last executing test programs:

21.127509617s ago: executing program 1 (id=527):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000ec28f10804fffffd060001000500000008000900"], 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x40080)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000})
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280), 0x4)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x8, 0x0)
close_range(r2, r2, 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000030000008500000086", @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000400))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
mknodat$null(r8, &(0x7f0000000300)='./file0\x00', 0x10, 0x103)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

20.518401426s ago: executing program 1 (id=530):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
sendfile(r1, r1, 0x0, 0x7f03) (fail_nth: 1)

18.581350006s ago: executing program 2 (id=533):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan0\x00', <r2=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffffb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}}, 0x0)
sendto$packet(r1, &(0x7f00000001c0)="330520000a00160006007ef52f55", 0xe, 0x801, &(0x7f0000000000)={0x11, 0x8848, r2, 0x1, 0x5f, 0x6, @local}, 0x14)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
write(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000040)=0x4, 0x4)
r7 = socket(0xa, 0x3, 0xff)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4c26, 0x5, @mcast2, 0xfffffffa}, 0x6b)
r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000005d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005cc0)={&(0x7f00000025c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x362c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x360c, 0x3, 0x0, 0x1, [{0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "a0aeab4677456f24ee70fd6559c87f414ef60161b86dfe3377e21c9c7eee0ac9cfa6803afd8afcae6bde0d2248ef689493ff6decaef74c858d75c360e1822a1e66ebbd402224149bb909b254782755f74196031de86624cf737fc6a7a4712a24312ee9557b20e8a9a2553eb50e45f88e191df628d44b89766974dbca48af765e98df88fad97c1b2f41be1066b9fa89778dd782a98d6aef039c23bb9d479b7acece854bef31974a98ae2cb61e52155ee4c1f8e4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x91, 0x1, "5b8c529ff59c6d3440cee5d81d1e857083df8af391b1257779295c23b67b623251ac4a547a9529fb7dedeab76dbeccf12dec3fbb0d78f379ea794201ff429980f24f14e657f95e42c94f4d74204be431fd8574455723f288fb8e399f78b0a9c8c1719196d12c8ee365e7101f3e7e131333bca47e50db1ab8bcba1b0d3bfcd024da281a700fdf0bc5144add7292"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "f65ffc1f98656d2a38a512fc071aa7f6bf948cb552b092cfebc2086ed361f0c53896a803cefbb2a527377c85234cea6436ad61bc6c3e65799bb395a1ec0812ba786d212b48bbcd0847e12b9a194d448f63d41aef78fb670f33cc8f4620e63e98facbd8a717e61fef24b5302f079fe89fdd533628e578c4f09b1481651504d9d23c3b15e66db5c86d5c808443cae36cabeda8bbdbbb1fbb25830b836fcce39089f06123c8ec91da4c105658f228efe887df5779132d352244e9af7f6e56c5008d39ca9069"}]}, @NFTA_SET_ELEM_EXPR={0x68, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x564, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_KEY_END={0x1e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "86420d7cec9e3cbda233b47efdefd258f89017c7c18675d5691f0f8463489f8ff86ad898b14851e810e559c305aad1c09eacd5d913c0f56f0eb982dfcec5ae721634e797deda54131675c6b55c0689b774bf6acac4867cdfe3ca13e243d8e68270b22bc25fb395c3447191d394d0987894a8265e900290a65ab0a8767912fa16f2500055d54f532793346994a3559541eabacb414501aaa1125ba3699e7a7324943ba79c1019b82ac9fcc9b1b466e2d8998b59fc50a430be1e69ab1690ee7643fa4b7b"}, @NFTA_DATA_VALUE={0xb5, 0x1, "e10289716bf0b79305f7b7456677a57a6a77e4545e586f85c95403a445c4de24c7eb6d33cfe6d335a0d0e638c752460ac908f43d73032aec40e58e49382153c38cc0eeef238370dcd3869ce0c1b82c359d9ac4b1ca7e1878dfceb0c28c5f1ded4f3ffea81878cf9697527876057f7acd88aa495e1a2b36d5a385a7154ed6dbddc482f03c4f4af23cf9a09384879530ce3530eb38678af883574ff3bb25a945cb75a560f29931d8aa609bb2a2b62da9f07a"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY_END={0x310, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb6, 0x1, "b06b168a41139895064034b8e439384b4e83029e4990d0a505a94f5cc888c94929d06a8c262c32f55830056700837ce8a49eb341aa1163797be5e21079563baf780d8d44f250fb0685a3d89d83d298c56eeddf8889d8cc9e766c38ffbb519de822c687cdabaf6ec09d595888d0e971124a063614b27ce67cb74b7ecc9ce22b56b55bd768f629ccb519996c6900a30b1e482a6ab7e7196409aa7451a73dc9a7cfc36cc4481212d0344a768d31c044386483b3"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xec, 0x1, "50eadad6e20b2ed5f127635c34ca82f1e7aa33b3672d67de80fafa78f24f0c90b891a07d3913fa4483ffe622baa841bc64d037488a94e9f4c5fc1598608321a55a7e9eaff01bfeb3be73bf226716edc09a760612a196d88c0e3d2eb4cea69f2118f6fbc8a41f37792ac1f327caea876082f47dcd42f10271857ecefecdd31819c68eea6e4d037feaab37f2bd624274b7559fbeff7663dc892e5b946c2201afd0bbf0c3907b07f242238ea64ec95e6d8600d134bc47add4263d68debb1205a5ee38be8ac8918c3490b25ce7cc83eea3bbe6564fe9ed79d6fe4765f859233861574be09dd94ee862a5"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "2ca6db4d9368ff58ca1090f016e5ef33d36ed1fe50af6c348faea0ad0d0e349cd10e016cc95157d0a390b40307bf60f1c7953ad8b7068e40857323c7"}, @NFTA_DATA_VALUE={0x6d, 0x1, "22577337972d4f54385e1eef579ba5bcbd9f417c5e077a3d6f06a6d09c7d95b2cc691acb2b8000cf6781f74ad0e4105f9e5507550c1cc206c5f1b787b07c11273879db6679aefa177f07973b438bfc136f27385bffc3dd355b1775409ff0add5177d8005a59ebe7c42"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x588, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x150, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xac, 0x1, "18a05d1bc55562ae7ea5dd4b9b53a277d7beaf011c5697cc83634cef83058188bb27e1f018334007d1488e364bebc3145ac635dd18361cc3cf41d854eb16b76c24d54c6fbd968bad950e3a03a4aac2c28e4ce2d1316605dd6b98f8587da140d4c4bf8b9fca42a011a6c7dfe5645a32093c6adab0fae09cd16f9d9c3789f238c9c73a77ef70ac9d99a8f987f7e7c14d239163a95b9cd92c3621b7a35bb3f259830796d3b5bcbcc514"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x228, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x214, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DATA={0xac, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "f281f45c9ed672fb36f878800bb59f013ec753117f2cda80f67b55712980873f404a08c49354edaa565fa5bda16f0784222b09a5296e3f206e985a32ce72f5409a2314d58232a9d0d2202f441d25911a70dba9c037702bda2bfb5db5b948ff90885b44370251612dd1de77e99171ddb703bde1b6e545825f1cf7d3a9353fc0bc39d11c31f2cf69d80ca795832f288d829395f7c16e42ce05d74dce3da37a169d5432015e49ab3784794fc82a2f932440e161aa3e5f78812f14844a97a23a37401314a9f7f8ceec565d09daac727a6d7deb3fe7ba69338513bc07948c10"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "0ae694689eac732568251da55d988936af145fa2bd3e2a51182f9d60a13ee39cfdfa1d165b847d0b1b"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x400}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0xc4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x30, 0x1, "3a557df22bea7be201d275ad31c7b931a209a630d57187fb150573acf92c0cc5ba60b48d8eec2af8238171ce"}, @NFTA_DATA_VALUE={0x64, 0x1, "230847f47bf81efd12804306c6d0442c954e6e55416eac322765c0103c2a9044f85e7a7964dc3db0fbe5120762ca15c7f009f47aba1edcd148d3d8368368aa8b9d2559d1bd912e663e2dbd9972b8bd14a71f9d1902a3b9b6b36951eacbced2ff"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x7a, 0x6, 0x1, 0x0, "ff80d39818e6c675eef0126642339f9aca1fedde8017b1f70e08535d2a164415ccc75aaa2ea75d99e618f70c4ebf8cdbd74966ec0e42a42d07d4dc8405d4a149e989410f218122b991c340d48505ebe2ecda3aa69c267c5668a94905bd558ffa74bfb98f4fb7ebad0caba895d49586c1327f2f9f8e8e"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x12e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x113c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "1a17c023dc52ad9a9424df04e63ef4fd1206fa6e55c74b8d91ac0ef1854f20faf73635075409b2157670e629401e510c539da921b1ba9ede8767dcc55a775b69a3be85561768cd22aac1dc62fe97eda046abb20b387f0e682bff0593a540f63cd2fcfa3025e6967ae08a280856d37b05873915b6fc8b67314c2cd739a2a1"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x12, 0x1, "b798f2bd7b06b34912dbe92d109f"}]}, @NFTA_SET_ELEM_USERDATA={0x7d, 0x6, 0x1, 0x0, "25921a912c5dcb75550acd4d46d5eb3059e0b15115e20d48ecb09c0cb869886e04c8d8781b0b432664db4ec35e146b918e14580e852a97af27df0cadbefbbafb54f42d7e46815eecae87980a4c8aeb324783f1f8f7e7e1c759e8dba1d2d09e5b67e2b4b16bb94c029af082c91c92b65618936fba9563ef2c54"}, @NFTA_SET_ELEM_USERDATA={0xf5, 0x6, 0x1, 0x0, "701716e4eca6b762a0b096d807c91dd11203ad3d179251810243aa5c9514b2cacea3077aecdc6249f3658f34635f89dbdb7a0f8b856c673661596fda6c8fd0c941ee5b555dde07a73b1f1cbbd80b823c64d29cdeb60cee1b7883705de7fcb88e938a49754d14a41a24c0f5e553bbdfcfad37975f6bc5b28e1bb8f0c569944d48912dae92cd859c920b58e73ebcef6c1cd565ef5541d774885be8c0c3927244e24e680c02d0fd53cabf38ab3114b2f03efb3857dc205ea57efb55ec8b13558c592ef9886646f4cc301f263e16144736c106d0e4e27e94a71b7174ec66f12922fe0a5153f6dfe1aaeb91539d9c71bef524db"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb, 0x6, 0x1, 0x0, "7ef8cc7da1fd12"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x1464, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x29, 0x6, 0x1, 0x0, "3d026738c19d773aedc0b5b1f723f9fe4824d55f255c08deec8fd42a9e912e1cfdaf118cff"}, @NFTA_SET_ELEM_DATA={0x12ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xad, 0x1, "a524db50670b64bb723357ba9536b49e5f6cf84e59f5c08e67d0d2da4f855bf78c749408adc5cc2e00949c4ad8069f98c7eab153c5601900b380182679924aa7a60a8c3c816b436d2e253b55fc619250129f6969055f9b60fb60449c4cce8a400b4679fc3b2c89089cdd19943ef121371d7a12141a898d2eda4682a7f3f754b273d43bac368c6fca2b560566b4d807a6bc57693bcc0065002595818b7f738a5187b9f5921942a96093"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "3376d18336f3c86291bb4af5daa323f7ce0cce12b9de20f03a050e0a89cdfa6d0b47095e50ec01af150d2be6dfa43e33e2a4da4591a2e3a12857db07b300af82f84b4df402e6ee4dcf4da6929c548bda72abc842a0d7c7602aebed032bfeb99e1f8b03a25c2f77c471fb42b5cea1262b576fcfb1a1ad1332921d65039344be28815ebafb1882109e7229357a23742b9216b2ba0ec7c27c3a6bd9f025c7bf6116f315d4d5dd07b9c4ec5e19abbbaf802d11e09e35474660"}, @NFTA_DATA_VALUE={0x8c, 0x1, "1b1e1060f8e94a991f8010a3d6c549f389aeddd8ce7c1d57287fee09aaae12df612ab9025de98af3fab3cf0f15a1f2d238faa1ab206556832c971ed0f353c851c9e7c3e91c5c0eaa61160aa4f8a2333560e22b265f12284226e7bd78e7dd46ff3238f87aad0223ad1c595f1c8f9b67fb9c77b664779531402d1c4d60d13449d5309d08fbda4486c8"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "df9553e559f557ff832767ef0a824a53414b53370ee38471684eb6f2803bf3f0afb7e17c96c0832a3ab1dcfc64f0013f6abf4ef0ce7387b5f1f6bff5b33eeddb7576cea3753f2379c4bc620046385a307feeec6a0397849c37f54a434bb6f44bdde93220790ddb24e554840e21751b4ba79834c56805e6da9be8fd07d3969bdaac2b172de2232f2a8000"}]}, @NFTA_SET_ELEM_KEY_END={0x64, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "7d2ae0371cf53dc84fd03516511e6e73dfc4a299368577adb1df86b394ada1b30a0020ef60c6e94e96e759b465385ba5a63be2ff1ca2b2ce88fb1b966e927cc5d1538d42c7562cada1742f670f2d1b2efd4c2a1c3c4c5c9a53"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd3b}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd2}]}]}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0x6e, 0x7, 0x1, 0x0, "fac1267cb610a68f6354b01f6b2d9be9ae657dc7f935750cc5c3e2bdb14df4932da63a27cdb16742cb5725d76b906540f0976e3361bdcd9b3b521826c4a5dd85812bcc63f19a02b3d704bc6cdf61faca57a3a92b848ca4148b0c8cf841bfe05ed29336f6b7791982daf2"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3700}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008001)
read$FUSE(r8, &(0x7f0000000580)={0x2020}, 0x2020)
r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x149b01, 0x0)
ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01020200aaaaaaaaaabb000000000000"])

16.723882114s ago: executing program 2 (id=534):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, &(0x7f0000000080)=0x6ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42042, 0xdea1a290e97695ad)
pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)='~i', 0x2}], 0x1, 0x7ff, 0x7f, 0x5)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "9383f28a", {0x3, 0x101, 0x0, 0x7, 0x8, 0x3, 0xbf}})

16.151533101s ago: executing program 1 (id=535):
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x11000)

16.039908315s ago: executing program 0 (id=536):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockname$inet6(r1, 0x0, &(0x7f00000007c0))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$getsig(0x4202, r0, 0xffff, 0x0)

15.942940268s ago: executing program 3 (id=537):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
close_range(r0, 0xffffffffffffffff, 0x0)

15.771866003s ago: executing program 3 (id=538):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000ec28f10804fffffd060001000500000008000900"], 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x40080)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000})
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000280), 0x4)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x8, 0x0)
close_range(r2, r2, 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000030000008500000086", @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000400))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
mknodat$null(r8, &(0x7f0000000300)='./file0\x00', 0x10, 0x103)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

15.059349455s ago: executing program 1 (id=539):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2a900, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioperm(0x5, 0x6, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x680, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
read$FUSE(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000080))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40016)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000080)

14.927742719s ago: executing program 0 (id=540):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x48800)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
syz_usb_control_io$rtl8150(r5, 0x0, 0x0)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x8, &(0x7f0000000080)={0x15, "a7376cd937b8a60b7d166e63a88d79c999dbc9fa29b475a3a9f393d5189793be0b"}})
close(0x3)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r4}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r4}, 0x38)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
sendto(r7, 0x0, 0x0, 0x800, &(0x7f0000000700)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000005}, [@null, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

11.172727815s ago: executing program 3 (id=541):
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x2a08200, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$pokeuser(0x6, r6, 0x358, 0x0)
ptrace$pokeuser(0x6, r6, 0x388, 0x552355c2)
ioprio_get$pid(0x2, r2)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796100000000fedbdf377e0000000c0099000700"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x0, 0x1001, 0x6, 0x6, 0x2}, 0x0, &(0x7f0000000240)={0x93, 0xc, 0x7, 0x8000000000000000, 0x0, 0x80000000000000, 0x80000003, 0x1fffe}, 0x0, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
socket(0x2, 0x805, 0x0)

9.643852092s ago: executing program 1 (id=542):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x2, &(0x7f0000000040)=0x8})

8.695091222s ago: executing program 3 (id=543):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x2, &(0x7f0000000040)=0x8}) (fail_nth: 1)

8.641195053s ago: executing program 2 (id=544):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0xfffffff9, 0x80}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0xf)
eventfd2(0x0, 0x800)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

8.571399366s ago: executing program 0 (id=545):
r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x1, 0xc})
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc020}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0)
r4 = dup(r2)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040002400000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44840)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7.78965285s ago: executing program 3 (id=546):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2a900, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioperm(0x5, 0x6, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x680, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
read$FUSE(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000080))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40016)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000080)

4.425034544s ago: executing program 2 (id=547):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x11000)

4.269636399s ago: executing program 0 (id=548):
r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) (fail_nth: 1)

4.151426063s ago: executing program 2 (id=549):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2a900, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioperm(0x5, 0x6, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x680, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
read$FUSE(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000080))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40016)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000080)

3.206246801s ago: executing program 3 (id=550):
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102"], 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r2 = dup3(r1, r0, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0)

2.209141752s ago: executing program 0 (id=551):
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x2a08200, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$pokeuser(0x6, r6, 0x358, 0x0)
ptrace$pokeuser(0x6, r6, 0x388, 0x552355c2)
ioprio_get$pid(0x2, r2)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796100000000fedbdf377e0000000c0099000700"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x0, 0x1001, 0x6, 0x6, 0x2}, 0x0, &(0x7f0000000240)={0x93, 0xc, 0x7, 0x8000000000000000, 0x0, 0x80000000000000, 0x80000003, 0x1fffe}, 0x0, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
socket(0x2, 0x805, 0x0)

2.030986778s ago: executing program 1 (id=552):
syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f0000000580)='./file1\x00', 0x8488, &(0x7f00000005c0), 0xfe, 0x1101, &(0x7f0000001640)="$eJzs2T+LE0EYB+Df7MZ/VWSvXwQtLOS4I36BKxTSWtuIXOVVl0rx4/hx9AqxP67X4sB+ZU02UQkEkqgcPA8s8+7LO7vvlDMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I2SryU5qJJmyFVJStK2F9OrJO2Qv/+xrlLy4nQ6e3Y+eT5LUv8sL/eGkpKkOX54t5k0k+a4eXpw8ujT7O27N6/Ozk7PlzVtLq/3v5Sy6AcAAAD4Xbezz//5/wAAAMAmeztIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhSN17FzRBUSUrSthfTqyTtmnm3/lF/AAAAwO5Kqrwcr8vPjwFWnuTLuCzz/fi99PFRPqyZv1G1fc8AAABww3V3FsGv9+vl9mo//jij5da5zz3IKIeH8/fFkG8nSZ3k6I+PX16/fz08pav/9loAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAHO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAGCvAAAA///e69c/")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x68c03, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002780)=""/102392, 0x18ff8)
r6 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r7, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TCSETS(r1, 0x404c4701, 0x0)
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='v', 0x1}], 0x1, 0x800fff, 0xc, 0x4)
write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4)

