x39d/0x4d0
[  252.724112][ T7827]  _copy_from_user+0x2f/0xe0
[  252.728725][ T7827]  ___sys_sendmsg+0x1c7/0x360
[  252.733426][ T7827]  ? get_pid_task+0x20/0x1e0
[  252.738041][ T7827]  ? __sys_sendmsg+0x2a0/0x2a0
[  252.742840][ T7827]  ? __lock_acquire+0x7d40/0x7d40
[  252.747903][ T7827]  __se_sys_sendmsg+0x1c2/0x2b0
[  252.752764][ T7827]  ? __x64_sys_sendmsg+0x80/0x80
[  252.757776][ T7827]  ? lockdep_hardirqs_on+0x98/0x150
[  252.762985][ T7827]  do_syscall_64+0x55/0xa0
[  252.767396][ T7827]  ? clear_bhb_loop+0x40/0x90
[  252.772594][ T7827]  ? clear_bhb_loop+0x40/0x90
[  252.777273][ T7827]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  252.783166][ T7827] RIP: 0033:0x7f86d979c819
[  252.787584][ T7827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.807193][ T7827] RSP: 002b:00007f86da5c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  252.815605][ T7827] RAX: ffffffffffffffda RBX: 00007f86d9a15fa0 RCX: 00007f86d979c819
[  252.823571][ T7827] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005
[  252.831541][ T7827] RBP: 00007f86da5c5090 R08: 0000000000000000 R09: 0000000000000000
[  252.839946][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.847922][ T7827] R13: 00007f86d9a16038 R14: 00007f86d9a15fa0 R15: 00007ffda1d625d8
[  252.855904][ T7827]  </TASK>
[  252.876452][ T7825] EXT4-fs (loop1): Test dummy encryption mode enabled
[  252.923988][ T7825] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  252.938098][ T7825] System zones: 0-5
[  252.990060][ T7825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.749697][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.800832][ T7843] FAULT_INJECTION: forcing a failure.
[  253.800832][ T7843] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  253.818319][ T7843] CPU: 0 PID: 7843 Comm: syz.3.493 Not tainted syzkaller #0
[  253.825669][ T7843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  253.835837][ T7843] Call Trace:
[  253.839222][ T7843]  <TASK>
[  253.842165][ T7843]  dump_stack_lvl+0x18c/0x250
[  253.846885][ T7843]  ? show_regs_print_info+0x20/0x20
[  253.852108][ T7843]  ? load_image+0x420/0x420
[  253.856975][ T7843]  ? __might_fault+0xaa/0x120
[  253.861683][ T7843]  ? __lock_acquire+0x7d40/0x7d40
[  253.866968][ T7843]  should_fail_ex+0x39d/0x4d0
[  253.871757][ T7843]  _copy_from_user+0x2f/0xe0
[  253.876346][ T7843]  ___sys_sendmsg+0x1c7/0x360
[  253.881037][ T7843]  ? get_pid_task+0x20/0x1e0
[  253.885673][ T7843]  ? __sys_sendmsg+0x2a0/0x2a0
[  253.890471][ T7843]  ? __lock_acquire+0x7d40/0x7d40
[  253.895541][ T7843]  __se_sys_sendmsg+0x1c2/0x2b0
[  253.900669][ T7843]  ? __x64_sys_sendmsg+0x80/0x80
[  253.905617][ T7843]  ? lockdep_hardirqs_on+0x98/0x150
[  253.910829][ T7843]  do_syscall_64+0x55/0xa0
[  253.915496][ T7843]  ? clear_bhb_loop+0x40/0x90
[  253.920186][ T7843]  ? clear_bhb_loop+0x40/0x90
[  253.924866][ T7843]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  253.930771][ T7843] RIP: 0033:0x7fb012f9c819
[  253.935173][ T7843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.954869][ T7843] RSP: 002b:00007fb013eed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.963302][ T7843] RAX: ffffffffffffffda RBX: 00007fb013215fa0 RCX: 00007fb012f9c819
[  253.971479][ T7843] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000007
[  253.979443][ T7843] RBP: 00007fb013eed090 R08: 0000000000000000 R09: 0000000000000000
[  253.987427][ T7843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.995763][ T7843] R13: 00007fb013216038 R14: 00007fb013215fa0 R15: 00007fffe69396a8
[  254.004022][ T7843]  </TASK>
[  254.021664][ T7848] xt_hashlimit: max too large, truncated to 1048576
[  254.315894][ T7852] loop1: detected capacity change from 0 to 128
[  254.440095][ T7852] VFS: Found a Xenix FS (block size = 512) on device loop1
[  254.488842][ T7852] sysv_free_block: trying to free block not in datazone
[  254.524142][ T7866] FAULT_INJECTION: forcing a failure.
