last executing test programs:

12.699780754s ago: executing program 2 (id=535):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc)

12.415606713s ago: executing program 2 (id=539):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, 0x0)

11.646606466s ago: executing program 2 (id=542):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0xd}, 0x94)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x40, 0x401, 0x33565348, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}})
ioctl$FIOCLEX(r0, 0x5451)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
fsopen(&(0x7f0000000000)='configfs\x00', 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x1, 0xa, 0x301}, 0x14}}, 0x0)
write(r4, &(0x7f0000000380)="240000001e005f0214fffffffffffff8070000000500090000000000fbb792a8b77bab0f4b", 0x25)

10.56387949s ago: executing program 2 (id=547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x161242, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(0x3)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xffffffff, 0x3, 0x33524742, 0x0, 0x0, 0x3ffffc, 0x7, 0x0, 0x0, 0x3}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1, 0x4, 0xff, 0x4)

10.455516187s ago: executing program 2 (id=548):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0xd}, 0x94)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x40, 0x401, 0x33565348, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}})
ioctl$FIOCLEX(r0, 0x5451)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
fsopen(&(0x7f0000000000)='configfs\x00', 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x1, 0xa, 0x301}, 0x14}}, 0x0)
write(r6, &(0x7f0000000380)="240000001e005f0214fffffffffffff8070000000500090000000000fbb792a8b77bab0f4b", 0x25)

10.185654385s ago: executing program 3 (id=549):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff}]}) (async)
close_range(r2, r3, 0x0) (async)
ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f00000001c0)=0x6)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d000000080003000d"], 0x1c}}, 0x0) (async)
r5 = semget$private(0x0, 0x7, 0x180)
semtimedop(r5, &(0x7f00000007c0)=[{0x0, 0xfffa, 0x1000}, {0x4, 0x7, 0x1800}], 0x2, &(0x7f0000000800)) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) (async)
r6 = fsmount(r0, 0x0, 0x80) (async)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bd80107030109028876d54d0000000904016aa82fcd6418c1fd371a714a7fdc242bdc61533a346f019e", @ANYRESOCT=r0, @ANYRES32=r0], 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) (async)
syz_open_procfs(0x0, 0x0) (async)
r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x3, 0x0, 0x0, 0x0}], 0x1}) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)

10.085613542s ago: executing program 4 (id=550):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}, 0x0, 0x0, 0xfffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd)
write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400)

10.003799848s ago: executing program 3 (id=551):
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000bfb000/0x1000)=nil, 0x1000, 0xf, 0x59032, 0xffffffffffffffff, 0x0)

9.475684174s ago: executing program 2 (id=552):
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000bfb000/0x1000)=nil, 0x1000, 0xf, 0x59032, 0xffffffffffffffff, 0x0) (fail_nth: 1)

9.103703899s ago: executing program 1 (id=553):
epoll_create(0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r3, 0x10d, 0xb9, &(0x7f0000000040), &(0x7f0000000000)=0x4)
socket$rxrpc(0x21, 0x2, 0xa)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x200, 0x80000, r3})
statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x20, &(0x7f0000000280))
fstat(r3, &(0x7f0000000680))
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x7fff, {0x0, 0x0, 0x6, 0x0, 0xa1a4, 0x1, 0x0, 0x100, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={<r7=>0xffffffffffffffff, 0x8e5a, 0x0, 0xfffffffffffffff3})
close_range(r7, r5, 0x0)

8.164531763s ago: executing program 1 (id=554):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x35)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x1, 0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x8000, 0x0, 0x4}}, 0x26)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x20, 0x1, 0x37, {0x37, 0x22, "eb27f2bf45411e550d3152ef3f67bfac6300c10bd5aed5205bb0221b590e35d0a3d65edd8f51fc47170fbd9cb429e9050d012e35a1"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00')
pread64(r4, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x80000, &(0x7f0000000700), 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0xfe3c}], 0xa6}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1344}}, {{0x0, 0x0, &(0x7f00000025c0), 0x1}}], 0x4, 0x608d8d0)
socket(0x18, 0x800, 0x4)

7.92443968s ago: executing program 4 (id=556):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7)
r3 = socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
unshare(0x22020600)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x400000000, 0xe, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
chown(&(0x7f0000000100)='./file0\x00', r4, r7)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r9 = syz_open_dev$radio(0x0, 0x0, 0x2)
prlimit64(r0, 0x9, &(0x7f0000000040)={0x4, 0x5e2}, &(0x7f0000000080))
ioctl$VIDIOC_S_AUDOUT(r9, 0x40345632, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)

6.855474353s ago: executing program 4 (id=558):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0xd}, 0x94)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x40, 0x401, 0x33565348, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}})
ioctl$FIOCLEX(r0, 0x5451)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
fsopen(&(0x7f0000000000)='configfs\x00', 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x1, 0xa, 0x301}, 0x14}}, 0x0)
write(r5, &(0x7f0000000380)="240000001e005f0214fffffffffffff8070000000500090000000000fbb792a8b77bab0f4b", 0x25)

6.854467022s ago: executing program 0 (id=559):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000002800)={0x2020}, 0x2020) (fail_nth: 1)

5.814544343s ago: executing program 4 (id=560):
r0 = socket(0x1, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xc, 0x3}, {0x10, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfb, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0xe2, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r12, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@local, r13}, 0x14)
r14 = socket(0x10, 0x3, 0x0)
r15 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r16=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r16, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
ioctl$FS_IOC_MEASURE_VERITY(r14, 0xc0046686, &(0x7f0000000200)={0x2, 0x30, "741664c5934221fd36dde9f61041070ce1015c0592135bf5682762746b22097771230e4ef20e9d9801e026ef624f7870"})

5.703593921s ago: executing program 0 (id=561):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1}, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2865)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000180))
r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x22080, 0x0)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000140))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000200), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x3ea, 0x20, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x8000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x4000010, 0xffffffffffffffff, 0xedba2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000440)=0x73) (fail_nth: 1)
sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r3], 0x38}}, 0x40004)

5.395222082s ago: executing program 0 (id=562):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000480)='./file0\x00', 0x3004050, &(0x7f0000000540)=ANY=[], 0x3, 0x1063a, &(0x7f0000010640)="$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")
r0 = socket$caif_stream(0x25, 0x1, 0x0)
dup(r0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x1, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0xa, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

4.603941546s ago: executing program 1 (id=563):
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, <r0=>0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000140)={r0, 0x7, &(0x7f0000000080)=[0x400, 0xa0b, 0x7, 0x9, 0x3, 0x954e, 0x5], &(0x7f00000000c0)=[0x0, 0x7ff, 0x8, 0x9, 0xf6, 0x80c, 0x9], &(0x7f0000000100)=[0x5, 0x7, 0x1]})
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x93, 0x4, 0x81, "96eba1b66c8660a73787fc8521638cb2", "ad185c00af505a1eccb5d8f2a0ba23b1efe917b148d3be891a7b03a845510069c2976877dc7cbcab0b210fe07e85b04db9db860b380fbad46e5656d3e7a72385caa695a1476849c71d922fbe1c3ec7cc448fc723d2906dd0a2f1ba525cebaf11e84d68ba1fb611bb5abd65e14396fe3bb6b0c6865f89bd1e8891df24d0d1"}, 0x93, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x1, 0x9d, 0x5f7e}) (async)
read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f0000002340)={0x10, 0x0, r3}, 0x10)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000002380)={0x90a0, r1}, 0x0) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
landlock_restrict_self(r2, 0xa) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000023c0)={{0x1, 0x1, 0x18, <r7=>r6, {<r8=>r4, r5}}, './file0\x00'}) (async)
r9 = syz_create_resource$binfmt(&(0x7f0000002400)='./file0\x00')
execveat$binfmt(r7, r9, &(0x7f0000002480)={[&(0x7f0000002440)='\x00']}, &(0x7f0000002680)={[&(0x7f00000024c0)=']^,\x00', &(0x7f0000002500)='blkio.bfq.io_service_bytes\x00', &(0x7f0000002540)='#\'\x00', &(0x7f0000002580)='blkio.bfq.io_service_bytes\x00', &(0x7f00000025c0)='trusted.overlay.upper\x00', &(0x7f0000002600)='blkio.bfq.io_service_bytes\x00', &(0x7f0000002640)='blkio.bfq.io_service_bytes\x00']}, 0x400) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000026c0)) (async)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002700), 0x2, 0x0) (async)
r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002740), 0x4800, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x6c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x29}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10000, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x21}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x9}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x24048815) (async)
mount$cgroup2(0x0, &(0x7f00000028c0)='./file0\x00', &(0x7f0000002900), 0x90000, &(0x7f0000002940)={[{@subsystem='memory'}, {@memory_hugetlb_accounting}, {@memory_hugetlb_accounting}, {@subsystem='pids'}, {@subsystem='perf_event'}, {@favordynmods}, {@pids_localevents}, {@memory_recursiveprot}], [{@obj_user={'obj_user', 0x3d, 'blkio.bfq.io_service_bytes\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')@'}}, {@subj_user}, {@euid_eq={'euid', 0x3d, r8}}, {@dont_hash}]}) (async, rerun: 64)
setuid(r4) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000002a40)={'batadv_slave_0\x00', <r12=>0x0})
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002a80)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x2, '\x00', r12, r11, 0x5, 0x2, 0x2}, 0x50)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002b00)={@null, 0x0, 'team0\x00'}) (async, rerun: 32)
statx(r7, &(0x7f0000002c00)='./file0\x00', 0x100, 0x80, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r11, 0xc0189378, &(0x7f0000002d40)={{0x1, 0x1, 0x18, r13, {r10}}, './file0\x00'})
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000002d80)={0xfe, 0xd, 0x5, 0x7, 0x6, 0x0, [{0x8, 0x9, 0x2, '\x00', 0x88c}, {0x4, 0x0, 0x9, '\x00', 0x80}, {0x1, 0x1, 0x400}, {0x7, 0xffffffff, 0x800, '\x00', 0x480}, {0x8000000000000001, 0x7, 0xffffffffffffbe4a, '\x00', 0x2880}, {0x401, 0xcee5, 0x7, '\x00', 0x80}]}) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f0000002f00)={<r15=>0x0, 0x2d, "1f7c2af24fa9a672f2681aa22d74551998d120a8af6a594e8f1bade98b1fe0c5614a06351e1a585d4fa33f299e"}, &(0x7f0000002f40)=0x35) (rerun: 32)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000002f80)=@assoc_value={r15, 0x7}, &(0x7f0000002fc0)=0x8) (async, rerun: 32)
syz_mount_image$fuse(&(0x7f0000003000), &(0x7f0000003040)='./file0\x00', 0x1044010, &(0x7f0000003080)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r14}, 0x2c, {[{@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '/dev/fuse\x00'}}, {@euid_lt={'euid<', r4}}]}}, 0x1, 0x0, &(0x7f0000003180)="b0e31be16edf0040b4f7a0eb5a20c82b01f892a3cf453f7c53720166ce277fe04d7370d4c54f722292460b6dfbd86c288c9773fd0ab554a70616adc213f55faf9573adffe662578244d3a27fc76150bccbd67bb2") (async, rerun: 32)
openat$kvm(0xffffffffffffff9c, &(0x7f0000003200), 0x101000, 0x0)

4.491681793s ago: executing program 3 (id=564):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000002800)={0x2020}, 0x2020)

4.339601244s ago: executing program 4 (id=565):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f00000059c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@oldalloc}, {@prjquota}, {@acl}, {@lazytime}]}, 0x0, 0x48b, &(0x7f0000005500)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0x101000, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x15802)
r6 = syz_clone(0x2010000, &(0x7f00000000c0)="291cd9196e120db06ecd5a6e0f295645be7c2b9f91aa77f1a2e72d5083c1204456f8f80e4b5a1e8e5430e6c1ec19f5684e0182e25b661d8bf26732d93e41562c506269c3325a1605220044b8b18e702b8abacc44410086fc8f943b26191023248014d75a4e8663c9f2c66e231b4af8743a2c5d14ecfb5f66df3337d9fef42064162d9fa443b343eb5ad45a0192c4cbbf69be37896513be29f1cec1970771868f1df80b", 0xa3, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000380)="a9a722bd723b2c26989901794f43689fe2f54099777ae9b72decbe6b29dd9ca560ac7bc4eb4f681918a4aca4d2afb9093282ed1623c5ea4333e8b06fad6f40d51648be6569f3926f283f4cc8300b919f8638de178071b8891afb0ffe6990b8e87419278bc89b65b1b1ed83d8d61e3def4a588dabed75ff48f3445cf09bbd7fbf67195bb8654526f0a98cc15d2e0bb0e57af770269b5a20faefd04345d4ac0623b307f2f0ee1cf138f5e9cefbfd5f05a988400032712bf87b93668f187c0b5e89dff207e9a8d035d82d85266f2a156e57a098526fe3496547061f85075ea650ab12d72ee9db42baee2be8afa246da4c5fe5ebe3ee51d75f")
r7 = syz_open_procfs(r6, &(0x7f0000000000)='net/vlan/vlan0\x00')
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB='\x00\x00'])

4.215062262s ago: executing program 0 (id=566):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', 0x808808, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2f2, &(0x7f0000000400)="$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")
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200050, &(0x7f0000000080)=ANY=[], 0x1, 0x1d2, &(0x7f00000003c0)="$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")
truncate(0x0, 0x1bf8)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x40004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wlan1\x00'})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0])
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42041, 0x12c)
pwrite64(r3, &(0x7f0000000140), 0x0, 0xe7c)
fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setreuid(0x0, r4)
syz_open_dev$dri(&(0x7f0000000000), 0xb6, 0x400000)
syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f0000000180)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=")

3.378927699s ago: executing program 3 (id=567):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000040)}, {&(0x7f0000000280)="f6", 0x1}], 0x2, 0xc, 0x20000000)

2.979527086s ago: executing program 1 (id=568):
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r3)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x18)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000"], 0xb0}, 0x1, 0x7}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d062d407f2c696f636861727365743d63703836332c636f6465706167653d69736f383835392d332c0057728e7edeea8ce4639d9c42b47d17d3fcd0720a8929166d5bfaae65f664ad57409da31d700c355f59f646ec2c830b3fb51d44dc6f9d032cc06c0101baca689e1b114191b7fd569fb54225bd68fca477c5f9a7e24e8298dd0c91"], 0x5, 0x357, &(0x7f0000000580)="$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")
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
pwritev(r8, &(0x7f0000000600)=[{&(0x7f0000000040)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000200)="527102587a0a4e43ad389b", 0xb}], 0x3, 0xc, 0x20000000)
r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r9, 0x400, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
sendmsg$unix(r5, 0x0, 0x24000804)

2.239893127s ago: executing program 3 (id=569):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1}, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2865)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000180))
r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x22080, 0x0)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000140))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000200), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x3ea, 0x20, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x8000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x4000010, 0xffffffffffffffff, 0xedba2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000440)=0x73)
sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r3], 0x38}}, 0x40004)