1.64239397s ago: executing program 2 (id=553):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005880)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000)="86", &(0x7f0000000080)=@udp}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00')
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x10)
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020)

0s ago: executing program 0 (id=554):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x3, {0x4, 0x21}, 0x14, 0x1})
r1 = userfaultfd(0x80001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1fc, 0x0, 0x5}})
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/handlers\x00', 0x0, 0x0)
preadv2(r3, 0x0, 0x0, 0x2b, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r1, &(0x7f00000002c0)=""/153, 0x99)
r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x800, 0x7f, 0xfff, 0x1000, r4, 0x9, '\x00', 0x0, r3, 0x4, 0x3}, 0x50)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
ioctl$NILFS_IOCTL_RESIZE(0xffffffffffffffff, 0x40086e8b, &(0x7f00000006c0)=0x147a)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r7, &(0x7f0000000380)="6aba1c687d", 0x5, 0x24024095, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4)

kernel console output (not intermixed with test programs):

ght_fault+0xaa/0x120
[  237.391091][ T7003]  ? __lock_acquire+0x7d40/0x7d40
[  237.396189][ T7003]  should_fail_ex+0x39d/0x4d0
[  237.401151][ T7003]  _copy_from_user+0x2f/0xe0
[  237.405846][ T7003]  ___sys_sendmsg+0x1c7/0x360
[  237.410617][ T7003]  ? get_pid_task+0x20/0x1e0
[  237.415294][ T7003]  ? __sys_sendmsg+0x2a0/0x2a0
[  237.420149][ T7003]  ? __lock_acquire+0x7d40/0x7d40
[  237.425272][ T7003]  __se_sys_sendmsg+0x1c2/0x2b0
[  237.430203][ T7003]  ? __x64_sys_sendmsg+0x80/0x80
[  237.435279][ T7003]  ? lockdep_hardirqs_on+0x98/0x150
[  237.440577][ T7003]  do_syscall_64+0x55/0xb0
[  237.445079][ T7003]  ? clear_bhb_loop+0x40/0x90
[  237.449826][ T7003]  ? clear_bhb_loop+0x40/0x90
[  237.454571][ T7003]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.460532][ T7003] RIP: 0033:0x7f4db7d9ce59
[  237.464987][ T7003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.484676][ T7003] RSP: 002b:00007f4db8bbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.493136][ T7003] RAX: ffffffffffffffda RBX: 00007f4db8015fa0 RCX: 00007f4db7d9ce59
[  237.501160][ T7003] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003
[  237.509173][ T7003] RBP: 00007f4db8bbb090 R08: 0000000000000000 R09: 0000000000000000
[  237.517183][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.525213][ T7003] R13: 00007f4db8016038 R14: 00007f4db8015fa0 R15: 00007ffd11cf76e8
[  237.533264][ T7003]  </TASK>
[  237.851929][ T7005] loop2: detected capacity change from 0 to 8192
[  237.881651][ T7005] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option ""
[  237.937848][ T5997] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  238.213551][ T7019] loop0: detected capacity change from 0 to 128
[  238.252494][ T7019] EXT4-fs: Ignoring removed mblk_io_submit option
[  238.274369][ T7019] ext4: Unknown parameter 'fsuuid'
[  238.334717][ T7017] loop1: detected capacity change from 0 to 4096
[  238.411222][ T7023] FAULT_INJECTION: forcing a failure.
[  238.411222][ T7023] name failslab, interval 1, probability 0, space 0, times 0
[  238.445177][ T7024] loop0: detected capacity change from 0 to 128
[  238.497618][ T7023] CPU: 0 PID: 7023 Comm: syz.2.301 Not tainted syzkaller #0
[  238.505127][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  238.515269][ T7023] Call Trace:
[  238.518619][ T7023]  <TASK>
[  238.521642][ T7023]  dump_stack_lvl+0x18c/0x250
[  238.526403][ T7023]  ? show_regs_print_info+0x20/0x20
[  238.531685][ T7023]  ? load_image+0x420/0x420
[  238.536273][ T7023]  ? __might_sleep+0xe0/0xe0
[  238.540966][ T7023]  ? __lock_acquire+0x7d40/0x7d40
[  238.546084][ T7023]  should_fail_ex+0x39d/0x4d0
[  238.550872][ T7023]  should_failslab+0x9/0x20
[  238.555488][ T7023]  slab_pre_alloc_hook+0x59/0x310
[  238.560635][ T7023]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  238.566445][ T7023]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  238.572252][ T7023]  __kmem_cache_alloc_node+0x53/0x250
[  238.577736][ T7023]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  238.583643][ T7023]  __kmalloc+0xa4/0x230
[  238.587904][ T7023]  tomoyo_realpath_from_path+0xe3/0x5d0
[  238.593644][ T7023]  tomoyo_path_number_perm+0x248/0x620
[  238.599192][ T7023]  ? tomoyo_path_number_perm+0x217/0x620
[  238.604907][ T7023]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  238.610460][ T7023]  ? ksys_write+0x1c4/0x260
[  238.615093][ T7023]  ? __fget_files+0x28/0x4b0
[  238.619732][ T7023]  ? __fget_files+0x28/0x4b0
[  238.624410][ T7023]  security_file_ioctl+0x70/0xa0
[  238.629424][ T7023]  __se_sys_ioctl+0x48/0x170
[  238.634086][ T7023]  do_syscall_64+0x55/0xb0
[  238.638566][ T7023]  ? clear_bhb_loop+0x40/0x90
[  238.643364][ T7023]  ? clear_bhb_loop+0x40/0x90
[  238.648123][ T7023]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  238.654110][ T7023] RIP: 0033:0x7f237ad9ce59
[  238.658647][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.678348][ T7023] RSP: 002b:00007f2378fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  238.686842][ T7023] RAX: ffffffffffffffda RBX: 00007f237b016090 RCX: 00007f237ad9ce59
[  238.694894][ T7023] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  238.702934][ T7023] RBP: 00007f2378fd5090 R08: 0000000000000000 R09: 0000000000000000
[  238.710975][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.719027][ T7023] R13: 00007f237b016128 R14: 00007f237b016090 R15: 00007fff02498c68
[  238.727109][ T7023]  </TASK>
[  238.742014][ T7023] ERROR: Out of memory at tomoyo_realpath_from_path.
[  238.792627][ T7024] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  238.820893][ T7024] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  239.118412][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  239.148372][ T7028] loop1: detected capacity change from 0 to 2048
[  239.253136][ T7028] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  239.267968][ T7030] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  239.284140][ T7030] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  239.339003][ T7028] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  239.417213][ T7028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.156843][ T7044] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  241.168049][ T7044] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  241.294555][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  241.494533][    T8] usb 4-1: Using ep0 maxpacket: 8
[  241.538787][    T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  241.581729][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  241.644169][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  241.712592][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  241.774303][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  241.834271][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  241.884378][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.954357][ T7049] netlink: 76 bytes leftover after parsing attributes in process `syz.1.310'.
[  242.232376][    T8] usb 4-1: usb_control_msg returned -32
[  242.279436][    T8] usbtmc 4-1:16.0: can't read capabilities
[  242.358388][ T7051] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  242.433358][    T8] usb 4-1: USB disconnect, device number 11
[  242.804492][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  243.015187][    T9] usb 2-1: Using ep0 maxpacket: 16
[  243.036106][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  243.054599][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.102340][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  243.129939][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  243.145859][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.159208][ T7056] FAULT_INJECTION: forcing a failure.
[  243.159208][ T7056] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  243.182699][    T9] usb 2-1: Product: syz
[  243.189738][    T9] usb 2-1: Manufacturer: syz
[  243.200029][ T7056] CPU: 0 PID: 7056 Comm: syz.0.312 Not tainted syzkaller #0
[  243.207412][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  243.217523][ T7056] Call Trace:
[  243.220854][ T7056]  <TASK>
[  243.223833][ T7056]  dump_stack_lvl+0x18c/0x250
[  243.228585][ T7056]  ? show_regs_print_info+0x20/0x20
[  243.233840][ T7056]  ? load_image+0x420/0x420
[  243.238411][ T7056]  ? __might_fault+0xaa/0x120
[  243.243143][ T7056]  ? __lock_acquire+0x7d40/0x7d40
[  243.248236][ T7056]  should_fail_ex+0x39d/0x4d0
[  243.253007][ T7056]  _copy_from_user+0x2f/0xe0
[  243.257722][ T7056]  ___sys_sendmsg+0x1c7/0x360
[  243.262468][ T7056]  ? get_pid_task+0x20/0x1e0
[  243.267162][ T7056]  ? __sys_sendmsg+0x2a0/0x2a0
[  243.272008][ T7056]  ? __lock_acquire+0x7d40/0x7d40
[  243.277133][ T7056]  __se_sys_sendmsg+0x1c2/0x2b0
[  243.282064][ T7056]  ? __x64_sys_sendmsg+0x80/0x80
[  243.287079][ T7056]  ? lockdep_hardirqs_on+0x98/0x150
[  243.292342][ T7056]  do_syscall_64+0x55/0xb0
[  243.296815][ T7056]  ? clear_bhb_loop+0x40/0x90
[  243.301546][ T7056]  ? clear_bhb_loop+0x40/0x90
[  243.306288][ T7056]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.312281][ T7056] RIP: 0033:0x7f038099ce59
[  243.316766][ T7056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.336480][ T7056] RSP: 002b:00007f03818f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.344963][ T7056] RAX: ffffffffffffffda RBX: 00007f0380c15fa0 RCX: 00007f038099ce59
[  243.353004][ T7056] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004
[  243.361041][ T7056] RBP: 00007f03818f1090 R08: 0000000000000000 R09: 0000000000000000
[  243.369068][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.377106][ T7056] R13: 00007f0380c16038 R14: 00007f0380c15fa0 R15: 00007ffd38afb8b8
[  243.385152][ T7056]  </TASK>
[  243.389472][    T9] usb 2-1: SerialNumber: syz
[  243.443481][    T8] usb 4-1: Using ep0 maxpacket: 8
[  243.477278][    T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  243.487926][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  243.518689][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  243.531890][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  243.548562][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  243.568420][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  243.581361][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.636936][    T9] usb 2-1: 0:2 : does not exist
[  243.649892][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  243.774553][    T9] usb 2-1: USB disconnect, device number 7
[  243.898230][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.163636][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.316'.
[  244.319227][    T8] usb 4-1: usb_control_msg returned -71
[  244.335849][    T8] usbtmc 4-1:16.0: can't read capabilities
[  244.458712][    T8] usb 4-1: USB disconnect, device number 12
[  245.300683][ T5785] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  245.344443][ T5785] hid-generic 0000:0000:0000.0011: hidraw9: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  246.551851][ T7093] FAULT_INJECTION: forcing a failure.
[  246.551851][ T7093] name failslab, interval 1, probability 0, space 0, times 0
[  246.604445][ T7093] CPU: 1 PID: 7093 Comm: syz.0.322 Not tainted syzkaller #0
[  246.611869][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  246.621963][ T7093] Call Trace:
[  246.625288][ T7093]  <TASK>
[  246.628274][ T7093]  dump_stack_lvl+0x18c/0x250
[  246.633060][ T7093]  ? show_regs_print_info+0x20/0x20
[  246.638357][ T7093]  ? load_image+0x420/0x420
[  246.642944][ T7093]  ? __might_sleep+0xe0/0xe0
[  246.647635][ T7093]  ? __lock_acquire+0x7d40/0x7d40
[  246.652745][ T7093]  should_fail_ex+0x39d/0x4d0
[  246.657504][ T7093]  should_failslab+0x9/0x20
[  246.662045][ T7093]  slab_pre_alloc_hook+0x59/0x310
[  246.667106][ T7093]  ? read_lock_is_recursive+0x20/0x20
[  246.672510][ T7093]  ? drm_atomic_state_alloc+0xa8/0x100
[  246.678014][ T7093]  __kmem_cache_alloc_node+0x53/0x250
[  246.683454][ T7093]  ? drm_atomic_state_alloc+0xa8/0x100
[  246.688959][ T7093]  kmalloc_trace+0x2a/0xe0
[  246.693421][ T7093]  drm_atomic_state_alloc+0xa8/0x100
[  246.698775][ T7093]  drm_client_modeset_commit_atomic+0x119/0x7b0
[  246.705066][ T7093]  ? trace_contention_end+0x39/0xe0
[  246.710298][ T7093]  ? __mutex_lock+0x315/0xcc0
[  246.715026][ T7093]  ? drm_client_modeset_check+0x180/0x180
[  246.720862][ T7093]  ? __mutex_lock+0x315/0xcc0
[  246.725582][ T7093]  ? mutex_lock_nested+0x20/0x20
[  246.730585][ T7093]  ? drm_fb_helper_lastclose+0x97/0x150
[  246.736181][ T7093]  ? lock_chain_count+0x20/0x20
[  246.741077][ T7093]  ? mutex_lock_nested+0x20/0x20
[  246.746094][ T7093]  drm_client_modeset_commit_locked+0xcb/0x4c0
[  246.752295][ T7093]  drm_client_modeset_commit+0x4a/0x70
[  246.757827][ T7093]  drm_fb_helper_lastclose+0x9f/0x150
[  246.763288][ T7093]  drm_fbdev_generic_client_restore+0x34/0x40
[  246.769399][ T7093]  drm_client_dev_restore+0x138/0x270
[  246.774807][ T7093]  drm_release+0x4bd/0x670
[  246.779254][ T7093]  ? drm_lastclose+0x100/0x100
[  246.784060][ T7093]  __fput+0x234/0x970
[  246.788087][ T7093]  task_work_run+0x1d4/0x260
[  246.792720][ T7093]  ? task_work_cancel+0x220/0x220
[  246.797785][ T7093]  ? exit_to_user_mode_loop+0x3b/0x110
[  246.803282][ T7093]  exit_to_user_mode_loop+0xe6/0x110
[  246.808612][ T7093]  exit_to_user_mode_prepare+0xee/0x180
[  246.814221][ T7093]  syscall_exit_to_user_mode+0x1a/0x50
[  246.819721][ T7093]  do_syscall_64+0x61/0xb0
[  246.824164][ T7093]  ? clear_bhb_loop+0x40/0x90
[  246.828874][ T7093]  ? clear_bhb_loop+0x40/0x90
[  246.833585][ T7093]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  246.839519][ T7093] RIP: 0033:0x7f038099ce59
[  246.843969][ T7093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.863634][ T7093] RSP: 002b:00007f03818f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  246.872085][ T7093] RAX: 0000000000000000 RBX: 00007f0380c15fa0 RCX: 00007f038099ce59
[  246.880120][ T7093] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[  246.888148][ T7093] RBP: 00007f03818f1090 R08: 0000000000000000 R09: 0000000000000000
[  246.896150][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.904147][ T7093] R13: 00007f0380c16038 R14: 00007f0380c15fa0 R15: 00007ffd38afb8b8
[  246.912168][ T7093]  </TASK>
[  247.104097][  T787] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  247.469979][  T787] usb 4-1: Using ep0 maxpacket: 8
[  247.482811][  T787] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  247.500678][  T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  247.514705][  T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  247.526095][  T787] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  247.551263][  T787] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  247.576639][ T7099] loop0: detected capacity change from 0 to 2048
[  247.589207][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.618045][ T7099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  247.658880][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[  247.667891][ T7099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.323'.
[  248.504906][ T7103] FAULT_INJECTION: forcing a failure.
[  248.504906][ T7103] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  248.641644][ T7103] CPU: 0 PID: 7103 Comm: syz.0.325 Not tainted syzkaller #0
[  248.649066][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  248.659368][ T7103] Call Trace:
[  248.662707][ T7103]  <TASK>
[  248.665703][ T7103]  dump_stack_lvl+0x18c/0x250
[  248.670461][ T7103]  ? show_regs_print_info+0x20/0x20
[  248.675736][ T7103]  ? load_image+0x420/0x420
[  248.680313][ T7103]  ? __lock_acquire+0x7d40/0x7d40
[  248.685419][ T7103]  ? __lock_acquire+0x1273/0x7d40
[  248.690528][ T7103]  should_fail_ex+0x39d/0x4d0
[  248.695299][ T7103]  prepare_alloc_pages+0x1e2/0x5f0
[  248.700490][ T7103]  __alloc_pages+0x134/0x460
[  248.705152][ T7103]  ? zone_statistics+0x170/0x170
[  248.710182][ T7103]  __kmalloc_large_node+0x8c/0x1e0
[  248.715391][ T7103]  ? iovec_from_user+0x87/0x240
[  248.720311][ T7103]  __kmalloc+0x111/0x230
[  248.724625][ T7103]  iovec_from_user+0x87/0x240
[  248.729378][ T7103]  process_vm_rw+0x26f/0xc00
[  248.734024][ T7103]  ? get_pid_task+0x20/0x1e0
[  248.738682][ T7103]  ? __ia32_sys_process_vm_writev+0xf0/0xf0
[  248.744652][ T7103]  ? ksys_write+0x1c4/0x260
[  248.749230][ T7103]  ? __lock_acquire+0x7d40/0x7d40
[  248.754325][ T7103]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  248.760030][ T7103]  ? lock_chain_count+0x20/0x20
[  248.764944][ T7103]  __x64_sys_process_vm_readv+0xe0/0xf0
[  248.770547][ T7103]  do_syscall_64+0x55/0xb0
[  248.775012][ T7103]  ? clear_bhb_loop+0x40/0x90
[  248.779738][ T7103]  ? clear_bhb_loop+0x40/0x90
[  248.784463][ T7103]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.790420][ T7103] RIP: 0033:0x7f038099ce59
[  248.795067][ T7103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.814926][ T7103] RSP: 002b:00007f03818f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[  248.823403][ T7103] RAX: ffffffffffffffda RBX: 00007f0380c15fa0 RCX: 00007f038099ce59
[  248.831430][ T7103] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000106
[  248.839460][ T7103] RBP: 00007f03818f1090 R08: 0000000000000286 R09: 0000000000000000
[  248.847486][ T7103] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001