[  254.524142][ T7866] name failslab, interval 1, probability 0, space 0, times 0
[  254.524894][ T7852] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  254.564246][ T7866] CPU: 1 PID: 7866 Comm: syz.3.499 Not tainted syzkaller #0
[  254.571608][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  254.581729][ T7866] Call Trace:
[  254.585117][ T7866]  <TASK>
[  254.588054][ T7866]  dump_stack_lvl+0x18c/0x250
[  254.592916][ T7866]  ? show_regs_print_info+0x20/0x20
[  254.598117][ T7866]  ? load_image+0x420/0x420
[  254.602643][ T7866]  ? __might_sleep+0xe0/0xe0
[  254.607499][ T7866]  ? __lock_acquire+0x7d40/0x7d40
[  254.612977][ T7866]  should_fail_ex+0x39d/0x4d0
[  254.617669][ T7866]  should_failslab+0x9/0x20
[  254.622182][ T7866]  slab_pre_alloc_hook+0x59/0x310
[  254.627546][ T7866]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  254.633267][ T7866]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  254.638985][ T7866]  __kmem_cache_alloc_node+0x53/0x250
[  254.644380][ T7866]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  254.650207][ T7866]  __kmalloc+0xa4/0x230
[  254.654523][ T7866]  tomoyo_realpath_from_path+0xe3/0x5d0
[  254.660119][ T7866]  tomoyo_path_number_perm+0x248/0x620
[  254.665587][ T7866]  ? tomoyo_path_number_perm+0x217/0x620
[  254.671239][ T7866]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  254.676806][ T7866]  ? __seccomp_filter+0x859/0x1c90
[  254.681954][ T7866]  ? __fget_files+0x28/0x4b0
[  254.686545][ T7866]  ? __fget_files+0x28/0x4b0
[  254.691157][ T7866]  security_file_ioctl+0x70/0xa0
[  254.696452][ T7866]  __se_sys_ioctl+0x48/0x170
[  254.701044][ T7866]  do_syscall_64+0x55/0xa0
[  254.705462][ T7866]  ? clear_bhb_loop+0x40/0x90
[  254.710154][ T7866]  ? clear_bhb_loop+0x40/0x90
[  254.714852][ T7866]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  254.720760][ T7866] RIP: 0033:0x7fb012f9c819
[  254.725189][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.744807][ T7866] RSP: 002b:00007fb013eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  254.753267][ T7866] RAX: ffffffffffffffda RBX: 00007fb013215fa0 RCX: 00007fb012f9c819
[  254.761361][ T7866] RDX: 0000200000000180 RSI: 0000000040086200 RDI: 0000000000000004
[  254.769529][ T7866] RBP: 00007fb013eed090 R08: 0000000000000000 R09: 0000000000000000
[  254.777553][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.785690][ T7866] R13: 00007fb013216038 R14: 00007fb013215fa0 R15: 00007fffe69396a8
[  254.793675][ T7866]  </TASK>
[  254.815964][ T7837] loop0: detected capacity change from 0 to 32768
[  254.847040][ T7866] ERROR: Out of memory at tomoyo_realpath_from_path.
[  254.848009][ T7837] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.491 (7837)
[  254.886025][ T7837] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  255.003239][ T7837] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  255.052826][ T7837] BTRFS info (device loop0): enabling disk space caching
[  255.064426][ T7837] BTRFS info (device loop0): force clearing of disk cache
[  255.072671][ T7837] BTRFS error (device loop0): unrecognized mount option 'appraise'
[  255.122319][ T7871] loop3: detected capacity change from 0 to 4096
[  255.150869][ T7837] BTRFS error (device loop0): open_ctree failed: -22
[  255.159952][ T7871] EXT4-fs: inline encryption not supported
[  255.181383][ T5779] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by udevd (5779)
[  255.200756][ T7875] FAULT_INJECTION: forcing a failure.