1.361632427s ago: executing program 3 (id=570):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp949,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c00073bc934e6304a61a825679f7f47435e772a77a77e69b5db166a9f7745d7245b08574a58340594"], 0x1, 0x1544, &(0x7f0000001740)="$eJzs3AmcjlX7OPDrOufcY0zS0yTLcM65bp5kOSZJsiTJkiRJkmRLSJrklYTEkC1pSEKyDMkyhGSZmDT2fV8SkqRJkpBsyfl/FK/61fvW+3vfN79/ru/nc3/mXM+5r3Of+7mee+5llq86DqrWoHrlekQE/xb86UsyAMQCQD8AuAoAAgAoHV86/lx/donJ/95G2H/WA2mXegbsUuL6X964/pc3rv/ljet/eeP6X964/pc3rv/ljevP2OVsw5R8V/Ny+S7/7vN/eaHBz///P8Tn/7+QrBKjPltV4tpOADF/NIXr/5eU54+uyPX/ywr+yEpc/8sb1/8vK/s/7479s+bB/g/j4/9ykO0f9nD9L29cf8YuZ5f6+fN/f5H/tB8il8N78E/2nzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYY+xOc9BcpALjQvtTzYowxxhhjjDHG2H+Oz3apZ8AYY4wxxhhjjLH/PgQBEhQEEAPZIBayQxwIALgScsJVEIGrIR6ugVxwLeSGPJAX8kEC5IcCoMGABYIQCkIhiMJ1UBiuhyJQFIpBcXBQAhLhBigJN0IpuAlKw81QBm6BslAOykMFuBUqwm1QCW6HynAHVIGqUA2qw51QA+6CmnA31IJ7oDbcC3XgPqgL90M9eADqw4PQAB6ChvAwNILG0ASaQrP/Vf5z0BWeh27QHZKhB/SEF6AX9IY+0Bf6wYvQH16CAfAypMBAGASvwGB4FYbAazAUhsFweB1GwBswEkbBaBgDqTAWxsGbMB7eggkwESbBZEiDKTAV3oZpMB1mwDswE96FWTAb5sBcSIf3YB7Mhwx4HxbAB5AJC2ERLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBh7AdPoIdsBN2/b1+/0r+iZ/lfwy7oRMCAgoUqFBhDMZgLMZiHMZhDsyBOTEnRjCC8RiPuTAX5sbcmBfzYgImYAEsgAYNEhIWxIIYxSgWxsJYBItgMSyGDh0mYiKWxBuxFJbC0lgay2AZLIvlsBxWwApYEStiJayElbEyVsEqWA2r4Z14J/bAmlgTa2EtrI21LzyewnpYD+tjfWyADbAhNsRG2AibYBNshs2wOTbHFtgCW2ErbI2tsQ22wSRMwrbYFtthO2yP7bEDdsCO2BE7YWfsnPVcNsDn8XnsjlVED+yJPbEXpmTrg32xL76I/fElfAlfxhQciIPwFXwFX8UheByH4jAcjsOxongDR+IoJDEGUzEVx+E4HI/jcQJOxIk4GdNwCk7FqTgNp+N0fAdn4rv4Ls7G2TgX0zEd5+F8zMAMXIAnMBMX4iJcjEtwKS7B5bgCl+MqXI2rcC2uxfW4HjfiRtyMm3ErbsUPUQHgR7gTd2IK7sbduAf34F7ci/twH2ZhFu7H/XgAD+BBPIiH8BAexiN4FI/gMTyGx/EEnsSTeBpP4xl8JuGL+h8WXZkC4hwllIgRMSJWxIo4ESdyiBwip8gpIiIi4kW8yCVyidwit8gr8ooEkSAKiALCCCNIhDEAIKIiKgqLwqKIKCKKiWLCCScSRaIoKUqKUqKUKC1uFmXELaKsKCdaugqigqgoWrlK4nZRWVQWVURVUU1UF9VFDVFD1BQ1RS1RS9QWtUUdcZ+oK3pgH3xAnKtMAzEQG4pB2Eg0FvL8EdBcDMEWoqVoJR4Tw3AothHNXZJ4UrQVI7Gd+JsYhU+LDmIMdhTPik6is+ginhNdRQvXTXQXE7CH6CkmYy/RW/QRfcU0rCrewZnZq4mXRYoYKAaJV8RcfFUMEa+JoWKYGC5eFyPEG2KkGCVGizEiVYwV48SbYrx4S0wQE8UkMVmkiSliqnhbTBPTxQzxjpgp3hWzxGwxR8wV6eI9MU/MFxnifbFAfCAyxUKxSCwWS8RSsUwsFyvESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNfCi2i4/EDrFT7BIfi93iE7FHfCr2is/EPvG5yBJfiP3iS3FAfCUOiq/FIfGNOCyOiKPiW3FMfCeOixPipDglTovvxRnxgzgrvACJUkgplQxkjMwmY2V2GSevkDlkcP7dvVrGy2tkLnmtzC3zyLwyn0yQ+WUBqaWRVpIMZUFZSEbldbKwvF4WkUVlMVlcOllCJsobZEl5oywlb5Kl5c2yjLxFlpXlZHlZQd4qK8rbJER+2kYVWVVWk9XlnTIZ7pI15d2ylrxH1pb3yjryPllX3i/ryQdkffmgbCAfkg3lw7KRbCybyKaymXxENpePyhaypWwlH5Ot5eOyjXxCJsknZVvpz39EnpYd5DOyo3xWdpKdZRf5gzwrvewmu0voAbKnfEH2kr1lH9lX9pMvyv7yJTlAvixT5EA5SL4iB8tX5RD5mhwqh8nh8nU5Qr4hR8pRcrQcI1PlWDlOvinHy7fkBDlRTpKTZZqcIvucH2mGlL+b/+bP88+deuUUOeDHra+XG+RGuUlullvkVrlNfii3y+1yh9whd8ldcrfcLffIPXKv3Cv3yX0yS2bJ/XK/PCAPyIPyoDwkD8nD8og8Jb+Vx+R38rg8IU/IU/K0PC3PnH8PQKESSiqlAhWjsqlYlV3FqStUDnWlyqmuUhF1tYpX16hc6lqVW+VReVU+laDyqwJKK6OsIhWqgqqQiqrr8PwHRhVTxZVTJVSiuuFfyVeF1fWqiCr6i/wL80v+B/Nrppqp5qq5aqFaqFaqlWqtWqs2qo1KUkmqrWqr2ql2qr1qrzqoDqqj6qg6qU6qi+qiuqquqpvqppJVsuqpXlC9VG/VR/VV/dSLqr/qrwaoASpFpahBapAarAarIWqIGqqGquFquBqhRqiRaqQarUarVJWqxqlxarwaryaoCWqSmqTSVJqaqqaqaWqamqFmqJlqppqlZqk5ao5KV+lqnpqnMlSGWqAWqEy1UC1Ui9VitVQtVcvVcrVSrVSr1Wq1Vq1VmWqD2qA2qU1qi9qitqltarvarnaoHWqX2qV2q91qj9qj9qq9ap/ap7JUltqv9qsD6oA6qA6qQ+qQOqwOq6PqqDqmjqnj6rg6qU6q0+q0OqPOqLPqrIJAgAhEoAIVxAQxQWwQG8QFcUGOIEeQM8gZRIJIEB/EB7mCa4PcQZ4gb5AvSAjyBwUCHZjABuJ80aPBdUHh4PqgSFA0KBYUD1xQIkgMbghKBjcGpYKbgtLBzUGZ4JagbFAuKB9UCG4NKga3BZWC24PKwR1BlaBqUC2oHtwZ1AjuCmoGdwe1gnuC2sG9QZ3gvqBucH9QL3ggqB88GDQIHgoaBg8HjYLGQZOgadDsPzq+98fzPOq66e46WffQPfULupfurfvovrqfflH31y/pAfplnaIH6kH6FT1Yv6qH6Nf0UD1MD9ev6xH6DT1Sj9Kj9RidqsfqcfpNPV6/pSfoiXqSnqzT9BQ9Vb+tp+npeoZ+R8/U7+pZeraeo+fqdP2enqfn6wz9vl6gP9CZeqFepBfrJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mP9Tb9Ud6h96pd+mP9W79id6jP9V79Wd6n/5cZ+kv9H79pT6gv9IH9df6kP5GH9ZH9FH9rT6mv9PH9Ql9Up/Sp/X3+oz+QZ/V/tzF/bnTu1FGmRgTY2JNrIkzcSaHyWFympwmYiIm3sSbXCaXyW1ym7wmr0kwCaaAKWDOIUOmoClooiZqCpvCpogpYoqZYsYZZxJNoilpSppSppQpbUqbMqaMKWvKmvKmvLnV3GpuM7eZ283t5g5zh6lqqprqprqpYWqYmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpkmpolpZpqZ5qa5aWFamFamlWltWps2po1JMkmmrWlr2pl2pr1pbzqYDqaj6Wg6mU6mi+liupquppvpZpJNsulpeppeppfpY/qYfqaf6W/6mwFmgEkxKWaQGWQGm8FmiBlihpphZvi5C1XzhhlpRpnRZoxJNalmnBlnxpvxZoKZYCaZSSbNpJmpZqqZZqaZGWaGmWlmmllmlplj5ph0k27mmXkmw2SYBWaByTSZZpFZZJaYJWaZWWZWmBVmlVll1sAas86sMxvMBrPJbDJbzBazzWwz2812s8PsMLvMLrPb7DZ7zB6z1+w1+8w+k2WyzH6z3xwwB8xBc9AcMofMYXPYHDVHzTFzzBw3x81Jc9KcNnnOny+9ibXZbZy9wuawV9qc9ir7P+O8Np9NsPltAattbpvnF7Gx1haxRW0xW9w6W8Im2ht+FZe15Wx5W8Heaiva22ylX8U17F22pr3b1rL32Or2zl/Ete29to59yNZFBLCNbX3b1DawD9mG9mHbyDa2TWxT29o+btvYJ2ySfdK2tU/9Kp5n59sVdqVdZVfbHXanPWlP2QP2K3vafm+72e62n33R9rcv2QH2ZZtiB/4qHm5ftyPsG3akHWVH2zG/iifZyTbNTrFT7dt2mp3+qzjdvmdn2gw7y862c+zcH+Nzc8qw79sF9gObaQNYZBfbJXapXWaX/32ui+1au86ut9vtR3aT3Wy32K1224ULYbvT7rIf2932E7vffmn32s/sPnvQZtkvfozP7d9B+7U9ZL+xh+0Re9R+a4/Z79SF7HP7/q39wZ613gIhAUlSFFAMZaNYyk5xdAXloCspJ11FEbqa4ukaykXXUm7KQ3kpHyVQfipAmgxZIgqpIBWiKF1HF6ZXjIqToxKUSDdQSbqRStFNVJpupjJ0C5WlclSeKtCtVJFuo0p0O1WmO6gKVaVqVJ3upBp0F9Wku6kW3UO16V6qQ/dRXbqf6tEDVJ8epAb0EDWkh6kRNaYm1JSa0SPUnB6lFtSSWtFj1Joepzb0BCXRk9SWnqJ29DdqT09TB3qGOtKz1Ik6Uxd6jrrS89SNulMy9aCe9AL1ot7Uh/pSP3qR+tNLNIBephQaSIPoFRpMr9IQeo2G0jAaTq/TCHqDRtIoGk1jKJXG0jh6k8bTWzSBJtIkmkxpNIWm0ts0jabTDHqHZtK7NItm0xyaS+n0Hs2j+ZRB79MC+oAyaSEtosW0hJbSMlpOK2glraLVtIbW0jpaTxtoI22izbSFttI2+pC200e0g3bSLvqYdtMntIc+pb30Ge2jzymLvqD99CUdoK/oIH3tu9M3dJiO0FH6lo7Rd3ScTtBJOkWn6Xs6Qz/QWfIEIYYilKEKgzAmzBbGhtnDuPCKMEd4ZZgzvCqMhFeH8eE1Ya7w2jB3mCfMG+YLE8L8YYFQhya0IYVhWDAsFEZjrgsLh9eHRcKiYbGweOjCEmFieENYMrwxLBXeFJYObw7LhLeEZcNy4UP3VAhvDSuGt4WVwtvDyuEdYZWwalgtrB7eGdYI7wprhneHtcJ7wlLhvWGd8L6wbnh/WC98IKwfPhg2CB8KG4YPh43CxmGTsGnYLHwkbB4+GrYIW4atwsfC1uHjYZvwiTApfDJsGz71Y/+98/9xf3LYI+wZvhC+EHp/t5wTnRtNj74XnRedH82Ivh9dEP0gmhldGF0UXRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/1vno2cOiEk065wMW4bC7WZXdx7gqXw13pcrqrXMRd7eLdNS6Xu9bldnlcXpfPJbj8roDTzjjryIWuoCvkou46V9hd74q4oq6YK+6cK+ESXVPXzDVzzd2jroVr6Vq5x9xj7nH3uHvCPeGedG3dU66d+5tr7552Hdwz7hn3rOvkOrsu7jnX1Y3N+dMxmex6up6ul+vl+rg+rp/r5/q7/m6AG+BSXIob5Aa5wW6wG+KGuKFuqBvuhrsRboQb6Ua60W60S3Wpbpwb58a78W6Cm+AmuUkuzaW5qW6qm+amuYrTf9rKLDfLzXFzXLpLd/PcuWvGDLfALXCZLtMtcovcErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29x2t93t8Ff9NKjb7fa4PW6v2+v2uc9dlvvC7XdfugPuK3fQfe0OuW/cYXfEHXXfumPuO3fcnXAn3Sl32n3vzrgf3FnnXWpkbGRc5M3I+MhbkQmRiZFJkcmRtMiUyNTI25FpkemRGZF3IjMj70ZmRWZH5kTmRtIj70XmReZHMiLvRxZEPohkRhZGFkUWR5ZElka8z78p9AV9IR/11/nC/npfxBf1xXxx73wJn+hv8CX9jb6Uv8mX9jf7Mv4WX9aX8+X9w76Rb+yb+Ka+mX/EN/eP+ha+pW/lH/Ot/eO+jX/CJ/knfVv/lG/n/+bb+6d9B/+M7+if9Z18Z9/FP+e7+ud9N9/dJ/sevqd/wffyvX0f39f38y/6/v4lP8C/7FP8QD/Iv+IH+1f9EP+aH+qH+eExr/sRF26RYYxP9WP9OP+mH+/f8hP8RD/JT/Zpfoqf6t/20/x0P8O/42f6d/0sP9vP8XN9un/Pz/PzfYZ/3y/wH/hMv/DCQ0m/zC/3K/xKv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81/6Lf7j/wOv9Pv8h/73f4Tv8d/6vf6z/w+/7nP8l/4/f5Lf8B/5Q/6r/0h/40/7I/4o/5bf8x/54/7E/6kP+VP++/9Gf+DP8t/s8YYY4wx9oeMvdgUv+z56XF+j9/IET9buScAXLk5X9bP+89dUa7J/VO7t0hoHQGAJ7t3fODCUqVKcnLy+XUzJQSFZgNc+EnQOTFwMV4IreBxSIKWUPI3599bdD5NvzN+9GaAuJ/lxMLF+OL4nwJg8m+M/8hjw+eVCU/G/5PxZwMUKXQxJztcjBdCqx+fr7SEUv9g/nma/878s3+WCtDiZzk54GJ8cf6J8Cg8BUm/WJMxxhhjjDHGGPtJb1G+/YX7zwu/8flb9+cJ6mJONrgY/979OWOMMcYYY4wxxi69pzt3eeKRpKSW7f/1RqX/VdYfbjSE/9bI3PjNhvcAF15RAPBvDghwriH/zL3Y+KdsK+X8ofM/u5ac8gH83yjlbzUGXAHw+yuP/vsrl/gbE2OMMcYYY+w/7uLV/y9fV5dqQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2GXoz/jfY5d6HxljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFL7f8FAAD//y1m/Y0=")
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x401, 0x3a, ',&&*', 0x3a, '$', 0x3a, './file0'}, 0x2c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x30, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x58565559, 0x8, 0x1, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}})
r4 = socket$inet(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$eJzslbFrFEEUxr+Z3du7BA1YaGFzKQJGMHu7G5U0FrEXhETU8jCTcLrJhcsVSUBIsBHEWvwD7KwtUlnYaWVtoYJgYUobBUdmdvZ2Nrt78bhgk/eDm/vmzbyZN7Nv34IgiFPL1y8/Pz+/ubB8BcAZzKBu7N+dbA635n966dSMfLcx9fjAGmqohgGQMjO6x+zvAXi76AB7ybJSZt6vzb9acxkcM6Z/BxyXjb4LBj+NVWbeAgz3jfnhphycpjthRCzYg268stqJRaCaUDXRaudVLRefiv9wn2HFHFDtwKzxrZ3dR+0Y6CUiFqmoyXSfwlAqkpMBJUM5Mez+dHyLHDesK1DP697TJ/uq7xt7YN1fCI7Q6HkwLBm9gDp832+argit8190s/Wd5LEl7FXHXRSNUSaPL87N5SzTUEJl+HD3iVio055YGH/kkDn1kRdkJqu8XAqOEeGz8U+q4hjdizeLXl5xnYY5qLaIY16Sf9idHbUwOyUuHB68L3p9+29Je/IC5gLtoRfqoj5OxvGtUq/zOct0xSvj4awuCZUpkdQP5gKXrPrkWl+FVn99s7W1szvXWW+viTWxEUXz14OrQXAtaunanLR2uTtS/xq6Pk1a69cqaqXHPGy3+/1euA30e+GgHyWtlUxLb7o/tA/X9Y9j9reU6edFv3jph5Ll92Dmx/W/UrNObgKvCI4gCIIgCIIgCIIgCIIgCKKUX5ZuguHD1KAry3Gj23r4bwAAAP//c8NPrw==")
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0)
syncfs(r5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r10}, &(0x7f0000000400), &(0x7f0000000440)=r9}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0de]}}]}}]}, 0x8c}}, 0x0)

1.266616553s ago: executing program 0 (id=571):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000000)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0xfd, 0x4442, &(0x7f0000004480)="$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")
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
r4 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
mq_notify(r4, &(0x7f00000001c0)={0x0, 0xf, 0x1})
read(r4, 0x0, 0x0)

1.158388461s ago: executing program 1 (id=572):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1}, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2865)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000180))
r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x22080, 0x0)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000200), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="100200805203020027bd7002fedbdf25"], 0x10}}, 0x8000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x4000010, 0xffffffffffffffff, 0xedba2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x80600, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000400)={0x3, 0x3ff, 0x0, 0x0, 0x0, 0x80})
r7 = syz_open_dev$loop(&(0x7f00000000c0), 0x7c3, 0x200)
ioctl$BLKROSET(r7, 0x125d, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000440)=0x74)
sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)

1.077933986s ago: executing program 4 (id=573):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x10003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x32, 0x5, 0x7, 0x16, 0xb, 0x1, 0x1, 0x1, {0xffff1c72, 0x0, 0x7, 0x0, 0xffffffba, 0x7}}}}]}, 0x78}}, 0x8000)
sendto$packet(r4, &(0x7f0000000240)="bad33075218151db00316f3a277f", 0x59, 0x22040001, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @link_local}, 0x14)

683.838803ms ago: executing program 1 (id=574):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000c40)={0x1, &(0x7f0000000800)=[{@none}]})

0s ago: executing program 0 (id=575):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0)={[{@jqfmt_vfsv1}, {@noauto_da_alloc}, {@abort}]}, 0x1, 0x563, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbHbbpK02BSnoQQI9WKndtIk/KnioR9FiQe91SaahZNMt2U1pYsH2oBcvUgQRC+If4N1j8R/wryhooUgJevASmWQ22Ta7m1/bZHU/H5j2vZnZefPmzXv5vp1dNoCBNZb9U4h4OSK+SSKOt2wrRr5xbG2/5Se3p7IliZWVT/5MIsnXNfdP8v+PNjPFiF+/jDhT2FxufXFptlKtpvN5frwxd2O8vrh09tpcZSadSa9PTE5eeGty4t133u5ZXV+//Pf3Hz/44MLXp5a/+/nRiXtJXIxj+bbWeuzBndbMWIzl16QUF5/Z8XwPCusnyUGfALsylPfzUmRjwPEYyns98P/3RUSsAANpJBL9HwZUMw5ozu035sHDBxiV7J/H769NgDbXv7j23kgMr86NjiwnT82MsvnuaA/Kz8r45Y/797Ilevc+BMCW7tyNiHPF4ubxL8nHv907t419ni3D+Af750EW/7zRLv4prMc/0Sb+Odqm7+7G1v2/8KgHxXSUxX/vtY1/1x9ajQ7luRciRkajlFy9Vk2zse3FiDgdpcNZvtvznAvLD1c6bWuN/7IlK78ZC+bn8ah4+OnXTFcalb3UudXjuxGvtI1/k/X2T9q0f3Y9Lm+zjJPp/Vc7bdu6/s/Xyk8Rr7Vt/40nWkn355Pjq/fDePOu2Oyvr07+1qn8g65/1v5Hutd/NGl9XlvfeRk/Dv+Tdtq22/v/UPLpavpQvu5WpdGYPx9xKPlo8/qJjdc28839s/qfPtV9/Gt3/49ExGfbrH+3mXQ/tP/0jtp/54mHH37+Q6fy8/qXomv7v7maOp2v2c74t90T3Mu1AwAAAAAAgH5TiIhjkRTK6+lCoVxe+3zHS3GkUK3VG2eu1hauT8fqd2VHo1RoPuk+vpZPmp9/GG3JTzyTn4yIExHx7dDIar48VatOH3TlAQAAAAAAAAAAAAAAAAAAoE8c7fD9/8zvQwd9dsBz5ye/YXBt2f978UtPQF/a7d//+R6fB7D/xP8wuPR/GFz6Pwwu/R8Gl/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50KVtWlp/cnsry0zcXF2ZrN89Op/XZ8tzCVHmqNn+jPFOrzVTT8lRtbqvjVWu1G+cnYuHWeCOtN8bri0tX5moL1xtXrs1VZtIraWlfagUAAAAAAAAAAAAAAAAAAAD/LfXFpdlKtZrOS/RzYvg5HfnO3o9T7IfrI7HjRBLd9znokQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvwbAAD//+f9MzI=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1)
unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0)

kernel console output (not intermixed with test programs):