[  248.855508][ T7103] R13: 00007f0380c16038 R14: 00007f0380c15fa0 R15: 00007ffd38afb8b8
[  248.863626][ T7103]  </TASK>
[  249.479854][  T787] usb 4-1: usb_control_msg returned -71
[  249.494177][  T787] usbtmc 4-1:16.0: can't read capabilities
[  249.537421][  T787] usb 4-1: USB disconnect, device number 13
[  250.469801][ T5785] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  250.517318][ T5785] hid-generic 0000:0000:0000.0012: hidraw10: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  250.597101][ T7116] FAULT_INJECTION: forcing a failure.
[  250.597101][ T7116] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.668274][ T7116] CPU: 1 PID: 7116 Comm: syz.0.330 Not tainted syzkaller #0
[  250.675700][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  250.685844][ T7116] Call Trace:
[  250.689173][ T7116]  <TASK>
[  250.692160][ T7116]  dump_stack_lvl+0x18c/0x250
[  250.696919][ T7116]  ? show_regs_print_info+0x20/0x20
[  250.702182][ T7116]  ? load_image+0x420/0x420
[  250.706765][ T7116]  ? __lock_acquire+0x7d40/0x7d40
[  250.711844][ T7116]  ? snprintf+0xe9/0x140
[  250.716158][ T7116]  should_fail_ex+0x39d/0x4d0
[  250.720930][ T7116]  _copy_to_user+0x2f/0xa0
[  250.725409][ T7116]  simple_read_from_buffer+0xe7/0x150
[  250.730835][ T7116]  proc_fail_nth_read+0x1e8/0x260
[  250.735975][ T7116]  ? proc_fault_inject_write+0x360/0x360
[  250.741696][ T7116]  ? fsnotify_perm+0x271/0x5e0
[  250.746534][ T7116]  ? proc_fault_inject_write+0x360/0x360
[  250.752279][ T7116]  vfs_read+0x28b/0x970
[  250.756521][ T7116]  ? kernel_read+0x1e0/0x1e0
[  250.761215][ T7116]  ? __fget_files+0x28/0x4b0
[  250.765882][ T7116]  ? __fget_files+0x28/0x4b0
[  250.770511][ T7116]  ? __fget_files+0x43d/0x4b0
[  250.775238][ T7116]  ? __fdget_pos+0x2a3/0x330
[  250.779860][ T7116]  ? ksys_read+0x75/0x260
[  250.784260][ T7116]  ksys_read+0x150/0x260
[  250.788539][ T7116]  ? vfs_write+0x990/0x990
[  250.792992][ T7116]  ? lockdep_hardirqs_on+0x98/0x150
[  250.798236][ T7116]  do_syscall_64+0x55/0xb0
[  250.802681][ T7116]  ? clear_bhb_loop+0x40/0x90
[  250.807390][ T7116]  ? clear_bhb_loop+0x40/0x90
[  250.812100][ T7116]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  250.818122][ T7116] RIP: 0033:0x7f038095d68e
[  250.822565][ T7116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  250.842215][ T7116] RSP: 002b:00007f03818f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  250.850693][ T7116] RAX: ffffffffffffffda RBX: 00007f03818f16c0 RCX: 00007f038095d68e
[  250.858760][ T7116] RDX: 000000000000000f RSI: 00007f03818f10a0 RDI: 0000000000000003
[  250.866798][ T7116] RBP: 00007f03818f1090 R08: 0000000000000000 R09: 0000000000000000
[  250.874836][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.882837][ T7116] R13: 00007f0380c16038 R14: 00007f0380c15fa0 R15: 00007ffd38afb8b8
[  250.890858][ T7116]  </TASK>
[  251.264064][ T5785] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  253.119237][ T5785] usb 2-1: Using ep0 maxpacket: 8
[  253.194017][ T5785] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  253.202875][ T5785] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  253.290645][ T5785] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  253.324053][ T5785] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  253.343937][ T5785] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  253.372104][ T7141] FAULT_INJECTION: forcing a failure.
[  253.372104][ T7141] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  253.404172][ T5785] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  253.428934][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.449834][ T7141] CPU: 0 PID: 7141 Comm: syz.2.335 Not tainted syzkaller #0
[  253.457232][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  253.467446][ T7141] Call Trace:
[  253.470780][ T7141]  <TASK>
[  253.473772][ T7141]  dump_stack_lvl+0x18c/0x250
[  253.478532][ T7141]  ? show_regs_print_info+0x20/0x20
[  253.483806][ T7141]  ? load_image+0x420/0x420
[  253.488397][ T7141]  ? __lock_acquire+0x7d40/0x7d40
[  253.493502][ T7141]  should_fail_ex+0x39d/0x4d0
[  253.498286][ T7141]  prepare_alloc_pages+0x1e2/0x5f0
[  253.503483][ T7141]  __alloc_pages+0x134/0x460
[  253.508174][ T7141]  ? zone_statistics+0x170/0x170
[  253.513185][ T7141]  ? handle_mm_fault+0xe7/0x4c00
[  253.518187][ T7141]  __folio_alloc+0x10/0x20
[  253.522748][ T7141]  vma_alloc_folio+0x47a/0x8f0
[  253.528339][ T7141]  handle_mm_fault+0x1b3b/0x4c00
[  253.533344][ T7141]  ? handle_mm_fault+0xe7/0x4c00
[  253.538340][ T7141]  ? lock_vma_under_rcu+0x549/0x680
[  253.543583][ T7141]  ? numa_migrate_prep+0x350/0x350
[  253.548765][ T7141]  ? do_user_addr_fault+0x1c3/0x12c0
[  253.554144][ T7141]  do_user_addr_fault+0xac8/0x12c0
[  253.559324][ T7141]  ? rcu_is_watching+0x15/0xb0
[  253.564156][ T7141]  exc_page_fault+0x64/0x100
[  253.568816][ T7141]  asm_exc_page_fault+0x26/0x30
[  253.573817][ T7141] RIP: 0033:0x7f237ac5b3ea
[  253.578298][ T7141] Code: 48 83 c4 08 5b 5d e9 c5 fa ff ff 0f 1f 44 00 00 41 57 45 31 ff 41 56 41 55 41 54 41 bc 00 00 c0 fe 55 53 48 81 ec 38 1b 00 00 <48> 89 bc 24 a8 00 00 00 4c 8d ac 24 20 07 00 00 48 89 b4 24 a0 00
[  253.597967][ T7141] RSP: 002b:00007f2378fd34b0 EFLAGS: 00010202
[  253.604092][ T7141] RAX: 00007f237ac5b3d0 RBX: 00007f237b016090 RCX: 00002000000003c0
[  253.612130][ T7141] RDX: 0000200000fe6000 RSI: ffffffffffffffff RDI: ffffffffffffffff
[  253.620160][ T7141] RBP: 00007f2378fd5090 R08: 0000000000000001 R09: 0000000000000014
[  253.628193][ T7141] R10: ffffffffffffffff R11: 0000200000fe6000 R12: 00000000fec00000
[  253.636218][ T7141] R13: 00007f237b016128 R14: 00007f237b016090 R15: 0000000000000000
[  253.644256][ T7141]  </TASK>
[  253.647463][    C0] vkms_vblank_simulate: vblank timer overrun
[  253.810641][ T7141] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  253.904193][ T5785] usb 2-1: can't set config #16, error -71
[  253.916327][ T5785] usb 2-1: USB disconnect, device number 8
[  254.293271][ T7148] netlink: 'syz.2.338': attribute type 2 has an invalid length.
[  254.335569][ T7148] netlink: 44 bytes leftover after parsing attributes in process `syz.2.338'.
[  254.380032][ T7148] netlink: 43 bytes leftover after parsing attributes in process `syz.2.338'.
[  254.414235][ T7148] netlink: 'syz.2.338': attribute type 6 has an invalid length.
[  254.449571][ T7148] netlink: 'syz.2.338': attribute type 5 has an invalid length.
[  254.466109][ T7148] netlink: 43 bytes leftover after parsing attributes in process `syz.2.338'.
[  254.564298][ T5846] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  254.791852][ T5846] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  254.827362][ T5846] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  255.023994][ T5846] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  255.033146][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.203261][ T7146] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  255.237513][ T5846] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  256.374864][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.458842][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.532269][  T787] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  256.588653][  T787] hid-generic 0000:0000:0000.0013: hidraw11: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  256.626166][ T7146] loop1: detected capacity change from 0 to 1024
[  256.860906][ T7146] EXT4-fs: Ignoring removed orlov option
[  257.060225][ T7165] fuse: Invalid rootmode
[  257.148711][ T7146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.222110][ T7163] fido_id[7163]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  257.906777][ T7157] can: request_module (can-proto-0) failed.
[  259.855837][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  259.869020][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  260.728722][ T5846] usb 2-1: USB disconnect, device number 9
[  261.031755][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.307509][ T7187] FAULT_INJECTION: forcing a failure.
[  261.307509][ T7187] name failslab, interval 1, probability 0, space 0, times 0
[  261.344368][ T7187] CPU: 0 PID: 7187 Comm: syz.3.346 Not tainted syzkaller #0
[  261.351782][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  261.361929][ T7187] Call Trace:
[  261.365273][ T7187]  <TASK>
[  261.368253][ T7187]  dump_stack_lvl+0x18c/0x250
[  261.373011][ T7187]  ? show_regs_print_info+0x20/0x20
[  261.378286][ T7187]  ? load_image+0x420/0x420
[  261.382859][ T7187]  ? __might_sleep+0xe0/0xe0
[  261.387514][ T7187]  ? __lock_acquire+0x7d40/0x7d40
[  261.392616][ T7187]  should_fail_ex+0x39d/0x4d0
[  261.397387][ T7187]  should_failslab+0x9/0x20
[  261.401979][ T7187]  slab_pre_alloc_hook+0x59/0x310
[  261.407091][ T7187]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  261.412890][ T7187]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  261.418690][ T7187]  __kmem_cache_alloc_node+0x53/0x250
[  261.424139][ T7187]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  261.429931][ T7187]  __kmalloc+0xa4/0x230
[  261.434177][ T7187]  tomoyo_realpath_from_path+0xe3/0x5d0
[  261.439820][ T7187]  tomoyo_path_number_perm+0x248/0x620
[  261.445368][ T7187]  ? tomoyo_path_number_perm+0x217/0x620
[  261.451071][ T7187]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  261.456607][ T7187]  ? ksys_write+0x1c4/0x260
[  261.461189][ T7187]  ? __fget_files+0x28/0x4b0
[  261.465886][ T7187]  ? __fget_files+0x28/0x4b0
[  261.470554][ T7187]  security_file_ioctl+0x70/0xa0
[  261.475552][ T7187]  __se_sys_ioctl+0x48/0x170
[  261.480199][ T7187]  do_syscall_64+0x55/0xb0
[  261.484671][ T7187]  ? clear_bhb_loop+0x40/0x90
[  261.489395][ T7187]  ? clear_bhb_loop+0x40/0x90
[  261.494112][ T7187]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  261.500104][ T7187] RIP: 0033:0x7fa0e899ce59
[  261.504576][ T7187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.524247][ T7187] RSP: 002b:00007fa0e98d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  261.532747][ T7187] RAX: ffffffffffffffda RBX: 00007fa0e8c15fa0 RCX: 00007fa0e899ce59
[  261.540822][ T7187] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  261.548838][ T7187] RBP: 00007fa0e98d3090 R08: 0000000000000000 R09: 0000000000000000
[  261.556925][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.565104][ T7187] R13: 00007fa0e8c16038 R14: 00007fa0e8c15fa0 R15: 00007fff9f068458
[  261.573145][ T7187]  </TASK>
[  261.597112][ T7187] ERROR: Out of memory at tomoyo_realpath_from_path.
[  261.924051][ T5846] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  262.134056][ T5846] usb 2-1: Using ep0 maxpacket: 8
[  262.159561][ T5846] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  262.174696][ T7195] syzkaller0: entered promiscuous mode
[  262.180236][ T7195] syzkaller0: entered allmulticast mode
[  262.231089][ T5846] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  262.312802][ T7198] loop2: detected capacity change from 0 to 2048
[  262.321120][ T5846] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  262.348812][ T5846] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  262.364096][ T5846] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  262.381315][ T5846] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  262.391632][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.416550][ T7198] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.741880][ T5846] usb 2-1: usb_control_msg returned -32
[  262.759749][ T5846] usbtmc 2-1:16.0: can't read capabilities
[  262.845305][ T7202] fuse: Bad value for 'rootmode'
[  262.922750][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.343'.
[  262.964123][ T5825] usb 2-1: USB disconnect, device number 10
[  263.477621][ T7210] FAULT_INJECTION: forcing a failure.
[  263.477621][ T7210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.913996][ T7210] CPU: 0 PID: 7210 Comm: syz.2.352 Not tainted syzkaller #0
[  264.921432][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  264.931556][ T7210] Call Trace:
[  264.934896][ T7210]  <TASK>
[  264.937877][ T7210]  dump_stack_lvl+0x18c/0x250
[  264.942627][ T7210]  ? show_regs_print_info+0x20/0x20
[  264.947897][ T7210]  ? load_image+0x420/0x420
[  264.952458][ T7210]  ? __lock_acquire+0x7d40/0x7d40
[  264.957550][ T7210]  ? snprintf+0xe9/0x140
[  264.961861][ T7210]  should_fail_ex+0x39d/0x4d0
[  264.966644][ T7210]  _copy_to_user+0x2f/0xa0
[  264.971132][ T7210]  simple_read_from_buffer+0xe7/0x150
[  264.976588][ T7210]  proc_fail_nth_read+0x1e8/0x260
[  264.981690][ T7210]  ? proc_fault_inject_write+0x360/0x360
[  264.987401][ T7210]  ? fsnotify_perm+0x271/0x5e0
[  264.992223][ T7210]  ? proc_fault_inject_write+0x360/0x360
[  264.997926][ T7210]  vfs_read+0x28b/0x970
[  265.002178][ T7210]  ? kernel_read+0x1e0/0x1e0
[  265.006835][ T7210]  ? __fget_files+0x28/0x4b0
[  265.011489][ T7210]  ? __fget_files+0x28/0x4b0
[  265.016175][ T7210]  ? __fget_files+0x43d/0x4b0
[  265.020924][ T7210]  ? __fdget_pos+0x2a3/0x330
[  265.025580][ T7210]  ? ksys_read+0x75/0x260
[  265.029990][ T7210]  ksys_read+0x150/0x260
[  265.034315][ T7210]  ? vfs_write+0x990/0x990
[  265.038810][ T7210]  ? lockdep_hardirqs_on+0x98/0x150
[  265.044096][ T7210]  do_syscall_64+0x55/0xb0
[  265.048580][ T7210]  ? clear_bhb_loop+0x40/0x90
[  265.053316][ T7210]  ? clear_bhb_loop+0x40/0x90
[  265.058054][ T7210]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  265.064027][ T7210] RIP: 0033:0x7f237ad5d68e
[  265.068492][ T7210] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  265.088149][ T7210] RSP: 002b:00007f2378ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  265.096609][ T7210] RAX: ffffffffffffffda RBX: 00007f2378ff66c0 RCX: 00007f237ad5d68e
[  265.104637][ T7210] RDX: 000000000000000f RSI: 00007f2378ff60a0 RDI: 0000000000000006
[  265.112651][ T7210] RBP: 00007f2378ff6090 R08: 0000000000000000 R09: 0000000000000000
[  265.120661][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.128674][ T7210] R13: 00007f237b016038 R14: 00007f237b015fa0 R15: 00007fff02498c68
[  265.136699][ T7210]  </TASK>
[  265.577543][ T7224] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  265.584882][ T7224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  266.028149][ T7224] vhci_hcd vhci_hcd.0: Device attached
[  266.181403][ T7229] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11)
[  266.188152][ T7229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  266.197069][ T7233] FAULT_INJECTION: forcing a failure.
[  266.197069][ T7233] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  266.239740][ T7233] CPU: 1 PID: 7233 Comm: syz.2.357 Not tainted syzkaller #0
[  266.247166][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  266.257301][ T7233] Call Trace:
[  266.260671][ T7233]  <TASK>
[  266.263661][ T7233]  dump_stack_lvl+0x18c/0x250
[  266.268437][ T7233]  ? show_regs_print_info+0x20/0x20
[  266.273710][ T7233]  ? load_image+0x420/0x420
[  266.278286][ T7233]  ? __might_fault+0xaa/0x120
[  266.283037][ T7233]  ? __lock_acquire+0x7d40/0x7d40
[  266.288150][ T7233]  should_fail_ex+0x39d/0x4d0
[  266.292919][ T7233]  _copy_from_user+0x2f/0xe0
[  266.297594][ T7233]  ___sys_sendmsg+0x1c7/0x360
[  266.302367][ T7233]  ? get_pid_task+0x20/0x1e0
[  266.307066][ T7233]  ? __sys_sendmsg+0x2a0/0x2a0
[  266.311926][ T7233]  ? __lock_acquire+0x7d40/0x7d40
[  266.317055][ T7233]  __se_sys_sendmsg+0x1c2/0x2b0
[  266.322063][ T7233]  ? __x64_sys_sendmsg+0x80/0x80
[  266.327111][ T7233]  ? lockdep_hardirqs_on+0x98/0x150
[  266.332394][ T7233]  do_syscall_64+0x55/0xb0
[  266.336887][ T7233]  ? clear_bhb_loop+0x40/0x90
[  266.341650][ T7233]  ? clear_bhb_loop+0x40/0x90
[  266.346398][ T7233]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  266.352398][ T7233] RIP: 0033:0x7f237ad9ce59
[  266.356886][ T7233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.376574][ T7233] RSP: 002b:00007f2378ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.385076][ T7233] RAX: ffffffffffffffda RBX: 00007f237b015fa0 RCX: 00007f237ad9ce59
[  266.393219][ T7233] RDX: 0000000000008804 RSI: 00002000000001c0 RDI: 0000000000000003
[  266.401268][ T7233] RBP: 00007f2378ff6090 R08: 0000000000000000 R09: 0000000000000000
[  266.409320][ T7233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.417366][ T7233] R13: 00007f237b016038 R14: 00007f237b015fa0 R15: 00007fff02498c68
[  266.425435][ T7233]  </TASK>
[  266.433074][ T7229] vhci_hcd vhci_hcd.0: Device attached
[  266.638413][ T7229] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  266.654308][   T23] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  266.703763][ T7229] team0: Device macvlan2 is up. Set it down before adding it as a team port
[  267.264513][ T7238] fuse: Bad value for 'rootmode'
[  267.343185][ T7231] vhci_hcd: connection closed
[  267.365346][ T7226] vhci_hcd: connection reset by peer
[  267.388892][   T49] vhci_hcd: stop threads
[  267.410056][   T49] vhci_hcd: release socket
[  267.446267][   T49] vhci_hcd: disconnect device
[  267.482835][   T49] vhci_hcd: stop threads
[  267.500437][ T7240] FAULT_INJECTION: forcing a failure.
[  267.500437][ T7240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  267.514539][   T49] vhci_hcd: release socket
[  267.534085][   T49] vhci_hcd: disconnect device
[  267.554169][ T7240] CPU: 1 PID: 7240 Comm: syz.0.360 Not tainted syzkaller #0
[  267.561579][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  267.571709][ T7240] Call Trace:
[  267.575103][ T7240]  <TASK>
[  267.578087][ T7240]  dump_stack_lvl+0x18c/0x250
[  267.582840][ T7240]  ? show_regs_print_info+0x20/0x20