[  255.200756][ T7875] name failslab, interval 1, probability 0, space 0, times 0
[  255.210648][ T7871] EXT4-fs (loop3): Test dummy encryption mode enabled
[  255.230309][ T7875] CPU: 1 PID: 7875 Comm: syz.1.504 Not tainted syzkaller #0
[  255.237674][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  255.247834][ T7875] Call Trace:
[  255.251138][ T7875]  <TASK>
[  255.254087][ T7875]  dump_stack_lvl+0x18c/0x250
[  255.258894][ T7875]  ? show_regs_print_info+0x20/0x20
[  255.264126][ T7875]  ? load_image+0x420/0x420
[  255.268657][ T7875]  ? __might_sleep+0xe0/0xe0
[  255.273277][ T7875]  ? __lock_acquire+0x7d40/0x7d40
[  255.278332][ T7875]  should_fail_ex+0x39d/0x4d0
[  255.283036][ T7875]  should_failslab+0x9/0x20
[  255.287550][ T7875]  slab_pre_alloc_hook+0x59/0x310
[  255.292609][ T7875]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  255.298626][ T7875]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  255.304397][ T7875]  __kmem_cache_alloc_node+0x53/0x250
[  255.309820][ T7875]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  255.315575][ T7875]  __kmalloc+0xa4/0x230
[  255.319907][ T7875]  tomoyo_realpath_from_path+0xe3/0x5d0
[  255.325599][ T7875]  tomoyo_path_number_perm+0x248/0x620
[  255.331551][ T7875]  ? tomoyo_path_number_perm+0x217/0x620
[  255.337235][ T7875]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  255.342827][ T7875]  ? ksys_write+0x1c4/0x260
[  255.347359][ T7875]  ? __fget_files+0x28/0x4b0
[  255.351946][ T7875]  ? __fget_files+0x28/0x4b0
[  255.356556][ T7875]  security_file_ioctl+0x70/0xa0
[  255.361555][ T7875]  __se_sys_ioctl+0x48/0x170
[  255.366154][ T7875]  do_syscall_64+0x55/0xa0
[  255.370680][ T7875]  ? clear_bhb_loop+0x40/0x90
[  255.375356][ T7875]  ? clear_bhb_loop+0x40/0x90
[  255.380028][ T7875]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.385942][ T7875] RIP: 0033:0x7fe33e99c819
[  255.390367][ T7875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.409980][ T7875] RSP: 002b:00007fe33f7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  255.418394][ T7875] RAX: ffffffffffffffda RBX: 00007fe33ec15fa0 RCX: 00007fe33e99c819
[  255.426375][ T7875] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003
[  255.434440][ T7875] RBP: 00007fe33f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  255.442849][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.450825][ T7875] R13: 00007fe33ec16038 R14: 00007fe33ec15fa0 R15: 00007ffc137d5408
[  255.459435][ T7875]  </TASK>
[  255.484667][ T7871] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  255.488163][ T7875] ERROR: Out of memory at tomoyo_realpath_from_path.
[  255.506104][ T7871] System zones: 0-5
[  255.514004][ T7871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.356592][ T7888] FAULT_INJECTION: forcing a failure.