/0x5d0
[  141.281083][ T5055]  __kmem_cache_alloc_node+0x4f/0x260
[  141.286461][ T5055]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  141.292183][ T5055]  __kmalloc+0xa0/0x240
[  141.296342][ T5055]  tomoyo_realpath_from_path+0xdf/0x5d0
[  141.301899][ T5055]  ? tomoyo_path_number_perm+0x205/0x650
[  141.307547][ T5055]  tomoyo_path_number_perm+0x22f/0x650
[  141.313031][ T5055]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  141.318502][ T5055]  ? ksys_write+0x1c0/0x250
[  141.323016][ T5055]  ? common_file_perm+0x171/0x1c0
[  141.328064][ T5055]  ? __fget_files+0x28/0x4b0
[  141.332656][ T5055]  ? __fget_files+0x28/0x4b0
[  141.337259][ T5055]  security_file_ioctl+0x6c/0xa0
[  141.342202][ T5055]  __se_sys_ioctl+0x48/0x170
[  141.346803][ T5055]  do_syscall_64+0x4c/0xa0
[  141.351241][ T5055]  ? clear_bhb_loop+0x60/0xb0
[  141.355944][ T5055]  ? clear_bhb_loop+0x60/0xb0
[  141.360648][ T5055]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.366551][ T5055] RIP: 0033:0x7fa175b9c819
[  141.370979][ T5055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.390591][ T5055] RSP: 002b:00007fa176a80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  141.399007][ T5055] RAX: ffffffffffffffda RBX: 00007fa175e16090 RCX: 00007fa175b9c819
[  141.406974][ T5055] RDX: 00002000000000c0 RSI: 0000000000005403 RDI: 0000000000000005
[  141.414946][ T5055] RBP: 00007fa176a80090 R08: 0000000000000000 R09: 0000000000000000
[  141.422922][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.430891][ T5055] R13: 00007fa175e16128 R14: 00007fa175e16090 R15: 00007ffdeead0048
[  141.438873][ T5055]  </TASK>
[  141.449273][ T5055] ERROR: Out of memory at tomoyo_realpath_from_path.
[  141.711436][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.716841][ T5069] netlink: 84 bytes leftover after parsing attributes in process `syz.0.170'.
[  141.720886][ T5065] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.812055][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.819547][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.854026][ T5070] bridge0: port 3(syz_tun) entered blocking state
[  141.891911][ T5070] bridge0: port 3(syz_tun) entered disabled state
[  141.907577][ T5070] device syz_tun entered promiscuous mode
[  141.934671][ T5073] bridge0: port 3(syz_tun) entered blocking state
[  141.949359][ T5073] bridge0: port 3(syz_tun) entered disabled state
[  141.968272][ T5073] device syz_tun entered promiscuous mode
[  142.011294][ T5067] loop2: detected capacity change from 0 to 1024
[  142.058569][ T5067] hfsplus: failed to load root directory
[  142.147930][ T5080] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000'
[  142.388165][ T4268] XFS (loop1): Unmounting Filesystem
[  142.625251][ T5082] loop0: detected capacity change from 0 to 32768
[  142.676733][ T5082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.174 (5082)
[  142.785771][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'.
[  143.352384][ T5082] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.410073][ T5082] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  143.459979][ T5082] BTRFS info (device loop0): using free space tree
[  143.599301][ T5076] loop3: detected capacity change from 0 to 32768
[  143.642668][ T5076] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.172 (5076)
[  143.680686][ T5076] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  143.693648][   T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  143.711555][ T5082] BTRFS info (device loop0): enabling ssd optimizations
[  143.739588][ T5116] netlink: 'syz.4.181': attribute type 4 has an invalid length.
[  143.749371][ T5076] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  143.769594][ T5082] FAULT_INJECTION: forcing a failure.
[  143.769594][ T5082] name failslab, interval 1, probability 0, space 0, times 0
[  143.786003][ T5116] netlink: 'syz.4.181': attribute type 3 has an invalid length.
[  143.815339][ T5076] BTRFS info (device loop3): force zlib compression, level 3
[  143.823099][ T5116] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.181'.
[  143.840930][ T5082] CPU: 0 PID: 5082 Comm: syz.0.174 Not tainted syzkaller #0
[  143.848266][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  143.858345][ T5082] Call Trace:
[  143.861639][ T5082]  <TASK>
[  143.864585][ T5082]  dump_stack_lvl+0x188/0x24e
[  143.869302][ T5082]  ? show_regs_print_info+0x12/0x12
[  143.874525][ T5082]  ? load_image+0x400/0x400
[  143.879048][ T5082]  ? __might_sleep+0xd0/0xd0
[  143.883688][ T5082]  ? __lock_acquire+0x7d10/0x7d10
[  143.888744][ T5082]  should_fail_ex+0x399/0x4d0
[  143.893448][ T5082]  should_failslab+0x5/0x20
[  143.897968][ T5082]  slab_pre_alloc_hook+0x59/0x310
[  143.903013][ T5082]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  143.908757][ T5082]  __kmem_cache_alloc_node+0x4f/0x260
[  143.914153][ T5082]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  143.919898][ T5082]  __kmalloc+0xa0/0x240
[  143.924078][ T5082]  tomoyo_realpath_from_path+0xdf/0x5d0
[  143.929655][ T5082]  ? tomoyo_path_number_perm+0x205/0x650
[  143.935309][ T5082]  tomoyo_path_number_perm+0x22f/0x650
[  143.939194][   T27] usb 3-1: Using ep0 maxpacket: 16
[  143.940781][ T5082]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  143.940821][ T5082]  ? ksys_write+0x1c0/0x250
[  143.955858][ T5082]  ? common_file_perm+0x171/0x1c0
[  143.960908][ T5082]  ? __fget_files+0x28/0x4b0
[  143.965498][ T5082]  ? __fget_files+0x28/0x4b0
[  143.970092][ T5082]  security_file_ioctl+0x6c/0xa0
[  143.975034][ T5082]  __se_sys_ioctl+0x48/0x170
[  143.979701][ T5082]  do_syscall_64+0x4c/0xa0
[  143.984171][ T5082]  ? clear_bhb_loop+0x60/0xb0
[  143.988864][ T5082]  ? clear_bhb_loop+0x60/0xb0
[  143.993555][ T5082]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.999447][ T5082] RIP: 0033:0x7fa175b9c819
[  144.003863][ T5082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.023471][ T5082] RSP: 002b:00007fa176aa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.031886][ T5082] RAX: ffffffffffffffda RBX: 00007fa175e15fa0 RCX: 00007fa175b9c819
[  144.039854][ T5082] RDX: 0000000000000000 RSI: 000000005000940e RDI: 0000000000000003
[  144.047824][ T5082] RBP: 00007fa176aa1090 R08: 0000000000000000 R09: 0000000000000000
[  144.055801][ T5082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.063772][ T5082] R13: 00007fa175e16038 R14: 00007fa175e15fa0 R15: 00007ffdeead0048
[  144.071749][ T5082]  </TASK>
[  144.078472][ T5076] BTRFS info (device loop3): turning on flush-on-commit
[  144.085508][ T5076] BTRFS info (device loop3): max_inline at 61
[  144.099365][   T27] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  144.130497][   T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.142803][ T5076] BTRFS info (device loop3): using free space tree
[  144.162499][   T27] usb 3-1: config 0 has no interface number 0
[  144.173810][   T27] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  144.185292][ T5082] ERROR: Out of memory at tomoyo_realpath_from_path.
[  144.248936][   T27] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  144.311652][   T27] usb 3-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.364166][ T4272] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.396615][   T27] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  144.413326][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.503258][   T27] usb 3-1: Product: syz
[  144.518739][   T27] usb 3-1: Manufacturer: syz
[  144.537691][   T27] usb 3-1: SerialNumber: syz
[  144.622746][ T5136] netlink: 84 bytes leftover after parsing attributes in process `syz.1.184'.
[  144.669801][   T27] usb 3-1: config 0 descriptor??
[  144.674923][ T5076] BTRFS info (device loop3): enabling ssd optimizations
[  144.756523][   T27] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  144.817375][ T4416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4416)
[  144.844615][   T27] nokiaca42v2 ttyUSB0: required endpoint is missing
[  144.908749][ T5136] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.916250][ T5136] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.091057][ T5092] loop2: detected capacity change from 0 to 512
[  145.189962][ T5092] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  145.292155][ T4276] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  145.314860][ T5145] bridge0: port 3(syz_tun) entered blocking state
[  145.357967][ T5092] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.178: bad orphan inode 131083
[  145.384738][ T5145] bridge0: port 3(syz_tun) entered disabled state
[  145.403865][ T5145] device syz_tun entered promiscuous mode
[  145.438696][ T5092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  145.544254][ T4369] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop3 scanned by udevd (4369)
[  145.655307][   T26] audit: type=1800 audit(1775416772.455:13): pid=5092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.178" name="file1" dev="loop2" ino=15 res=0 errno=0
[  145.961403][ T5176] loop1: detected capacity change from 0 to 64
[  147.188855][ T5181] gre0 speed is unknown, defaulting to 1000
[  147.201890][ T5181] gre0 speed is unknown, defaulting to 1000
[  147.838085][ T5179] bridge0: port 3(syz_tun) entered blocking state
[  147.844691][ T5179] bridge0: port 3(syz_tun) entered listening state
[  147.852526][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.859657][ T5179] bridge0: port 2(bridge_slave_1) entered listening state
[  147.866974][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.874099][ T5179] bridge0: port 1(bridge_slave_0) entered listening state
[  147.953682][ T5179] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.048255][   T27] usb 3-1: USB disconnect, device number 10
[  148.109571][ T5179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.124174][   T27] cypress_m8 3-1:0.35: device disconnected
[  148.147126][ T5181] gre0 speed is unknown, defaulting to 1000
[  148.365844][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  148.527438][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'.
[  149.336995][ T5181] infiniband syz1: set active
[  149.382574][ T5181] infiniband syz1: added gre0
[  149.404705][ T5189] loop1: detected capacity change from 0 to 1024
[  149.412131][ T5181] rdma_rxe: unable to create cq
[  149.418616][ T5181] infiniband syz1: Couldn't create ib_mad CQ
[  149.485777][ T5181] infiniband syz1: Couldn't open port 1
[  149.548522][ T5189] hfsplus: failed to load root directory
[  149.596356][ T4312] gre0 speed is unknown, defaulting to 1000
[  149.660139][ T5181] RDS/IB: syz1: added
[  149.671496][ T5181] smc: adding ib device syz1 with port count 1
[  149.725634][ T5181] smc:    ib device syz1 port 1 has pnetid 
[  149.785546][ T5207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'.
[  149.806229][ T5207] No such timeout policy "syz1"
[  150.061924][ T4312] gre0 speed is unknown, defaulting to 1000
[  150.460007][ T5181] gre0 speed is unknown, defaulting to 1000
[  150.566112][ T5213] loop3: detected capacity change from 0 to 64
[  150.687437][ T5214] netlink: 'syz.4.193': attribute type 32 has an invalid length.
[  150.710021][ T5218] loop2: detected capacity change from 0 to 64
[  150.722881][ T5216] netlink: 84 bytes leftover after parsing attributes in process `syz.1.196'.
[  151.083089][ T5181] gre0 speed is unknown, defaulting to 1000
[  151.772499][ T5221] loop3: detected capacity change from 0 to 64
[  153.341387][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'.
[  153.859637][ T5181] gre0 speed is unknown, defaulting to 1000
[  154.254497][ T5181] gre0 speed is unknown, defaulting to 1000
[  154.369369][ T4371] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  154.430536][ T5246] loop1: detected capacity change from 0 to 1024
[  154.502673][ T5246] hfsplus: failed to load root directory
[  154.722546][ T4371] usb 4-1: Using ep0 maxpacket: 8
[  154.723718][ T5181] gre0 speed is unknown, defaulting to 1000
[  154.729720][ T4371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  154.753352][ T4371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  154.763034][ T4371] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  154.796075][ T4371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  154.872306][ T5256] loop2: detected capacity change from 0 to 64
[  155.531605][ T4371] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  155.542156][ T4371] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  155.552351][ T4371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.562632][ T4371] usb 4-1: config 0 descriptor??
[  155.582316][   T48] Bluetooth: hci5: urb ffff888141ab9e00 submission failed (90)
[  155.738015][ T5260] loop2: detected capacity change from 0 to 512
[  155.758060][ T5260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  155.785791][ T5245] FAULT_INJECTION: forcing a failure.
[  155.785791][ T5245] name failslab, interval 1, probability 0, space 0, times 0
[  155.810821][ T5245] CPU: 1 PID: 5245 Comm: syz.3.205 Not tainted syzkaller #0
[  155.818162][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  155.828239][ T5245] Call Trace:
[  155.831537][ T5245]  <TASK>
[  155.834487][ T5245]  dump_stack_lvl+0x188/0x24e
[  155.839202][ T5245]  ? show_regs_print_info+0x12/0x12
[  155.844431][ T5245]  ? load_image+0x400/0x400
[  155.848959][ T5245]  ? __might_sleep+0xd0/0xd0
[  155.853561][ T5245]  ? __lock_acquire+0x7d10/0x7d10
[  155.858608][ T5245]  ? mark_lock+0x94/0x320
[  155.862966][ T5245]  should_fail_ex+0x399/0x4d0
[  155.867661][ T5245]  should_failslab+0x5/0x20
[  155.872193][ T5245]  slab_pre_alloc_hook+0x59/0x310
[  155.877250][ T5245]  kmem_cache_alloc_node+0x5a/0x320
[  155.882470][ T5245]  ? __alloc_skb+0xfc/0x7e0
[  155.887003][ T5245]  __alloc_skb+0xfc/0x7e0
[  155.891359][ T5245]  alloc_skb_with_frags+0xa7/0x710
[  155.896495][ T5245]  ? aa_sk_perm+0x950/0x950
[  155.901032][ T5245]  sock_alloc_send_pskb+0x87f/0x9a0
[  155.906270][ T5245]  ? sock_kzfree_s+0x50/0x50
[  155.910884][ T5245]  ? aa_file_perm+0x112/0xf00
[  155.915589][ T5245]  ? aa_sk_perm+0x81f/0x950
[  155.920129][ T5245]  hci_sock_sendmsg+0x203/0xe50
[  155.925043][ T5245]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  155.931467][ T5245]  ? aa_file_perm+0x3ea/0xf00
[  155.936141][ T5245]  ? hci_sock_getsockopt+0x5f0/0x5f0
[  155.941433][ T5245]  ? aa_sock_msg_perm+0x94/0x150
[  155.946373][ T5245]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  155.951656][ T5245]  ? security_socket_sendmsg+0x7c/0xa0
[  155.957120][ T5245]  sock_write_iter+0x2d9/0x3e0
[  155.961879][ T5245]  ? sock_read_iter+0x3a0/0x3a0
[  155.966755][ T5245]  ? common_file_perm+0x171/0x1c0
[  155.971777][ T5245]  vfs_write+0x4b1/0xa30
[  155.976025][ T5245]  ? file_end_write+0x250/0x250
[  155.980882][ T5245]  ? __fget_files+0x43d/0x4b0
[  155.985576][ T5245]  ? __fdget_pos+0x1d4/0x360
[  155.990162][ T5245]  ? ksys_write+0x71/0x250
[  155.994579][ T5245]  ksys_write+0x14c/0x250
[  155.998916][ T5245]  ? __ia32_sys_read+0x80/0x80
[  156.003688][ T5245]  ? lockdep_hardirqs_on+0x94/0x140
[  156.008886][ T5245]  do_syscall_64+0x4c/0xa0
[  156.013300][ T5245]  ? clear_bhb_loop+0x60/0xb0
[  156.017997][ T5245]  ? clear_bhb_loop+0x60/0xb0
[  156.022685][ T5245]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.028584][ T5245] RIP: 0033:0x7fe564d9c819
[  156.032999][ T5245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.052686][ T5245] RSP: 002b:00007fe565b93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  156.061094][ T5245] RAX: ffffffffffffffda RBX: 00007fe565015fa0 RCX: 00007fe564d9c819
[  156.069062][ T5245] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 0000000000000007
[  156.077025][ T5245] RBP: 00007fe565b93090 R08: 0000000000000000 R09: 0000000000000000
[  156.084990][ T5245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.092953][ T5245] R13: 00007fe565016038 R14: 00007fe565015fa0 R15: 00007ffe6edfb798
[  156.100932][ T5245]  </TASK>
[  156.113101][ T4313] usb 4-1: USB disconnect, device number 3
[  156.174588][ T4312] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  156.194113][ T5260] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  156.221903][ T5260] EXT4-fs (loop2): 1 truncate cleaned up
[  156.227680][ T5260] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  156.410189][ T4312] usb 2-1: config 0 has no interfaces?
[  156.439949][ T4312] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  156.493517][ T5271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'.
[  156.614582][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.889592][ T4312] usb 2-1: config 0 descriptor??
[  157.169382][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  157.174907][ T4312] usb 2-1: USB disconnect, device number 2
[  157.307435][ T5278] loop2: detected capacity change from 0 to 64
[  158.710845][ T5286] loop3: detected capacity change from 0 to 32768
[  158.738417][ T5286] (syz.3.214,5286,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  158.758643][ T5286] (syz.3.214,5286,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  158.824130][ T5286] JBD2: Ignoring recovery information on journal
[  159.056365][ T5286] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  159.564622][ T5273] ocfs2: Unmounting device (7,3) on (node local)
[  159.651297][ T5300] loop0: detected capacity change from 0 to 64
[  160.289853][ T5290] loop2: detected capacity change from 0 to 1024
[  160.372536][ T5290] hfsplus: failed to load root directory
[  160.560772][ T4410] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  160.800236][ T5304] fuse: Unknown parameter '¦úJâHt7–å†RómÚÙ†SgÒÝØï »UàÆ2›}°ˆ‹ëöAÈ·ÛÔφÝðë|ZÎI!ö„v'
[  162.052739][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'.
[  162.980843][ T5324] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  163.230674][ T5331] loop2: detected capacity change from 0 to 64
[  163.272834][ T5322] loop3: detected capacity change from 0 to 4096
[  163.332070][ T5322] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match.  Run ntfsfix or chkdsk.
[  164.034433][ T5322] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  164.182489][ T5322] ntfs: (device loop3): load_system_files(): Failed to load $Volume.
[  164.232593][ T5322] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files.
[  164.705382][ T5342] loop1: detected capacity change from 0 to 64
[  165.118922][ T5345] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  165.609251][ T5348] loop3: detected capacity change from 0 to 512
[  165.778584][ T5348] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  166.155494][ T5359] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  166.747775][ T5360] block device autoloading is deprecated and will be removed.
[  166.883408][ T5353] loop0: detected capacity change from 0 to 32768
[  167.069430][ T5353] XFS (loop0): Mounting V5 Filesystem
[  167.174815][ T5372] loop3: detected capacity change from 0 to 64
[  167.434718][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'.
[  168.163875][ T5381] loop1: detected capacity change from 0 to 64
[  168.282332][ T5353] XFS (loop0): Ending clean mount
[  168.382014][ T5353] XFS (loop0): Quotacheck needed: Please wait.
[  168.716657][ T5353] XFS (loop0): Quotacheck: Done.
[  168.782230][ T5392] FAULT_INJECTION: forcing a failure.
[  168.782230][ T5392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.800058][ T5392] CPU: 1 PID: 5392 Comm: syz.2.246 Not tainted syzkaller #0
[  168.807391][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  168.817467][ T5392] Call Trace:
[  168.820761][ T5392]  <TASK>
[  168.823703][ T5392]  dump_stack_lvl+0x188/0x24e
[  168.828411][ T5392]  ? show_regs_print_info+0x12/0x12
[  168.833633][ T5392]  ? load_image+0x400/0x400
[  168.838148][ T5392]  ? __lock_acquire+0x7d10/0x7d10
[  168.843176][ T5392]  should_fail_ex+0x399/0x4d0
[  168.847844][ T5392]  _copy_from_user+0x2c/0x170
[  168.852531][ T5392]  ___sys_sendmsg+0x1c3/0x360
[  168.857239][ T5392]  ? __sys_sendmsg+0x290/0x290
[  168.862032][ T5392]  ? __lock_acquire+0x7d10/0x7d10
[  168.867061][ T5392]  __se_sys_sendmsg+0x1bb/0x2a0
[  168.871908][ T5392]  ? __x64_sys_sendmsg+0x80/0x80
[  168.876844][ T5392]  ? lockdep_hardirqs_on+0x94/0x140
[  168.882033][ T5392]  do_syscall_64+0x4c/0xa0
[  168.886442][ T5392]  ? clear_bhb_loop+0x60/0xb0
[  168.891108][ T5392]  ? clear_bhb_loop+0x60/0xb0
[  168.895809][ T5392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.901703][ T5392] RIP: 0033:0x7ff6f1b9c819
[  168.906113][ T5392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.925735][ T5392] RSP: 002b:00007ff6f29c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.934160][ T5392] RAX: ffffffffffffffda RBX: 00007ff6f1e16090 RCX: 00007ff6f1b9c819
[  168.942126][ T5392] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000009
[  168.950108][ T5392] RBP: 00007ff6f29c3090 R08: 0000000000000000 R09: 0000000000000000
[  168.958113][ T5392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.966091][ T5392] R13: 00007ff6f1e16128 R14: 00007ff6f1e16090 R15: 00007fff130c8798
[  168.974086][ T5392]  </TASK>
[  169.000116][ T4272] XFS (loop0): Unmounting Filesystem