[  267.588119][ T7240]  ? load_image+0x420/0x420
[  267.592700][ T7240]  ? __might_fault+0xaa/0x120
[  267.597555][ T7240]  ? __lock_acquire+0x7d40/0x7d40
[  267.602663][ T7240]  should_fail_ex+0x39d/0x4d0
[  267.607431][ T7240]  _copy_from_user+0x2f/0xe0
[  267.612111][ T7240]  ___sys_sendmsg+0x1c7/0x360
[  267.616881][ T7240]  ? get_pid_task+0x20/0x1e0
[  267.621580][ T7240]  ? __sys_sendmsg+0x2a0/0x2a0
[  267.626444][ T7240]  ? __lock_acquire+0x7d40/0x7d40
[  267.631579][ T7240]  __se_sys_sendmsg+0x1c2/0x2b0
[  267.636510][ T7240]  ? __x64_sys_sendmsg+0x80/0x80
[  267.641537][ T7240]  ? lockdep_hardirqs_on+0x98/0x150
[  267.646857][ T7240]  do_syscall_64+0x55/0xb0
[  267.651343][ T7240]  ? clear_bhb_loop+0x40/0x90
[  267.656089][ T7240]  ? clear_bhb_loop+0x40/0x90
[  267.660835][ T7240]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.666829][ T7240] RIP: 0033:0x7f038099ce59
[  267.671310][ T7240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.690989][ T7240] RSP: 002b:00007f03818f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.699581][ T7240] RAX: ffffffffffffffda RBX: 00007f0380c15fa0 RCX: 00007f038099ce59
[  267.707644][ T7240] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000008
[  267.715701][ T7240] RBP: 00007f03818f1090 R08: 0000000000000000 R09: 0000000000000000
[  267.723819][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.731860][ T7240] R13: 00007f0380c16038 R14: 00007f0380c15fa0 R15: 00007ffd38afb8b8
[  267.739937][ T7240]  </TASK>
[  271.265451][ T7250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.361'.
[  271.336894][ T7252] FAULT_INJECTION: forcing a failure.
[  271.336894][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.355857][ T7252] CPU: 1 PID: 7252 Comm: syz.3.363 Not tainted syzkaller #0
[  271.363260][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  271.373351][ T7252] Call Trace:
[  271.376657][ T7252]  <TASK>
[  271.379609][ T7252]  dump_stack_lvl+0x18c/0x250
[  271.384341][ T7252]  ? show_regs_print_info+0x20/0x20
[  271.389571][ T7252]  ? load_image+0x420/0x420
[  271.394099][ T7252]  ? __lock_acquire+0x7d40/0x7d40
[  271.399154][ T7252]  ? snprintf+0xe9/0x140
[  271.403433][ T7252]  should_fail_ex+0x39d/0x4d0
[  271.408165][ T7252]  _copy_to_user+0x2f/0xa0
[  271.412621][ T7252]  simple_read_from_buffer+0xe7/0x150
[  271.418069][ T7252]  proc_fail_nth_read+0x1e8/0x260
[  271.423173][ T7252]  ? proc_fault_inject_write+0x360/0x360
[  271.428854][ T7252]  ? fsnotify_perm+0x271/0x5e0
[  271.433663][ T7252]  ? proc_fault_inject_write+0x360/0x360
[  271.439359][ T7252]  vfs_read+0x28b/0x970
[  271.443574][ T7252]  ? kernel_read+0x1e0/0x1e0
[  271.448244][ T7252]  ? __fget_files+0x28/0x4b0
[  271.452865][ T7252]  ? __fget_files+0x28/0x4b0
[  271.457485][ T7252]  ? __fget_files+0x43d/0x4b0
[  271.462203][ T7252]  ? __fdget_pos+0x2a3/0x330
[  271.466863][ T7252]  ? ksys_read+0x75/0x260
[  271.471233][ T7252]  ksys_read+0x150/0x260
[  271.475506][ T7252]  ? vfs_write+0x990/0x990
[  271.479954][ T7252]  ? lockdep_hardirqs_on+0x98/0x150
[  271.485193][ T7252]  do_syscall_64+0x55/0xb0
[  271.489658][ T7252]  ? clear_bhb_loop+0x40/0x90
[  271.494358][ T7252]  ? clear_bhb_loop+0x40/0x90
[  271.499058][ T7252]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  271.505014][ T7252] RIP: 0033:0x7fa0e895d68e
[  271.509489][ T7252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  271.529133][ T7252] RSP: 002b:00007fa0e98d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  271.537582][ T7252] RAX: ffffffffffffffda RBX: 00007fa0e98d36c0 RCX: 00007fa0e895d68e
[  271.545612][ T7252] RDX: 000000000000000f RSI: 00007fa0e98d30a0 RDI: 0000000000000005
[  271.553607][ T7252] RBP: 00007fa0e98d3090 R08: 0000000000000000 R09: 0000000000000000
[  271.561599][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.569593][ T7252] R13: 00007fa0e8c16038 R14: 00007fa0e8c15fa0 R15: 00007fff9f068458
[  271.577629][ T7252]  </TASK>
[  271.733952][ T5846] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  271.834350][   T23] vhci_hcd: vhci_device speed not set
[  271.938317][ T5846] usb 2-1: Using ep0 maxpacket: 8
[  271.966036][ T5846] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  271.975128][ T5846] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  271.997378][ T5846] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  272.017265][ T5846] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  272.034244][ T5846] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  272.056806][ T5846] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  273.075545][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.381121][ T5846] usb 2-1: usb_control_msg returned -32
[  273.398654][ T7269] fuse: Bad value for 'rootmode'
[  273.404653][ T5846] usbtmc 2-1:16.0: can't read capabilities
[  273.587680][ T6098] usb 2-1: USB disconnect, device number 11
[  273.790350][ T7273] FAULT_INJECTION: forcing a failure.
[  273.790350][ T7273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.824031][ T7273] CPU: 0 PID: 7273 Comm: syz.3.370 Not tainted syzkaller #0
[  273.831444][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  273.841571][ T7273] Call Trace:
[  273.844910][ T7273]  <TASK>
[  273.847945][ T7273]  dump_stack_lvl+0x18c/0x250
[  273.852714][ T7273]  ? show_regs_print_info+0x20/0x20
[  273.858006][ T7273]  ? load_image+0x420/0x420
[  273.862584][ T7273]  ? __might_fault+0xaa/0x120
[  273.867442][ T7273]  ? __lock_acquire+0x7d40/0x7d40
[  273.872557][ T7273]  should_fail_ex+0x39d/0x4d0
[  273.877327][ T7273]  _copy_from_user+0x2f/0xe0
[  273.881999][ T7273]  ___sys_sendmsg+0x1c7/0x360
[  273.886763][ T7273]  ? get_pid_task+0x20/0x1e0
[  273.891441][ T7273]  ? __sys_sendmsg+0x2a0/0x2a0
[  273.896309][ T7273]  ? __lock_acquire+0x7d40/0x7d40
[  273.901435][ T7273]  __se_sys_sendmsg+0x1c2/0x2b0
[  273.906421][ T7273]  ? __x64_sys_sendmsg+0x80/0x80
[  273.911467][ T7273]  ? lockdep_hardirqs_on+0x98/0x150
[  273.916802][ T7273]  do_syscall_64+0x55/0xb0
[  273.921313][ T7273]  ? clear_bhb_loop+0x40/0x90
[  273.926059][ T7273]  ? clear_bhb_loop+0x40/0x90
[  273.930810][ T7273]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.936795][ T7273] RIP: 0033:0x7fa0e899ce59
[  273.941284][ T7273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.960969][ T7273] RSP: 002b:00007fa0e98d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.969458][ T7273] RAX: ffffffffffffffda RBX: 00007fa0e8c15fa0 RCX: 00007fa0e899ce59
[  273.977601][ T7273] RDX: 00000000000c2010 RSI: 0000200000000a00 RDI: 0000000000000003
[  273.985650][ T7273] RBP: 00007fa0e98d3090 R08: 0000000000000000 R09: 0000000000000000
[  273.993691][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.001736][ T7273] R13: 00007fa0e8c16038 R14: 00007fa0e8c15fa0 R15: 00007fff9f068458
[  274.009786][ T7273]  </TASK>
[  274.172908][ T7266] loop2: detected capacity change from 0 to 40427
[  274.212632][ T7266] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  274.224512][ T6098] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  274.247300][ T7266] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  274.291751][ T7266] F2FS-fs (loop2): invalid crc value
[  274.321400][ T7266] F2FS-fs (loop2): Found nat_bits in checkpoint
[  274.504161][ T6098] usb 2-1: Using ep0 maxpacket: 8
[  274.522921][ T6098] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  274.547645][ T7266] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  274.554830][ T6098] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  274.554870][ T6098] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  274.554896][ T6098] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  274.554922][ T6098] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  274.555059][ T6098] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  274.629333][ T7266] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  274.764194][ T6098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.964145][ T6098] usb 2-1: usb_control_msg returned -71
[  274.969877][ T6098] usbtmc 2-1:16.0: can't read capabilities
[  275.997008][ T6098] usb 2-1: USB disconnect, device number 12
[  276.090106][ T7285] netlink: 208 bytes leftover after parsing attributes in process `syz.1.372'.
[  276.243015][ T7284] syzkaller0: entered promiscuous mode
[  276.272884][ T7284] syzkaller0: entered allmulticast mode
[  276.409043][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'.
[  276.536916][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'.
[  278.173658][ T7298] fuse: Unknown parameter 'use00000000000000000000'
[  278.351723][ T7300] loop1: detected capacity change from 0 to 1024
[  278.397267][ T7304] team0: No ports can be present during mode change
[  278.433090][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[  278.744815][ T7306] loop2: detected capacity change from 0 to 512
[  278.775093][ T7304] team0 (unregistering): Port device team_slave_0 removed
[  278.802518][ T7306] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  278.842094][ T7304] team0 (unregistering): Port device team_slave_1 removed
[  278.887066][ T7306] loop2: detected capacity change from 0 to 64
[  280.672261][ T7315] xt_TCPMSS: Only works on TCP SYN packets
[  280.679869][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'.
[  280.698142][ T7315] ipvlan2: entered allmulticast mode
[  280.703549][ T7315] syz_tun: entered allmulticast mode
[  281.030502][ T7311] loop2: detected capacity change from 0 to 32768
[  282.806091][ T7311] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop2": -EINTR
[  284.551969][ T7332] fuse: Unknown parameter 'use00000000000000000000'
[  284.854827][ T7336] FAULT_INJECTION: forcing a failure.
[  284.854827][ T7336] name failslab, interval 1, probability 0, space 0, times 0
[  284.902945][ T7336] CPU: 0 PID: 7336 Comm: syz.0.390 Not tainted syzkaller #0
[  284.910427][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  284.920560][ T7336] Call Trace:
[  284.923900][ T7336]  <TASK>
[  284.926885][ T7336]  dump_stack_lvl+0x18c/0x250
[  284.931643][ T7336]  ? show_regs_print_info+0x20/0x20
[  284.936910][ T7336]  ? load_image+0x420/0x420
[  284.941473][ T7336]  ? __might_sleep+0xe0/0xe0
[  284.946158][ T7336]  ? __lock_acquire+0x7d40/0x7d40
[  284.951266][ T7336]  should_fail_ex+0x39d/0x4d0
[  284.956070][ T7336]  should_failslab+0x9/0x20
[  284.960661][ T7336]  slab_pre_alloc_hook+0x59/0x310
[  284.965779][ T7336]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  284.971568][ T7336]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  284.977357][ T7336]  __kmem_cache_alloc_node+0x53/0x250
[  284.982821][ T7336]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  284.988618][ T7336]  __kmalloc+0xa4/0x230
[  284.992850][ T7336]  tomoyo_realpath_from_path+0xe3/0x5d0
[  284.998492][ T7336]  tomoyo_path_number_perm+0x248/0x620
[  285.004033][ T7336]  ? tomoyo_path_number_perm+0x217/0x620
[  285.009751][ T7336]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  285.015303][ T7336]  ? ksys_write+0x1c4/0x260
[  285.019927][ T7336]  ? __fget_files+0x28/0x4b0
[  285.024585][ T7336]  ? __fget_files+0x28/0x4b0
[  285.029270][ T7336]  security_file_ioctl+0x70/0xa0
[  285.034277][ T7336]  __se_sys_ioctl+0x48/0x170
[  285.038939][ T7336]  do_syscall_64+0x55/0xb0
[  285.043459][ T7336]  ? clear_bhb_loop+0x40/0x90
[  285.048222][ T7336]  ? clear_bhb_loop+0x40/0x90
[  285.052976][ T7336]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  285.058957][ T7336] RIP: 0033:0x7f038099ce59
[  285.063431][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.083105][ T7336] RSP: 002b:00007f03818f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  285.091588][ T7336] RAX: ffffffffffffffda RBX: 00007f0380c15fa0 RCX: 00007f038099ce59
[  285.099632][ T7336] RDX: 00002000000005c0 RSI: 000000004008ae89 RDI: 0000000000000005
[  285.107703][ T7336] RBP: 00007f03818f1090 R08: 0000000000000000 R09: 0000000000000000
[  285.115761][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.123790][ T7336] R13: 00007f0380c16038 R14: 00007f0380c15fa0 R15: 00007ffd38afb8b8
[  285.131846][ T7336]  </TASK>
[  285.144482][ T6098] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  285.152449][ T7336] ERROR: Out of memory at tomoyo_realpath_from_path.
[  285.387916][ T6098] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.414788][ T6098] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  285.416821][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.384'.
[  285.423742][ T6098] usb 3-1: config 1 has no interface number 0
[  285.490736][ T6098] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  285.508546][ T6098] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  285.519687][ T6098] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  285.544503][ T6098] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  285.554759][ T6098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.574257][ T6098] usb 3-1: Product: syz
[  285.593009][ T6098] usb 3-1: Manufacturer: syz
[  285.597959][ T6098] usb 3-1: SerialNumber: syz
[  290.024064][ T6098] cdc_ncm 3-1:1.1: bind() failure
[  290.040176][ T6098] usb 3-1: USB disconnect, device number 5
[  290.312558][ T7363] FAULT_INJECTION: forcing a failure.
[  290.312558][ T7363] name failslab, interval 1, probability 0, space 0, times 0
[  290.336090][ T7363] CPU: 1 PID: 7363 Comm: syz.0.397 Not tainted syzkaller #0
[  290.343510][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  290.353645][ T7363] Call Trace:
[  290.356990][ T7363]  <TASK>
[  290.359991][ T7363]  dump_stack_lvl+0x18c/0x250
[  290.364780][ T7363]  ? show_regs_print_info+0x20/0x20
[  290.370146][ T7363]  ? load_image+0x420/0x420
[  290.374760][ T7363]  ? __might_sleep+0xe0/0xe0
[  290.379437][ T7363]  ? __lock_acquire+0x7d40/0x7d40
[  290.384550][ T7363]  should_fail_ex+0x39d/0x4d0
[  290.389317][ T7363]  should_failslab+0x9/0x20
[  290.393883][ T7363]  slab_pre_alloc_hook+0x59/0x310
[  290.398966][ T7363]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  290.404734][ T7363]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  290.410507][ T7363]  __kmem_cache_alloc_node+0x53/0x250
[  290.415998][ T7363]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  290.421768][ T7363]  __kmalloc+0xa4/0x230
[  290.425976][ T7363]  tomoyo_realpath_from_path+0xe3/0x5d0
[  290.431577][ T7363]  tomoyo_path_number_perm+0x248/0x620
[  290.437079][ T7363]  ? tomoyo_path_number_perm+0x217/0x620
[  290.442752][ T7363]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  290.448600][ T7363]  ? ksys_write+0x1c4/0x260
[  290.453195][ T7363]  ? __fget_files+0x28/0x4b0
[  290.457834][ T7363]  ? __fget_files+0x28/0x4b0
[  290.462482][ T7363]  security_file_ioctl+0x70/0xa0
[  290.467475][ T7363]  __se_sys_ioctl+0x48/0x170
[  290.472120][ T7363]  do_syscall_64+0x55/0xb0
[  290.476593][ T7363]  ? clear_bhb_loop+0x40/0x90
[  290.481318][ T7363]  ? clear_bhb_loop+0x40/0x90
[  290.486044][ T7363]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  290.492026][ T7363] RIP: 0033:0x7f038099ce59
[  290.496483][ T7363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.516142][ T7363] RSP: 002b:00007f03818f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  290.524604][ T7363] RAX: ffffffffffffffda RBX: 00007f0380c15fa0 RCX: 00007f038099ce59
[  290.532617][ T7363] RDX: 0000200000000300 RSI: 000000004020aeb2 RDI: 0000000000000004
[  290.540629][ T7363] RBP: 00007f03818f1090 R08: 0000000000000000 R09: 0000000000000000
[  290.548667][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.556682][ T7363] R13: 00007f0380c16038 R14: 00007f0380c15fa0 R15: 00007ffd38afb8b8
[  290.564709][ T7363]  </TASK>
[  290.586183][ T7364] loop2: detected capacity change from 0 to 128
[  290.606057][ T7363] ERROR: Out of memory at tomoyo_realpath_from_path.
[  290.714074][ T7364] FAT-fs (loop2): bogus number of FAT structure
[  290.722221][ T7364] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  290.770331][ T7364] FAT-fs (loop2): Can't find a valid FAT filesystem
[  291.024023][ T7370] loop1: detected capacity change from 0 to 2048
[  291.046985][ T7370] EXT4-fs: Ignoring removed mblk_io_submit option
[  291.091333][ T7370] EXT4-fs: Ignoring removed orlov option
[  291.132193][ T7370] EXT4-fs: Ignoring removed mblk_io_submit option
[  291.200768][ T7374] fuse: Unknown parameter 'use00000000000000000000'
[  291.241142][ T7372] FAULT_INJECTION: forcing a failure.
[  291.241142][ T7372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.287275][ T7372] CPU: 1 PID: 7372 Comm: syz.0.401 Not tainted syzkaller #0
[  291.294675][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  291.304810][ T7372] Call Trace:
[  291.308131][ T7372]  <TASK>
[  291.311097][ T7372]  dump_stack_lvl+0x18c/0x250
[  291.315828][ T7372]  ? show_regs_print_info+0x20/0x20
[  291.321062][ T7372]  ? load_image+0x420/0x420
[  291.325627][ T7372]  ? __might_fault+0xaa/0x120
[  291.330369][ T7372]  ? __lock_acquire+0x7d40/0x7d40
[  291.335449][ T7372]  should_fail_ex+0x39d/0x4d0
[  291.340181][ T7372]  _copy_from_user+0x2f/0xe0
[  291.344870][ T7372]  ___sys_sendmsg+0x1c7/0x360
[  291.349619][ T7372]  ? get_pid_task+0x20/0x1e0
[  291.354267][ T7372]  ? __sys_sendmsg+0x2a0/0x2a0
[  291.359100][ T7372]  ? __lock_acquire+0x7d40/0x7d40
[  291.364194][ T7372]  __se_sys_sendmsg+0x1c2/0x2b0
[  291.369096][ T7372]  ? __x64_sys_sendmsg+0x80/0x80
[  291.374103][ T7372]  ? lockdep_hardirqs_on+0x98/0x150
[  291.379358][ T7372]  do_syscall_64+0x55/0xb0
[  291.383826][ T7372]  ? clear_bhb_loop+0x40/0x90
[  291.388557][ T7372]  ? clear_bhb_loop+0x40/0x90
[  291.393428][ T7372]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  291.399395][ T7372] RIP: 0033:0x7f038099ce59