[  256.356592][ T7888] name failslab, interval 1, probability 0, space 0, times 0
[  256.360044][ T6420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.379727][ T7888] CPU: 1 PID: 7888 Comm: syz.0.507 Not tainted syzkaller #0
[  256.387042][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  256.397111][ T7888] Call Trace:
[  256.400450][ T7888]  <TASK>
[  256.403466][ T7888]  dump_stack_lvl+0x18c/0x250
[  256.408157][ T7888]  ? show_regs_print_info+0x20/0x20
[  256.413370][ T7888]  ? load_image+0x420/0x420
[  256.417870][ T7888]  ? __might_sleep+0xe0/0xe0
[  256.422542][ T7888]  ? __lock_acquire+0x7d40/0x7d40
[  256.427565][ T7888]  should_fail_ex+0x39d/0x4d0
[  256.432271][ T7888]  should_failslab+0x9/0x20
[  256.436798][ T7888]  slab_pre_alloc_hook+0x59/0x310
[  256.441840][ T7888]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  256.447558][ T7888]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  256.453273][ T7888]  __kmem_cache_alloc_node+0x53/0x250
[  256.458649][ T7888]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  256.464388][ T7888]  __kmalloc+0xa4/0x230
[  256.468545][ T7888]  tomoyo_realpath_from_path+0xe3/0x5d0
[  256.474097][ T7888]  tomoyo_path_number_perm+0x248/0x620
[  256.479559][ T7888]  ? tomoyo_path_number_perm+0x217/0x620
[  256.485186][ T7888]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  256.490643][ T7888]  ? ksys_write+0x1c4/0x260
[  256.495425][ T7888]  ? __fget_files+0x28/0x4b0
[  256.500010][ T7888]  ? __fget_files+0x28/0x4b0
[  256.504605][ T7888]  security_file_ioctl+0x70/0xa0
[  256.509540][ T7888]  __se_sys_ioctl+0x48/0x170
[  256.514127][ T7888]  do_syscall_64+0x55/0xa0
[  256.518543][ T7888]  ? clear_bhb_loop+0x40/0x90
[  256.523215][ T7888]  ? clear_bhb_loop+0x40/0x90
[  256.527890][ T7888]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.533872][ T7888] RIP: 0033:0x7f86d979c819
[  256.538556][ T7888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  256.558169][ T7888] RSP: 002b:00007f86da5c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  256.566781][ T7888] RAX: ffffffffffffffda RBX: 00007f86d9a15fa0 RCX: 00007f86d979c819
[  256.574850][ T7888] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000b
[  256.582998][ T7888] RBP: 00007f86da5c5090 R08: 0000000000000000 R09: 0000000000000000
[  256.590967][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.598932][ T7888] R13: 00007f86d9a16038 R14: 00007f86d9a15fa0 R15: 00007ffda1d625d8
[  256.607001][ T7888]  </TASK>
[  256.610030][    C1] vkms_vblank_simulate: vblank timer overrun
[  256.618075][ T7888] ERROR: Out of memory at tomoyo_realpath_from_path.
[  257.428179][   T23] IPVS: starting estimator thread 0...
[  257.528115][ T7904] IPVS: using max 17 ests per chain, 40800 per kthread
[  258.066545][ T7893] loop1: detected capacity change from 0 to 32768
[  258.074669][ T7893] (syz.1.510,7893,0):ocfs2_fill_super:1178 ERROR: status = -22
[  258.343160][ T7915] loop1: detected capacity change from 0 to 4096
[  258.369077][ T7915] EXT4-fs: inline encryption not supported
[  258.398108][ T7915] EXT4-fs (loop1): Test dummy encryption mode enabled
[  258.420028][ T7915] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  258.439026][ T7915] System zones: 0-5
[  258.459147][ T7915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.711758][ T7918] (null): rxe_set_mtu: Set mtu to 1024
[  259.309482][ T7912] loop0: detected capacity change from 0 to 32768
[  259.370499][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.405268][ T7912] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  259.416728][ T7912] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  259.426826][ T7912] BTRFS info (device loop0): enabling disk space caching
[  259.434134][ T7912] BTRFS info (device loop0): force clearing of disk cache
[  259.441677][ T7912] BTRFS error (device loop0): unrecognized mount option 'appraise'
[  259.457654][ T7912] BTRFS error (device loop0): open_ctree failed: -22
[  259.636782][ T7918] infiniband syz0: set active
[  259.654055][ T5776] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by udevd (5776)
[  259.668227][ T7918] infiniband syz0: added bond_slave_0
[  259.704358][ T7918] syz0: rxe_create_cq: returned err = -12
[  259.715674][ T7930] loop1: detected capacity change from 0 to 128
[  259.761275][ T7930] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  259.761696][ T7918] infiniband syz0: Couldn't create ib_mad CQ
[  259.795274][ T7918] infiniband syz0: Couldn't open port 1
[  260.033121][ T7918] RDS/IB: syz0: added
[  260.079281][ T7918] smc: adding ib device syz0 with port count 1
[  260.086115][ T7918] smc:    ib device syz0 port 1 has pnetid 
[  260.160489][ T7939] tipc: Started in network mode
[  260.173126][ T7939] tipc: Node identity 080211, cluster identity 4711
[  260.180718][ T7939] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.188345][ T7939] 
[  260.190754][ T7939] =============================
[  260.195617][ T7939] WARNING: suspicious RCU usage
[  260.200705][ T7939] syzkaller #0 Not tainted
[  260.205166][ T7939] -----------------------------
[  260.210097][ T7939] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage!