[  169.113941][ T5397] QAT: failed to copy from user.
[  169.189630][ T5397] loop3: detected capacity change from 0 to 1024
[  170.169348][ T5397] hfsplus: xattr search failed
[  170.223636][ T5397] hfsplus: xattr searching failed
[  170.407308][ T5407] loop1: detected capacity change from 0 to 4096
[  171.169802][ T5421] loop0: detected capacity change from 0 to 64
[  171.183251][ T4276] hfsplus: node 4:3 still has 1 user(s)!
[  171.294286][ T5407] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  171.876230][ T5434] loop1: detected capacity change from 0 to 1024
[  171.884951][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'.
[  171.913689][ T5434] ext2: Unknown parameter 'fowner<00000000000980643439'
[  171.924430][ T5432] netlink: 'syz.2.263': attribute type 10 has an invalid length.
[  172.424663][ T5444] loop3: detected capacity change from 0 to 131072
[  172.457487][ T5444] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0)
[  172.466980][ T5444] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  172.482640][ T5444] F2FS-fs (loop3): invalid crc value
[  172.525922][ T5444] F2FS-fs (loop3): Found nat_bits in checkpoint
[  172.579782][ T5444] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  172.586858][ T5444] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  172.884394][ T5453] FAULT_INJECTION: forcing a failure.
[  172.884394][ T5453] name failslab, interval 1, probability 0, space 0, times 0
[  172.942106][ T5453] CPU: 0 PID: 5453 Comm: syz.0.265 Not tainted syzkaller #0
[  172.944571][ T5432] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  172.949428][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  172.949444][ T5453] Call Trace:
[  172.971216][ T5453]  <TASK>
[  172.974165][ T5453]  dump_stack_lvl+0x188/0x24e
[  172.978877][ T5453]  ? show_regs_print_info+0x12/0x12
[  172.984115][ T5453]  ? load_image+0x400/0x400
[  172.988648][ T5453]  ? __might_sleep+0xd0/0xd0
[  172.993253][ T5453]  ? __lock_acquire+0x7d10/0x7d10
[  172.998306][ T5453]  should_fail_ex+0x399/0x4d0
[  173.003015][ T5453]  should_failslab+0x5/0x20
[  173.007544][ T5453]  slab_pre_alloc_hook+0x59/0x310
[  173.012610][ T5453]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  173.018365][ T5453]  __kmem_cache_alloc_node+0x4f/0x260
[  173.023765][ T5453]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  173.029521][ T5453]  __kmalloc+0xa0/0x240
[  173.033724][ T5453]  tomoyo_realpath_from_path+0xdf/0x5d0
[  173.039323][ T5453]  ? tomoyo_path_number_perm+0x205/0x650
[  173.044989][ T5453]  tomoyo_path_number_perm+0x22f/0x650
[  173.050485][ T5453]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  173.054247][ T5452] netlink: 'syz.0.265': attribute type 10 has an invalid length.
[  173.055954][ T5453]  ? ksys_write+0x1c0/0x250
[  173.068180][ T5453]  ? common_file_perm+0x171/0x1c0
[  173.073229][ T5453]  ? __fget_files+0x28/0x4b0
[  173.077818][ T5453]  ? __fget_files+0x28/0x4b0
[  173.082421][ T5453]  security_file_ioctl+0x6c/0xa0
[  173.087359][ T5453]  __se_sys_ioctl+0x48/0x170
[  173.091952][ T5453]  do_syscall_64+0x4c/0xa0
[  173.096369][ T5453]  ? clear_bhb_loop+0x60/0xb0
[  173.101046][ T5453]  ? clear_bhb_loop+0x60/0xb0
[  173.105722][ T5453]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  173.111620][ T5453] RIP: 0033:0x7fa175b9c819
[  173.116041][ T5453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.135701][ T5453] RSP: 002b:00007fa176a80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.144111][ T5453] RAX: ffffffffffffffda RBX: 00007fa175e16090 RCX: 00007fa175b9c819
[  173.152097][ T5453] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000008
[  173.160173][ T5453] RBP: 00007fa176a80090 R08: 0000000000000000 R09: 0000000000000000
[  173.168144][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.176112][ T5453] R13: 00007fa175e16128 R14: 00007fa175e16090 R15: 00007ffdeead0048
[  173.184094][ T5453]  </TASK>
[  173.256076][ T5453] ERROR: Out of memory at tomoyo_realpath_from_path.
[  173.341329][ T5452] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  174.115731][ T5467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[  174.654068][ T5468] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  174.662870][ T5468] overlayfs: missing 'lowerdir'
[  175.044527][ T5476] loop3: detected capacity change from 0 to 256
[  175.141989][ T5475] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  175.152555][ T5475] FAT-fs (loop3): Filesystem has been set read-only
[  175.160211][ T5475] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  175.170500][ T5475] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  175.189061][ T5475] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  175.268371][   T26] audit: type=1800 audit(1775416800.089:14): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.267" name="file1" dev="loop3" ino=1048597 res=0 errno=0
[  175.830917][ T5479] loop2: detected capacity change from 0 to 32768
[  176.521157][ T5483] FAULT_INJECTION: forcing a failure.
[  176.521157][ T5483] name failslab, interval 1, probability 0, space 0, times 0
[  176.534017][ T5483] CPU: 0 PID: 5483 Comm: syz.0.272 Not tainted syzkaller #0
[  176.541337][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  176.551456][ T5483] Call Trace:
[  176.554751][ T5483]  <TASK>
[  176.557707][ T5483]  dump_stack_lvl+0x188/0x24e
[  176.562423][ T5483]  ? asm_sysvec_call_function_single+0x16/0x20
[  176.568606][ T5483]  ? show_regs_print_info+0x12/0x12
[  176.571646][ T5462] loop1: detected capacity change from 0 to 512
[  176.573817][ T5483]  ? load_image+0x400/0x400
[  176.573865][ T5483]  should_fail_ex+0x399/0x4d0
[  176.589231][ T5462] EXT4-fs: Ignoring removed orlov option
[  176.589258][ T5483]  should_failslab+0x5/0x20
[  176.599389][ T5483]  slab_pre_alloc_hook+0x59/0x310
[  176.604419][ T5483]  kmem_cache_alloc_node+0x5a/0x320
[  176.609615][ T5483]  ? alloc_io_context+0x27/0x290
[  176.614550][ T5483]  alloc_io_context+0x27/0x290
[  176.619313][ T5483]  set_task_ioprio+0x458/0x5d0
[  176.624073][ T5483]  ? set_task_ioprio+0x5b/0x5d0
[  176.628921][ T5483]  __se_sys_ioprio_set+0x54d/0xa40
[  176.634045][ T5483]  ? __se_sys_ioprio_set+0xf4/0xa40
[  176.639260][ T5483]  do_syscall_64+0x4c/0xa0
[  176.643685][ T5483]  ? clear_bhb_loop+0x60/0xb0
[  176.648366][ T5483]  ? clear_bhb_loop+0x60/0xb0
[  176.653048][ T5483]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.658955][ T5483] RIP: 0033:0x7fa175b9c819
[  176.663370][ T5483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.682976][ T5483] RSP: 002b:00007fa176a80028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb
[  176.691389][ T5483] RAX: ffffffffffffffda RBX: 00007fa175e16090 RCX: 00007fa175b9c819
[  176.699355][ T5483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  176.707326][ T5483] RBP: 00007fa176a80090 R08: 0000000000000000 R09: 0000000000000000
[  176.715291][ T5483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.723256][ T5483] R13: 00007fa175e16128 R14: 00007fa175e16090 R15: 00007ffdeead0048
[  176.731235][ T5483]  </TASK>
[  176.763215][ T5483] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  176.788609][ T5483] overlayfs: missing 'lowerdir'
[  177.105784][ T5462] EXT4-fs (loop1): Test dummy encryption mode enabled
[  177.180348][ T5462] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  177.282406][ T5462] EXT4-fs (loop1): 1 truncate cleaned up
[  177.375806][ T5462] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  178.509356][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.516847][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.636755][ T5497] bridge0: port 3(syz_tun) entered blocking state
[  178.646971][ T5497] bridge0: port 3(syz_tun) entered disabled state
[  178.669943][ T5497] device syz_tun entered promiscuous mode
[  178.682874][ T4268] EXT4-fs (loop1): unmounting filesystem.
[  179.451327][ T5505] loop1: detected capacity change from 0 to 131072
[  179.493330][ T5505] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0)
[  179.502809][ T5505] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  179.524343][ T5505] F2FS-fs (loop1): invalid crc value
[  179.552138][ T5507] loop2: detected capacity change from 0 to 2048
[  179.562300][ T5507] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  179.603996][ T5505] F2FS-fs (loop1): Found nat_bits in checkpoint
[  179.633096][ T5511] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.725804][ T5514] FAULT_INJECTION: forcing a failure.
[  179.725804][ T5514] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.744084][   T26] audit: type=1800 audit(1775416804.347:15): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.278" name="file2" dev="loop2" ino=16 res=0 errno=0
[  179.891208][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'.
[  179.921426][ T5505] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  179.928505][ T5505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  179.939753][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'.
[  180.043564][ T5514] CPU: 0 PID: 5514 Comm: syz.2.278 Not tainted syzkaller #0
[  180.050903][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  180.060967][ T5514] Call Trace:
[  180.064255][ T5514]  <TASK>
[  180.067181][ T5514]  dump_stack_lvl+0x188/0x24e
[  180.071856][ T5514]  ? show_regs_print_info+0x12/0x12
[  180.077045][ T5514]  ? load_image+0x400/0x400
[  180.081538][ T5514]  ? __lock_acquire+0x7d10/0x7d10
[  180.086577][ T5514]  ? snprintf+0xe5/0x140
[  180.090812][ T5514]  should_fail_ex+0x399/0x4d0
[  180.095478][ T5514]  _copy_to_user+0x2c/0x130
[  180.099972][ T5514]  simple_read_from_buffer+0xe3/0x150
[  180.105339][ T5514]  proc_fail_nth_read+0x1a6/0x220
[  180.110358][ T5514]  ? proc_fault_inject_write+0x310/0x310
[  180.115983][ T5514]  ? fsnotify_perm+0x248/0x550
[  180.120736][ T5514]  ? proc_fault_inject_write+0x310/0x310
[  180.126369][ T5514]  vfs_read+0x2de/0xa00
[  180.130521][ T5514]  ? kernel_read+0x1e0/0x1e0
[  180.135102][ T5514]  ? __fget_files+0x28/0x4b0
[  180.139683][ T5514]  ? __fget_files+0x28/0x4b0
[  180.144263][ T5514]  ? __fget_files+0x43d/0x4b0
[  180.148931][ T5514]  ? __fdget_pos+0x2ae/0x360
[  180.153518][ T5514]  ? ksys_read+0x71/0x250
[  180.157845][ T5514]  ksys_read+0x14c/0x250
[  180.162082][ T5514]  ? vfs_write+0xa30/0xa30
[  180.166495][ T5514]  ? lockdep_hardirqs_on+0x94/0x140
[  180.171689][ T5514]  do_syscall_64+0x4c/0xa0
[  180.176097][ T5514]  ? clear_bhb_loop+0x60/0xb0
[  180.180760][ T5514]  ? clear_bhb_loop+0x60/0xb0
[  180.185426][ T5514]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.191311][ T5514] RIP: 0033:0x7ff6f1b5d04e
[  180.195712][ T5514] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  180.215334][ T5514] RSP: 002b:00007ff6f29c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  180.223738][ T5514] RAX: ffffffffffffffda RBX: 00007ff6f29c36c0 RCX: 00007ff6f1b5d04e
[  180.231727][ T5514] RDX: 000000000000000f RSI: 00007ff6f29c30a0 RDI: 0000000000000005
[  180.239686][ T5514] RBP: 00007ff6f29c3090 R08: 0000000000000000 R09: 0000000000000000
[  180.247641][ T5514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.255598][ T5514] R13: 00007ff6f1e16128 R14: 00007ff6f1e16090 R15: 00007fff130c8798
[  180.263605][ T5514]  </TASK>
[  180.455945][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  180.464414][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  180.471590][    C0] bridge0: port 3(syz_tun) entered learning state
[  181.889391][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[  182.519073][ T5545] loop0: detected capacity change from 0 to 1024
[  182.597218][ T5545] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  182.741956][ T5551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'.
[  183.057839][ T5523] loop3: detected capacity change from 0 to 32768
[  183.077832][ T5523] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.281 (5523)
[  183.105152][ T5523] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.164019][ T5523] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  183.217215][ T5523] BTRFS info (device loop3): setting nodatacow, compression disabled
[  183.219568][ T5529] loop1: detected capacity change from 0 to 32768
[  183.241798][ T5523] BTRFS info (device loop3): turning on flush-on-commit
[  183.245038][ T5545] loop0: detected capacity change from 0 to 4096
[  183.286303][ T5523] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  183.301175][ T5545] ntfs3: loop0: ino=3, Correct links count -> 2.
[  183.348444][ T5523] BTRFS info (device loop3): use lzo compression, level 0
[  183.377986][ T5523] BTRFS info (device loop3): setting nodatasum
[  183.412615][ T5523] BTRFS info (device loop3): use no compression
[  183.450988][ T5523] BTRFS info (device loop3): trying to use backup root at mount time
[  183.503971][ T5523] BTRFS info (device loop3): max_inline at 0
[  183.552312][ T5523] BTRFS info (device loop3): using free space tree
[  183.952413][ T4712] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  184.011060][ T5523] BTRFS warning (device loop3): couldn't read tree root
[  184.072896][ T5523] BTRFS warning (device loop3): try to load backup roots slot 1
[  184.091297][ T4505] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[  184.114597][ T5523] BTRFS warning (device loop3): couldn't read tree root
[  184.122980][ T5523] BTRFS warning (device loop3): try to load backup roots slot 2
[  184.138124][ T5523] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  184.188091][ T5523] BTRFS warning (device loop3): couldn't read tree root
[  184.220237][ T5523] BTRFS warning (device loop3): try to load backup roots slot 3
[  184.368008][ T5523] BTRFS error (device loop3): open_ctree failed: -22
[  184.599300][ T5568] loop0: detected capacity change from 0 to 32768
[  186.548405][ T5595] FAULT_INJECTION: forcing a failure.
[  186.548405][ T5595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.561599][ T5595] CPU: 0 PID: 5595 Comm: syz.2.298 Not tainted syzkaller #0
[  186.568892][ T5595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  186.578940][ T5595] Call Trace:
[  186.582210][ T5595]  <TASK>
[  186.585131][ T5595]  dump_stack_lvl+0x188/0x24e
[  186.589808][ T5595]  ? show_regs_print_info+0x12/0x12
[  186.594994][ T5595]  ? load_image+0x400/0x400
[  186.599489][ T5595]  ? kasan_check_range+0x1b0/0x290
[  186.604595][ T5595]  should_fail_ex+0x399/0x4d0
[  186.609261][ T5595]  _copy_from_user+0x2c/0x170
[  186.613929][ T5595]  ___sys_sendmsg+0x1c3/0x360
[  186.618602][ T5595]  ? __sys_sendmsg+0x290/0x290
[  186.623371][ T5595]  ? __lock_acquire+0x7d10/0x7d10
[  186.628400][ T5595]  __se_sys_sendmsg+0x1bb/0x2a0
[  186.633247][ T5595]  ? __x64_sys_sendmsg+0x80/0x80
[  186.638182][ T5595]  ? lockdep_hardirqs_on+0x94/0x140
[  186.643370][ T5595]  do_syscall_64+0x4c/0xa0
[  186.647776][ T5595]  ? clear_bhb_loop+0x60/0xb0
[  186.652453][ T5595]  ? clear_bhb_loop+0x60/0xb0
[  186.657119][ T5595]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  186.663000][ T5595] RIP: 0033:0x7ff6f1b9c819
[  186.667400][ T5595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.686999][ T5595] RSP: 002b:00007ff6f29c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.695419][ T5595] RAX: ffffffffffffffda RBX: 00007ff6f1e16090 RCX: 00007ff6f1b9c819
[  186.703467][ T5595] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003
[  186.711429][ T5595] RBP: 00007ff6f29c3090 R08: 0000000000000000 R09: 0000000000000000
[  186.719388][ T5595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.727376][ T5595] R13: 00007ff6f1e16128 R14: 00007ff6f1e16090 R15: 00007fff130c8798
[  186.735340][ T5595]  </TASK>
[  186.748362][ T5592] FAULT_INJECTION: forcing a failure.
[  186.748362][ T5592] name failslab, interval 1, probability 0, space 0, times 0
[  186.760998][ T5592] CPU: 1 PID: 5592 Comm: syz.0.292 Not tainted syzkaller #0
[  186.768269][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  186.778325][ T5592] Call Trace:
[  186.781596][ T5592]  <TASK>
[  186.784516][ T5592]  dump_stack_lvl+0x188/0x24e
[  186.789192][ T5592]  ? show_regs_print_info+0x12/0x12
[  186.794384][ T5592]  ? load_image+0x400/0x400
[  186.798875][ T5592]  ? __lock_acquire+0x7d10/0x7d10
[  186.803904][ T5592]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  186.809592][ T5592]  should_fail_ex+0x399/0x4d0
[  186.814290][ T5592]  should_failslab+0x5/0x20
[  186.818786][ T5592]  slab_pre_alloc_hook+0x59/0x310
[  186.823843][ T5592]  kmem_cache_alloc+0x56/0x2f0
[  186.828620][ T5592]  ? getname_flags+0xb7/0x500
[  186.833318][ T5592]  getname_flags+0xb7/0x500
[  186.837819][ T5592]  __x64_sys_renameat2+0xac/0xe0
[  186.842764][ T5592]  do_syscall_64+0x4c/0xa0
[  186.847192][ T5592]  ? clear_bhb_loop+0x60/0xb0
[  186.851871][ T5592]  ? clear_bhb_loop+0x60/0xb0
[  186.856555][ T5592]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  186.862443][ T5592] RIP: 0033:0x7fa175b9c819
[  186.866849][ T5592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.886451][ T5592] RSP: 002b:00007fa176a80028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  186.894860][ T5592] RAX: ffffffffffffffda RBX: 00007fa175e16090 RCX: 00007fa175b9c819
[  186.902845][ T5592] RDX: ffffffffffffff9c RSI: 0000200000000280 RDI: ffffffffffffff9c
[  186.910816][ T5592] RBP: 00007fa176a80090 R08: 0000000000000000 R09: 0000000000000000
[  186.918800][ T5592] R10: 000020000001ff00 R11: 0000000000000246 R12: 0000000000000001
[  186.926758][ T5592] R13: 00007fa175e16128 R14: 00007fa175e16090 R15: 00007ffdeead0048
[  186.934724][ T5592]  </TASK>
[  187.699926][ T5598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.300'.
[  187.958176][ T5608] fuse: Unknown parameter '0xffffffffffffffff'
[  188.105334][ T5612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'.
[  189.086375][ T5623] loop1: detected capacity change from 0 to 1024
[  189.141396][ T5623] hfsplus: failed to load root directory
[  189.379301][ T5630] FAULT_INJECTION: forcing a failure.
[  189.379301][ T5630] name failslab, interval 1, probability 0, space 0, times 0
[  189.524356][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'.
[  189.709283][ T5615] loop3: detected capacity change from 0 to 32768
[  189.982545][ T5630] CPU: 1 PID: 5630 Comm: syz.0.308 Not tainted syzkaller #0
[  189.989861][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  189.999917][ T5630] Call Trace:
[  190.003194][ T5630]  <TASK>
[  190.006112][ T5630]  dump_stack_lvl+0x188/0x24e
[  190.010816][ T5630]  ? show_regs_print_info+0x12/0x12
[  190.016035][ T5630]  ? load_image+0x400/0x400
[  190.020562][ T5630]  ? __might_sleep+0xd0/0xd0
[  190.025148][ T5630]  ? __lock_acquire+0x7d10/0x7d10
[  190.030178][ T5630]  ? rcu_is_watching+0x11/0xa0
[  190.034967][ T5630]  should_fail_ex+0x399/0x4d0
[  190.039651][ T5630]  should_failslab+0x5/0x20
[  190.044150][ T5630]  slab_pre_alloc_hook+0x59/0x310
[  190.049266][ T5630]  ? kvmalloc_node+0x6c/0x180
[  190.053944][ T5630]  __kmem_cache_alloc_node+0x4f/0x260
[  190.059322][ T5630]  ? mutex_lock_nested+0x10/0x10
[  190.064261][ T5630]  ? kvmalloc_node+0x6c/0x180
[  190.068934][ T5630]  __kmalloc_node+0xa0/0x240
[  190.073527][ T5630]  kvmalloc_node+0x6c/0x180
[  190.078032][ T5630]  seq_read_iter+0x1f6/0xd50
[  190.082637][ T5630]  seq_read+0x171/0x210
[  190.086796][ T5630]  ? seq_open+0x130/0x130
[  190.091125][ T5630]  ? debugfs_file_get+0x34e/0x450
[  190.096146][ T5630]  ? debugfs_real_fops+0xa0/0xa0
[  190.101080][ T5630]  ? trace_raw_output_contention_end+0xd0/0xd0
[  190.107248][ T5630]  ? end_current_label_crit_section+0x14b/0x170
[  190.113503][ T5630]  full_proxy_read+0x109/0x1c0
[  190.118267][ T5630]  ? full_proxy_llseek+0x1b0/0x1b0
[  190.123382][ T5630]  vfs_read+0x2de/0xa00
[  190.127548][ T5630]  ? kernel_read+0x1e0/0x1e0
[  190.132140][ T5630]  ? __fget_files+0x28/0x4b0
[  190.136730][ T5630]  ? __fget_files+0x28/0x4b0
[  190.141325][ T5630]  ? __fget_files+0x43d/0x4b0
[  190.146008][ T5630]  ? __fdget_pos+0x2ae/0x360
[  190.150601][ T5630]  ? ksys_read+0x71/0x250
[  190.154934][ T5630]  ksys_read+0x14c/0x250
[  190.159185][ T5630]  ? vfs_write+0xa30/0xa30
[  190.163609][ T5630]  ? lockdep_hardirqs_on+0x94/0x140
[  190.168810][ T5630]  do_syscall_64+0x4c/0xa0
[  190.173227][ T5630]  ? clear_bhb_loop+0x60/0xb0
[  190.177900][ T5630]  ? clear_bhb_loop+0x60/0xb0
[  190.182573][ T5630]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  190.188462][ T5630] RIP: 0033:0x7fa175b9c819
[  190.192897][ T5630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.212497][ T5630] RSP: 002b:00007fa176aa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  190.220911][ T5630] RAX: ffffffffffffffda RBX: 00007fa175e15fa0 RCX: 00007fa175b9c819
[  190.228897][ T5630] RDX: 0000000000002020 RSI: 00002000000034c0 RDI: 0000000000000005
[  190.236866][ T5630] RBP: 00007fa176aa1090 R08: 0000000000000000 R09: 0000000000000000
[  190.244832][ T5630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.252800][ T5630] R13: 00007fa175e16038 R14: 00007fa175e15fa0 R15: 00007ffdeead0048
[  190.260778][ T5630]  </TASK>
[  190.563676][ T5638] binder: 5637:5638 ioctl c0306201 2000000003c0 returned -14
[  190.628413][ T5644] Bluetooth: MGMT ver 1.22