[  291.403891][ T7372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.423581][ T7372] RSP: 002b:00007f03818f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.432055][ T7372] RAX: ffffffffffffffda RBX: 00007f0380c15fa0 RCX: 00007f038099ce59
[  291.440092][ T7372] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005
[  291.448185][ T7372] RBP: 00007f03818f1090 R08: 0000000000000000 R09: 0000000000000000
[  291.456195][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.464203][ T7372] R13: 00007f0380c16038 R14: 00007f0380c15fa0 R15: 00007ffd38afb8b8
[  291.472257][ T7372]  </TASK>
[  292.458498][ T5089] Bluetooth: hci2: command 0x0406 tx timeout
[  292.499804][ T7370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.674456][ T7370] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.399: bg 0: block 234: padding at end of block bitmap is not set
[  292.754169][ T7370] EXT4-fs (loop1): Remounting filesystem read-only
[  292.773195][ T7370] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 18, error -5)
[  292.863390][ T7384] loop0: detected capacity change from 0 to 2048
[  292.886486][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.942213][ T7387] FAULT_INJECTION: forcing a failure.
[  292.942213][ T7387] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  292.992000][ T7389] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.053762][ T7387] CPU: 0 PID: 7387 Comm: syz.2.403 Not tainted syzkaller #0
[  293.061201][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  293.071332][ T7387] Call Trace:
[  293.074674][ T7387]  <TASK>
[  293.077657][ T7387]  dump_stack_lvl+0x18c/0x250
[  293.082423][ T7387]  ? show_regs_print_info+0x20/0x20
[  293.087701][ T7387]  ? load_image+0x420/0x420
[  293.092298][ T7387]  ? __lock_acquire+0x7d40/0x7d40
[  293.097412][ T7387]  ? snprintf+0xe9/0x140
[  293.101790][ T7387]  should_fail_ex+0x39d/0x4d0
[  293.106562][ T7387]  _copy_to_user+0x2f/0xa0
[  293.111057][ T7387]  simple_read_from_buffer+0xe7/0x150
[  293.116520][ T7387]  proc_fail_nth_read+0x1e8/0x260
[  293.121640][ T7387]  ? proc_fault_inject_write+0x360/0x360
[  293.127371][ T7387]  ? fsnotify_perm+0x271/0x5e0
[  293.132207][ T7387]  ? proc_fault_inject_write+0x360/0x360
[  293.137914][ T7387]  vfs_read+0x28b/0x970
[  293.142159][ T7387]  ? kernel_read+0x1e0/0x1e0
[  293.146849][ T7387]  ? __fget_files+0x28/0x4b0
[  293.151536][ T7387]  ? __fget_files+0x28/0x4b0
[  293.156223][ T7387]  ? __fget_files+0x43d/0x4b0
[  293.161000][ T7387]  ? __fdget_pos+0x2a3/0x330
[  293.165677][ T7387]  ? ksys_read+0x75/0x260
[  293.170080][ T7387]  ksys_read+0x150/0x260
[  293.174394][ T7387]  ? vfs_write+0x990/0x990
[  293.178886][ T7387]  ? lockdep_hardirqs_on+0x98/0x150
[  293.184173][ T7387]  do_syscall_64+0x55/0xb0
[  293.188664][ T7387]  ? clear_bhb_loop+0x40/0x90
[  293.193420][ T7387]  ? clear_bhb_loop+0x40/0x90
[  293.198175][ T7387]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  293.204161][ T7387] RIP: 0033:0x7f237ad5d68e
[  293.208649][ T7387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  293.228361][ T7387] RSP: 002b:00007f2378fd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  293.236846][ T7387] RAX: ffffffffffffffda RBX: 00007f2378fd56c0 RCX: 00007f237ad5d68e
[  293.244993][ T7387] RDX: 000000000000000f RSI: 00007f2378fd50a0 RDI: 0000000000000005
[  293.253027][ T7387] RBP: 00007f2378fd5090 R08: 0000000000000000 R09: 0000000000000000
[  293.261070][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.269112][ T7387] R13: 00007f237b016128 R14: 00007f237b016090 R15: 00007fff02498c68
[  293.277175][ T7387]  </TASK>
[  293.443717][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.406'.
[  294.305609][ T7410] fuse: Unknown parameter 'user_i00000000000000000000'
[  296.421319][ T7412] loop2: detected capacity change from 0 to 16
[  296.456241][ T7412] erofs: Unknown parameter '°'
[  298.509685][ T7426] loop1: detected capacity change from 0 to 4096
[  298.537899][ T7426] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  298.591319][ T7426] NILFS (loop1): mounting unchecked fs
[  298.608116][ T7428] ieee802154 phy0 wpan0: encryption failed: -90
[  298.624215][ T7426] NILFS (loop1): recovery required for readonly filesystem
[  298.647745][ T7426] NILFS (loop1): write access will be enabled during recovery
[  298.712424][ T7426] NILFS (loop1): norecovery option specified, skipping roll-forward recovery
[  298.727369][ T5796] udevd[5796]: incorrect nilfs2 checksum on /dev/loop1
[  298.765114][ T7426] NILFS (loop1): couldn't remount because the filesystem is in an incomplete recovery state
[  298.923521][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.418'.
[  298.949032][ T5997] udevd[5997]: incorrect nilfs2 checksum on /dev/loop1
[  299.574440][  T787] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  299.774355][  T787] usb 2-1: Using ep0 maxpacket: 16
[  299.805754][  T787] usb 2-1: unable to get BOS descriptor or descriptor too short
[  299.869298][  T787] usb 2-1: string descriptor 0 read error: -22
[  299.892144][  T787] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  299.933473][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.959783][  T787] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  300.187054][ T7439] fuse: Unknown parameter 'user_i00000000000000000000'
[  300.335531][  T787] snd-usb-audio: probe of 2-1:1.0 failed with error -2
[  302.184655][ T7448] batadv_slave_0: Caught tx_queue_len zero misconfig
[  302.845814][ T7450] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  302.932905][ T5785] usb 2-1: USB disconnect, device number 13
[  303.190778][ T7456] FAULT_INJECTION: forcing a failure.
[  303.190778][ T7456] name failslab, interval 1, probability 0, space 0, times 0
[  303.218731][ T7456] CPU: 1 PID: 7456 Comm: syz.3.417 Not tainted syzkaller #0
[  303.226185][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  303.236302][ T7456] Call Trace:
[  303.239639][ T7456]  <TASK>
[  303.242621][ T7456]  dump_stack_lvl+0x18c/0x250
[  303.247393][ T7456]  ? show_regs_print_info+0x20/0x20
[  303.252638][ T7456]  ? load_image+0x420/0x420
[  303.257187][ T7456]  ? __might_sleep+0xe0/0xe0
[  303.261831][ T7456]  ? __lock_acquire+0x7d40/0x7d40
[  303.266914][ T7456]  should_fail_ex+0x39d/0x4d0
[  303.271671][ T7456]  should_failslab+0x9/0x20
[  303.276226][ T7456]  slab_pre_alloc_hook+0x59/0x310
[  303.281359][ T7456]  ? __lock_acquire+0x1347/0x7d40
[  303.286441][ T7456]  kmem_cache_alloc_node+0x60/0x320
[  303.291688][ T7456]  ? __alloc_skb+0x103/0x2c0
[  303.296326][ T7456]  __alloc_skb+0x103/0x2c0
[  303.300787][ T7456]  tcp_stream_alloc_skb+0x3d/0x330
[  303.305942][ T7456]  tcp_sendmsg_locked+0xea4/0x4bd0
[  303.311096][ T7456]  ? verify_lock_unused+0x140/0x140
[  303.316342][ T7456]  ? verify_lock_unused+0x140/0x140
[  303.321619][ T7456]  ? tcp_set_state+0x680/0x680
[  303.326433][ T7456]  tcp_sendmsg+0x2f/0x50
[  303.330717][ T7456]  __sys_sendto+0x4a9/0x6b0
[  303.335266][ T7456]  ? __ia32_sys_getpeername+0x90/0x90
[  303.340710][ T7456]  ? __fget_files+0x43d/0x4b0
[  303.345447][ T7456]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  303.351475][ T7456]  ? lock_chain_count+0x20/0x20
[  303.356374][ T7456]  __x64_sys_sendto+0xde/0xf0
[  303.361102][ T7456]  do_syscall_64+0x55/0xb0
[  303.365563][ T7456]  ? clear_bhb_loop+0x40/0x90
[  303.370281][ T7456]  ? clear_bhb_loop+0x40/0x90
[  303.375019][ T7456]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  303.381005][ T7456] RIP: 0033:0x7fa0e899ce59
[  303.385481][ T7456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.405245][ T7456] RSP: 002b:00007fa0e98d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  303.413707][ T7456] RAX: ffffffffffffffda RBX: 00007fa0e8c15fa0 RCX: 00007fa0e899ce59
[  303.421720][ T7456] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003
[  303.429754][ T7456] RBP: 00007fa0e98d3090 R08: 0000000000000000 R09: 0000000000000000
[  303.437764][ T7456] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001
[  303.445777][ T7456] R13: 00007fa0e8c16038 R14: 00007fa0e8c15fa0 R15: 00007fff9f068458
[  303.453824][ T7456]  </TASK>
[  303.462159][ T7460] loop2: detected capacity change from 0 to 512
[  303.502731][ T7460] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.425: inode has both inline data and extents flags
[  303.534172][ T7460] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.425: couldn't read orphan inode 15 (err -117)
[  303.555618][ T7460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.621919][ T7460] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.425: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  303.698960][ T7463] binder: 7458:7463 ioctl c0306201 200000000000 returned -14
[  305.620327][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.651832][ T7470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.428'.
[  306.582735][ T5785] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  306.635189][ T5785] hid-generic 0000:0000:0000.0014: hidraw11: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  306.914385][ T7484] fuse: Unknown parameter 'user_i00000000000000000000'
[  311.441924][ T7497] loop0: detected capacity change from 0 to 256
[  311.537471][ T5997] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  311.687466][ T7501] FAULT_INJECTION: forcing a failure.
[  311.687466][ T7501] name failslab, interval 1, probability 0, space 0, times 0
[  311.737028][ T7501] CPU: 1 PID: 7501 Comm: syz.1.427 Not tainted syzkaller #0
[  311.744459][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  311.754596][ T7501] Call Trace:
[  311.757931][ T7501]  <TASK>
[  311.760921][ T7501]  dump_stack_lvl+0x18c/0x250
[  311.765682][ T7501]  ? show_regs_print_info+0x20/0x20
[  311.770965][ T7501]  ? load_image+0x420/0x420
[  311.775550][ T7501]  ? __might_sleep+0xe0/0xe0
[  311.780228][ T7501]  ? __lock_acquire+0x7d40/0x7d40
[  311.785360][ T7501]  should_fail_ex+0x39d/0x4d0
[  311.790155][ T7501]  should_failslab+0x9/0x20
[  311.794831][ T7501]  slab_pre_alloc_hook+0x59/0x310
[  311.799951][ T7501]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  311.805759][ T7501]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  311.811559][ T7501]  __kmem_cache_alloc_node+0x53/0x250
[  311.817016][ T7501]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  311.822793][ T7501]  __kmalloc+0xa4/0x230
[  311.827007][ T7501]  tomoyo_realpath_from_path+0xe3/0x5d0
[  311.832610][ T7501]  tomoyo_path_number_perm+0x248/0x620
[  311.838118][ T7501]  ? tomoyo_path_number_perm+0x217/0x620
[  311.843800][ T7501]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  311.849321][ T7501]  ? ksys_write+0x1c4/0x260
[  311.853912][ T7501]  ? __fget_files+0x28/0x4b0
[  311.858555][ T7501]  ? __fget_files+0x28/0x4b0
[  311.863218][ T7501]  security_file_ioctl+0x70/0xa0
[  311.868215][ T7501]  __se_sys_ioctl+0x48/0x170
[  311.872860][ T7501]  do_syscall_64+0x55/0xb0
[  311.877331][ T7501]  ? clear_bhb_loop+0x40/0x90
[  311.882070][ T7501]  ? clear_bhb_loop+0x40/0x90
[  311.886816][ T7501]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  311.892786][ T7501] RIP: 0033:0x7f4db7d9ce59
[  311.897254][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.916916][ T7501] RSP: 002b:00007f4db8bbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  311.925386][ T7501] RAX: ffffffffffffffda RBX: 00007f4db8015fa0 RCX: 00007f4db7d9ce59
[  311.933409][ T7501] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  311.941432][ T7501] RBP: 00007f4db8bbb090 R08: 0000000000000000 R09: 0000000000000000
[  311.949457][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.957481][ T7501] R13: 00007f4db8016038 R14: 00007f4db8015fa0 R15: 00007ffd11cf76e8
[  311.965507][ T7501]  </TASK>
[  311.986210][ T7501] ERROR: Out of memory at tomoyo_realpath_from_path.
[  312.054069][ T5785] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  312.174752][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'.
[  312.340517][ T5785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.351461][ T5785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  312.366563][ T5785] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  312.376779][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.404121][ T5785] usb 4-1: config 0 descriptor??
[  312.428023][ T5785] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  312.450995][ T5785] dvb-usb: bulk message failed: -22 (3/0)
[  312.482935][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  312.492904][ T5785] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  312.501189][ T5785] usb 4-1: media controller created
[  312.509359][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  312.562006][ T5785] dvb-usb: bulk message failed: -22 (6/0)
[  312.584194][ T5785] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  312.647841][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[  312.702457][ T5785] dvb-usb: schedule remote query interval to 150 msecs.
[  312.741732][ T5785] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  312.782330][ T5785] usb 4-1: USB disconnect, device number 14
[  312.887782][ T7511] loop8: detected capacity change from 0 to 7
[  312.926023][ T7511] Dev loop8: unable to read RDB block 7
[  312.948327][ T7511]  loop8: unable to read partition table
[  312.965387][ T7518] loop1: detected capacity change from 0 to 2048
[  312.976828][ T5785] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  312.986702][ T7511] loop8: partition table beyond EOD, truncated
[  313.005224][ T7518] EXT4-fs: Ignoring removed mblk_io_submit option
[  313.015624][ T7511] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  313.037208][ T7518] EXT4-fs: Ignoring removed orlov option
[  313.042988][ T7518] EXT4-fs: Ignoring removed mblk_io_submit option
[  313.097399][ T7518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.162189][ T7518] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.442: bg 0: block 234: padding at end of block bitmap is not set
[  313.225494][ T7518] EXT4-fs (loop1): Remounting filesystem read-only
[  313.252110][ T7526] FAULT_INJECTION: forcing a failure.
[  313.252110][ T7526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  313.274537][ T7518] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 18, error -5)
[  313.323325][ T7526] CPU: 1 PID: 7526 Comm: syz.2.443 Not tainted syzkaller #0
[  313.330795][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  313.340933][ T7526] Call Trace:
[  313.344277][ T7526]  <TASK>
[  313.347270][ T7526]  dump_stack_lvl+0x18c/0x250
[  313.352032][ T7526]  ? show_regs_print_info+0x20/0x20
[  313.357309][ T7526]  ? load_image+0x420/0x420
[  313.361891][ T7526]  ? __lock_acquire+0x7d40/0x7d40
[  313.367002][ T7526]  ? snprintf+0xe9/0x140
[  313.371471][ T7526]  should_fail_ex+0x39d/0x4d0
[  313.376245][ T7526]  _copy_to_user+0x2f/0xa0
[  313.380743][ T7526]  simple_read_from_buffer+0xe7/0x150
[  313.386250][ T7526]  proc_fail_nth_read+0x1e8/0x260
[  313.391357][ T7526]  ? proc_fault_inject_write+0x360/0x360
[  313.397068][ T7526]  ? fsnotify_perm+0x271/0x5e0
[  313.401914][ T7526]  ? proc_fault_inject_write+0x360/0x360
[  313.407625][ T7526]  vfs_read+0x28b/0x970
[  313.411983][ T7526]  ? kernel_read+0x1e0/0x1e0
[  313.416632][ T7526]  ? __fget_files+0x28/0x4b0
[  313.421326][ T7526]  ? __fget_files+0x28/0x4b0
[  313.425998][ T7526]  ? __fget_files+0x43d/0x4b0
[  313.430775][ T7526]  ? __fdget_pos+0x2a3/0x330
[  313.435451][ T7526]  ? ksys_read+0x75/0x260
[  313.439872][ T7526]  ksys_read+0x150/0x260
[  313.444210][ T7526]  ? vfs_write+0x990/0x990
[  313.448721][ T7526]  ? lockdep_hardirqs_on+0x98/0x150
[  313.454008][ T7526]  do_syscall_64+0x55/0xb0
[  313.458501][ T7526]  ? clear_bhb_loop+0x40/0x90
[  313.463258][ T7526]  ? clear_bhb_loop+0x40/0x90
[  313.468012][ T7526]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  313.473994][ T7526] RIP: 0033:0x7f237ad5d68e
[  313.478489][ T7526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  313.485878][ T7528] fuse: Unknown parameter 'user_id00000000000000000000'
[  313.498179][ T7526] RSP: 002b:00007f2378fd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  313.498264][ T7526] RAX: ffffffffffffffda RBX: 00007f2378fd56c0 RCX: 00007f237ad5d68e
[  313.498279][ T7526] RDX: 000000000000000f RSI: 00007f2378fd50a0 RDI: 0000000000000042
[  313.498292][ T7526] RBP: 00007f2378fd5090 R08: 0000000000000000 R09: 0000000000000000
[  313.498303][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  313.498315][ T7526] R13: 00007f237b016128 R14: 00007f237b016090 R15: 00007fff02498c68
[  313.498346][ T7526]  </TASK>
[  313.588081][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.881975][ T7533] syzkaller0: entered promiscuous mode
[  313.899146][ T7533] syzkaller0: entered allmulticast mode
[  313.941935][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.449'.
[  315.352981][ T7564] use of bytesused == 0 is deprecated and will be removed in the future,
[  315.353224][ T7564] use the actual size instead.
[  315.474277][   T23] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  315.660198][   T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.660234][   T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  315.660293][   T23] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  315.660321][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.663419][   T23] usb 2-1: config 0 descriptor??