[  260.210112][ T7939] 
[  260.210112][ T7939] other info that might help us debug this:
[  260.210112][ T7939] 
[  260.210118][ T7939] 
[  260.210118][ T7939] rcu_scheduler_active = 2, debug_locks = 1
[  260.210128][ T7939] 1 lock held by syz.1.524/7939:
[  260.210138][ T7939]  #0: ffffffff8e3c21c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140
[  260.210206][ T7939] 
[  260.210206][ T7939] stack backtrace:
[  260.210214][ T7939] CPU: 1 PID: 7939 Comm: syz.1.524 Not tainted syzkaller #0
[  260.210229][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  260.210238][ T7939] Call Trace:
[  260.210245][ T7939]  <TASK>
[  260.210253][ T7939]  dump_stack_lvl+0x18c/0x250
[  260.210282][ T7939]  ? show_regs_print_info+0x20/0x20
[  260.210303][ T7939]  ? load_image+0x420/0x420
[  260.210335][ T7939]  lockdep_rcu_suspicious+0x1e1/0x300
[  260.210358][ T7939]  ieee80211_check_concurrent_iface+0x475/0x950
[  260.210390][ T7939]  ieee80211_open+0xc1/0x200
[  260.210406][ T7939]  __dev_open+0x2cb/0x430
[  260.210489][ T7939]  ? dev_open+0x190/0x190
[  260.210515][ T7939]  __dev_change_flags+0x211/0x6a0
[  260.210544][ T7939]  ? dev_get_flags+0x1c0/0x1c0
[  260.210565][ T7939]  ? mutex_lock_nested+0x20/0x20
[  260.210590][ T7939]  dev_change_flags+0x88/0x1a0
[  260.210617][ T7939]  dev_ioctl+0x7b4/0x1140
[  260.210640][ T7939]  sock_do_ioctl+0x239/0x310
[  260.210658][ T7939]  ? sock_show_fdinfo+0xb0/0xb0
[  260.210683][ T7939]  sock_ioctl+0x5ba/0x7e0
[  260.210699][ T7939]  ? sock_poll+0x3e0/0x3e0
[  260.210721][ T7939]  ? bpf_lsm_file_ioctl+0x9/0x10
[  260.210736][ T7939]  ? security_file_ioctl+0x80/0xa0
[  260.210751][ T7939]  ? sock_poll+0x3e0/0x3e0
[  260.210768][ T7939]  __se_sys_ioctl+0xfd/0x170
[  260.210822][ T7939]  do_syscall_64+0x55/0xa0
[  260.210837][ T7939]  ? clear_bhb_loop+0x40/0x90
[  260.210857][ T7939]  ? clear_bhb_loop+0x40/0x90
[  260.210878][ T7939]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  260.210897][ T7939] RIP: 0033:0x7fe33e99c819
[  260.210914][ T7939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.210928][ T7939] RSP: 002b:00007fe33f7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  260.210948][ T7939] RAX: ffffffffffffffda RBX: 00007fe33ec15fa0 RCX: 00007fe33e99c819
[  260.210961][ T7939] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004
[  260.210972][ T7939] RBP: 00007fe33ea32c91 R08: 0000000000000000 R09: 0000000000000000
[  260.210992][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.211003][ T7939] R13: 00007fe33ec16038 R14: 00007fe33ec15fa0 R15: 00007ffc137d5408
[  260.211029][ T7939]  </TASK>
[  260.255789][ T7939] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  260.255817][ T7939] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  260.300705][ T7939] FAULT_INJECTION: forcing a failure.