[  190.722713][ T5641] capability: warning: `syz.0.311' uses 32-bit capabilities (legacy support in use)
[  190.896491][ T5656] loop2: detected capacity change from 0 to 64
[  191.612609][ T5640] loop0: detected capacity change from 0 to 4096
[  192.000777][ T5640] NILFS (loop0): invalid segment: Checksum error in segment payload
[  192.090429][ T5640] NILFS (loop0): trying rollback from an earlier position
[  192.168769][ T5640] NILFS (loop0): recovery complete
[  192.205913][ T5677] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.397837][ T5678] loop1: detected capacity change from 0 to 4096
[  192.441519][ T5678] ntfs3: Unknown parameter 'I‘ É6˜M'
[  192.536750][ T4369] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  192.671482][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[  193.436592][ T5686] loop3: detected capacity change from 0 to 1024
[  193.448132][ T5691] binder: BINDER_SET_CONTEXT_MGR already set
[  193.454723][ T5691] binder: 5690:5691 ioctl 4018620d 200000000040 returned -16
[  193.502599][ T5686] hfsplus: failed to load root directory
[  193.556347][ T5694] binder: 5690:5694 ioctl c0306201 2000000003c0 returned -14
[  194.305857][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[  195.620116][ T5719] loop1: detected capacity change from 0 to 64
[  195.694246][ T5717] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  195.839530][ T5719] syz.1.332 uses obsolete (PF_INET,SOCK_PACKET)
[  196.269417][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'.
[  197.038672][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[  197.044744][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  197.050847][ T4283] Bluetooth: hci1: command 0x0406 tx timeout
[  197.056881][ T4283] Bluetooth: hci0: command 0x0406 tx timeout
[  197.058726][ T5738] binder: 5736:5738 ioctl c0306201 2000000003c0 returned -14
[  197.062920][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[  197.731743][ T5752] loop0: detected capacity change from 0 to 256
[  198.567943][ T5754] loop1: detected capacity change from 0 to 1024
[  198.611027][ T5751] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  198.621320][ T5751] FAT-fs (loop0): Filesystem has been set read-only
[  198.628402][ T5751] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  198.638785][ T5751] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  198.651480][ T5751] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  198.785024][   T26] audit: type=1800 audit(1775416822.052:16): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.337" name="file1" dev="loop0" ino=1048598 res=0 errno=0
[  198.811549][ T5754] hfsplus: failed to load root directory
[  199.656577][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'.
[  199.801171][ T5766] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.344'.
[  200.570708][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'.
[  200.960520][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  200.967139][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  201.026922][ T5777] mmap: syz.1.348 (5777) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  201.321449][ T5791] binder: 5790:5791 ioctl c0306201 2000000003c0 returned -14
[  201.558576][ T4915] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  201.739974][ T4915] usb 1-1: device descriptor read/64, error -71
[  202.190949][ T4915] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  202.733074][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'.
[  202.813618][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'.
[  203.109505][ T4915] usb 1-1: device descriptor read/64, error -71
[  203.236147][ T4915] usb usb1-port1: attempt power cycle
[  203.311728][   T26] audit: type=1800 audit(1775416826.404:17): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.358" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  203.422233][ T5820] Cannot find del_set index 0 as target
[  204.026898][ T4915] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  204.102548][ T4915] usb 1-1: device descriptor read/8, error -71
[  204.454118][ T4915] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  205.065255][ T4915] usb 1-1: device descriptor read/8, error -71
[  205.102229][ T4504] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  205.160040][ T5828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'.
[  205.244970][   T26] audit: type=1800 audit(1775416828.219:18): pid=5832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.362" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  205.245342][ T4915] usb usb1-port1: unable to enumerate USB device
[  205.335798][ T5836] FAULT_INJECTION: forcing a failure.
[  205.335798][ T5836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.349200][ T5836] CPU: 0 PID: 5836 Comm: syz.0.362 Not tainted syzkaller #0
[  205.356511][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  205.366607][ T5836] Call Trace:
[  205.369908][ T5836]  <TASK>
[  205.372859][ T5836]  dump_stack_lvl+0x188/0x24e
[  205.377569][ T5836]  ? show_regs_print_info+0x12/0x12
[  205.382797][ T5836]  ? load_image+0x400/0x400
[  205.387324][ T5836]  ? __lock_acquire+0x7d10/0x7d10
[  205.392378][ T5836]  should_fail_ex+0x399/0x4d0
[  205.397076][ T5836]  _copy_from_user+0x2c/0x170
[  205.401784][ T5836]  copy_clone_args_from_user+0x1ea/0x6d0
[  205.407449][ T5836]  ? __delayed_free_task+0x20/0x20
[  205.412595][ T5836]  __se_sys_clone3+0x13f/0x3f0
[  205.417377][ T5836]  ? __x64_sys_clone3+0x60/0x60
[  205.422273][ T5836]  ? lockdep_hardirqs_on+0x94/0x140
[  205.427496][ T5836]  do_syscall_64+0x4c/0xa0
[  205.431955][ T5836]  ? clear_bhb_loop+0x60/0xb0
[  205.436653][ T5836]  ? clear_bhb_loop+0x60/0xb0
[  205.441352][ T5836]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.447264][ T5836] RIP: 0033:0x7fa175b9c819
[  205.451698][ T5836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.471324][ T5836] RSP: 002b:00007fa176a7fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  205.479770][ T5836] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa175b9c819
[  205.487768][ T5836] RDX: 00007fa176a7ff10 RSI: 0000000000000058 RDI: 00007fa176a7ff10
[  205.495770][ T5836] RBP: 00007fa176a80090 R08: 0000000000000000 R09: 0000000000000058
[  205.503761][ T5836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.511752][ T5836] R13: 00007fa175e16128 R14: 00007fa175e16090 R15: 00007ffdeead0048
[  205.519757][ T5836]  </TASK>
[  206.091116][ T5841] loop2: detected capacity change from 0 to 64
[  206.238055][ T5844] device syzkaller0 entered promiscuous mode
[  207.101666][ T5847] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000'
[  207.191441][ T5849] device syzkaller0 entered promiscuous mode
[  207.236277][ T5849] FAULT_INJECTION: forcing a failure.
[  207.236277][ T5849] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.294830][ T5849] CPU: 0 PID: 5849 Comm: syz.1.369 Not tainted syzkaller #0
[  207.302180][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  207.312262][ T5849] Call Trace:
[  207.315564][ T5849]  <TASK>
[  207.318512][ T5849]  dump_stack_lvl+0x188/0x24e
[  207.323227][ T5849]  ? show_regs_print_info+0x12/0x12
[  207.328459][ T5849]  ? load_image+0x400/0x400
[  207.332994][ T5849]  ? __lock_acquire+0x7d10/0x7d10
[  207.338057][ T5849]  should_fail_ex+0x399/0x4d0
[  207.342769][ T5849]  _copy_from_user+0x2c/0x170
[  207.347486][ T5849]  ___sys_sendmsg+0x1c3/0x360
[  207.352218][ T5849]  ? __sys_sendmsg+0x290/0x290
[  207.357040][ T5849]  ? __lock_acquire+0x7d10/0x7d10
[  207.362122][ T5849]  __se_sys_sendmsg+0x1bb/0x2a0
[  207.367008][ T5849]  ? __x64_sys_sendmsg+0x80/0x80
[  207.371994][ T5849]  ? lockdep_hardirqs_on+0x94/0x140
[  207.377230][ T5849]  do_syscall_64+0x4c/0xa0
[  207.381680][ T5849]  ? clear_bhb_loop+0x60/0xb0
[  207.386391][ T5849]  ? clear_bhb_loop+0x60/0xb0
[  207.391097][ T5849]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.397021][ T5849] RIP: 0033:0x7fcf4939c819
[  207.401462][ T5849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.421103][ T5849] RSP: 002b:00007fcf4a1a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  207.429553][ T5849] RAX: ffffffffffffffda RBX: 00007fcf49615fa0 RCX: 00007fcf4939c819
[  207.437554][ T5849] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  207.445552][ T5849] RBP: 00007fcf4a1a5090 R08: 0000000000000000 R09: 0000000000000000
[  207.448347][ T5858] loop0: detected capacity change from 0 to 4096
[  207.453526][ T5849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.461971][ T5856] loop3: detected capacity change from 0 to 8192
[  207.467810][ T5849] R13: 00007fcf49616038 R14: 00007fcf49615fa0 R15: 00007fff09da2a18
[  207.467840][ T5849]  </TASK>
[  207.535263][ T5856] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  207.573132][ T5856] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  207.583276][ T5856] REISERFS (device loop3): using ordered data mode
[  207.590249][ T5856] reiserfs: using flush barriers
[  207.604268][ T5856] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  207.671119][ T5862] xt_CT: No such helper "snmp_trap"
[  207.671922][ T5856] REISERFS (device loop3): checking transaction log (loop3)
[  207.702537][ T5856] REISERFS (device loop3): Using r5 hash to sort names
[  207.714254][ T5856] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  207.838172][ T5862] device syzkaller0 entered promiscuous mode
[  207.902893][ T4272] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  207.927069][ T4272] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  208.701886][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'.
[  208.949237][ T5882] loop1: detected capacity change from 0 to 1024
[  209.088828][ T5886] loop2: detected capacity change from 0 to 1024
[  209.228862][ T5888] FAULT_INJECTION: forcing a failure.
[  209.228862][ T5888] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.314773][ T5891] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000'
[  209.341701][ T5894] loop3: detected capacity change from 0 to 64
[  209.348502][ T5888] CPU: 1 PID: 5888 Comm: syz.0.380 Not tainted syzkaller #0
[  209.355824][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  209.365881][ T5888] Call Trace:
[  209.369152][ T5888]  <TASK>
[  209.372081][ T5888]  dump_stack_lvl+0x188/0x24e
[  209.376774][ T5888]  ? show_regs_print_info+0x12/0x12
[  209.381974][ T5888]  ? load_image+0x400/0x400
[  209.386472][ T5888]  ? __lock_acquire+0x7d10/0x7d10
[  209.391514][ T5888]  should_fail_ex+0x399/0x4d0
[  209.396189][ T5888]  _copy_from_user+0x2c/0x170
[  209.400955][ T5888]  ___sys_sendmsg+0x1c3/0x360
[  209.405637][ T5888]  ? __sys_sendmsg+0x290/0x290
[  209.410408][ T5888]  ? __lock_acquire+0x7d10/0x7d10
[  209.415441][ T5888]  __se_sys_sendmsg+0x1bb/0x2a0
[  209.420899][ T5888]  ? __x64_sys_sendmsg+0x80/0x80
[  209.425870][ T5888]  ? lockdep_hardirqs_on+0x94/0x140
[  209.431060][ T5888]  do_syscall_64+0x4c/0xa0
[  209.435471][ T5888]  ? clear_bhb_loop+0x60/0xb0
[  209.440586][ T5888]  ? clear_bhb_loop+0x60/0xb0
[  209.445265][ T5888]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  209.451167][ T5888] RIP: 0033:0x7fa175b9c819
[  209.455572][ T5888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.475176][ T5888] RSP: 002b:00007fa176aa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.483596][ T5888] RAX: ffffffffffffffda RBX: 00007fa175e15fa0 RCX: 00007fa175b9c819
[  209.491567][ T5888] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  209.499540][ T5888] RBP: 00007fa176aa1090 R08: 0000000000000000 R09: 0000000000000000
[  209.507504][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  209.515466][ T5888] R13: 00007fa175e16038 R14: 00007fa175e15fa0 R15: 00007ffdeead0048
[  209.523448][ T5888]  </TASK>
[  209.526484][    C1] vkms_vblank_simulate: vblank timer overrun
[  210.696464][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'.
[  210.737581][ T4311] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  210.962031][ T4311] usb 2-1: Using ep0 maxpacket: 8
[  210.979414][ T4311] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  211.098919][ T4311] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  211.194228][ T4311] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  211.219978][ T4311] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  211.268752][ T4311] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  211.280425][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.370638][ T5904] loop0: detected capacity change from 0 to 4096
[  211.427798][ T5904] ntfs3: Unknown parameter 'ÿÿ'
[  211.441076][ T5909] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  211.529724][ T4311] usb 2-1: GET_CAPABILITIES returned 0
[  211.535411][ T4311] usbtmc 2-1:16.0: can't read capabilities
[  211.752674][ T4915] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  211.794796][ T4311] usb 2-1: USB disconnect, device number 3
[  211.977261][ T4915] usb 3-1: Using ep0 maxpacket: 8
[  211.990187][ T4915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  212.040723][ T4915] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  212.050173][ T4915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.105142][ T4915] usb 3-1: config 0 descriptor??
[  212.350839][ T4915] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  212.596885][    C0] bridge0: port 3(syz_tun) entered forwarding state
[  212.603544][    C0] bridge0: topology change detected, propagating
[  212.610961][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.618275][    C0] bridge0: topology change detected, propagating
[  212.624759][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.632058][    C0] bridge0: topology change detected, propagating
[  212.640176][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  212.741476][ T5919] loop0: detected capacity change from 0 to 32768
[  212.770259][ T5919] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  212.805116][ T5919] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  212.826889][ T5919] BTRFS info (device loop0): force clearing of disk cache
[  212.847770][ T5919] BTRFS info (device loop0): metadata ratio 0
[  212.869473][ T5919] BTRFS info (device loop0): enabling ssd optimizations
[  212.904155][ T5919] BTRFS info (device loop0): using spread ssd allocation scheme
[  212.939067][ T5919] BTRFS info (device loop0): using free space tree
[  212.969195][ T4311] usb 3-1: USB disconnect, device number 11
[  213.188425][ T5946] loop1: detected capacity change from 0 to 64
[  213.936817][ T5919] BTRFS info (device loop0): rebuilding free space tree
[  214.108025][ T5960] loop6: detected capacity change from 0 to 8
[  214.157627][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  214.174815][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  214.188873][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.198421][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  214.213137][ T4272] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.221176][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.232611][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  214.275117][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.284325][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  214.302521][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.311818][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  214.363257][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.372520][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  214.407757][ T5931] loop3: detected capacity change from 0 to 40427
[  214.407877][ T5965] FAULT_INJECTION: forcing a failure.
[  214.407877][ T5965] name failslab, interval 1, probability 0, space 0, times 0
[  214.439421][ T5931] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  214.466062][ T5931] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  214.499187][ T5931] F2FS-fs (loop3): invalid crc value
[  214.512229][ T5965] CPU: 1 PID: 5965 Comm: syz.2.403 Not tainted syzkaller #0
[  214.519573][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  214.529654][ T5965] Call Trace:
[  214.532953][ T5965]  <TASK>
[  214.535904][ T5965]  dump_stack_lvl+0x188/0x24e
[  214.540641][ T5965]  ? show_regs_print_info+0x12/0x12
[  214.545881][ T5965]  ? load_image+0x400/0x400
[  214.550431][ T5965]  ? __might_sleep+0xd0/0xd0
[  214.555102][ T5965]  ? __lock_acquire+0x7d10/0x7d10
[  214.560138][ T5965]  should_fail_ex+0x399/0x4d0
[  214.564819][ T5965]  should_failslab+0x5/0x20
[  214.569319][ T5965]  slab_pre_alloc_hook+0x59/0x310
[  214.574349][ T5965]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  214.580071][ T5965]  __kmem_cache_alloc_node+0x4f/0x260
[  214.585445][ T5965]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  214.591171][ T5965]  __kmalloc+0xa0/0x240
[  214.595332][ T5965]  tomoyo_realpath_from_path+0xdf/0x5d0
[  214.600883][ T5965]  ? tomoyo_path_number_perm+0x205/0x650
[  214.606520][ T5965]  tomoyo_path_number_perm+0x22f/0x650
[  214.611981][ T5965]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  214.617534][ T5965]  ? ksys_write+0x1c0/0x250
[  214.622066][ T5965]  ? common_file_perm+0x171/0x1c0
[  214.627112][ T5965]  ? __fget_files+0x28/0x4b0
[  214.631706][ T5965]  ? __fget_files+0x28/0x4b0
[  214.636310][ T5965]  security_file_ioctl+0x6c/0xa0
[  214.641251][ T5965]  __se_sys_ioctl+0x48/0x170
[  214.645870][ T5965]  do_syscall_64+0x4c/0xa0
[  214.650307][ T5965]  ? clear_bhb_loop+0x60/0xb0
[  214.655002][ T5965]  ? clear_bhb_loop+0x60/0xb0
[  214.659688][ T5965]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.665606][ T5965] RIP: 0033:0x7ff6f1b9c819
[  214.670478][ T5965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.690096][ T5965] RSP: 002b:00007ff6f29e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  214.698513][ T5965] RAX: ffffffffffffffda RBX: 00007ff6f1e15fa0 RCX: 00007ff6f1b9c819
[  214.706567][ T5965] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010
[  214.714617][ T5965] RBP: 00007ff6f29e4090 R08: 0000000000000000 R09: 0000000000000000
[  214.722584][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.730546][ T5965] R13: 00007ff6f1e16038 R14: 00007ff6f1e15fa0 R15: 00007fff130c8798
[  214.738523][ T5965]  </TASK>
[  214.779785][ T5931] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  214.798823][ T5965] ERROR: Out of memory at tomoyo_realpath_from_path.
[  215.029345][ T5971] loop0: detected capacity change from 0 to 1024
[  215.041590][ T5971] hfsplus: failed to load root directory
[  215.103025][ T5931] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  215.130194][ T5931] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  215.203367][ T5931] FAULT_INJECTION: forcing a failure.
[  215.203367][ T5931] name failslab, interval 1, probability 0, space 0, times 0
[  215.303667][ T5931] CPU: 1 PID: 5931 Comm: syz.3.396 Not tainted syzkaller #0
[  215.311015][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  215.321094][ T5931] Call Trace:
[  215.324397][ T5931]  <TASK>
[  215.327344][ T5931]  dump_stack_lvl+0x188/0x24e
[  215.332051][ T5931]  ? show_regs_print_info+0x12/0x12
[  215.337282][ T5931]  ? load_image+0x400/0x400
[  215.341814][ T5931]  ? __might_sleep+0xd0/0xd0
[  215.346427][ T5931]  ? __lock_acquire+0x7d10/0x7d10
[  215.351489][ T5931]  should_fail_ex+0x399/0x4d0
[  215.356195][ T5931]  should_failslab+0x5/0x20
[  215.360726][ T5931]  slab_pre_alloc_hook+0x59/0x310
[  215.365777][ T5931]  ? vfs_write+0x61f/0xa30
[  215.370227][ T5931]  kmem_cache_alloc+0x56/0x2f0
[  215.375016][ T5931]  ? getname_flags+0xb7/0x500
[  215.379721][ T5931]  getname_flags+0xb7/0x500
[  215.384250][ T5931]  do_sys_openat2+0xdd/0x4b0
[  215.388877][ T5931]  ? do_sys_open+0xe0/0xe0
[  215.393323][ T5931]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  215.399337][ T5931]  ? lock_chain_count+0x20/0x20
[  215.404224][ T5931]  __x64_sys_creat+0x8c/0xb0
[  215.408855][ T5931]  do_syscall_64+0x4c/0xa0
[  215.413294][ T5931]  ? clear_bhb_loop+0x60/0xb0
[  215.417997][ T5931]  ? clear_bhb_loop+0x60/0xb0
[  215.422693][ T5931]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.428605][ T5931] RIP: 0033:0x7fe564d9c819
[  215.433028][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.452807][ T5931] RSP: 002b:00007fe565b93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  215.461216][ T5931] RAX: ffffffffffffffda RBX: 00007fe565015fa0 RCX: 00007fe564d9c819
[  215.469182][ T5931] RDX: 0000000000000000 RSI: 00000000000000e0 RDI: 0000200000000100
[  215.477156][ T5931] RBP: 00007fe565b93090 R08: 0000000000000000 R09: 0000000000000000
[  215.485133][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.493096][ T5931] R13: 00007fe565016038 R14: 00007fe565015fa0 R15: 00007ffe6edfb798
[  215.501081][ T5931]  </TASK>
[  215.843787][ T5963] loop1: detected capacity change from 0 to 32768
[  215.888308][ T5963] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.402 (5963)
[  215.930897][ T5963] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.941504][ T5963] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  215.975500][ T5963] BTRFS info (device loop1): force clearing of disk cache
[  215.995952][ T5963] BTRFS info (device loop1): force zlib compression, level 3