[  315.699731][   T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  315.699792][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  315.704230][  T787] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  315.710580][   T23] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  315.713262][   T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  315.713364][   T23] usb 2-1: media controller created
[  315.735151][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  315.770569][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  315.770736][   T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  315.772319][ T5785] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  315.785094][   T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  315.802499][   T23] dvb-usb: schedule remote query interval to 150 msecs.
[  315.802534][   T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  315.897181][ T7561] FAULT_INJECTION: forcing a failure.
[  315.897181][ T7561] name failslab, interval 1, probability 0, space 0, times 0
[  315.997028][  T787] usb 4-1: Using ep0 maxpacket: 8
[  315.997068][ T5785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.997092][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  315.997148][ T5785] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  315.997174][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.000130][  T787] usb 4-1: unable to get BOS descriptor or descriptor too short
[  316.004395][  T787] usb 4-1: config 8 has an invalid interface number: 134 but max is 0
[  316.004429][  T787] usb 4-1: config 8 has no interface number 0
[  316.004463][  T787] usb 4-1: config 8 interface 134 has no altsetting 0
[  316.008615][   T23] dvb-usb: bulk message failed: -22 (1/0)
[  316.012774][  T787] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=36.c5
[  316.019959][ T5785] usb 3-1: config 0 descriptor??
[  316.034180][   T23] dvb-usb: error while querying for an remote control event.
[  316.122233][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.122270][  T787] usb 4-1: Product: syz
[  316.122285][  T787] usb 4-1: Manufacturer: syz
[  316.122301][  T787] usb 4-1: SerialNumber: syz
[  316.123643][ T7561] CPU: 1 PID: 7561 Comm: syz.1.453 Not tainted syzkaller #0
[  316.123671][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  316.123685][ T7561] Call Trace:
[  316.123695][ T7561]  <TASK>
[  316.123704][ T7561]  dump_stack_lvl+0x18c/0x250
[  316.123771][ T7561]  ? show_regs_print_info+0x20/0x20
[  316.123795][ T7561]  ? load_image+0x420/0x420
[  316.123818][ T7561]  ? __might_sleep+0xe0/0xe0
[  316.123845][ T7561]  ? __lock_acquire+0x7d40/0x7d40
[  316.123874][ T7561]  should_fail_ex+0x39d/0x4d0
[  316.123913][ T7561]  should_failslab+0x9/0x20
[  316.123945][ T7561]  slab_pre_alloc_hook+0x59/0x310
[  316.123979][ T7561]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  316.124005][ T7561]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  316.124028][ T7561]  __kmem_cache_alloc_node+0x53/0x250
[  316.124062][ T7561]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  316.124083][ T7561]  __kmalloc+0xa4/0x230
[  316.124114][ T7561]  tomoyo_realpath_from_path+0xe3/0x5d0
[  316.124151][ T7561]  tomoyo_path_number_perm+0x248/0x620
[  316.124172][ T7561]  ? tomoyo_path_number_perm+0x217/0x620
[  316.124193][ T7561]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  316.124216][ T7561]  ? ksys_write+0x1c4/0x260
[  316.124279][ T7561]  ? __fget_files+0x28/0x4b0
[  316.124306][ T7561]  ? __fget_files+0x28/0x4b0
[  316.124353][ T7561]  security_file_ioctl+0x70/0xa0
[  316.124376][ T7561]  __se_sys_ioctl+0x48/0x170
[  316.124407][ T7561]  do_syscall_64+0x55/0xb0
[  316.124431][ T7561]  ? clear_bhb_loop+0x40/0x90
[  316.124452][ T7561]  ? clear_bhb_loop+0x40/0x90
[  316.124481][ T7561]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  316.124593][ T7561] RIP: 0033:0x7f4db7d9ce59
[  316.124614][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.124631][ T7561] RSP: 002b:00007f4db8bbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  316.124654][ T7561] RAX: ffffffffffffffda RBX: 00007f4db8015fa0 RCX: 00007f4db7d9ce59
[  316.124669][ T7561] RDX: 0000000000000000 RSI: 0000000080284504 RDI: 0000000000000004
[  316.124683][ T7561] RBP: 00007f4db8bbb090 R08: 0000000000000000 R09: 0000000000000000
[  316.124696][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  316.124707][ T7561] R13: 00007f4db8016038 R14: 00007f4db8015fa0 R15: 00007ffd11cf76e8
[  316.124736][ T7561]  </TASK>
[  316.124884][ T7561] ERROR: Out of memory at tomoyo_realpath_from_path.
[  316.126779][ T5785] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  316.126853][ T5785] dvb-usb: bulk message failed: -22 (3/0)
[  316.131005][    T8] usb 2-1: USB disconnect, device number 14
[  316.167455][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  316.168335][ T5785] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  316.168395][ T5785] usb 3-1: media controller created
[  316.171925][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  316.230156][ T5785] dvb-usb: bulk message failed: -22 (6/0)
[  316.230257][ T5785] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  316.260453][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[  316.278738][    T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  316.280934][ T5785] dvb-usb: schedule remote query interval to 150 msecs.
[  316.280963][ T5785] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  316.371535][ T5785] usb 3-1: USB disconnect, device number 6
[  316.457170][ T5785] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  317.035458][ T7569] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  317.204404][ T5785] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  317.324021][   T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  317.426461][ T5785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.445530][ T5785] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  317.454972][ T5785] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  317.469549][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.485971][ T5785] usb 2-1: config 0 descriptor??
[  317.502789][ T5785] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  317.514616][   T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  317.524965][   T23] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  317.534726][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.540658][ T5785] dvb-usb: bulk message failed: -22 (3/0)
[  317.557171][   T23] usb 3-1: config 0 descriptor??
[  317.562763][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  317.601199][ T5785] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  317.614113][    T8] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  317.629550][ T5785] usb 2-1: media controller created
[  317.639040][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  317.665065][ T5785] dvb-usb: bulk message failed: -22 (6/0)
[  317.671024][ T5785] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  317.691690][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[  317.730853][ T5785] dvb-usb: schedule remote query interval to 150 msecs.
[  317.745051][ T5785] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  317.769484][ T5785] usb 2-1: USB disconnect, device number 15
[  317.795142][    T9] usb 3-1: USB disconnect, device number 7
[  317.846912][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.870259][    T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  317.893214][ T5785] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  317.902584][    T8] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  317.928639][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.947814][    T8] usb 1-1: config 0 descriptor??
[  317.970883][    T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  317.991209][    T8] dvb-usb: bulk message failed: -22 (3/0)
[  318.005091][    T8] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  318.019946][    T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  318.031303][    T8] usb 1-1: media controller created
[  318.045877][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  318.118514][  T787] as10x_usb: device has been detected
[  318.213128][    T8] dvb-usb: bulk message failed: -22 (6/0)
[  318.221246][ T7571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.230566][    T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  318.235238][  T787] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  318.248319][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9
[  318.260075][ T7571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.309424][    T8] dvb-usb: schedule remote query interval to 150 msecs.
[  318.318374][ T7573] fuse: Unknown parameter 'user_id00000000000000000000'
[  318.334081][    T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  318.366993][    T8] usb 1-1: USB disconnect, device number 5
[  318.376535][  T787] usb 4-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))...
[  318.459008][  T787] as10x_usb: error during firmware upload part1
[  318.496109][  T787] Registered device PCTV Systems picoStick (74e)
[  318.554297][  T787] usb 4-1: USB disconnect, device number 15
[  318.556628][    T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  318.652884][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.459'.
[  318.676197][  T787] Unregistered device PCTV Systems picoStick (74e)
[  318.686873][  T787] as10x_usb: device has been disconnected
[  321.812479][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  321.820358][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  329.437498][  T787] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  329.902687][ T7620] fuse: Unknown parameter 'user_id00000000000000000000'
[  329.914071][ T5846] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  329.934232][  T787] usb 4-1: Using ep0 maxpacket: 16
[  329.990591][  T787] usb 4-1: device descriptor read/all, error -71
[  330.104266][ T5846] usb 2-1: Using ep0 maxpacket: 16
[  330.117647][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  330.148264][ T5846] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  330.164148][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.188151][ T5846] usb 2-1: Product: syz
[  330.192443][ T5846] usb 2-1: Manufacturer: syz
[  330.204051][ T5846] usb 2-1: SerialNumber: syz
[  330.225841][ T5846] usb 2-1: config 0 descriptor??
[  330.240390][ T5846] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  330.263969][ T5846] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  333.054648][ T5846] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  333.169188][ T5846] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  333.231896][ T5846] em28xx 2-1:0.0: board has no eeprom
[  333.340689][ T5846] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  333.377877][ T5846] em28xx 2-1:0.0: dvb set to bulk mode.
[  333.418000][   T23] em28xx 2-1:0.0: Binding DVB extension
[  333.616649][ T5846] usb 2-1: USB disconnect, device number 16
[  333.644165][ T5846] em28xx 2-1:0.0: Disconnecting em28xx
[  336.426779][ T7645] loop3: detected capacity change from 0 to 4096
[  336.542137][   T23] em28xx 2-1:0.0: Registering input extension
[  336.560351][ T5846] em28xx 2-1:0.0: Closing input extension
[  336.563724][ T7645] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  337.014539][ T5846] em28xx 2-1:0.0: Freeing device
[  337.076463][ T7652] fuse: Bad value for 'fd'
[  337.251359][ T7654] syzkaller0: entered promiscuous mode
[  337.304022][ T7654] syzkaller0: entered allmulticast mode
[  339.342527][ T7669] loop2: detected capacity change from 0 to 512
[  339.394225][ T7669] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  339.447953][ T7669] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.483: bad orphan inode 131083
[  339.505356][ T7669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.756754][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.977547][ T7675] comedi: valid board names for 8255 driver are:
[  340.003552][ T7673] loop3: detected capacity change from 0 to 32768
[  340.024616][ T7675]  8255
[  340.027528][ T7675] comedi: valid board names for vmk80xx driver are:
[  340.049961][ T7675]  vmk80xx
[  340.053147][ T7675] comedi: valid board names for usbduxsigma driver are:
[  340.096878][ T7675]  usbduxsigma
[  340.100371][ T7675] comedi: valid board names for usbduxfast driver are:
[  340.140426][ T7673] JBD2: Ignoring recovery information on journal
[  340.153431][ T7675]  usbduxfast
[  340.192820][ T7675] comedi: valid board names for usbdux driver are:
[  340.240283][ T7683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'.
[  340.253961][ T7675]  usbdux
[  340.257012][ T7675] comedi: valid board names for ni6501 driver are:
[  340.263573][ T7675]  ni6501
[  340.359170][ T7675] comedi: valid board names for dt9812 driver are:
[  340.372812][ T7675]  dt9812
[  340.378188][ T7675] comedi: valid board names for ni_labpc_cs driver are:
[  340.390225][ T7675]  ni_labpc_cs
[  340.393735][ T7675] comedi: valid board names for ni_daq_700 driver are:
[  340.402804][ T7673] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  340.412211][ T7675]  ni_daq_700
[  340.412279][ T7675] comedi: valid board names for labpc_pci driver are:
[  340.412290][ T7675]  labpc_pci
[  340.412298][ T7675] comedi: valid board names for adl_pci9118 driver are:
[  340.462496][ T7675]  pci9118dg
[  340.484015][ T7675]  pci9118hg
[  340.487336][ T7675]  pci9118hr
[  340.524504][ T7687] FAULT_INJECTION: forcing a failure.
[  340.524504][ T7687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  340.531282][ T7675] comedi: valid board names for 8255_pci driver are:
[  340.564302][ T7675]  8255_pci
[  340.567536][ T7675] comedi: valid board names for s526 driver are:
[  340.600267][ T7675]  s526
[  340.603143][ T7675] comedi: valid board names for multiq3 driver are:
[  340.615503][ T7687] CPU: 0 PID: 7687 Comm: syz.3.485 Not tainted syzkaller #0
[  340.622894][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  340.633017][ T7687] Call Trace:
[  340.636371][ T7687]  <TASK>
[  340.639359][ T7687]  dump_stack_lvl+0x18c/0x250
[  340.644125][ T7687]  ? show_regs_print_info+0x20/0x20
[  340.649492][ T7687]  ? load_image+0x420/0x420
[  340.654085][ T7687]  ? __lock_acquire+0x7d40/0x7d40
[  340.659191][ T7687]  ? snprintf+0xe9/0x140
[  340.663522][ T7687]  should_fail_ex+0x39d/0x4d0
[  340.668306][ T7687]  _copy_to_user+0x2f/0xa0
[  340.672809][ T7687]  simple_read_from_buffer+0xe7/0x150
[  340.678280][ T7687]  proc_fail_nth_read+0x1e8/0x260
[  340.683400][ T7687]  ? proc_fault_inject_write+0x360/0x360
[  340.689124][ T7687]  ? fsnotify_perm+0x271/0x5e0
[  340.693956][ T7687]  ? proc_fault_inject_write+0x360/0x360
[  340.699671][ T7687]  vfs_read+0x28b/0x970
[  340.703923][ T7687]  ? kernel_read+0x1e0/0x1e0
[  340.708590][ T7687]  ? __fget_files+0x28/0x4b0
[  340.713250][ T7687]  ? __fget_files+0x28/0x4b0
[  340.717923][ T7687]  ? __fget_files+0x43d/0x4b0
[  340.722688][ T7687]  ? __fdget_pos+0x2a3/0x330
[  340.727364][ T7687]  ? ksys_read+0x75/0x260
[  340.731789][ T7687]  ksys_read+0x150/0x260
[  340.736137][ T7687]  ? vfs_write+0x990/0x990
[  340.740635][ T7687]  ? lockdep_hardirqs_on+0x98/0x150
[  340.745911][ T7687]  do_syscall_64+0x55/0xb0
[  340.750392][ T7687]  ? clear_bhb_loop+0x40/0x90
[  340.755129][ T7687]  ? clear_bhb_loop+0x40/0x90
[  340.759877][ T7687]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  340.765859][ T7687] RIP: 0033:0x7fa0e895d68e
[  340.770362][ T7687] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  340.790048][ T7687] RSP: 002b:00007fa0e98b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  340.798554][ T7687] RAX: ffffffffffffffda RBX: 00007fa0e98b26c0 RCX: 00007fa0e895d68e
[  340.806602][ T7687] RDX: 000000000000000f RSI: 00007fa0e98b20a0 RDI: 0000000000000005
[  340.814790][ T7687] RBP: 00007fa0e98b2090 R08: 0000000000000000 R09: 0000000000000000
[  340.822825][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  340.830864][ T7687] R13: 00007fa0e8c16128 R14: 00007fa0e8c16090 R15: 00007fff9f068458
[  340.838928][ T7687]  </TASK>
[  340.854081][ T7675]  multiq3
[  340.857224][ T7675] comedi: valid board names for pcmuio driver are:
[  340.873977][ T7675]  pcmuio48
[  340.877320][ T7675]  pcmuio96
[  340.880479][ T7675] comedi: valid board names for pcmmio driver are:
[  340.889207][ T7675]  pcmmio
[  340.892226][ T7675] comedi: valid board names for pcmda12 driver are:
[  340.907065][ T7675]  pcmda12
[  340.910181][ T7675] comedi: valid board names for pcmad driver are:
[  340.915560][   T28] audit: type=1800 audit(1781498119.518:3): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.485" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  340.944171][ T7675]  pcmad12
[  340.947303][ T7675]  pcmad16
[  340.950383][ T7675] comedi: valid board names for ni_labpc driver are:
[  340.974018][ T7675]  lab-pc-1200
[  340.977508][ T7675]  lab-pc-1200ai
[  340.981103][ T7675]  lab-pc+
[  340.999081][ T7675] comedi: valid board names for atmio16 driver are:
[  341.027057][ T7675]  atmio16
[  341.030221][ T7675]  atmio16d
[  341.034322][ T7675] comedi: valid board names for ni_at_ao driver are:
[  341.043880][ T7675]  at-ao-6
[  341.047004][ T7675]  at-ao-10
[  341.050161][ T7675] comedi: valid board names for ni_at_a2150 driver are:
[  341.093856][ T7675]  ni_at_a2150
[  341.097351][ T7675] comedi: valid board names for adq12b driver are:
[  341.123692][ T7675]  adq12b
[  341.127438][ T7675] comedi: valid board names for mpc624 driver are:
[  341.144171][ T7675]  mpc624
[  341.147219][ T7675] comedi: valid board names for c6xdigio driver are:
[  341.154957][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  341.193912][ T7675]  c6xdigio