[  260.300705][ T7939] name failslab, interval 1, probability 0, space 0, times 0
[  260.300735][ T7939] CPU: 1 PID: 7939 Comm: syz.1.524 Not tainted syzkaller #0
[  260.300752][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  260.300761][ T7939] Call Trace:
[  260.300769][ T7939]  <TASK>
[  260.300776][ T7939]  dump_stack_lvl+0x18c/0x250
[  260.300807][ T7939]  ? show_regs_print_info+0x20/0x20
[  260.300831][ T7939]  ? load_image+0x420/0x420
[  260.300855][ T7939]  ? __might_sleep+0xe0/0xe0
[  260.300877][ T7939]  ? __lock_acquire+0x7d40/0x7d40
[  260.300898][ T7939]  should_fail_ex+0x39d/0x4d0
[  260.300927][ T7939]  should_failslab+0x9/0x20
[  260.300949][ T7939]  slab_pre_alloc_hook+0x59/0x310
[  260.300972][ T7939]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  260.300994][ T7939]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  260.301011][ T7939]  __kmem_cache_alloc_node+0x53/0x250
[  260.301035][ T7939]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  260.301052][ T7939]  __kmalloc+0xa4/0x230
[  260.301135][ T7939]  tomoyo_realpath_from_path+0xe3/0x5d0
[  260.301166][ T7939]  tomoyo_path_number_perm+0x248/0x620
[  260.301187][ T7939]  ? tomoyo_path_number_perm+0x217/0x620
[  260.301208][ T7939]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  260.301232][ T7939]  ? ksys_write+0x1c4/0x260
[  260.301285][ T7939]  ? __fget_files+0x28/0x4b0
[  260.301303][ T7939]  ? __fget_files+0x28/0x4b0
[  260.301331][ T7939]  security_file_ioctl+0x70/0xa0
[  260.301351][ T7939]  __se_sys_ioctl+0x48/0x170
[  260.301372][ T7939]  do_syscall_64+0x55/0xa0
[  260.301387][ T7939]  ? clear_bhb_loop+0x40/0x90
[  260.301406][ T7939]  ? clear_bhb_loop+0x40/0x90
[  260.301426][ T7939]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  260.301444][ T7939] RIP: 0033:0x7fe33e99c819
[  260.301459][ T7939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.301472][ T7939] RSP: 002b:00007fe33f7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  260.301490][ T7939] RAX: ffffffffffffffda RBX: 00007fe33ec15fa0 RCX: 00007fe33e99c819
[  260.301504][ T7939] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000004
[  260.301515][ T7939] RBP: 00007fe33f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  260.301526][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.301536][ T7939] R13: 00007fe33ec16038 R14: 00007fe33ec15fa0 R15: 00007ffc137d5408
[  260.301559][ T7939]  </TASK>
[  260.301600][ T7939] ERROR: Out of memory at tomoyo_realpath_from_path.
[  260.303094][ T7939] tipc: Resetting bearer <eth:syzkaller0>
[  260.320345][ T7938] netlink: 48 bytes leftover after parsing attributes in process `syz.2.525'.
[  260.503213][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  260.503335][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  260.562995][    T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  260.765865][    T8] usb 1-1: Using ep0 maxpacket: 8
[  260.778502][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  260.778538][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  260.778559][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  260.778582][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  260.778607][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  260.778645][    T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  260.778668][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.781307][    T8] usb 1-1: config 0 descriptor??
[  260.789481][ T7943] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  261.014055][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014167][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014227][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014280][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014332][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014382][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014427][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014471][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014516][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014602][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014648][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.014692][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.015557][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.015621][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.015674][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.015727][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.015780][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.015834][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.015887][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.015922][    C0] Bluetooth: hci4: Unexpected continuation: 1 bytes
[  261.015936][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.015991][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.016045][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.016100][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.016158][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.016207][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.016253][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.016300][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.016347][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.016391][ T5084] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  261.281325][ T5826] tipc: Node number set to 134353152
[  261.298854][    T9] usb 1-1: USB disconnect, device number 20
[  261.318334][   T51] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  262.578157][   T51] Bluetooth: hci2: command 0x0406 tx timeout