[  216.005951][ T5963] BTRFS info (device loop1): enabling auto defrag
[  216.028032][ T5963] BTRFS info (device loop1): max_inline at 0
[  216.044921][ T5963] BTRFS info (device loop1): enabling disk space caching
[  216.076337][ T5963] BTRFS info (device loop1): disk space caching is enabled
[  216.152551][ T5974] loop2: detected capacity change from 0 to 32768
[  216.251626][ T5974] XFS (loop2): Mounting V5 Filesystem
[  216.390583][ T5963] BTRFS info (device loop1): enabling ssd optimizations
[  216.403298][ T5974] XFS (loop2): Ending clean mount
[  216.421400][ T5974] XFS (loop2): Quotacheck needed: Please wait.
[  216.439979][ T5963] BTRFS info (device loop1): rebuilding free space tree
[  216.488718][ T5974] XFS (loop2): Quotacheck: Done.
[  216.531663][ T5963] BTRFS info (device loop1): disabling free space tree
[  216.572221][ T5963] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  216.592796][ T4281] XFS (loop2): Unmounting Filesystem
[  216.675436][ T5963] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  216.838897][ T5963] overlayfs: workdir and upperdir must reside under the same mount
[  217.116451][ T6027] loop0: detected capacity change from 0 to 64
[  217.234931][ T6027] hfs: unable to locate alternate MDB
[  217.241007][ T6027] hfs: continuing without an alternate MDB
[  217.338572][ T6011] loop3: detected capacity change from 0 to 32768
[  217.510592][ T6011] XFS (loop3): Mounting V5 Filesystem
[  217.563566][ T6011] XFS (loop3): Ending clean mount
[  217.600414][ T6011] XFS (loop3): Quotacheck needed: Please wait.
[  217.953757][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'.
[  218.015949][ T6011] XFS (loop3): Quotacheck: Done.
[  218.662354][ T4276] XFS (loop3): Unmounting Filesystem
[  219.004861][ T6034] loop2: detected capacity change from 0 to 32768
[  219.094294][ T6049] loop0: detected capacity change from 0 to 64
[  220.210396][ T6034] XFS (loop2): Mounting V5 Filesystem
[  220.316265][ T4268] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.938941][ T6034] XFS (loop2): Ending clean mount
[  220.999036][ T6034] XFS (loop2): Quotacheck needed: Please wait.
[  221.445419][ T6034] XFS (loop2): Quotacheck: Done.
[  221.585458][ T4281] XFS (loop2): Unmounting Filesystem
[  222.089526][ T6068] loop3: detected capacity change from 0 to 64
[  223.419854][ T6062] loop0: detected capacity change from 0 to 32768
[  223.474962][ T6062] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.420 (6062)
[  223.530414][ T6062] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  223.618986][ T6062] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  223.678395][ T6062] BTRFS info (device loop0): setting nodatasum
[  223.684684][ T6062] BTRFS info (device loop0): force zlib compression, level 3
[  223.731265][ T6062] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  223.774579][ T6062] BTRFS info (device loop0): use lzo compression, level 0
[  223.779387][ T6083] loop3: detected capacity change from 0 to 1024
[  223.805919][ T6062] BTRFS info (device loop0): turning on flush-on-commit
[  223.892027][ T6062] BTRFS info (device loop0): enabling auto defrag
[  223.898572][ T6062] BTRFS info (device loop0): max_inline at 4096
[  223.950225][ T6062] BTRFS info (device loop0): using free space tree
[  224.033055][ T6091] loop3: detected capacity change from 0 to 64
[  224.877107][ T6062] BTRFS error (device loop0): open_ctree failed: -12
[  224.940051][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'.
[  225.347745][ T6086] loop2: detected capacity change from 0 to 32768
[  225.447125][ T6086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.422 (6086)
[  225.492157][ T6123] loop1: detected capacity change from 0 to 64
[  226.099977][ T6086] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.206434][ T6086] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  226.215384][ T6086] BTRFS info (device loop2): setting nodatasum
[  226.225068][ T6086] BTRFS info (device loop2): force zlib compression, level 3
[  226.233045][ T6086] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  226.242307][ T6086] BTRFS info (device loop2): use lzo compression, level 0
[  226.249562][ T6086] BTRFS info (device loop2): turning on flush-on-commit
[  226.256628][ T6086] BTRFS info (device loop2): enabling auto defrag
[  226.263124][ T6086] BTRFS info (device loop2): max_inline at 4096
[  226.294452][ T6086] BTRFS info (device loop2): using free space tree
[  226.409057][ T6133] loop1: detected capacity change from 0 to 64
[  226.411998][ T6125] loop0: detected capacity change from 0 to 4096
[  226.437482][ T6125] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  227.538823][ T6086] BTRFS error (device loop2): open_ctree failed: -22
[  227.729174][ T6125] ntfs: (device loop0): parse_options(): NLS character set macgreÿ
 not found. Using previous one utf8.
[  227.755381][ T6125] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  227.800912][ T6125] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount.
[  227.846086][ T6125] ntfs: (device loop0): read_ntfs_boot_sector(): Using backup boot sector.
[  227.903885][ T6125] ntfs: volume version 3.1.
[  228.849784][ T6151] loop3: detected capacity change from 0 to 2048
[  228.885895][ T6151] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  228.985916][ T6157] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.385628][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[  229.668915][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'.
[  230.072637][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[  230.606696][ T6187] loop0: detected capacity change from 0 to 64
[  231.322951][ T6191] FAULT_INJECTION: forcing a failure.
[  231.322951][ T6191] name failslab, interval 1, probability 0, space 0, times 0
[  231.350931][ T6191] CPU: 1 PID: 6191 Comm: syz.3.445 Not tainted syzkaller #0
[  231.358276][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  231.368357][ T6191] Call Trace:
[  231.371644][ T6191]  <TASK>
[  231.374577][ T6191]  dump_stack_lvl+0x188/0x24e
[  231.379298][ T6191]  ? show_regs_print_info+0x12/0x12
[  231.384497][ T6191]  ? load_image+0x400/0x400
[  231.389002][ T6191]  ? __might_sleep+0xd0/0xd0
[  231.393603][ T6191]  ? __lock_acquire+0x7d10/0x7d10
[  231.398632][ T6191]  should_fail_ex+0x399/0x4d0
[  231.403317][ T6191]  should_failslab+0x5/0x20
[  231.407815][ T6191]  slab_pre_alloc_hook+0x59/0x310
[  231.412845][ T6191]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  231.418598][ T6191]  __kmem_cache_alloc_node+0x4f/0x260
[  231.423972][ T6191]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  231.429690][ T6191]  __kmalloc+0xa0/0x240
[  231.433852][ T6191]  tomoyo_realpath_from_path+0xdf/0x5d0
[  231.439433][ T6191]  ? tomoyo_path_number_perm+0x205/0x650
[  231.445069][ T6191]  tomoyo_path_number_perm+0x22f/0x650
[  231.450528][ T6191]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  231.455987][ T6191]  ? ksys_write+0x1c0/0x250
[  231.460567][ T6191]  ? common_file_perm+0x171/0x1c0
[  231.465618][ T6191]  ? __fget_files+0x28/0x4b0
[  231.470217][ T6191]  ? __fget_files+0x28/0x4b0
[  231.474864][ T6191]  security_file_ioctl+0x6c/0xa0
[  231.479939][ T6191]  __se_sys_ioctl+0x48/0x170
[  231.484541][ T6191]  do_syscall_64+0x4c/0xa0
[  231.488967][ T6191]  ? clear_bhb_loop+0x60/0xb0
[  231.493658][ T6191]  ? clear_bhb_loop+0x60/0xb0
[  231.498337][ T6191]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  231.504235][ T6191] RIP: 0033:0x7fe564d9c819
[  231.508650][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.528252][ T6191] RSP: 002b:00007fe565b93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.536662][ T6191] RAX: ffffffffffffffda RBX: 00007fe565015fa0 RCX: 00007fe564d9c819
[  231.544628][ T6191] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000003
[  231.552592][ T6191] RBP: 00007fe565b93090 R08: 0000000000000000 R09: 0000000000000000
[  231.560560][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.568532][ T6191] R13: 00007fe565016038 R14: 00007fe565015fa0 R15: 00007ffe6edfb798
[  231.576512][ T6191]  </TASK>
[  231.700780][ T6191] ERROR: Out of memory at tomoyo_realpath_from_path.
[  231.708771][ T6198] FAULT_INJECTION: forcing a failure.
[  231.708771][ T6198] name failslab, interval 1, probability 0, space 0, times 0
[  231.746323][ T4309] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  231.754134][ T6198] CPU: 0 PID: 6198 Comm: syz.1.450 Not tainted syzkaller #0
[  231.761467][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  231.771805][ T6198] Call Trace:
[  231.775112][ T6198]  <TASK>
[  231.778067][ T6198]  dump_stack_lvl+0x188/0x24e
[  231.782794][ T6198]  ? show_regs_print_info+0x12/0x12
[  231.788023][ T6198]  ? load_image+0x400/0x400
[  231.792565][ T6198]  ? __might_sleep+0xd0/0xd0
[  231.797173][ T6198]  ? __lock_acquire+0x7d10/0x7d10
[  231.802231][ T6198]  should_fail_ex+0x399/0x4d0
[  231.806939][ T6198]  should_failslab+0x5/0x20
[  231.811456][ T6198]  slab_pre_alloc_hook+0x59/0x310
[  231.816490][ T6198]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  231.822219][ T6198]  __kmem_cache_alloc_node+0x4f/0x260
[  231.827601][ T6198]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  231.833321][ T6198]  __kmalloc+0xa0/0x240
[  231.837483][ T6198]  tomoyo_realpath_from_path+0xdf/0x5d0
[  231.843037][ T6198]  ? tomoyo_path_number_perm+0x205/0x650
[  231.848695][ T6198]  tomoyo_path_number_perm+0x22f/0x650
[  231.854161][ T6198]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  231.859623][ T6198]  ? ksys_write+0x1c0/0x250
[  231.864130][ T6198]  ? common_file_perm+0x171/0x1c0
[  231.869169][ T6198]  ? __fget_files+0x28/0x4b0
[  231.873757][ T6198]  ? __fget_files+0x28/0x4b0
[  231.878356][ T6198]  security_file_ioctl+0x6c/0xa0
[  231.883300][ T6198]  __se_sys_ioctl+0x48/0x170
[  231.887891][ T6198]  do_syscall_64+0x4c/0xa0
[  231.892307][ T6198]  ? clear_bhb_loop+0x60/0xb0
[  231.896981][ T6198]  ? clear_bhb_loop+0x60/0xb0
[  231.901658][ T6198]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  231.907852][ T6198] RIP: 0033:0x7fcf4939c819
[  231.912296][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.931925][ T6198] RSP: 002b:00007fcf4a1a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.940359][ T6198] RAX: ffffffffffffffda RBX: 00007fcf49615fa0 RCX: 00007fcf4939c819
[  231.948379][ T6198] RDX: 0000200000000940 RSI: 00000000c018620c RDI: 0000000000000003
[  231.956364][ T6198] RBP: 00007fcf4a1a5090 R08: 0000000000000000 R09: 0000000000000000
[  231.964334][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.972299][ T6198] R13: 00007fcf49616038 R14: 00007fcf49615fa0 R15: 00007fff09da2a18
[  231.980457][ T6198]  </TASK>
[  231.983529][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.004028][ T6198] ERROR: Out of memory at tomoyo_realpath_from_path.
[  232.048350][ T6198] binder: 6196:6198 ioctl c018620c 200000000940 returned -22
[  232.205847][ T4309] usb 1-1: Using ep0 maxpacket: 8
[  232.213412][ T4309] usb 1-1: unable to get BOS descriptor or descriptor too short
[  232.241999][ T4309] usb 1-1: config 3 has an invalid interface number: 178 but max is 0
[  232.280588][ T4309] usb 1-1: config 3 has no interface number 0
[  232.296688][ T4309] usb 1-1: config 3 interface 178 altsetting 9 bulk endpoint 0xF has invalid maxpacket 16
[  232.327010][ T4309] usb 1-1: config 3 interface 178 has no altsetting 0
[  232.360211][ T4309] usb 1-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=bf.2a
[  232.373893][ T6195] loop2: detected capacity change from 0 to 40427
[  232.380473][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.388947][ T4309] usb 1-1: Product: syz
[  232.393184][ T4309] usb 1-1: Manufacturer: ဌ
[  232.397817][ T4309] usb 1-1: SerialNumber: syz
[  232.405506][ T6195] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  232.418673][ T6193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  232.428450][ T6195] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  232.452083][ T6195] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7
[  232.489661][ T6195] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  232.535653][ T6195] F2FS-fs (loop2): invalid crc value
[  232.598145][ T6195] F2FS-fs (loop2): Found nat_bits in checkpoint
[  232.895144][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[  233.364856][ T6195] F2FS-fs (loop2): Start checkpoint disabled!
[  233.452233][ T6195] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  233.495957][ T6195] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  233.536249][ T4309] rtl8150 1-1:3.178: couldn't find required endpoints
[  233.561199][ T4309] rtl8150: probe of 1-1:3.178 failed with error -5
[  233.600582][ T4309] usb 1-1: USB disconnect, device number 7
[  233.792949][ T6203] loop3: detected capacity change from 0 to 40427
[  233.944265][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'.
[  234.541319][ T6203] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  234.599585][ T6203] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  234.648539][ T6203] F2FS-fs (loop3): invalid crc value
[  234.770920][ T6239] loop1: detected capacity change from 0 to 512
[  234.843045][ T6241] loop0: detected capacity change from 0 to 64
[  235.165467][ T6239] EXT4-fs (loop1): Test dummy encryption mode enabled
[  235.187550][ T6203] F2FS-fs (loop3): Found nat_bits in checkpoint
[  235.239610][ T6239] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  235.528047][ T6239] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.458: bad orphan inode 131083
[  235.552550][ T6239] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  235.591492][ T4504] kworker/u4:14: attempt to access beyond end of device
[  235.591492][ T4504] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  235.983598][ T6239] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  236.135906][ T4268] EXT4-fs (loop1): unmounting filesystem.
[  236.395207][ T6259] FAULT_INJECTION: forcing a failure.
[  236.395207][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.542454][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'.
[  236.558518][ T6259] CPU: 1 PID: 6259 Comm: syz.3.461 Not tainted syzkaller #0
[  236.565854][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  236.575919][ T6259] Call Trace:
[  236.579208][ T6259]  <TASK>
[  236.582146][ T6259]  dump_stack_lvl+0x188/0x24e
[  236.586851][ T6259]  ? show_regs_print_info+0x12/0x12
[  236.592066][ T6259]  ? load_image+0x400/0x400
[  236.596589][ T6259]  ? __lock_acquire+0x7d10/0x7d10
[  236.601647][ T6259]  should_fail_ex+0x399/0x4d0
[  236.606340][ T6259]  _copy_from_user+0x2c/0x170
[  236.611047][ T6259]  ___sys_sendmsg+0x1c3/0x360
[  236.615774][ T6259]  ? __sys_sendmsg+0x290/0x290
[  236.620578][ T6259]  ? __lock_acquire+0x7d10/0x7d10
[  236.625649][ T6259]  __se_sys_sendmsg+0x1bb/0x2a0
[  236.630531][ T6259]  ? __x64_sys_sendmsg+0x80/0x80
[  236.635533][ T6259]  ? lockdep_hardirqs_on+0x94/0x140
[  236.640760][ T6259]  do_syscall_64+0x4c/0xa0
[  236.645200][ T6259]  ? clear_bhb_loop+0x60/0xb0
[  236.649894][ T6259]  ? clear_bhb_loop+0x60/0xb0
[  236.654605][ T6259]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.660535][ T6259] RIP: 0033:0x7fe564d9c819
[  236.665072][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.684875][ T6259] RSP: 002b:00007fe565b93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.693305][ T6259] RAX: ffffffffffffffda RBX: 00007fe565015fa0 RCX: 00007fe564d9c819
[  236.701287][ T6259] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000003
[  236.709268][ T6259] RBP: 00007fe565b93090 R08: 0000000000000000 R09: 0000000000000000
[  236.717252][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.725233][ T6259] R13: 00007fe565016038 R14: 00007fe565015fa0 R15: 00007ffe6edfb798
[  236.733241][ T6259]  </TASK>
[  236.932456][ T6265] loop2: detected capacity change from 0 to 64
[  237.074046][ T6270] FAULT_INJECTION: forcing a failure.
[  237.074046][ T6270] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  237.362185][ T6270] CPU: 0 PID: 6270 Comm: syz.3.466 Not tainted syzkaller #0
[  237.369535][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  237.379611][ T6270] Call Trace:
[  237.382904][ T6270]  <TASK>
[  237.385852][ T6270]  dump_stack_lvl+0x188/0x24e
[  237.390557][ T6270]  ? show_regs_print_info+0x12/0x12
[  237.395783][ T6270]  ? load_image+0x400/0x400
[  237.400311][ T6270]  ? __lock_acquire+0x7d10/0x7d10
[  237.405389][ T6270]  ? snprintf+0xe5/0x140
[  237.409856][ T6270]  should_fail_ex+0x399/0x4d0
[  237.414729][ T6270]  _copy_to_user+0x2c/0x130
[  237.419258][ T6270]  simple_read_from_buffer+0xe3/0x150
[  237.424660][ T6270]  proc_fail_nth_read+0x1a6/0x220
[  237.429711][ T6270]  ? proc_fault_inject_write+0x310/0x310
[  237.435367][ T6270]  ? fsnotify_perm+0x248/0x550
[  237.440152][ T6270]  ? proc_fault_inject_write+0x310/0x310
[  237.445801][ T6270]  vfs_read+0x2de/0xa00
[  237.449987][ T6270]  ? kernel_read+0x1e0/0x1e0
[  237.454603][ T6270]  ? __fget_files+0x28/0x4b0
[  237.459218][ T6270]  ? __fget_files+0x28/0x4b0
[  237.463836][ T6270]  ? __fget_files+0x43d/0x4b0
[  237.468561][ T6270]  ? __fdget_pos+0x2ae/0x360
[  237.473178][ T6270]  ? ksys_read+0x71/0x250
[  237.477547][ T6270]  ksys_read+0x14c/0x250
[  237.481815][ T6270]  ? vfs_write+0xa30/0xa30
[  237.486265][ T6270]  ? lockdep_hardirqs_on+0x94/0x140
[  237.491500][ T6270]  do_syscall_64+0x4c/0xa0
[  237.495954][ T6270]  ? clear_bhb_loop+0x60/0xb0
[  237.500781][ T6270]  ? clear_bhb_loop+0x60/0xb0
[  237.505493][ T6270]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.511450][ T6270] RIP: 0033:0x7fe564d5d04e
[  237.515905][ T6270] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  237.535546][ T6270] RSP: 002b:00007fe565b71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  237.543983][ T6270] RAX: ffffffffffffffda RBX: 00007fe565b726c0 RCX: 00007fe564d5d04e
[  237.551972][ T6270] RDX: 000000000000000f RSI: 00007fe565b720a0 RDI: 0000000000000003
[  237.559962][ T6270] RBP: 00007fe565b72090 R08: 0000000000000000 R09: 0000000000000000
[  237.567950][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.575942][ T6270] R13: 00007fe565016128 R14: 00007fe565016090 R15: 00007ffe6edfb798
[  237.583949][ T6270]  </TASK>
[  238.002960][ T6276] loop1: detected capacity change from 0 to 64
[  239.864478][ T6290] loop3: detected capacity change from 0 to 512
[  239.890071][ T6290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  240.319062][ T6290] EXT4-fs (loop3): 1 orphan inode deleted
[  240.324857][ T6290] EXT4-fs (loop3): 1 truncate cleaned up
[  240.330732][ T6290] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  240.350101][ T6285] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  240.418374][ T6285] gre0 speed is unknown, defaulting to 1000
[  240.710126][ T4276] EXT4-fs (loop3): unmounting filesystem.
[  240.782637][ T6302] netlink: 612 bytes leftover after parsing attributes in process `syz.2.475'.
[  240.792829][ T6301] FAULT_INJECTION: forcing a failure.
[  240.792829][ T6301] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.840534][ T6302] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  240.849507][ T6301] CPU: 0 PID: 6301 Comm: syz.1.473 Not tainted syzkaller #0
[  240.856838][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  240.866916][ T6301] Call Trace:
[  240.870215][ T6301]  <TASK>
[  240.873155][ T6301]  dump_stack_lvl+0x188/0x24e
[  240.877867][ T6301]  ? show_regs_print_info+0x12/0x12
[  240.883087][ T6301]  ? load_image+0x400/0x400
[  240.887615][ T6301]  ? __lock_acquire+0x7d10/0x7d10
[  240.892670][ T6301]  ? snprintf+0xe5/0x140
[  240.896942][ T6301]  should_fail_ex+0x399/0x4d0
[  240.901649][ T6301]  _copy_to_user+0x2c/0x130
[  240.906215][ T6301]  simple_read_from_buffer+0xe3/0x150
[  240.911644][ T6301]  proc_fail_nth_read+0x1a6/0x220
[  240.916665][ T6301]  ? proc_fault_inject_write+0x310/0x310
[  240.922298][ T6301]  ? fsnotify_perm+0x248/0x550
[  240.927060][ T6301]  ? proc_fault_inject_write+0x310/0x310
[  240.932778][ T6301]  vfs_read+0x2de/0xa00
[  240.936941][ T6301]  ? kernel_read+0x1e0/0x1e0
[  240.941532][ T6301]  ? __fget_files+0x28/0x4b0
[  240.946121][ T6301]  ? __fget_files+0x28/0x4b0
[  240.950710][ T6301]  ? __fget_files+0x43d/0x4b0
[  240.955398][ T6301]  ? __fdget_pos+0x2ae/0x360
[  240.959990][ T6301]  ? ksys_read+0x71/0x250
[  240.964324][ T6301]  ksys_read+0x14c/0x250
[  240.968574][ T6301]  ? vfs_write+0xa30/0xa30
[  240.973001][ T6301]  ? lockdep_hardirqs_on+0x94/0x140
[  240.978197][ T6301]  do_syscall_64+0x4c/0xa0
[  240.982612][ T6301]  ? clear_bhb_loop+0x60/0xb0
[  240.987286][ T6301]  ? clear_bhb_loop+0x60/0xb0
[  240.991961][ T6301]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.997883][ T6301] RIP: 0033:0x7fcf4935d04e
[  241.002296][ T6301] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  241.021907][ T6301] RSP: 002b:00007fcf4a183fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  241.030332][ T6301] RAX: ffffffffffffffda RBX: 00007fcf4a1846c0 RCX: 00007fcf4935d04e
[  241.038309][ T6301] RDX: 000000000000000f RSI: 00007fcf4a1840a0 RDI: 0000000000000004
[  241.046363][ T6301] RBP: 00007fcf4a184090 R08: 0000000000000000 R09: 0000000000000000