[  341.197163][ T7675] comedi: valid board names for aio_iiro_16 driver are:
[  341.224202][ T7675]  aio_iiro_16
[  341.227695][ T7675] comedi: valid board names for aio_aio12_8 driver are:
[  341.251571][ T7675]  aio_aio12_8
[  341.271908][ T7675]  aio_ai12_8
[  341.278584][ T7675]  aio_ao12_4
[  341.289180][ T7675] comedi: valid board names for fl512 driver are:
[  341.313326][ T7675]  fl512
[  341.324034][ T7675] comedi: valid board names for dmm32at driver are:
[  341.339294][ T7693] loop1: detected capacity change from 0 to 64
[  341.348374][ T7675]  dmm32at
[  341.351496][ T7675] comedi: valid board names for dt282x driver are:
[  341.375279][ T7691] syzkaller0: entered promiscuous mode
[  341.404674][ T7691] syzkaller0: entered allmulticast mode
[  341.413737][ T7675]  dt2821
[  341.429262][ T7675]  dt2821-f
[  341.432481][ T7675]  dt2821-g
[  341.464287][ T7675]  dt2823
[  341.489696][ T7675]  dt2824-pgh
[  341.493087][ T7675]  dt2824-pgl
[  341.530638][ T7675]  dt2825
[  341.566827][ T7675]  dt2827
[  341.569889][ T7675]  dt2828
[  341.572874][ T7675]  dt2829
[  341.598629][ T7675]  dt21-ez
[  341.617940][ T7675]  dt23-ez
[  341.621083][ T7675]  dt24-ez
[  341.636414][ T7675]  dt24-ez-pgl
[  341.650222][ T7675] comedi: valid board names for dt2817 driver are:
[  341.661079][ T7675]  dt2817
[  341.670559][ T7675] comedi: valid board names for dt2815 driver are:
[  341.683860][ T7675]  dt2815
[  341.686917][ T7675] comedi: valid board names for dt2814 driver are:
[  341.704234][ T7675]  dt2814
[  341.707282][ T7675] comedi: valid board names for dt2811 driver are:
[  341.724143][ T7675]  dt2811-pgh
[  341.733504][ T7675]  dt2811-pgl
[  341.748202][ T7675] comedi: valid board names for dt2801 driver are:
[  341.768887][ T7675]  dt2801
[  341.771933][ T7675] comedi: valid board names for das6402 driver are:
[  341.793942][ T7675]  das6402-12
[  341.797344][ T7675]  das6402-16
[  341.800676][ T7675] comedi: valid board names for das1800 driver are:
[  341.842143][ T7675]  das-1701st
[  341.848322][ T7675]  das-1701st-da
[  341.852057][ T7675]  das-1702st
[  341.855682][ T7675]  das-1702st-da
[  341.859417][ T7675]  das-1702hr
[  341.872750][ T7675]  das-1702hr-da
[  341.876729][ T7675]  das-1701ao
[  341.880091][ T7675]  das-1702ao
[  341.883429][ T7675]  das-1801st
[  341.888505][ T7675]  das-1801st-da
[  341.892174][ T7675]  das-1802st
[  341.921880][ T7675]  das-1802st-da
[  341.931206][ T7675]  das-1802hr
[  341.953873][ T7675]  das-1802hr-da
[  341.968092][ T7675]  das-1801hc
[  341.976370][ T7675]  das-1802hc
[  342.008314][ T7675]  das-1801ao
[  342.011708][ T7675]  das-1802ao
[  342.018192][ T7675] comedi: valid board names for das800 driver are:
[  342.040996][ T7675]  das-800
[  342.044431][ T7675]  cio-das800
[  342.050864][ T7675]  das-801
[  342.056702][ T5785] IPVS: starting estimator thread 0...
[  342.065447][ T7675]  cio-das801
[  342.068825][ T7675]  das-802
[  342.071894][ T7675]  cio-das802
[  342.084356][ T7697] netlink: 'syz.1.490': attribute type 21 has an invalid length.
[  342.092952][ T7697] netlink: 'syz.1.490': attribute type 21 has an invalid length.
[  342.106075][ T7675]  cio-das802/16
[  342.109717][ T7675] comedi: valid board names for isa-das08 driver are:
[  342.117318][ T7675]  isa-das08
[  342.120612][ T7675]  das08-pgm
[  342.124547][ T7697] netlink: 'syz.1.490': attribute type 21 has an invalid length.
[  342.132621][ T7697] netlink: 'syz.1.490': attribute type 21 has an invalid length.
[  342.140639][ T7675]  das08-pgh
[  342.144110][ T7675]  das08-pgl
[  342.147370][ T7675]  das08-aoh
[  342.150620][ T7675]  das08-aol
[  342.153942][ T7675]  das08-aom
[  342.157192][ T7675]  das08/jr-ao
[  342.160621][ T7675]  das08jr-16-ao
[  342.167567][ T7675]  pc104-das08
[  342.171034][ T7675]  das08jr/16
[  342.174557][ T7698] IPVS: using max 20 ests per chain, 48000 per kthread
[  342.188763][ T7675] comedi: valid board names for das16m1 driver are:
[  342.213141][ T7675]  das16m1
[  342.224275][ T7675] comedi: valid board names for dac02 driver are:
[  342.230801][ T7675]  dac02
[  342.233691][ T7675] comedi: valid board names for rti802 driver are:
[  342.291775][ T7675]  rti802
[  342.297473][ T7675] comedi: valid board names for rti800 driver are:
[  342.318662][ T7675]  rti800
[  342.321720][ T7675]  rti815
[  342.350176][ T7675] comedi: valid board names for pcm3724 driver are:
[  342.365467][ T7675]  pcm3724
[  342.368605][ T7675] comedi: valid board names for pcl818 driver are:
[  342.394473][ T7675]  pcl818l
[  342.399027][ T7675]  pcl818h
[  342.402474][ T7675]  pcl818hd
[  344.122798][ T7703] loop3: detected capacity change from 0 to 2048
[  344.174057][ T7703] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  344.186550][ T7675]  pcl818hg
[  344.195344][ T7675]  pcl818
[  344.198381][ T7675]  pcl718
[  344.201395][ T7675]  pcm3718
[  344.226959][ T7675] comedi: valid board names for pcl816 driver are:
[  344.242078][ T7675]  pcl816
[  344.258445][ T7675]  pcl814b
[  344.270759][ T7675] comedi: valid board names for pcl812 driver are:
[  344.287152][ T7675]  pcl812
[  344.290207][ T7675]  pcl812pg
[  344.293367][ T7675]  acl8112pg
[  344.333908][ T7675]  acl8112dg
[  344.337220][ T7675]  acl8112hg
[  344.340462][ T7675]  a821pgl
[  344.387707][ T7675]  a821pglnda
[  344.391104][ T7675]  a821pgh
[  344.407160][ T7675]  a822pgl
[  344.410304][ T7675]  a822pgh
[  344.413399][ T7675]  a823pgl
[  344.451665][ T7675]  a823pgh
[  344.458296][ T7675]  pcl813
[  344.461453][ T7675]  pcl813b
[  344.483899][ T7675]  acl8113
[  344.491150][ T7675]  iso813
[  344.494361][ T7675]  acl8216
[  344.507651][ T7675]  a826pg
[  344.507670][ T7675] comedi: valid board names for pcl730 driver are:
[  344.507682][ T7675]  pcl730
[  344.507690][ T7675]  iso730
[  344.507697][ T7675]  acl7130
[  344.507705][ T7675]  pcm3730
[  344.507713][ T7675]  pcl725
[  344.507720][ T7675]  p8r8dio
[  344.507728][ T7675]  acl7225b
[  344.507735][ T7675]  p16r16dio
[  344.507742][ T7675]  pcl733
[  344.507750][ T7675]  pcl734
[  344.507757][ T7675]  opmm-1616-xt
[  344.507765][ T7675]  pearl-mm-p
[  344.507772][ T7675]  ir104-pbf
[  344.507780][ T7675] comedi: valid board names for pcl726 driver are:
[  344.507790][ T7675]  pcl726
[  344.507798][ T7675]  pcl727
[  344.507805][ T7675]  pcl728
[  344.507831][ T7675]  acl6126
[  344.507839][ T7675]  acl6128
[  344.507847][ T7675] comedi: valid board names for pcl724 driver are:
[  344.507857][ T7675]  pcl724
[  344.507864][ T7675]  pcl722
[  344.507871][ T7675]  pcl731
[  344.507879][ T7675]  acl7122
[  344.507886][ T7675]  acl7124
[  344.507893][ T7675]  pet48dio
[  344.507901][ T7675]  pcmio48
[  344.507908][ T7675]  onyx-mm-dio
[  344.507916][ T7675] comedi: valid board names for pcl711 driver are:
[  344.507926][ T7675]  pcl711
[  344.507933][ T7675]  pcl711b
[  344.507941][ T7675]  acl8112hg
[  344.507948][ T7675]  acl8112dg
[  344.507956][ T7675] comedi: valid board names for amplc_pc263 driver are:
[  344.507966][ T7675]  pc263
[  344.507973][ T7675] comedi: valid board names for amplc_pc236 driver are:
[  344.507983][ T7675]  pc36at
[  344.507991][ T7675] comedi: valid board names for amplc_dio200 driver are:
[  344.508001][ T7675]  pc212e
[  344.508009][ T7675]  pc214e
[  344.508016][ T7675]  pc215e
[  344.508023][ T7675]  pc218e
[  344.508030][ T7675]  pc272e
[  344.508038][ T7675] comedi: valid board names for comedi_parport driver are:
[  344.508048][ T7675]  comedi_parport
[  344.508056][ T7675] comedi: valid board names for comedi_test driver are:
[  344.508065][ T7675]  comedi_test
[  344.508073][ T7675] comedi: valid board names for comedi_bond driver are:
[  344.508082][ T7675]  comedi_bond
[  344.976085][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.496'.
[  345.387420][ T7720] loop3: detected capacity change from 0 to 256
[  345.400173][ T7720] FAT-fs (loop3): Unrecognized mount option "s" or missing value
[  345.475727][ T5997] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  345.655668][ T7726] syzkaller0: entered promiscuous mode
[  345.661263][ T7726] syzkaller0: entered allmulticast mode
[  345.843560][ T7736] FAULT_INJECTION: forcing a failure.
[  345.843560][ T7736] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  345.906049][ T7736] CPU: 1 PID: 7736 Comm: syz.1.493 Not tainted syzkaller #0
[  345.913473][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  345.923600][ T7736] Call Trace:
[  345.926960][ T7736]  <TASK>
[  345.929960][ T7736]  dump_stack_lvl+0x18c/0x250
[  345.934717][ T7736]  ? show_regs_print_info+0x20/0x20
[  345.940009][ T7736]  ? load_image+0x420/0x420
[  345.944639][ T7736]  ? __might_fault+0xaa/0x120
[  345.949402][ T7736]  ? __lock_acquire+0x7d40/0x7d40
[  345.954513][ T7736]  should_fail_ex+0x39d/0x4d0
[  345.959290][ T7736]  _copy_from_user+0x2f/0xe0
[  345.963964][ T7736]  sk_setsockopt+0x2b2/0x2bc0
[  345.968730][ T7736]  ? sockopt_capable+0x60/0x60
[  345.973595][ T7736]  ? ksys_write+0x1c4/0x260
[  345.978205][ T7736]  ? aa_sk_perm+0x83c/0x970
[  345.982791][ T7736]  udp_lib_setsockopt+0xf7/0x8a0
[  345.987821][ T7736]  ? udp_destroy_sock+0x2c0/0x2c0
[  345.992973][ T7736]  ? __fget_files+0x28/0x4b0
[  345.997654][ T7736]  ? __fget_files+0x28/0x4b0
[  346.002326][ T7736]  udp_setsockopt+0x77/0xb0
[  346.006911][ T7736]  ? udp_set_csum+0x6f0/0x6f0
[  346.011671][ T7736]  ? sock_common_recvmsg+0x190/0x190
[  346.017082][ T7736]  do_sock_setsockopt+0x175/0x1a0
[  346.022192][ T7736]  __x64_sys_setsockopt+0x182/0x200
[  346.027480][ T7736]  do_syscall_64+0x55/0xb0
[  346.031970][ T7736]  ? clear_bhb_loop+0x40/0x90
[  346.036718][ T7736]  ? clear_bhb_loop+0x40/0x90
[  346.041468][ T7736]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  346.047447][ T7736] RIP: 0033:0x7f4db7d9ce59
[  346.051937][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.071621][ T7736] RSP: 002b:00007f4db8bbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  346.080118][ T7736] RAX: ffffffffffffffda RBX: 00007f4db8015fa0 RCX: 00007f4db7d9ce59
[  346.088160][ T7736] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000003
[  346.096194][ T7736] RBP: 00007f4db8bbb090 R08: 0000000000000004 R09: 0000000000000000
[  346.104237][ T7736] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  346.112275][ T7736] R13: 00007f4db8016038 R14: 00007f4db8015fa0 R15: 00007ffd11cf76e8
[  346.120338][ T7736]  </TASK>
[  348.396423][ T7734] loop2: detected capacity change from 0 to 32768
[  348.439577][ T7734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.501 (7734)
[  348.486441][ T7734] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  348.518867][ T7734] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  348.546040][ T7734] BTRFS info (device loop2): force clearing of disk cache
[  348.565533][ T7734] BTRFS info (device loop2): metadata ratio 0
[  348.571754][ T7734] BTRFS info (device loop2): enabling ssd optimizations
[  348.610366][ T7734] BTRFS info (device loop2): using spread ssd allocation scheme
[  348.636181][ T7734] BTRFS info (device loop2): using free space tree
[  348.957506][ T7734] BTRFS error (device loop2): open_ctree failed: -4
[  350.047755][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'.
[  350.108213][ T7766] ceph: No mds server is up or the cluster is laggy
[  351.807964][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'.
[  352.311502][ T7787] syz.3.513 (7787) used greatest stack depth: 15688 bytes left
[  352.345262][ T7782] syzkaller0: entered promiscuous mode
[  352.349570][    T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  352.350809][ T7782] syzkaller0: entered allmulticast mode
[  352.447743][    T9] hid-generic 0000:0000:0000.0015: hidraw12: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  352.791385][ T7797] loop1: detected capacity change from 0 to 8192
[  352.872132][ T7797] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  352.917428][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.517'.
[  352.957116][ T7797] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  353.009305][ T7797] REISERFS (device loop1): using ordered data mode
[  353.030645][ T7797] reiserfs: using flush barriers
[  353.040033][ T7797] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  353.079242][ T7797] REISERFS (device loop1): checking transaction log (loop1)
[  353.189361][ T7805] FAULT_INJECTION: forcing a failure.
[  353.189361][ T7805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.215007][ T7805] CPU: 1 PID: 7805 Comm: syz.2.518 Not tainted syzkaller #0
[  353.222400][ T7805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  353.232536][ T7805] Call Trace:
[  353.235886][ T7805]  <TASK>
[  353.238854][ T7805]  dump_stack_lvl+0x18c/0x250
[  353.243560][ T7805]  ? show_regs_print_info+0x20/0x20
[  353.248784][ T7805]  ? load_image+0x420/0x420
[  353.253342][ T7805]  ? __might_fault+0xaa/0x120
[  353.258103][ T7805]  ? __lock_acquire+0x7d40/0x7d40
[  353.263209][ T7805]  should_fail_ex+0x39d/0x4d0
[  353.267984][ T7805]  _copy_from_user+0x2f/0xe0
[  353.272671][ T7805]  ucma_write+0x167/0x2f0
[  353.277051][ T7805]  ? ucma_get_global_nl_info+0x70/0x70
[  353.282532][ T7805]  ? fsnotify_perm+0x5d/0x5e0
[  353.287231][ T7805]  ? security_file_permission+0x79/0xa0
[  353.292808][ T7805]  do_iter_write+0x4ea/0xc30
[  353.297438][ T7805]  ? ucma_get_global_nl_info+0x70/0x70
[  353.302928][ T7805]  ? vfs_iter_write+0xa0/0xa0
[  353.307638][ T7805]  ? __import_iovec+0x3fa/0x850
[  353.312522][ T7805]  ? import_iovec+0x73/0xa0
[  353.317059][ T7805]  do_writev+0x27f/0x480
[  353.321371][ T7805]  ? do_readv+0x460/0x460
[  353.325788][ T7805]  ? __fget_files+0x28/0x4b0
[  353.330424][ T7805]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  353.336437][ T7805]  ? lock_chain_count+0x20/0x20
[  353.341318][ T7805]  ? lockdep_hardirqs_on+0x98/0x150
[  353.346559][ T7805]  do_syscall_64+0x55/0xb0
[  353.351004][ T7805]  ? clear_bhb_loop+0x40/0x90
[  353.355725][ T7805]  ? clear_bhb_loop+0x40/0x90
[  353.360445][ T7805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  353.366377][ T7805] RIP: 0033:0x7f237ad9ce59
[  353.370812][ T7805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.390452][ T7805] RSP: 002b:00007f2378ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  353.398900][ T7805] RAX: ffffffffffffffda RBX: 00007f237b015fa0 RCX: 00007f237ad9ce59
[  353.406894][ T7805] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000008
[  353.414889][ T7805] RBP: 00007f2378ff6090 R08: 0000000000000000 R09: 0000000000000000
[  353.422903][ T7805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.430899][ T7805] R13: 00007f237b016038 R14: 00007f237b015fa0 R15: 00007fff02498c68
[  353.438918][ T7805]  </TASK>
[  353.578364][ T7795] loop3: detected capacity change from 0 to 32768
[  353.614724][ T7795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.514 (7795)
[  353.668304][ T7795] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  353.685066][ T7808] loop0: detected capacity change from 0 to 164
[  353.705606][ T7795] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  353.745870][ T7795] BTRFS info (device loop3): turning on async discard
[  353.757591][ T7795] BTRFS info (device loop3): metadata ratio 0
[  353.767203][ T7797] REISERFS (device loop1): Using tea hash to sort names
[  353.782178][ T7797] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  353.794601][ T7795] BTRFS info (device loop3): setting nodatasum
[  353.800890][ T7795] BTRFS info (device loop3): using free space tree
[  353.998504][ T7795] BTRFS info (device loop3): enabling ssd optimizations
[  354.075276][ T7817] loop2: detected capacity change from 0 to 1024
[  354.135109][ T7817] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  354.179777][   T28] audit: type=1800 audit(1781498132.788:4): pid=7795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.514" name="file1" dev="loop3" ino=260 res=0 errno=0
[  354.267412][ T7817] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.520: lblock 2 mapped to illegal pblock 2 (length 1)
[  354.283421][ T7832] FAULT_INJECTION: forcing a failure.
[  354.283421][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.360543][ T7832] CPU: 1 PID: 7832 Comm: syz.3.514 Not tainted syzkaller #0
[  354.367958][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  354.378188][ T7832] Call Trace:
[  354.381628][ T7832]  <TASK>
[  354.384611][ T7832]  dump_stack_lvl+0x18c/0x250
[  354.389345][ T7832]  ? show_regs_print_info+0x20/0x20
[  354.394606][ T7832]  ? load_image+0x420/0x420
[  354.399158][ T7832]  ? __might_fault+0xaa/0x120
[  354.403903][ T7832]  ? __lock_acquire+0x7d40/0x7d40
[  354.408985][ T7832]  should_fail_ex+0x39d/0x4d0
[  354.413722][ T7832]  _copy_from_user+0x2f/0xe0
[  354.418363][ T7832]  __se_sys_sendfile64+0xad/0x1a0
[  354.423443][ T7832]  ? lock_chain_count+0x20/0x20
[  354.428336][ T7832]  ? __x64_sys_sendfile64+0xb0/0xb0
[  354.433597][ T7832]  ? lockdep_hardirqs_on+0x98/0x150
[  354.438851][ T7832]  do_syscall_64+0x55/0xb0
[  354.443310][ T7832]  ? clear_bhb_loop+0x40/0x90
[  354.448038][ T7832]  ? clear_bhb_loop+0x40/0x90
[  354.452756][ T7832]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  354.458709][ T7832] RIP: 0033:0x7fa0e899ce59
[  354.463168][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.482833][ T7832] RSP: 002b:00007fa0e9891028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  354.491302][ T7832] RAX: ffffffffffffffda RBX: 00007fa0e8c16180 RCX: 00007fa0e899ce59
[  354.499323][ T7832] RDX: 0000200000000080 RSI: ffffffffffffffff RDI: ffffffffffffffff
[  354.507336][ T7832] RBP: 00007fa0e9891090 R08: 0000000000000000 R09: 0000000000000000
[  354.515350][ T7832] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001
[  354.523366][ T7832] R13: 00007fa0e8c16218 R14: 00007fa0e8c16180 R15: 00007fff9f068458
[  354.531423][ T7832]  </TASK>
[  354.555888][ T7817] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  354.584059][ T7817] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.520: lblock 0 mapped to illegal pblock 48 (length 1)
[  354.654586][ T7817] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  354.675599][ T7817] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.520: Failed to acquire dquot type 0
[  354.733639][ T7817] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  355.070146][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.522'.
[  355.542485][ T5844] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  355.554994][ T7817] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.520: mark_inode_dirty error
[  355.568220][ T5844] hid-generic 0000:0000:0000.0016: hidraw13: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  355.649302][ T7817] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  355.671518][ T5780] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  355.710488][ T7817] EXT4-fs (loop2): 1 orphan inode deleted
[  355.732325][ T7817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.392065][ T1140] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  357.426802][ T1140] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  357.436750][ T1140] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 0
[  360.040716][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.527'.
[  360.222088][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.289084][ T5782] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0
[  360.321528][ T5782] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  360.374204][ T5782] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[  361.305146][ T7861] loop1: detected capacity change from 0 to 32768
[  361.325341][ T7861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.530 (7861)
[  361.383003][ T7861] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  361.432484][ T7861] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  361.465836][ T7861] BTRFS info (device loop1): turning on async discard
[  361.494546][ T7861] BTRFS info (device loop1): metadata ratio 0
[  361.500755][ T7861] BTRFS info (device loop1): setting nodatasum
[  361.517591][ T7861] BTRFS info (device loop1): using free space tree
[  361.555190][ T7866] syzkaller0: entered promiscuous mode
[  361.560831][ T7866] syzkaller0: entered allmulticast mode
[  361.649052][ T7864] loop3: detected capacity change from 0 to 32768
[  361.706472][ T7864] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.531 (7864)
[  362.546199][ T5785] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  362.584401][ T7861] BTRFS info (device loop1): enabling ssd optimizations
[  362.612269][ T5785] hid-generic 0000:0000:0000.0017: hidraw14: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  364.896767][ T5779] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  365.185000][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  365.305220][   T28] audit: type=1326 audit(1781498143.908:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.0.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f038099ce59 code=0x0
[  365.399483][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  365.409273][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.424270][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.538'.
[  365.433422][    T9] usb 3-1: Product: syz
[  365.438620][    T9] usb 3-1: Manufacturer: syz
[  365.443297][    T9] usb 3-1: SerialNumber: syz
[  365.502761][    T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  365.752687][ T5785] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  366.629523][ T7895] loop2: detected capacity change from 0 to 2048
[  369.893064][ T5785] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  369.908079][ T5785] ath9k_htc: Failed to initialize the device
[  370.001888][ T7895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  372.350083][ T5844] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  372.366470][ T5785] usb 3-1: ath9k_htc: USB layer deinitialized
[  372.380093][    T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  372.477129][    T9] hid-generic 0000:0000:0000.0018: hidraw15: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  372.490149][    T8] usb 3-1: USB disconnect, device number 8
[  372.557742][ T7927] FAULT_INJECTION: forcing a failure.
[  372.557742][ T7927] name failslab, interval 1, probability 0, space 0, times 0
[  372.598713][ T7927] CPU: 1 PID: 7927 Comm: syz.3.543 Not tainted syzkaller #0
[  372.606119][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  372.616241][ T7927] Call Trace:
[  372.619578][ T7927]  <TASK>
[  372.622561][ T7927]  dump_stack_lvl+0x18c/0x250
[  372.627327][ T7927]  ? show_regs_print_info+0x20/0x20
[  372.632604][ T7927]  ? load_image+0x420/0x420
[  372.637183][ T7927]  ? __might_sleep+0xe0/0xe0
[  372.641849][ T7927]  ? __lock_acquire+0x7d40/0x7d40
[  372.646971][ T7927]  should_fail_ex+0x39d/0x4d0
[  372.651726][ T7927]  should_failslab+0x9/0x20
[  372.656294][ T7927]  slab_pre_alloc_hook+0x59/0x310
[  372.661402][ T7927]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  372.667196][ T7927]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  372.672992][ T7927]  __kmem_cache_alloc_node+0x53/0x250
[  372.678448][ T7927]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  372.684248][ T7927]  __kmalloc+0xa4/0x230
[  372.688489][ T7927]  tomoyo_realpath_from_path+0xe3/0x5d0
[  372.694131][ T7927]  tomoyo_path_number_perm+0x248/0x620
[  372.699875][ T7927]  ? tomoyo_path_number_perm+0x217/0x620
[  372.705619][ T7927]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  372.711159][ T7927]  ? ksys_write+0x1c4/0x260
[  372.715768][ T7927]  ? __fget_files+0x28/0x4b0
[  372.720431][ T7927]  ? __fget_files+0x28/0x4b0
[  372.725123][ T7927]  security_file_ioctl+0x70/0xa0
[  372.730145][ T7927]  __se_sys_ioctl+0x48/0x170
[  372.734818][ T7927]  do_syscall_64+0x55/0xb0
[  372.739304][ T7927]  ? clear_bhb_loop+0x40/0x90
[  372.744052][ T7927]  ? clear_bhb_loop+0x40/0x90
[  372.748787][ T7927]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  372.754750][ T7927] RIP: 0033:0x7fa0e899ce59
[  372.759233][ T7927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  372.779026][ T7927] RSP: 002b:00007fa0e98d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  372.787533][ T7927] RAX: ffffffffffffffda RBX: 00007fa0e8c15fa0 RCX: 00007fa0e899ce59
[  372.795580][ T7927] RDX: 0000200000000080 RSI: 000000004018aee1 RDI: 0000000000000008
[  372.803644][ T7927] RBP: 00007fa0e98d3090 R08: 0000000000000000 R09: 0000000000000000
[  372.811679][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  372.819897][ T7927] R13: 00007fa0e8c16038 R14: 00007fa0e8c15fa0 R15: 00007fff9f068458
[  372.827959][ T7927]  </TASK>
[  372.954395][ T7927] ERROR: Out of memory at tomoyo_realpath_from_path.
[  373.103665][ T7933] tipc: Started in network mode
[  373.113972][ T7933] tipc: Node identity ac14140f, cluster identity 4711
[  373.134411][ T7933] tipc: New replicast peer: 255.255.255.255
[  373.144717][ T7933] tipc: Enabled bearer <udp:syz2>, priority 10
[  373.176702][ T7935] syzkaller0: entered promiscuous mode
[  373.182299][ T7935] syzkaller0: entered allmulticast mode
[  374.884040][ T5844] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  375.493563][ T5785] tipc: Node number set to 2886997007
[  376.775661][ T5844] usb 1-1: device descriptor read/all, error -71
[  376.951806][ T7950] FAULT_INJECTION: forcing a failure.
[  376.951806][ T7950] name failslab, interval 1, probability 0, space 0, times 0
[  376.988614][ T7950] CPU: 0 PID: 7950 Comm: syz.0.548 Not tainted syzkaller #0
[  376.996035][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  377.006168][ T7950] Call Trace:
[  377.009507][ T7950]  <TASK>
[  377.012498][ T7950]  dump_stack_lvl+0x18c/0x250
[  377.017277][ T7950]  ? show_regs_print_info+0x20/0x20
[  377.022552][ T7950]  ? load_image+0x420/0x420
[  377.027126][ T7950]  ? __might_sleep+0xe0/0xe0
[  377.031775][ T7950]  ? __lock_acquire+0x7d40/0x7d40
[  377.036873][ T7950]  should_fail_ex+0x39d/0x4d0
[  377.041658][ T7950]  should_failslab+0x9/0x20
[  377.046246][ T7950]  slab_pre_alloc_hook+0x59/0x310
[  377.051351][ T7950]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  377.057154][ T7950]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  377.062948][ T7950]  __kmem_cache_alloc_node+0x53/0x250
[  377.068400][ T7950]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  377.074202][ T7950]  __kmalloc+0xa4/0x230
[  377.078437][ T7950]  tomoyo_realpath_from_path+0xe3/0x5d0
[  377.084064][ T7950]  tomoyo_path_number_perm+0x248/0x620
[  377.089602][ T7950]  ? tomoyo_path_number_perm+0x217/0x620
[  377.095306][ T7950]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  377.100844][ T7950]  ? ksys_write+0x1c4/0x260
[  377.105465][ T7950]  ? __fget_files+0x28/0x4b0
[  377.110135][ T7950]  ? __fget_files+0x28/0x4b0
[  377.114823][ T7950]  security_file_ioctl+0x70/0xa0
[  377.119861][ T7950]  __se_sys_ioctl+0x48/0x170
[  377.124534][ T7950]  do_syscall_64+0x55/0xb0
[  377.129027][ T7950]  ? clear_bhb_loop+0x40/0x90
[  377.133784][ T7950]  ? clear_bhb_loop+0x40/0x90
[  377.138531][ T7950]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  377.144503][ T7950] RIP: 0033:0x7f038099ce59
[  377.149014][ T7950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.168706][ T7950] RSP: 002b:00007f03818f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  377.177200][ T7950] RAX: ffffffffffffffda RBX: 00007f0380c15fa0 RCX: 00007f038099ce59
[  377.185271][ T7950] RDX: 0000200000000080 RSI: 0000000000002284 RDI: 0000000000000003
[  377.193304][ T7950] RBP: 00007f03818f1090 R08: 0000000000000000 R09: 0000000000000000
[  377.201349][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  377.209397][ T7950] R13: 00007f0380c16038 R14: 00007f0380c15fa0 R15: 00007ffd38afb8b8
[  377.217464][ T7950]  </TASK>
[  378.042923][ T7950] ERROR: Out of memory at tomoyo_realpath_from_path.
[  379.734733][ T7961] loop1: detected capacity change from 0 to 8192
[  379.879043][ T7961] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  379.944151][ T7961] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  379.991110][ T7961] REISERFS (device loop1): using ordered data mode
[  380.042458][ T7961] reiserfs: using flush barriers
[  380.088876][ T7961] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  380.175721][ T7961] REISERFS (device loop1): checking transaction log (loop1)
[  380.234772][ T7961] REISERFS (device loop1): Using r5 hash to sort names
[  380.963419][    T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  380.981484][ T7961] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  380.992679][ T7963] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  381.002601][ T7963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  381.012374][ T7963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  381.052695][    T8] hid-generic 0000:0000:0000.0019: hidraw16: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  381.467422][ T7968] ------------[ cut here ]------------
[  381.473723][ T7968] kernel BUG at fs/reiserfs/journal.c:505!
[  381.480242][ T7968] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  381.486388][ T7968] CPU: 0 PID: 7968 Comm: syz.1.552 Not tainted syzkaller #0
[  381.493689][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  381.503816][ T7968] RIP: 0010:reiserfs_in_journal+0xa4e/0xa50
[  381.509764][ T7968] Code: 24 30 80 e2 07 80 c2 03 38 ca 0f 8c 73 fe ff ff 48 8b 7c 24 30 48 89 c3 e8 5f e7 b5 ff 48 89 d8 e9 5e fe ff ff e8 b2 a6 5d ff <0f> 0b 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 50 49 89 fc 48 bd
[  381.529406][ T7968] RSP: 0018:ffffc9001b51eee8 EFLAGS: 00010283
[  381.535495][ T7968] RAX: ffffffff822984de RBX: ffff88801a6d8000 RCX: 0000000000080000
[  381.543483][ T7968] RDX: ffffc9000df7f000 RSI: 0000000000001524 RDI: 0000000000001525
[  381.551467][ T7968] RBP: ffff88801a6d8630 R08: ffffc9001b51f020 R09: 1ffff11009b68a08
[  381.559458][ T7968] R10: dffffc0000000000 R11: ffffed1009b68a09 R12: ffffc9001b667048
[  381.567449][ T7968] R13: ffffc9001b667050 R14: dffffc0000000000 R15: 0000000000000213
[  381.575440][ T7968] FS:  00007f4db8b9a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  381.584403][ T7968] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  381.591022][ T7968] CR2: 0000000000000000 CR3: 000000001d34e000 CR4: 00000000003506f0
[  381.599011][ T7968] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000410
[  381.607002][ T7968] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  381.615000][ T7968] Call Trace:
[  381.618310][ T7968]  <TASK>
[  381.621255][ T7968]  scan_bitmap_block+0x4ad/0xe00
[  381.626226][ T7968]  ? do_raw_spin_unlock+0x121/0x230
[  381.631457][ T7968]  ? oid_groups+0x4e0/0x4e0
[  381.635979][ T7968]  reiserfs_allocate_blocknrs+0x298c/0x4e80
[  381.641922][ T7968]  ? show_alloc_options+0xbe0/0xbe0
[  381.647140][ T7968]  ? journal_begin+0x1f5/0x360
[  381.651921][ T7968]  reiserfs_get_block+0x263a/0x4060
[  381.657153][ T7968]  ? make_le_item_head+0x5a0/0x5a0
[  381.662288][ T7968]  ? mod_objcg_state+0x511/0x8a0
[  381.667249][ T7968]  ? lockdep_hardirqs_on+0x98/0x150
[  381.672478][ T7968]  ? verify_lock_unused+0x140/0x140
[  381.677718][ T7968]  ? lockdep_init_map_type+0x9c/0x8e0
[  381.683170][ T7968]  ? folio_create_empty_buffers+0x538/0x720
[  381.689139][ T7968]  ? __lock_acquire+0x7d40/0x7d40
[  381.694219][ T7968]  ? __rwlock_init+0x150/0x150
[  381.699033][ T7968]  ? do_raw_spin_unlock+0x121/0x230
[  381.704256][ T7968]  ? _raw_spin_unlock+0x28/0x40
[  381.709135][ T7968]  ? folio_create_empty_buffers+0x538/0x720
[  381.715069][ T7968]  __block_write_begin_int+0x57f/0x1af0
[  381.720656][ T7968]  ? folio_batch_add_and_move+0x168/0x2b0
[  381.726414][ T7968]  ? make_le_item_head+0x5a0/0x5a0
[  381.731542][ T7968]  ? folio_zero_new_buffers+0x550/0x550
[  381.737117][ T7968]  ? __block_write_begin+0x64/0x150
[  381.742348][ T7968]  reiserfs_write_begin+0x20a/0x4c0
[  381.747577][ T7968]  ? fault_in_iov_iter_readable+0xbf/0x2e0
[  381.753420][ T7968]  generic_perform_write+0x2fe/0x5c0
[  381.758741][ T7968]  ? generic_file_direct_write+0x3e0/0x3e0
[  381.764566][ T7968]  ? __mnt_drop_write_file+0xc3/0x100
[  381.769966][ T7968]  ? __generic_file_write_iter+0xf7/0x230
[  381.775700][ T7968]  ? generic_file_write_iter+0x9b/0x2e0
[  381.781275][ T7968]  generic_file_write_iter+0xaf/0x2e0
[  381.786674][ T7968]  do_iter_write+0x738/0xc30
[  381.791298][ T7968]  ? vfs_iter_write+0xa0/0xa0
[  381.795999][ T7968]  ? rcu_read_lock_any_held+0xb4/0x140
[  381.801486][ T7968]  do_pwritev+0x241/0x3a0
[  381.805866][ T7968]  ? security_bpf+0x7e/0xa0
[  381.810403][ T7968]  ? do_preadv+0x390/0x390
[  381.814856][ T7968]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  381.820872][ T7968]  ? lock_chain_count+0x20/0x20
[  381.825769][ T7968]  ? lockdep_hardirqs_on+0x98/0x150
[  381.831071][ T7968]  ? __x64_sys_pwritev2+0xbe/0x100
[  381.836217][ T7968]  do_syscall_64+0x55/0xb0
[  381.840659][ T7968]  ? clear_bhb_loop+0x40/0x90
[  381.845354][ T7968]  ? clear_bhb_loop+0x40/0x90
[  381.850046][ T7968]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  381.855971][ T7968] RIP: 0033:0x7f4db7d9ce59
[  381.860400][ T7968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.880034][ T7968] RSP: 002b:00007f4db8b9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  381.888469][ T7968] RAX: ffffffffffffffda RBX: 00007f4db8016090 RCX: 00007f4db7d9ce59
[  381.896462][ T7968] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004
[  381.904447][ T7968] RBP: 00007f4db7e32d6f R08: 000000000000000c R09: 0000000000000004
[  381.912452][ T7968] R10: 0000000000800fff R11: 0000000000000246 R12: 0000000000000000
[  381.920440][ T7968] R13: 00007f4db8016128 R14: 00007f4db8016090 R15: 00007ffd11cf76e8
[  381.928445][ T7968]  </TASK>
[  381.931477][ T7968] Modules linked in:
[  381.957104][ T7968] ---[ end trace 0000000000000000 ]---
[  381.962797][ T7968] RIP: 0010:reiserfs_in_journal+0xa4e/0xa50
[  381.968949][ T7968] Code: 24 30 80 e2 07 80 c2 03 38 ca 0f 8c 73 fe ff ff 48 8b 7c 24 30 48 89 c3 e8 5f e7 b5 ff 48 89 d8 e9 5e fe ff ff e8 b2 a6 5d ff <0f> 0b 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 50 49 89 fc 48 bd
[  381.988899][ T7968] RSP: 0018:ffffc9001b51eee8 EFLAGS: 00010283
[  381.995529][ T7968] RAX: ffffffff822984de RBX: ffff88801a6d8000 RCX: 0000000000080000
[  382.003641][ T7968] RDX: ffffc9000df7f000 RSI: 0000000000001524 RDI: 0000000000001525
[  382.011976][ T7968] RBP: ffff88801a6d8630 R08: ffffc9001b51f020 R09: 1ffff11009b68a08
[  382.020181][ T7968] R10: dffffc0000000000 R11: ffffed1009b68a09 R12: ffffc9001b667048
[  382.029476][ T7968] R13: ffffc9001b667050 R14: dffffc0000000000 R15: 0000000000000213
[  382.037725][ T7968] FS:  00007f4db8b9a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  382.046957][ T7968] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  382.053724][ T7968] CR2: 0000000000000000 CR3: 000000001d34e000 CR4: 00000000003506f0
[  382.061868][ T7968] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000410
[  382.070136][ T7968] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  382.078497][ T7968] Kernel panic - not syncing: Fatal exception
[  382.085314][ T7968] Kernel Offset: disabled
[  382.089660][ T7968] Rebooting in 86400 seconds..