[  241.054335][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.062309][ T6301] R13: 00007fcf49616128 R14: 00007fcf49616090 R15: 00007fff09da2a18
[  241.070387][ T6301]  </TASK>
[  241.125489][ T6296] loop0: detected capacity change from 0 to 4096
[  241.151000][ T6296] ntfs: volume version 3.1.
[  241.259968][ T6298] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  241.478188][ T6312] FAULT_INJECTION: forcing a failure.
[  241.478188][ T6312] name failslab, interval 1, probability 0, space 0, times 0
[  241.525632][ T6312] CPU: 0 PID: 6312 Comm: syz.0.477 Not tainted syzkaller #0
[  241.532984][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  241.543074][ T6312] Call Trace:
[  241.546373][ T6312]  <TASK>
[  241.549353][ T6312]  dump_stack_lvl+0x188/0x24e
[  241.554072][ T6312]  ? show_regs_print_info+0x12/0x12
[  241.559311][ T6312]  ? load_image+0x400/0x400
[  241.563852][ T6312]  ? __might_sleep+0xd0/0xd0
[  241.568466][ T6312]  ? __lock_acquire+0x7d10/0x7d10
[  241.573565][ T6312]  should_fail_ex+0x399/0x4d0
[  241.578274][ T6312]  should_failslab+0x5/0x20
[  241.582831][ T6312]  slab_pre_alloc_hook+0x59/0x310
[  241.587883][ T6312]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  241.593628][ T6312]  __kmem_cache_alloc_node+0x4f/0x260
[  241.599009][ T6312]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  241.604738][ T6312]  __kmalloc+0xa0/0x240
[  241.608906][ T6312]  tomoyo_realpath_from_path+0xdf/0x5d0
[  241.614466][ T6312]  ? tomoyo_path_number_perm+0x205/0x650
[  241.620106][ T6312]  tomoyo_path_number_perm+0x22f/0x650
[  241.625572][ T6312]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  241.631031][ T6312]  ? ksys_write+0x1c0/0x250
[  241.635540][ T6312]  ? common_file_perm+0x171/0x1c0
[  241.640584][ T6312]  ? __fget_files+0x28/0x4b0
[  241.645174][ T6312]  ? __fget_files+0x28/0x4b0
[  241.649796][ T6312]  security_file_ioctl+0x6c/0xa0
[  241.654790][ T6312]  __se_sys_ioctl+0x48/0x170
[  241.659395][ T6312]  do_syscall_64+0x4c/0xa0
[  241.663822][ T6312]  ? clear_bhb_loop+0x60/0xb0
[  241.668504][ T6312]  ? clear_bhb_loop+0x60/0xb0
[  241.673187][ T6312]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  241.679170][ T6312] RIP: 0033:0x7fa175b9c819
[  241.683585][ T6312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.703194][ T6312] RSP: 002b:00007fa176aa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  241.711608][ T6312] RAX: ffffffffffffffda RBX: 00007fa175e15fa0 RCX: 00007fa175b9c819
[  241.719581][ T6312] RDX: 0000200000000080 RSI: 00000000000089e2 RDI: 0000000000000004
[  241.727548][ T6312] RBP: 00007fa176aa1090 R08: 0000000000000000 R09: 0000000000000000
[  241.735517][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.743485][ T6312] R13: 00007fa175e16038 R14: 00007fa175e15fa0 R15: 00007ffdeead0048
[  241.751471][ T6312]  </TASK>
[  241.780472][ T6312] ERROR: Out of memory at tomoyo_realpath_from_path.
[  242.121810][ T6303] loop2: detected capacity change from 0 to 32768
[  242.187741][ T6303] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.475 (6303)
[  242.311138][ T6303] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.347039][ T6303] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  242.355749][ T6303] BTRFS info (device loop2): enabling auto defrag
[  242.390106][ T6303] BTRFS info (device loop2): max_inline at 0
[  242.396160][ T6303] BTRFS info (device loop2): enabling ssd optimizations
[  242.443150][ T6303] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  242.486456][ T6303] BTRFS info (device loop2): use lzo compression, level 0
[  242.533061][ T6303] BTRFS error (device loop2): unrecognized mount option 'rootcontext=unconfined_u'
[  243.163112][ T6303] BTRFS error (device loop2): open_ctree failed: -22
[  243.354037][ T4416] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4416)
[  243.371508][   T26] audit: type=1326 audit(1775416863.904:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe564d9c819 code=0x7ffc0000
[  243.416184][ T6332] tmpfs: Bad value for 'mpol'
[  243.423645][ T6309] loop1: detected capacity change from 0 to 32768
[  243.462613][   T26] audit: type=1326 audit(1775416863.904:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe564d9c819 code=0x7ffc0000
[  243.511633][ T4371] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  243.565234][   T26] audit: type=1326 audit(1775416863.904:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe564d9c819 code=0x7ffc0000
[  243.589310][   T26] audit: type=1326 audit(1775416863.904:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fe564d9c819 code=0x7ffc0000
[  243.598137][ T6309] XFS (loop1): Mounting V5 Filesystem
[  243.648795][ T6342] bridge0: port 4(syz_tun) entered blocking state
[  243.655523][ T6342] bridge0: port 4(syz_tun) entered disabled state
[  243.664789][ T6342] device syz_tun entered promiscuous mode
[  243.671123][ T6342] bridge0: port 4(syz_tun) entered blocking state
[  243.678506][ T6342] bridge0: port 4(syz_tun) entered forwarding state
[  243.725480][ T4371] usb 1-1: Using ep0 maxpacket: 16
[  243.734974][ T4371] usb 1-1: unable to get BOS descriptor or descriptor too short
[  243.746993][ T4371] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40
[  243.756179][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.764613][ T4371] usb 1-1: Product: syz
[  243.769117][ T4371] usb 1-1: Manufacturer: syz
[  243.773753][ T4371] usb 1-1: SerialNumber: syz
[  243.808660][   T26] audit: type=1326 audit(1775416863.904:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe564d9c819 code=0x7ffc0000
[  243.838510][ T6309] XFS (loop1): Ending clean mount
[  243.869689][ T6309] XFS (loop1): Quotacheck needed: Please wait.
[  243.905188][   T26] audit: type=1326 audit(1775416863.904:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe564d9c819 code=0x7ffc0000
[  244.080542][ T4371] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 7f
[  244.093532][ T6309] XFS (loop1): Quotacheck: Done.
[  244.098779][   T26] audit: type=1326 audit(1775416863.904:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe564d9c819 code=0x7ffc0000
[  244.098816][   T26] audit: type=1326 audit(1775416863.904:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe564d9c819 code=0x7ffc0000
[  244.098845][   T26] audit: type=1326 audit(1775416863.904:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe564d9c819 code=0x7ffc0000
[  244.235604][ T6355] loop3: detected capacity change from 0 to 64
[  244.908169][   T26] audit: type=1326 audit(1775416863.941:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe564d9c819 code=0x7ffc0000
[  245.104166][ T4371] usb 1-1: USB disconnect, device number 8
[  245.129550][ T4268] XFS (loop1): Unmounting Filesystem
[  245.374768][ T6367] FAULT_INJECTION: forcing a failure.
[  245.374768][ T6367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  245.438538][ T6367] CPU: 0 PID: 6367 Comm: syz.2.489 Not tainted syzkaller #0
[  245.445882][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  245.455971][ T6367] Call Trace:
[  245.459271][ T6367]  <TASK>
[  245.462227][ T6367]  dump_stack_lvl+0x188/0x24e
[  245.466943][ T6367]  ? show_regs_print_info+0x12/0x12
[  245.472172][ T6367]  ? load_image+0x400/0x400
[  245.476711][ T6367]  ? __lock_acquire+0x7d10/0x7d10
[  245.481766][ T6367]  ? snprintf+0xe5/0x140
[  245.486038][ T6367]  should_fail_ex+0x399/0x4d0
[  245.490744][ T6367]  _copy_to_user+0x2c/0x130
[  245.495278][ T6367]  simple_read_from_buffer+0xe3/0x150
[  245.500681][ T6367]  proc_fail_nth_read+0x1a6/0x220
[  245.505735][ T6367]  ? proc_fault_inject_write+0x310/0x310
[  245.511406][ T6367]  ? fsnotify_perm+0x248/0x550
[  245.516224][ T6367]  ? proc_fault_inject_write+0x310/0x310
[  245.521880][ T6367]  vfs_read+0x2de/0xa00
[  245.526072][ T6367]  ? kernel_read+0x1e0/0x1e0
[  245.530693][ T6367]  ? __fget_files+0x28/0x4b0
[  245.535314][ T6367]  ? __fget_files+0x28/0x4b0
[  245.539938][ T6367]  ? __fget_files+0x43d/0x4b0
[  245.544654][ T6367]  ? __fdget_pos+0x2ae/0x360
[  245.549268][ T6367]  ? ksys_read+0x71/0x250
[  245.553627][ T6367]  ksys_read+0x14c/0x250
[  245.557896][ T6367]  ? vfs_write+0xa30/0xa30
[  245.562345][ T6367]  ? lockdep_hardirqs_on+0x94/0x140
[  245.567573][ T6367]  do_syscall_64+0x4c/0xa0
[  245.572011][ T6367]  ? clear_bhb_loop+0x60/0xb0
[  245.576705][ T6367]  ? clear_bhb_loop+0x60/0xb0
[  245.581421][ T6367]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  245.587353][ T6367] RIP: 0033:0x7ff6f1b5d04e
[  245.591792][ T6367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  245.611428][ T6367] RSP: 002b:00007ff6f29c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  245.619873][ T6367] RAX: ffffffffffffffda RBX: 00007ff6f29c36c0 RCX: 00007ff6f1b5d04e
[  245.627887][ T6367] RDX: 000000000000000f RSI: 00007ff6f29c30a0 RDI: 0000000000000005
[  245.635891][ T6367] RBP: 00007ff6f29c3090 R08: 0000000000000000 R09: 0000000000000000
[  245.643884][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.651878][ T6367] R13: 00007ff6f1e16128 R14: 00007ff6f1e16090 R15: 00007fff130c8798
[  245.659896][ T6367]  </TASK>
[  245.968020][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'.
[  246.167272][ T6377] loop3: detected capacity change from 0 to 1024
[  246.218241][ T6377] hfsplus: failed to load root directory
[  247.241322][ T6398] loop2: detected capacity change from 0 to 64
[  248.141196][ T6406] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  248.163930][ T6409] loop3: detected capacity change from 0 to 64
[  248.257048][ T6411] QAT: failed to copy from user.
[  248.657159][ T6415] FAULT_INJECTION: forcing a failure.
[  248.657159][ T6415] name failslab, interval 1, probability 0, space 0, times 0
[  248.856147][ T6415] CPU: 0 PID: 6415 Comm: syz.1.507 Not tainted syzkaller #0
[  248.863495][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  248.873568][ T6415] Call Trace:
[  248.876895][ T6415]  <TASK>
[  248.879843][ T6415]  dump_stack_lvl+0x188/0x24e
[  248.884568][ T6415]  ? show_regs_print_info+0x12/0x12
[  248.889787][ T6415]  ? load_image+0x400/0x400
[  248.894312][ T6415]  ? __might_sleep+0xd0/0xd0
[  248.898922][ T6415]  ? __lock_acquire+0x7d10/0x7d10
[  248.903971][ T6415]  should_fail_ex+0x399/0x4d0
[  248.908675][ T6415]  should_failslab+0x5/0x20
[  248.913227][ T6415]  slab_pre_alloc_hook+0x59/0x310
[  248.918269][ T6415]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  248.924011][ T6415]  __kmem_cache_alloc_node+0x4f/0x260
[  248.929402][ T6415]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  248.935149][ T6415]  __kmalloc+0xa0/0x240
[  248.939342][ T6415]  tomoyo_realpath_from_path+0xdf/0x5d0
[  248.944917][ T6415]  ? tomoyo_path_number_perm+0x205/0x650
[  248.950562][ T6415]  tomoyo_path_number_perm+0x22f/0x650
[  248.956040][ T6415]  ? lock_chain_count+0x20/0x20
[  248.960909][ T6415]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  248.966390][ T6415]  ? finish_task_switch+0x265/0x8f0
[  248.971637][ T6415]  ? __fget_files+0x28/0x4b0
[  248.976251][ T6415]  ? __fget_files+0x28/0x4b0
[  248.980872][ T6415]  security_file_ioctl+0x6c/0xa0
[  248.985838][ T6415]  __se_sys_ioctl+0x48/0x170
[  248.990453][ T6415]  do_syscall_64+0x4c/0xa0
[  248.994893][ T6415]  ? clear_bhb_loop+0x60/0xb0
[  248.999596][ T6415]  ? clear_bhb_loop+0x60/0xb0
[  249.004301][ T6415]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  249.010211][ T6415] RIP: 0033:0x7fcf4939c819
[  249.014643][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.034271][ T6415] RSP: 002b:00007fcf4a184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  249.042714][ T6415] RAX: ffffffffffffffda RBX: 00007fcf49616090 RCX: 00007fcf4939c819
[  249.050718][ T6415] RDX: 0000200000000340 RSI: 00000000c1105517 RDI: 0000000000000003
[  249.058712][ T6415] RBP: 00007fcf4a184090 R08: 0000000000000000 R09: 0000000000000000
[  249.066702][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.074701][ T6415] R13: 00007fcf49616128 R14: 00007fcf49616090 R15: 00007fff09da2a18
[  249.082725][ T6415]  </TASK>
[  249.145378][ T6411] loop2: detected capacity change from 0 to 1024
[  249.363533][ T6415] ERROR: Out of memory at tomoyo_realpath_from_path.
[  249.464813][ T6418] hfsplus: xattr search failed
[  249.718992][ T6423] netlink: 14 bytes leftover after parsing attributes in process `syz.3.509'.
[  250.092593][ T6411] hfsplus: xattr searching failed
[  250.348690][ T4281] hfsplus: node 4:3 still has 1 user(s)!
[  250.490068][ T6423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.526524][ T6423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.553485][ T6423] bond0 (unregistering): Released all slaves
[  250.590686][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'.
[  250.600186][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'.
[  250.786646][ T6441] loop0: detected capacity change from 0 to 256
[  251.018078][ T6446] loop1: detected capacity change from 0 to 64
[  252.309473][ T6441] FAT-fs (loop0): Directory bread(block 64) failed
[  252.346466][ T6441] FAT-fs (loop0): Directory bread(block 65) failed
[  252.486450][ T6441] FAT-fs (loop0): Directory bread(block 66) failed
[  252.601902][ T6441] FAT-fs (loop0): Directory bread(block 67) failed
[  252.894249][ T6441] FAT-fs (loop0): Directory bread(block 68) failed
[  252.900838][ T6441] FAT-fs (loop0): Directory bread(block 69) failed
[  252.997271][ T6441] FAT-fs (loop0): Directory bread(block 70) failed
[  253.101336][ T6441] FAT-fs (loop0): Directory bread(block 71) failed
[  253.257447][ T6441] FAT-fs (loop0): Directory bread(block 72) failed
[  253.290611][ T6441] FAT-fs (loop0): Directory bread(block 73) failed
[  253.305140][ T6454] loop3: detected capacity change from 0 to 1024
[  253.315767][ T6461] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000'
[  253.604301][ T6441] netlink: 84 bytes leftover after parsing attributes in process `syz.0.515'.
[  253.650484][ T6463] gre0 speed is unknown, defaulting to 1000
[  253.669202][ T6454] hfsplus: xattr search failed
[  253.726734][ T6441] overlayfs: filesystem on './file0' not supported
[  254.670406][ T6454] hfsplus: xattr searching failed
[  254.868171][ T4276] hfsplus: node 4:3 still has 1 user(s)!
[  256.079423][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'.
[  256.229670][ T6471] loop2: detected capacity change from 0 to 32768
[  256.628264][ T6501] loop0: detected capacity change from 0 to 64
[  257.336960][ T6505] FAULT_INJECTION: forcing a failure.
[  257.336960][ T6505] name failslab, interval 1, probability 0, space 0, times 0
[  257.382517][ T6505] CPU: 0 PID: 6505 Comm: syz.1.531 Not tainted syzkaller #0
[  257.389857][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  257.399943][ T6505] Call Trace:
[  257.403231][ T6505]  <TASK>
[  257.406177][ T6505]  dump_stack_lvl+0x188/0x24e
[  257.410886][ T6505]  ? show_regs_print_info+0x12/0x12
[  257.416120][ T6505]  ? load_image+0x400/0x400
[  257.420663][ T6505]  ? __might_sleep+0xd0/0xd0
[  257.425279][ T6505]  ? __lock_acquire+0x7d10/0x7d10
[  257.430331][ T6505]  should_fail_ex+0x399/0x4d0
[  257.435036][ T6505]  should_failslab+0x5/0x20
[  257.439560][ T6505]  slab_pre_alloc_hook+0x59/0x310
[  257.444607][ T6505]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  257.450363][ T6505]  __kmem_cache_alloc_node+0x4f/0x260
[  257.455771][ T6505]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  257.461525][ T6505]  __kmalloc+0xa0/0x240
[  257.465713][ T6505]  tomoyo_realpath_from_path+0xdf/0x5d0
[  257.471299][ T6505]  ? tomoyo_path_number_perm+0x205/0x650
[  257.476978][ T6505]  tomoyo_path_number_perm+0x22f/0x650
[  257.482480][ T6505]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  257.487954][ T6505]  ? ksys_write+0x1c0/0x250
[  257.492569][ T6505]  ? common_file_perm+0x171/0x1c0
[  257.497631][ T6505]  ? __fget_files+0x28/0x4b0
[  257.502231][ T6505]  ? __fget_files+0x28/0x4b0
[  257.506841][ T6505]  security_file_ioctl+0x6c/0xa0
[  257.511792][ T6505]  __se_sys_ioctl+0x48/0x170
[  257.516389][ T6505]  do_syscall_64+0x4c/0xa0
[  257.520810][ T6505]  ? clear_bhb_loop+0x60/0xb0
[  257.525489][ T6505]  ? clear_bhb_loop+0x60/0xb0
[  257.530173][ T6505]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.536071][ T6505] RIP: 0033:0x7fcf4939c819
[  257.540484][ T6505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.560092][ T6505] RSP: 002b:00007fcf4a1a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  257.568511][ T6505] RAX: ffffffffffffffda RBX: 00007fcf49615fa0 RCX: 00007fcf4939c819
[  257.576482][ T6505] RDX: 0000200000002540 RSI: 00000000c0585609 RDI: 0000000000000003
[  257.584465][ T6505] RBP: 00007fcf4a1a5090 R08: 0000000000000000 R09: 0000000000000000
[  257.592437][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.600495][ T6505] R13: 00007fcf49616038 R14: 00007fcf49615fa0 R15: 00007fff09da2a18
[  257.608487][ T6505]  </TASK>
[  257.704175][ T6505] ERROR: Out of memory at tomoyo_realpath_from_path.
[  258.756319][ T6511] loop3: detected capacity change from 0 to 32768
[  259.648734][ T4309] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  259.905090][ T4309] usb 2-1: device descriptor read/64, error -71
[  260.034204][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.537'.
[  260.054235][ T6531] loop0: detected capacity change from 0 to 512
[  260.071178][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'.
[  260.088880][ T6531] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  260.107564][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'.
[  260.148634][ T6531] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  260.160129][ T6529] netlink: 'syz.3.537': attribute type 19 has an invalid length.
[  260.175099][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'.
[  260.186846][ T6531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  260.199460][ T6531] System zones: 1-12
[  260.205787][ T4309] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  260.214987][ T6531] EXT4-fs (loop0): orphan cleanup on readonly fs
[  260.230942][ T6529] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  260.239774][ T6529] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  260.243853][ T6531] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.540: invalid indirect mapped block 2 (level 2)
[  260.248083][ T6529] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  260.269809][ T6529] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  260.312129][ T6531] EXT4-fs (loop0): Remounting filesystem read-only
[  260.326133][ T6531] EXT4-fs (loop0): 1 truncate cleaned up
[  260.347470][ T6531] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  260.442438][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'.
[  260.460546][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'.
[  260.469650][ T6534] netlink: 'syz.3.537': attribute type 19 has an invalid length.
[  260.483335][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'.
[  260.505507][ T4309] usb 2-1: device descriptor read/64, error -71
[  260.551427][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'.
[  260.630842][ T4309] usb usb2-port1: attempt power cycle
[  260.686128][ T6547] gre0 speed is unknown, defaulting to 1000
[  260.825855][ T6546] gre0 speed is unknown, defaulting to 1000
[  260.845726][ T6554] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 5: comm syz.0.540: lblock 0 mapped to illegal pblock 5 (length 1)
[  260.871529][ T6554] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.540: error -117 reading directory block
[  261.068943][ T4309] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  261.101334][ T4309] usb 2-1: device descriptor read/8, error -71
[  261.498127][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'.
[  261.549693][ T4309] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  261.596312][ T4309] usb 2-1: device descriptor read/8, error -71
[  261.731868][ T4309] usb usb2-port1: unable to enumerate USB device
[  262.396238][ T6575] FAULT_INJECTION: forcing a failure.
[  262.396238][ T6575] name failslab, interval 1, probability 0, space 0, times 0
[  262.419106][ T6575] CPU: 1 PID: 6575 Comm: syz.2.552 Not tainted syzkaller #0
[  262.426435][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  262.436484][ T6575] Call Trace:
[  262.439784][ T6575]  <TASK>
[  262.442729][ T6575]  dump_stack_lvl+0x188/0x24e
[  262.447439][ T6575]  ? show_regs_print_info+0x12/0x12
[  262.452667][ T6575]  ? load_image+0x400/0x400
[  262.457191][ T6575]  ? __lock_acquire+0x7d10/0x7d10
[  262.462252][ T6575]  ? ksys_write+0x1c0/0x250
[  262.466785][ T6575]  should_fail_ex+0x399/0x4d0
[  262.471489][ T6575]  should_failslab+0x5/0x20
[  262.476036][ T6575]  slab_pre_alloc_hook+0x59/0x310
[  262.481091][ T6575]  ? resv_map_alloc+0x4d/0x2b0
[  262.485885][ T6575]  __kmem_cache_alloc_node+0x4f/0x260
[  262.491299][ T6575]  ? resv_map_alloc+0x4d/0x2b0
[  262.496088][ T6575]  kmalloc_trace+0x26/0xe0
[  262.500537][ T6575]  resv_map_alloc+0x4d/0x2b0
[  262.505152][ T6575]  hugetlbfs_get_inode+0x64/0x510
[  262.510210][ T6575]  ? asm_sysvec_call_function_single+0x16/0x20
[  262.516396][ T6575]  ? lockdep_hardirqs_on+0x94/0x140
[  262.521638][ T6575]  hugetlb_file_setup+0x211/0x610
[  262.526695][ T6575]  ksys_mmap_pgoff+0x218/0x6f0
[  262.531489][ T6575]  do_syscall_64+0x4c/0xa0
[  262.536030][ T6575]  ? clear_bhb_loop+0x60/0xb0
[  262.540738][ T6575]  ? clear_bhb_loop+0x60/0xb0
[  262.545459][ T6575]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.551381][ T6575] RIP: 0033:0x7ff6f1b9c819
[  262.555823][ T6575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.575455][ T6575] RSP: 002b:00007ff6f29c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  262.583894][ T6575] RAX: ffffffffffffffda RBX: 00007ff6f1e16090 RCX: 00007ff6f1b9c819
[  262.591895][ T6575] RDX: 000000000000000f RSI: 0000000000001000 RDI: 0000200000bfb000
[  262.599892][ T6575] RBP: 00007ff6f29c3090 R08: ffffffffffffffff R09: 0000000000000000
[  262.607885][ T6575] R10: 0000000000059032 R11: 0000000000000246 R12: 0000000000000001
[  262.615898][ T6575] R13: 00007ff6f1e16128 R14: 00007ff6f1e16090 R15: 00007fff130c8798
[  262.623906][ T6575]  </TASK>
[  263.607261][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  264.763555][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.820778][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.894367][ T5142] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  265.189346][ T5142] usb 2-1: device descriptor read/64, error -71
[  265.457192][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'.
[  265.471379][ T6602] FAULT_INJECTION: forcing a failure.
[  265.471379][ T6602] name failslab, interval 1, probability 0, space 0, times 0
[  265.484062][ T6602] CPU: 1 PID: 6602 Comm: syz.0.559 Not tainted syzkaller #0
[  265.491359][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  265.501429][ T6602] Call Trace:
[  265.504726][ T6602]  <TASK>
[  265.507666][ T6602]  dump_stack_lvl+0x188/0x24e
[  265.512369][ T6602]  ? show_regs_print_info+0x12/0x12
[  265.517603][ T6602]  ? load_image+0x400/0x400
[  265.522142][ T6602]  ? __might_sleep+0xd0/0xd0
[  265.526748][ T6602]  ? __lock_acquire+0x7d10/0x7d10
[  265.531790][ T6602]  ? rcu_is_watching+0x11/0xa0
[  265.536583][ T6602]  should_fail_ex+0x399/0x4d0
[  265.541275][ T6602]  should_failslab+0x5/0x20
[  265.545791][ T6602]  slab_pre_alloc_hook+0x59/0x310
[  265.550839][ T6602]  ? kvmalloc_node+0x6c/0x180
[  265.555604][ T6602]  __kmem_cache_alloc_node+0x4f/0x260
[  265.560993][ T6602]  ? mutex_lock_nested+0x10/0x10
[  265.565950][ T6602]  ? kvmalloc_node+0x6c/0x180
[  265.570646][ T6602]  __kmalloc_node+0xa0/0x240
[  265.575265][ T6602]  ? aa_file_perm+0x112/0xf00
[  265.579972][ T6602]  kvmalloc_node+0x6c/0x180
[  265.584490][ T6602]  seq_read_iter+0x1f6/0xd50
[  265.589173][ T6602]  ? mark_lock+0x94/0x320
[  265.593535][ T6602]  seq_read+0x171/0x210
[  265.597695][ T6602]  ? seq_open+0x130/0x130
[  265.602022][ T6602]  ? lockdep_hardirqs_on+0x94/0x140
[  265.607224][ T6602]  ? seq_open+0x130/0x130
[  265.611553][ T6602]  ? proc_reg_read+0x1ce/0x2c0
[  265.616338][ T6602]  ? seq_open+0x130/0x130
[  265.620670][ T6602]  proc_reg_read+0x1dd/0x2c0
[  265.625264][ T6602]  ? proc_reg_get_unmapped_area+0x3a0/0x3a0
[  265.631166][ T6602]  vfs_read+0x2de/0xa00
[  265.635331][ T6602]  ? kernel_read+0x1e0/0x1e0
[  265.639919][ T6602]  ? __fget_files+0x28/0x4b0
[  265.644515][ T6602]  ? __fget_files+0x28/0x4b0
[  265.649126][ T6602]  ? __fget_files+0x43d/0x4b0
[  265.653821][ T6602]  ? __fdget_pos+0x2ae/0x360
[  265.658408][ T6602]  ? ksys_read+0x71/0x250
[  265.662740][ T6602]  ksys_read+0x14c/0x250
[  265.666996][ T6602]  ? vfs_write+0xa30/0xa30
[  265.671446][ T6602]  ? lockdep_hardirqs_on+0x94/0x140
[  265.676665][ T6602]  do_syscall_64+0x4c/0xa0
[  265.681109][ T6602]  ? clear_bhb_loop+0x60/0xb0
[  265.685803][ T6602]  ? clear_bhb_loop+0x60/0xb0
[  265.690491][ T6602]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.696388][ T6602] RIP: 0033:0x7fa175b9c819
[  265.700812][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.720506][ T6602] RSP: 002b:00007fa176a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  265.728920][ T6602] RAX: ffffffffffffffda RBX: 00007fa175e16180 RCX: 00007fa175b9c819
[  265.736927][ T6602] RDX: 0000000000002020 RSI: 0000200000002800 RDI: 0000000000000005
[  265.744898][ T6602] RBP: 00007fa176a5f090 R08: 0000000000000000 R09: 0000000000000000
[  265.753008][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.760981][ T6602] R13: 00007fa175e16218 R14: 00007fa175e16180 R15: 00007ffdeead0048
[  265.768971][ T6602]  </TASK>
[  265.962966][ T5142] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  265.968565][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.979166][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  265.986700][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  266.063964][ T6607] FAULT_INJECTION: forcing a failure.
[  266.063964][ T6607] name failslab, interval 1, probability 0, space 0, times 0
[  266.077003][ T6607] CPU: 0 PID: 6607 Comm: syz.0.561 Not tainted syzkaller #0
[  266.084284][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  266.094332][ T6607] Call Trace:
[  266.097621][ T6607]  <TASK>
[  266.100541][ T6607]  dump_stack_lvl+0x188/0x24e
[  266.105349][ T6607]  ? show_regs_print_info+0x12/0x12
[  266.110558][ T6607]  ? load_image+0x400/0x400
[  266.115064][ T6607]  ? __might_sleep+0xd0/0xd0
[  266.119662][ T6607]  ? __lock_acquire+0x7d10/0x7d10
[  266.124718][ T6607]  should_fail_ex+0x399/0x4d0
[  266.129398][ T6607]  should_failslab+0x5/0x20
[  266.133899][ T6607]  slab_pre_alloc_hook+0x59/0x310
[  266.138939][ T6607]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  266.144673][ T6607]  __kmem_cache_alloc_node+0x4f/0x260
[  266.150051][ T6607]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  266.155777][ T6607]  __kmalloc+0xa0/0x240
[  266.159939][ T6607]  tomoyo_realpath_from_path+0xdf/0x5d0
[  266.165490][ T6607]  ? tomoyo_path_number_perm+0x205/0x650
[  266.171150][ T6607]  tomoyo_path_number_perm+0x22f/0x650
[  266.176632][ T6607]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  266.182101][ T6607]  ? ksys_write+0x1c0/0x250
[  266.187053][ T6607]  ? common_file_perm+0x171/0x1c0
[  266.192087][ T6607]  ? __fget_files+0x28/0x4b0
[  266.196685][ T6607]  ? __fget_files+0x28/0x4b0
[  266.201550][ T6607]  security_file_ioctl+0x6c/0xa0
[  266.206495][ T6607]  __se_sys_ioctl+0x48/0x170
[  266.211090][ T6607]  do_syscall_64+0x4c/0xa0
[  266.215514][ T6607]  ? clear_bhb_loop+0x60/0xb0
[  266.220194][ T6607]  ? clear_bhb_loop+0x60/0xb0
[  266.224874][ T6607]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  266.230787][ T6607] RIP: 0033:0x7fa175b9c819
[  266.235203][ T6607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.254820][ T6607] RSP: 002b:00007fa176aa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  266.263274][ T6607] RAX: ffffffffffffffda RBX: 00007fa175e15fa0 RCX: 00007fa175b9c819
[  266.271242][ T6607] RDX: 0000200000000440 RSI: 00000000c0045401 RDI: 0000000000000006
[  266.279217][ T6607] RBP: 00007fa176aa1090 R08: 0000000000000000 R09: 0000000000000000
[  266.287212][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.295204][ T6607] R13: 00007fa175e16038 R14: 00007fa175e15fa0 R15: 00007ffdeead0048
[  266.303183][ T6607]  </TASK>
[  266.307404][ T6607] ERROR: Out of memory at tomoyo_realpath_from_path.
[  266.390434][ T5142] usb 2-1: device descriptor read/64, error -71
[  266.448353][ T6613] netlink: 'syz.4.560': attribute type 12 has an invalid length.
[  266.962344][ T6615] loop0: detected capacity change from 0 to 131072
[  266.978314][ T5142] usb usb2-port1: attempt power cycle
[  266.991353][ T6615] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0)
[  267.000861][ T6615] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  267.010657][ T6613] netlink: 'syz.4.560': attribute type 29 has an invalid length.
[  267.026481][ T6615] F2FS-fs (loop0): invalid crc value
[  267.035684][ T6613] netlink: 148 bytes leftover after parsing attributes in process `syz.4.560'.
[  267.045807][ T6613] netlink: 'syz.4.560': attribute type 2 has an invalid length.
[  267.058452][ T6613] netlink: 'syz.4.560': attribute type 3 has an invalid length.
[  267.063840][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.066289][ T6613] netlink: 11 bytes leftover after parsing attributes in process `syz.4.560'.
[  267.137357][ T6615] F2FS-fs (loop0): Found nat_bits in checkpoint
[  267.199126][ T6615] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  267.206371][ T6615] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  268.164496][  T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.324580][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.486022][ T6639] loop0: detected capacity change from 0 to 64
[  268.680008][ T6631] 9pnet_fd: Insufficient options for proto=fd
[  269.275848][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.755832][ T6647] loop1: detected capacity change from 0 to 64
[  270.387284][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.510574][ T6649] loop3: detected capacity change from 0 to 256
[  270.664092][ T6649] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d)
[  270.907954][ T6653] loop0: detected capacity change from 0 to 32768
[  270.976639][ T6653] JBD2: Ignoring recovery information on journal
[  271.147242][ T6653] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  271.585278][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.707460][ T5142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.785385][ T6667] 
[  271.787762][ T6667] ======================================================
[  271.794762][ T6667] WARNING: possible circular locking dependency detected
[  271.801775][ T6667] syzkaller #0 Not tainted
[  271.806170][ T6667] ------------------------------------------------------
[  271.813168][ T6667] syz.0.571/6667 is trying to acquire lock:
[  271.819066][ T6667] ffff88804e603f60 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb3/0x340
[  271.829676][ T6667] 
[  271.829676][ T6667] but task is already holding lock:
[  271.837027][ T6667] ffff88804e603ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x340
[  271.847629][ T6667] 
[  271.847629][ T6667] which lock already depends on the new lock.
[  271.847629][ T6667] 
[  271.858019][ T6667] 
[  271.858019][ T6667] the existing dependency chain (in reverse order) is:
[  271.867020][ T6667] 
[  271.867020][ T6667] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  271.874847][ T6667]        down_read+0x42/0x2d0
[  271.879602][ T6667]        ocfs2_init_acl+0x307/0x770
[  271.884795][ T6667]        ocfs2_mknod+0x15e8/0x25b0
[  271.889893][ T6667]        ocfs2_create+0x1b6/0x4b0
[  271.894901][ T6667]        path_openat+0x1181/0x2ee0
[  271.900086][ T6667]        do_filp_open+0x1f1/0x430
[  271.905119][ T6667]        filp_open+0x17c/0x1e0
[  271.909888][ T6667]        do_coredump+0x1b4e/0x22f0
[  271.914997][ T6667]        get_signal+0x10aa/0x1350
[  271.920025][ T6667]        arch_do_signal_or_restart+0xc4/0x1350
[  271.926174][ T6667]        exit_to_user_mode_loop+0x70/0x110
[  271.931974][ T6667]        exit_to_user_mode_prepare+0xee/0x180
[  271.938061][ T6667]        irqentry_exit_to_user_mode+0x5/0x30
[  271.944026][ T6667]        exc_page_fault+0x88/0x100
[  271.949126][ T6667]        asm_exc_page_fault+0x22/0x30
[  271.954504][ T6667] 
[  271.954504][ T6667] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  271.963003][ T6667]        down_read+0x42/0x2d0
[  271.967673][ T6667]        ocfs2_start_trans+0x3a4/0x6f0
[  271.973127][ T6667]        ocfs2_modify_bh+0xe0/0x4c0
[  271.978312][ T6667]        ocfs2_local_read_info+0x13c8/0x1750
[  271.984283][ T6667]        dquot_load_quota_sb+0x756/0xac0
[  271.989903][ T6667]        dquot_load_quota_inode+0x2d8/0x5d0
[  271.995805][ T6667]        ocfs2_enable_quotas+0x1c5/0x490
[  272.001420][ T6667]        ocfs2_fill_super+0x43b5/0x5090
[  272.006947][ T6667]        mount_bdev+0x287/0x3c0
[  272.011781][ T6667]        legacy_get_tree+0xe6/0x180
[  272.016969][ T6667]        vfs_get_tree+0x88/0x270
[  272.021909][ T6667]        do_new_mount+0x24a/0xa40
[  272.026951][ T6667]        __se_sys_mount+0x2e3/0x3d0
[  272.032135][ T6667]        do_syscall_64+0x4c/0xa0
[  272.037063][ T6667]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.043482][ T6667] 
[  272.043482][ T6667] -> #1 (sb_internal#5){.+.+}-{0:0}:
[  272.051048][ T6667]        ocfs2_start_trans+0x2a5/0x6f0
[  272.056497][ T6667]        ocfs2_truncate_file+0x668/0x1580
[  272.062207][ T6667]        ocfs2_setattr+0x16b8/0x1d30
[  272.067511][ T6667]        notify_change+0xc74/0xf40
[  272.072615][ T6667]        do_truncate+0x1ac/0x240
[  272.077543][ T6667]        do_coredump+0x2043/0x22f0
[  272.082643][ T6667]        get_signal+0x10aa/0x1350
[  272.087666][ T6667]        arch_do_signal_or_restart+0xc4/0x1350
[  272.093808][ T6667]        exit_to_user_mode_loop+0x70/0x110
[  272.099608][ T6667]        exit_to_user_mode_prepare+0xee/0x180
[  272.105673][ T6667]        irqentry_exit_to_user_mode+0x5/0x30
[  272.111656][ T6667]        exc_page_fault+0x88/0x100
[  272.116754][ T6667]        asm_exc_page_fault+0x22/0x30
[  272.122109][ T6667] 
[  272.122109][ T6667] -> #0 (&oi->ip_alloc_sem){+.+.}-{3:3}:
[  272.129906][ T6667]        __lock_acquire+0x2d07/0x7d10
[  272.135270][ T6667]        lock_acquire+0x1bb/0x4a0
[  272.140281][ T6667]        down_write+0x36/0x60
[  272.144946][ T6667]        ocfs2_try_remove_refcount_tree+0xb3/0x340
[  272.151460][ T6667]        ocfs2_truncate_file+0xe35/0x1580
[  272.157173][ T6667]        ocfs2_setattr+0x16b8/0x1d30
[  272.162457][ T6667]        notify_change+0xc74/0xf40
[  272.167558][ T6667]        do_truncate+0x1ac/0x240
[  272.172490][ T6667]        do_coredump+0x2043/0x22f0
[  272.177593][ T6667]        get_signal+0x10aa/0x1350
[  272.182628][ T6667]        arch_do_signal_or_restart+0xc4/0x1350
[  272.188777][ T6667]        exit_to_user_mode_loop+0x70/0x110
[  272.194574][ T6667]        exit_to_user_mode_prepare+0xee/0x180
[  272.200629][ T6667]        irqentry_exit_to_user_mode+0x5/0x30
[  272.206595][ T6667]        exc_page_fault+0x88/0x100
[  272.211689][ T6667]        asm_exc_page_fault+0x22/0x30
[  272.217048][ T6667] 
[  272.217048][ T6667] other info that might help us debug this:
[  272.217048][ T6667] 
[  272.227270][ T6667] Chain exists of:
[  272.227270][ T6667]   &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  272.227270][ T6667] 
[  272.241534][ T6667]  Possible unsafe locking scenario:
[  272.241534][ T6667] 
[  272.248995][ T6667]        CPU0                    CPU1
[  272.254349][ T6667]        ----                    ----
[  272.259707][ T6667]   lock(&oi->ip_xattr_sem);
[  272.264289][ T6667]                                lock(&journal->j_trans_barrier);
[  272.272074][ T6667]                                lock(&oi->ip_xattr_sem);
[  272.279167][ T6667]   lock(&oi->ip_alloc_sem);
[  272.283739][ T6667] 
[  272.283739][ T6667]  *** DEADLOCK ***
[  272.283739][ T6667] 
[  272.291862][ T6667] 2 locks held by syz.0.571/6667:
[  272.296865][ T6667]  #0: ffff88804e6042c8 (&sb->s_type->i_mutex_key#44){+.+.}-{3:3}, at: do_truncate+0x198/0x240
[  272.307211][ T6667]  #1: ffff88804e603ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x340
[  272.318263][ T6667] 
[  272.318263][ T6667] stack backtrace:
[  272.324165][ T6667] CPU: 0 PID: 6667 Comm: syz.0.571 Not tainted syzkaller #0
[  272.331440][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  272.341589][ T6667] Call Trace:
[  272.344862][ T6667]  <TASK>
[  272.347785][ T6667]  dump_stack_lvl+0x188/0x24e
[  272.352521][ T6667]  ? load_image+0x400/0x400
[  272.357023][ T6667]  ? show_regs_print_info+0x12/0x12
[  272.362221][ T6667]  ? print_circular_bug+0x12b/0x1a0
[  272.367416][ T6667]  check_noncircular+0x296/0x330
[  272.372363][ T6667]  ? add_chain_block+0x940/0x940
[  272.377339][ T6667]  ? lockdep_lock+0xf1/0x1f0
[  272.381934][ T6667]  ? lockdep_unlock+0x142/0x2e0
[  272.386779][ T6667]  ? _find_first_zero_bit+0xcf/0x100
[  272.392059][ T6667]  __lock_acquire+0x2d07/0x7d10
[  272.396917][ T6667]  ? ocfs2_commit_truncate+0x182a/0x1de0
[  272.402542][ T6667]  ? verify_lock_unused+0x140/0x140
[  272.407740][ T6667]  ? lockdep_hardirqs_on+0x94/0x140
[  272.412963][ T6667]  lock_acquire+0x1bb/0x4a0
[  272.417475][ T6667]  ? ocfs2_try_remove_refcount_tree+0xb3/0x340
[  272.423645][ T6667]  ? __might_sleep+0xd0/0xd0
[  272.428232][ T6667]  ? read_lock_is_recursive+0x10/0x10
[  272.433604][ T6667]  ? rwsem_write_trylock+0x135/0x1c0
[  272.438879][ T6667]  ? clear_nonspinnable+0x60/0x60
[  272.443907][ T6667]  ? ocfs2_truncate_file+0xd5b/0x1580
[  272.449293][ T6667]  down_write+0x36/0x60
[  272.453464][ T6667]  ? ocfs2_try_remove_refcount_tree+0xb3/0x340
[  272.459617][ T6667]  ocfs2_try_remove_refcount_tree+0xb3/0x340
[  272.465593][ T6667]  ? ocfs2_remove_refcount_tree+0xe40/0xe40
[  272.471482][ T6667]  ? up_write+0x1bb/0x420
[  272.475811][ T6667]  ? unmap_mapping_range+0x91/0x100
[  272.481006][ T6667]  ocfs2_truncate_file+0xe35/0x1580
[  272.486203][ T6667]  ? __lock_acquire+0x7d10/0x7d10
[  272.491222][ T6667]  ? ocfs2_simple_size_update+0x4a0/0x4a0
[  272.496955][ T6667]  ? do_raw_spin_unlock+0x11d/0x230
[  272.502160][ T6667]  ? _raw_spin_unlock+0x24/0x40
[  272.507022][ T6667]  ? ocfs2_inode_lock_tracker+0x433/0x700
[  272.512763][ T6667]  ? ocfs2_inode_lock_atime+0x530/0x530
[  272.518326][ T6667]  ? ocfs2_rw_lock+0x134/0x250
[  272.523092][ T6667]  ? dquot_initialize+0x20/0x20
[  272.528034][ T6667]  ? ocfs2_create_new_inode_locks+0x690/0x690
[  272.534093][ T6667]  ? jbd2_journal_begin_ordered_truncate+0xb7/0x150
[  272.540678][ T6667]  ocfs2_setattr+0x16b8/0x1d30
[  272.545448][ T6667]  ? ocfs2_extend_allocation+0x1930/0x1930
[  272.551266][ T6667]  ? ktime_get_coarse_real_ts64+0x36/0x120
[  272.557063][ T6667]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  272.563314][ T6667]  ? ocfs2_xattr_get+0x149/0x260
[  272.568257][ T6667]  ? ocfs2_get_reflink_xattr_value_root+0xd0/0xd0
[  272.574663][ T6667]  ? ktime_get_coarse_real_ts64+0x10c/0x120
[  272.580567][ T6667]  ? current_time+0x196/0x2b0
[  272.585281][ T6667]  ? atime_needs_update+0x780/0x780
[  272.590486][ T6667]  ? evm_inode_setattr+0x91/0x790
[  272.595527][ T6667]  ? bpf_lsm_inode_setattr+0x5/0x10
[  272.600727][ T6667]  ? security_inode_setattr+0xd8/0x140
[  272.606179][ T6667]  ? try_break_deleg+0x79/0x120
[  272.611021][ T6667]  ? ocfs2_extend_allocation+0x1930/0x1930
[  272.616829][ T6667]  notify_change+0xc74/0xf40
[  272.621416][ T6667]  do_truncate+0x1ac/0x240
[  272.625850][ T6667]  ? put_page_bootmem+0x2c0/0x2c0
[  272.630862][ T6667]  ? filp_open+0x195/0x1e0
[  272.635277][ T6667]  ? getname_kernel+0x142/0x2f0
[  272.640119][ T6667]  ? i_uid_into_mnt+0x90/0x120
[  272.644881][ T6667]  do_coredump+0x2043/0x22f0
[  272.649473][ T6667]  ? nfs_stat_to_errno+0x190/0x190
[  272.654594][ T6667]  ? lock_chain_count+0x20/0x20
[  272.659453][ T6667]  ? _raw_spin_unlock_irq+0x1f/0x40
[  272.664650][ T6667]  ? lockdep_hardirqs_on+0x94/0x140
[  272.669842][ T6667]  get_signal+0x10aa/0x1350
[  272.674351][ T6667]  arch_do_signal_or_restart+0xc4/0x1350
[  272.679985][ T6667]  ? _raw_spin_unlock+0x40/0x40
[  272.684842][ T6667]  ? get_sigframe_size+0x10/0x10
[  272.689792][ T6667]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  272.695780][ T6667]  ? exit_to_user_mode_loop+0x3b/0x110
[  272.701240][ T6667]  exit_to_user_mode_loop+0x70/0x110
[  272.706532][ T6667]  exit_to_user_mode_prepare+0xee/0x180
[  272.712080][ T6667]  irqentry_exit_to_user_mode+0x5/0x30
[  272.717529][ T6667]  exc_page_fault+0x88/0x100
[  272.722127][ T6667]  asm_exc_page_fault+0x22/0x30
[  272.726993][ T6667] RIP: 0033:0x7fa175b9c821
[  272.731425][ T6667] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  272.751295][ T6667] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  272.757740][ T6667] RAX: 0000000000000000 RBX: 00007fa175e16090 RCX: 00007fa175b9c819
[  272.765806][ T6667] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  272.773777][ T6667] RBP: 00007fa175c32c91 R08: 0000000000000000 R09: 0000000000000000
[  272.781738][ T6667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  272.789694][ T6667] R13: 00007fa175e16128 R14: 00007fa175e16090 R15: 00007ffdeead0048
[  272.797677][ T6667]  </TASK>
[  272.807454][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.986745][ T6667] syz.0.571 (6667) used greatest stack depth: 19472 bytes left
[  273.464768][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.598543][ T4272] ocfs2: Unmounting device (7,0) on (node local)
[  273.902956][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.918192][ T5142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.003643][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.114927][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.226229][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.166868][ T5139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.337629][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.449163][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.560322][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.425920][ T4309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.671718][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog