last executing test programs:

14.150229119s ago: executing program 3 (id=258):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x4, 0x4002)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90235fc60", 0x14}], 0x1}, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @local, 0x1, "cbbbed618a2da73ad226e3ac43e5a3d67f9feff7ec9bf43fd446a73b62119765", 0x3, 0x2, 0x8, 0x18}, 0x3c)

13.088696376s ago: executing program 3 (id=259):
unshare(0x20000400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0xa, 0x4, 0x5, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 1)

12.561316418s ago: executing program 2 (id=263):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643de091c061f90a892cf7dc6069d5dce02ca0755fcccfbf8009f94b981051d1c2c438b733afa2f30d4cab4cf17ac836131e059836fb59069ee130ac2824b3b4efc94af0b05f3dc98de2eeb631de1f39a24af8fc5bf6808d3f249f3d429da20dd7437d1fcd69c2218651444e5ef41162d3eac21c74e5a1a5eb9756c32008869065d8d1a7be57", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYBLOB="7bda8cb917d42ba19bec86a1b1bdf2940db689f8de0f3df71defb8919f41011e543b248a519c66700765ac564ec5955e2d570f10a07996f4a08801a87c8d", @ANYBLOB="060000bd00", @ANYRES8, @ANYRES8=0x0], 0x1, 0x6ed, &(0x7f0000000dc0)="$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")
r1 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
sendto$inet6(r1, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/67, 0x43, 0x1, &(0x7f0000000840)=""/65, 0x41}, &(0x7f0000000900)=0x40)
close(r1)
read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0xfffffffffffffffe, 0x80002, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x8000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, r3, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000018, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b4, &(0x7f00000000c0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
splice(r4, 0x0, r5, 0x0, 0x10502, 0xd)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4)
write$binfmt_misc(r6, &(0x7f0000000300), 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010019"], 0x0, 0x3a, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28)
recvmmsg(r6, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x2f)

12.559628275s ago: executing program 4 (id=264):
r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400080, 0x0)
read$FUSE(r2, &(0x7f0000001380)={0x2020}, 0x2020)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_clone3(&(0x7f0000000140)={0x4000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, {r2}}, 0x58)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="2d6c568108d00a9b00000010200000"], 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x41)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008a1bac026c86063fa5b6046fd9485026dad8b84d6d4ea9172a27a38f5be0bf3c31717f97515edd048f8cb9f36c754a", @ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="04000000f5ffffffffffffff23e4303a45b0630be444f8c9c285bde2a8dd00f968ff8e14cb79633e0bcf449ce4fb4a3665e434ed77adb4e67cc9441d22f6847929555cafd669892860e44dcb4d18692104c58962c9f7ff05d0f403fd36187841900a61e6dbe4ef4b4d294ce02bc5647ebfa9ed24d0aa6f44d16b2e1eba5de1635a11d93f17ae328da649b10be2eb", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

12.499508038s ago: executing program 3 (id=265):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$inet_nvme(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000400)=""/222, 0xde}], 0x2}, 0x2000)
sendmsg$nl_route_sched_retired(r1, 0x0, 0x44014)

11.321734954s ago: executing program 3 (id=268):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0xfffffffb)
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)

11.029796778s ago: executing program 0 (id=269):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0x103, 0x80000000}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x23f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xd, 0xb, 0x1, {0x22, 0xfb4}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000f00)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x20, 0x1, 0x8, "0d023bb34e27ce63"}, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x16, 0x1, 0x7c, 0x51, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x80, 0x20, 0x0, 0x4}})
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="6b5d3416e65dc87b2762234908cbc049b3f20000000000c6540ea29efd6e0567dbaecb44f3006b69a1115372af73582f18bfaf48b4d92000ebede1f6ba3884138ffb5754a87163f9192f8dd38c4ca0e0971d0c5e2c"], 0x28}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)

10.921267369s ago: executing program 5 (id=270):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xfffe82)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x0, 'pimreg1\x00', {}, 0x10})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61)
lseek(r5, 0x1, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800080, @void, @value}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="ffff00f4", @ANYRES16=r8, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="1e00940020001407000000000000000f0008001200000000040700000007000005003400fe000000080026006c0900001e001f00020013080000000000000002000300100000000800080000009c0000"], 0x6c}}, 0x40080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
r10 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)

10.913681769s ago: executing program 2 (id=271):
syz_emit_ethernet(0x38, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffffffffe1d4865ca78c98a6e903e7ec0180c2000002001102f03a6eb07aaa999c16bfe56b92ba55d486c34d246383"], &(0x7f0000000880)={0x1, 0x3, [0xd61, 0x3, 0x849, 0xd8d]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
madvise(&(0x7f0000001000/0x3000)=nil, 0xffffffffdfffefff, 0x9)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x1, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x7, 0x303, 0x100}})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000140)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000680)=""/237, 0xed}, {&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000200)=""/13, 0xd}], 0x5, &(0x7f0000000800)}, 0x40000020)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x6, 0x4000, @void, @value}, 0x10)
syz_mount_image$nilfs2(&(0x7f0000000300), &(0x7f0000000440)='./file0\x00', 0x1210451, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x3, 0xebd, &(0x7f0000004540)="$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")

10.884196361s ago: executing program 3 (id=272):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c000905020200020200000905820200020000007499ce84a7431860c3981a"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="14ca0000c0f93e"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x7c}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0xc090)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r4, &(0x7f0000000000)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x3}}, 0x48)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000490}, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x6c, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x8, 0x0, 0x0, r10}, [@IFA_ADDRESS={0x8, 0x1, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4)

9.925651834s ago: executing program 4 (id=273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@delrng={0x10, 0x14, 0x300, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x44080)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x50, r1, 0x917, 0x70bd2d, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x50}}, 0x0)
syz_mount_image$bfs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00f0ea3e7305b16f28aa4d590119da50c0b3bfa2f3d59c8f93ec3622a63a5160966d7498cff9cb4b2dc5c94d8cdaeb826f708fa6b28ce41a7fcf2e6526727c88631c3689733d9244c15a64ce61e7ed53b4b856afea94096c1d651b3e51b74aa3aa007bbfad8414c5fc1a223cc3e9dce0226ea5fc03fe6a5b07000000874c595090"], 0x1, 0xa7, &(0x7f0000000c00)="$eJzs0sGJAjEABdA/w8IuLOwWsD1MD1uKeBK9eVIEG7EFW7EEO/Dg1cvIEAVhTjqgCO9BEn7CJzlkd9r+5Sdp10nbuSyd+WI5Hc3KnJ6qv8XbqTPJZ5KvlD9QJzn8l7MqJe+Pq/F1JPl49ZsBAIDH1GmSbG5zc0/7e9Dt7e+gOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMATnAMAAP//+7Ekyg==")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r2, 0x0, 0xb7d4, 0x1001f0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)

9.249749562s ago: executing program 2 (id=274):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000356ffc)=0x5, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)

8.24929118s ago: executing program 5 (id=275):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) (async)
ioctl$KDGETLED(r0, 0x4b31, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000007000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00hbS\x00'/20], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYRES64=r2], 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x420}}]}) (async)
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') (async)
r4 = socket$inet6(0xa, 0x800, 0x40) (async)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000340)=0xfffffffe)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet_sctp(0x2, 0x400000000001, 0x84) (async, rerun: 32)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) (async, rerun: 32)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3)
r6 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32)
r7 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002040)=""/4079, 0xfef}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f00000001c0)=""/226, 0xe2}, {&(0x7f0000000000)=""/86, 0x56}, {&(0x7f0000000140)=""/45, 0x2d}], 0x6}, 0x0)

7.940069538s ago: executing program 1 (id=276):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000356ffc)=0x5, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (fail_nth: 1)

7.848354814s ago: executing program 4 (id=277):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000001c0)={0x2, r0, 0x1})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111, 0x9}}, 0x20)
creat(&(0x7f00000002c0)='./file0\x00', 0x109)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0)
r6 = accept4$unix(r5, 0x0, 0x0, 0x0)
recvfrom$unix(r6, &(0x7f0000000c40)=""/240, 0xfffffffffffffd7b, 0x40000062, 0x0, 0xc)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1}}, 0x40)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r8, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

7.629590273s ago: executing program 0 (id=278):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (fail_nth: 1)

7.348002079s ago: executing program 1 (id=279):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getgroups(0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0])
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x85}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000)

7.314785971s ago: executing program 4 (id=280):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$inet_nvme(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000400)=""/222, 0xde}], 0x2}, 0x2000)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x44014)

7.09352655s ago: executing program 2 (id=281):
epoll_create1(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@dioread_nolock}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$eJzs3cFvVE8dAPDv23Zp6a/8CspBjQoiioawbRdoCBfhojGExEg8eYDaLk3TXbbpLpFWDuXonUQST/onePNgwsmDN29684IHE1SioSYe1ry327K023b9dduF7ueTvL43M8t+Z7rMzL6B3QlgYJ2PiPWIOBERDyJiopWftI641TzSx71983Ru483TuSQajXv/SLLyNC/a/kzqk9ZzjkbED78X8ZNkZ9za6trSbLlcWmmlJ+uV5cna6tqVxVwrpzgzPTN14+r1Ys/aeq7ym9ffXbzzo9/99iuv/rj+7Z+l1Rr/+amsrL0dvdRsej7G2/KGI+LOYQTrk+HW3x8+Pmlv+1xEXMj6/0QMZa8mAHCcNRoT0ZhoTwMAx116/z8eSa7QWgsYj1yuUGiu4Z2NsVy5Wqtfnqg+fjQf2RrW6cjnHi6WS1OttcLTkU/S9HR2/S5dfC/9vHQ1Is5ExPORk1l5Ya5anu/nGx8AGGCfbJv//z3SnP8BgGNutN8VAACOnPkfAAaP+R8ABs//Mf/7dCAAHBPu/wFg8Jj/AWDw7Dv/PzuaegAAR+IHd++mR2Oj+f3Xm9/UfWW+VFsqVB7PFeaqK8uFhWp1oVwqzDUa+z1fuVpdnr62laytrt2vVB8/qt9frMwulO6X8ofZGACgK2fOvfxzOumv3zyZHdG2l4O5Go63XL8rAPTNUL8rAPSNz/PA4OriHt8yABxzHbbofc+u/0Xohc1f4WN16YvW/2FQHWT939oBfNw+2/r/d3peD+DomcNhcDUaiT3/AWDAWOMHDvTv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCgxrMjyRWyvcDX05+5QiHiVEScjnzycLFcmoqITyPiTyP5kTQ93e9KAwAHlPtb0tr/69LExfHtpSeS/4xk54j46S/v/eLJbL2+Mp3m/3Mrv/4izT9ZXyme6EcDAIB2t3ZmZfN3sXVuu5F/++bp3OZxlFV8fbu5uWgad6N1NEuGYzg7j0Y+Isb+lbTSTen7laEexF9/FhFf2Gz/aDxpizCerYE0dz7dHj+Nfarn8dt//9vj595rby4rS8/57Hfx+R7UBQbNy9vNcbLV99Iu3up/uTifnTv3/9FshDq4dPxL+/XGjvEvtzX+De2In2R9/vxWeu+avL72++/vyGxMNMueRXxpuFP8ZCt+0nn8zV/sso1/+fJXL+xW1vhVxKWO7d/ckbqSDbOT9cryZG117cpiZXahtFB6VCzOTM9M3bh6vTiZrVE3f/6hU4y/37z86W7x0/aP7RJ/dO/2xze6bP+v//vgx1/bI/63vt759T+7R/x0Tvxml/Fnx27tun13Gn9+l/bv8/rH5S7jv/rr2nyXDwUAjkBtdW1ptlwurexzkb7X3O8xLrq/SO/tP4BqZBexHtGrJ8wWJSKi42PSd9QfRpMP6yL5MKrRi4t+j0zAYXvX6ftdEwAAAAAAAAAAAAAAYDe11bWlkc6f1urZRb/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1vwAAAP//tBrD+w==")
quotactl$Q_GETQUOTA(0x0, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0xfffffffffbfffffd)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0xffffffffffffffff, 0x15)
chdir(&(0x7f0000000300)='./file2\x00')
socket$xdp(0x2c, 0x3, 0x0)
modify_ldt$write(0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d2"], 0x68}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1a7)

6.93380619s ago: executing program 5 (id=282):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
msgget(0x3, 0x710)
msgget(0x2, 0x624)
msgctl$IPC_RMID(0x0, 0x0) (fail_nth: 1)

6.153240375s ago: executing program 0 (id=283):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000002c0)=r0}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r2, 0x4, 0x0, 0xd, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)

5.827880007s ago: executing program 1 (id=284):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885, 0x4ca0, 0x0, 0x20}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8)
syz_emit_ethernet(0x5e, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0xe})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0xb1c07, 0xfffffffa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
getpid()
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f0000000c80)={&(0x7f0000000980)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x204c08d}, 0x4044010)
connect$tipc(r7, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10)
msgget(0x2, 0x380)
futex_waitv(&(0x7f0000002480)=[{0x0, 0x0, 0x2}, {0x80000004, 0x0}, {0x2f6, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x40000000000000, 0x0, 0x82}, {0x800, 0x0, 0x2}, {0x2d6ac7b2, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0x38, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x3ff, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x1ff, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0xa22d, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0xf, 0x0, 0x82}, {0xbf, 0x0, 0x82}, {0xfffffffffffffff9, 0x0, 0x82}, {0xfb, 0x0, 0x2}, {0xfb9, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0xb7, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0xfca1, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x3, 0x0}, {0x5, 0x0, 0x82}, {0x275, 0x0, 0x2}, {0x9, 0x0}, {0x7, 0x0, 0x2}, {0xa, 0x0, 0x82}, {0x96f8, 0x0, 0x2}, {0xd46, 0x0, 0x2}, {0x5224, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x400, 0x0, 0x2}, {0x80000000, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x400, 0x0, 0x82}, {0x80000000, &(0x7f0000001640)=0x3, 0x2}, {0x7, 0x0, 0x2}, {0x4, 0x0, 0x9e4195d7752d8529}], 0x36, 0x0, 0x0, 0x3)
msgget(0x2, 0x624)

5.827301062s ago: executing program 4 (id=285):
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81)
syz_io_uring_setup(0xa94, 0x0, &(0x7f0000000340)=<r0=>0x0, 0x0)
syz_io_uring_submit(r0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x36, 0x0, 0x0)
r1 = getpid()
prlimit64(r1, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x3)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_fscache}]}})

5.825192475s ago: executing program 5 (id=286):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564d90c200", 0x18)
sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="b9ec533de3ac3661890cf28bb088e9ec622576ecc7aae70e6f19f660533e5b6d9635ac0dee4cd0329482b31e3ec018eeb0", 0x31}], 0x1, &(0x7f0000001500)=ANY=[], 0x668}, 0x80)

4.916159615s ago: executing program 1 (id=287):
fanotify_init(0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r4, 0x101)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)

4.794790438s ago: executing program 5 (id=288):
fanotify_init(0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r4, 0x101)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0) (fail_nth: 1)

4.733712542s ago: executing program 0 (id=289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@delrng={0x10, 0x14, 0x300, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x44080)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x50, r1, 0x917, 0x70bd2d, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x50}}, 0x0)
syz_mount_image$bfs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00f0ea3e7305b16f28aa4d590119da50c0b3bfa2f3d59c8f93ec3622a63a5160966d7498cff9cb4b2dc5c94d8cdaeb826f708fa6b28ce41a7fcf2e6526727c88631c3689733d9244c15a64ce61e7ed53b4b856afea94096c1d651b3e51b74aa3aa007bbfad8414c5fc1a223cc3e9dce0226ea5fc03fe6a5b07000000874c595090"], 0x1, 0xa7, &(0x7f0000000c00)="$eJzs0sGJAjEABdA/w8IuLOwWsD1MD1uKeBK9eVIEG7EFW7EEO/Dg1cvIEAVhTjqgCO9BEn7CJzlkd9r+5Sdp10nbuSyd+WI5Hc3KnJ6qv8XbqTPJZ5KvlD9QJzn8l7MqJe+Pq/F1JPl49ZsBAIDH1GmSbG5zc0/7e9Dt7e+gOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMATnAMAAP//+7Ekyg==")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)

4.241539097s ago: executing program 3 (id=290):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0x103, 0x80000000}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x23f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xd, 0xb, 0x1, {0x22, 0xfb4}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x8, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000f00)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x20, 0x1, 0x8, "0d023bb34e27ce63"}, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x16, 0x1, 0x7c, 0x51, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x80, 0x20, 0x0, 0x4}})
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="6b5d3416e65dc87b2762234908cbc049b3f20000000000c6540ea29efd6e0567dbaecb44f3006b69a1115372af73582f18bfaf48b4d92000ebede1f6ba3884138ffb5754a87163f9192f8dd38c4ca0e0971d0c5e2c"], 0x28}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)

3.069325216s ago: executing program 1 (id=291):
r0 = epoll_create1(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@dioread_nolock}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
quotactl$Q_GETQUOTA(0x0, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0xfffffffffbfffffd)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0xffffffffffffffff, 0x15)
chdir(&(0x7f0000000300)='./file2\x00')
socket$xdp(0x2c, 0x3, 0x0)
modify_ldt$write(0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d2"], 0x68}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1a7)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x204101, 0x0)
close_range(r0, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x20000003})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)

2.818695525s ago: executing program 2 (id=292):
r0 = userfaultfd(0x801)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='rcu_utilization\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})

2.613551517s ago: executing program 5 (id=293):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xfffe82)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x0, 'pimreg1\x00', {}, 0x10})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61)
lseek(r5, 0x1, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800080, @void, @value}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="ffff00f4", @ANYRES16=r8, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="1e00940020001407000000000000000f0008001200000000040700000007000005003400fe000000080026006c0900001e001f00020013080000000000000002000300100000000800080000009c0000"], 0x6c}}, 0x40080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r10 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)

2.539520345s ago: executing program 0 (id=294):
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) (async)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0x109880)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x4) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88482, 0x0) (async)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88482, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r6, @in={{0x2, 0x4e23, @empty}}, 0x2, 0x6e}, &(0x7f0000000180)=0x90)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={<r7=>0x0, 0x78d9}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={r6, 0x101, 0xd, 0x1, 0x1, 0x0, 0x101, 0xbb, {r7, @in6={{0xa, 0x4e23, 0xf12d, @mcast1, 0x7}}, 0x5, 0x3, 0x7, 0x1, 0xb0}}, &(0x7f0000000280)=0xb0) (async)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={r6, 0x101, 0xd, 0x1, 0x1, 0x0, 0x101, 0xbb, {r7, @in6={{0xa, 0x4e23, 0xf12d, @mcast1, 0x7}}, 0x5, 0x3, 0x7, 0x1, 0xb0}}, &(0x7f0000000280)=0xb0)
syz_emit_ethernet(0xfc0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0], 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x508c0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0106001100000000000900000024000480130001006272606164636173742d6c696e6b00000c000780080005000400000000"], 0x38}}, 0x0) (async)
sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0106001100000000000900000024000480130001006272606164636173742d6c696e6b00000c000780080005000400000000"], 0x38}}, 0x0)

2.528600685s ago: executing program 4 (id=295):
syz_io_uring_setup(0x66c0, &(0x7f0000000080)={0x0, 0xfffffffe, 0x8, 0x3}, 0x0, 0x0)
ioperm(0x0, 0xab49, 0x7)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_create1(0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, &(0x7f00000000c0)=0xfffffffd)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
futex_waitv(&(0x7f0000001c00)=[{0xb, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0xffffffffffffff56, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x1ff, 0x0, 0x2}, {0x9, 0x0, 0x727a8ceebb554379}, {0x6, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x4c8, 0x0}, {0x401, 0x0, 0x2}, {0x100000000, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0xffff, 0x0, 0x2}, {0x7fffffff, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0xf, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x4, 0x0}, {0x8, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x8, 0x0, 0x80}, {0x80, 0x0, 0x2}, {0x7fffffffffffffff, 0x0, 0x82}, {0x8000000000000000, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0xd, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x1a0c, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x73, 0x0, 0x82}, {0x1000, 0x0, 0x82}, {0xaeb8, 0x0, 0x2}, {0x100000001, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0xffffffff, 0x0, 0x2}, {0x27, 0x0, 0x82}, {0x2e, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x7fffffff, 0x0, 0x82}], 0x38, 0x0, &(0x7f00000024c0), 0x1)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc})
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
syz_mount_image$omfs(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x3606881, &(0x7f0000000040), 0xfd, 0x9e38, &(0x7f0000009e40)="$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")
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='Q3M'], 0x0)

1.218267936s ago: executing program 0 (id=296):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@setlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x404}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40002)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd02000000df2502000000050002d6e527d2f87621656af4a91dbff0da7376e290d05f5385f86a89cbb7095f0d7d1523c2b2524ec33db5f9c457b511ab037a5ebd0674cc9dbe718de4c9e06a2759e1382c2d851957a3bd4854ca9d8ab4bf9ece415da603f2c6a742688e37dda91d05682da93c80d88d95d0b276fb174c3695b7b3fdbce5607d5fa0ddde56c5354d512acdea74c51cca17"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000022502"], 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)

24.198321ms ago: executing program 2 (id=297):
r0 = syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x1, 0x2c6, &(0x7f0000000c80)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000060000000800000001"], 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@dioread_lock}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
r4 = socket(0x840000000002, 0x3, 0xff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002740)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000017c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0xa5c, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143442, 0x0)
sendfile(r8, r8, 0x0, 0x7a680003)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81008e, &(0x7f0000003f80)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x4, 0x2ba, &(0x7f00000001c0)="$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")
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000)
keyctl$read(0xb, 0x0, &(0x7f0000000480)=""/174, 0xae)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8840)
r10 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
fcntl$setstatus(r10, 0x4, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x4000000004, 0x0, 0x4, 0x0, 0x0, 0x3, 0x40000, 0x767e, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3, 0x0, 0x100000001]})
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r12, @ANYBLOB="01002cbd7020fedbdf250300000030000180060005004e24000008000700", @ANYRES32, @ANYBLOB="14000400ff020000000000000000000000000001080006"], 0xe8}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000000)

0s ago: executing program 1 (id=298):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
set_mempolicy(0x6, 0x0, 0xe0) (fail_nth: 1)

kernel console output (not intermixed with test programs):

evsim5 netdevsim3: renamed from eth3
[   93.743627][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.762372][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.790491][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.803367][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.908904][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.938025][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.953272][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.993249][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.125415][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.156863][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.166201][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.181198][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.230161][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.263245][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.301846][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   94.353872][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   94.368227][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.381265][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.409476][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.421436][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.457565][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.465010][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.479355][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.486600][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.533262][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.540449][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.553377][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.560657][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.619633][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.646487][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   94.735743][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.743313][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.763428][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.836716][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.843952][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.855085][ T5842] Bluetooth: hci5: command tx timeout
[   94.856360][ T5853] Bluetooth: hci1: command tx timeout
[   94.860528][ T5842] Bluetooth: hci3: command tx timeout
[   94.867618][ T5856] Bluetooth: hci2: command tx timeout
[   94.873322][ T5148] Bluetooth: hci4: command tx timeout
[   94.877303][ T5853] Bluetooth: hci0: command tx timeout
[   94.963225][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.113039][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.131950][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   95.169453][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.176786][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.220606][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.227945][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.283053][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.311830][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   95.401411][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.408665][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.470681][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.477917][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.555751][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.682643][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.842005][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.903808][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   95.952655][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.960015][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.083453][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.090716][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.153213][ T5839] veth0_vlan: entered promiscuous mode
[   96.221631][ T5839] veth1_vlan: entered promiscuous mode
[   96.297752][ T5835] veth0_vlan: entered promiscuous mode
[   96.306969][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.376657][   T24] cfg80211: failed to load regulatory.db
[   96.397197][ T5835] veth1_vlan: entered promiscuous mode
[   96.406678][ T5838] veth0_vlan: entered promiscuous mode
[   96.456004][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.498024][ T5838] veth1_vlan: entered promiscuous mode
[   96.538075][ T5839] veth0_macvtap: entered promiscuous mode
[   96.578156][ T5839] veth1_macvtap: entered promiscuous mode
[   96.607847][ T5837] veth0_vlan: entered promiscuous mode
[   96.647974][ T5835] veth0_macvtap: entered promiscuous mode
[   96.670488][ T5837] veth1_vlan: entered promiscuous mode
[   96.691514][ T5835] veth1_macvtap: entered promiscuous mode
[   96.747361][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.756666][ T5838] veth0_macvtap: entered promiscuous mode
[   96.793327][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.805796][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.819388][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.831491][ T5836] veth0_vlan: entered promiscuous mode
[   96.846725][ T5836] veth1_vlan: entered promiscuous mode
[   96.863399][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.882490][ T5838] veth1_macvtap: entered promiscuous mode
[   96.899778][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.910674][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.925317][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.934378][ T5853] Bluetooth: hci0: command tx timeout
[   96.934634][ T5856] Bluetooth: hci2: command tx timeout
[   96.939797][ T5853] Bluetooth: hci3: command tx timeout
[   96.945716][ T5856] Bluetooth: hci4: command tx timeout
[   96.951183][ T5851] Bluetooth: hci1: command tx timeout
[   96.956529][ T5842] Bluetooth: hci5: command tx timeout
[   96.983197][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.992587][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.003751][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.012884][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.029605][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.038707][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.047564][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.056337][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.118755][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.129579][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.141608][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.153538][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.165735][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.201824][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.214755][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.224807][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.235584][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.247317][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.260678][ T5838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.269669][ T5838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.279736][ T5838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.288934][ T5838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.312049][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.331538][ T5837] veth0_macvtap: entered promiscuous mode
[   97.410830][ T5837] veth1_macvtap: entered promiscuous mode
[   97.489356][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.507027][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.519592][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.528165][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.538971][ T5836] veth0_macvtap: entered promiscuous mode
[   97.616674][ T5836] veth1_macvtap: entered promiscuous mode
[   97.633794][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.644560][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.696123][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.707166][ T3432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.712465][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.717892][ T3432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.731238][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.747351][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.757643][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.768876][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.780191][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.807975][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.831580][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.843493][ T5840] veth0_vlan: entered promiscuous mode
[   97.901019][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.918547][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.928678][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.939813][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.950127][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.961213][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.974705][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.988305][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.001303][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.024096][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.027136][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   98.055505][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.067031][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.079791][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.089859][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.100530][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.112509][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.146973][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.182978][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.199897][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.210572][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.234887][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.245656][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.255432][ T5949] ip6t_srh: unknown srh match flags  4000
[   98.256244][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.272083][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.291034][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.311854][ T3432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.322165][ T3432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.324604][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.347259][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.348711][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.356337][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.356381][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.385748][ T5840] veth1_vlan: entered promiscuous mode
[   98.413595][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.438912][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.453081][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.467808][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.654453][ T5904] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   98.730705][ T5840] veth0_macvtap: entered promiscuous mode
[   98.843644][ T5904] usb 1-1: config 8 has an invalid interface number: 223 but max is 0
[   98.861131][ T5840] veth1_macvtap: entered promiscuous mode
[   98.939552][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.993888][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.049533][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.089152][ T5904] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   99.112159][ T5904] usb 1-1: config 8 has no interface number 0
[   99.118451][ T5904] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[   99.129687][ T5904] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   99.135812][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.148114][ T5904] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[   99.161932][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.173921][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.184585][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.184621][ T5904] usb 1-1: Product: syz
[   99.184678][ T5904] usb 1-1: Manufacturer: syz
[   99.184697][ T5904] usb 1-1: SerialNumber: syz
[   99.860265][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.873102][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.883374][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.920929][ T5949] loop0: detected capacity change from 0 to 512
[   99.934181][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.964199][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.978270][ T5949] msdos: Unknown parameter ''
[   99.992270][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.014904][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.024574][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.035399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.129411][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.137285][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.154795][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.247431][ T5904] usb 1-1: USB disconnect, device number 2
[  100.317942][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.373026][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.396003][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.419708][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.454281][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.497358][ T5973] loop4: detected capacity change from 0 to 2048
[  100.509687][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.533063][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.561049][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.588409][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.606055][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.614724][ T5973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.618014][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.640840][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.661198][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.671150][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.680196][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.742626][ T5983] tmpfs: Bad value for 'mpol'
[  101.394264][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.483905][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.544749][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.565626][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.689108][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.709198][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.721083][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.905370][ T5940] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.919092][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.957153][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.021231][ T5993] FAULT_INJECTION: forcing a failure.
[  102.021231][ T5993] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  102.035227][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.4.13 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  102.035261][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  102.035276][ T5993] Call Trace:
[  102.035286][ T5993]  <TASK>
[  102.035296][ T5993]  dump_stack_lvl+0x241/0x360
[  102.035342][ T5993]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.035380][ T5993]  ? __pfx__printk+0x10/0x10
[  102.035430][ T5993]  should_fail_ex+0x424/0x570
[  102.035464][ T5993]  _copy_from_user+0x2d/0xb0
[  102.035501][ T5993]  copy_msghdr_from_user+0xb3/0x580
[  102.035543][ T5993]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  102.035575][ T5993]  ? __fget_files+0x2a/0x420
[  102.035602][ T5993]  ? __fget_files+0x2a/0x420
[  102.035645][ T5993]  __sys_sendmsg+0x20a/0x360
[  102.035679][ T5993]  ? __pfx___sys_sendmsg+0x10/0x10
[  102.035721][ T5993]  ? srso_alias_return_thunk+0x5/0xfbef5
[  102.035797][ T5993]  ? srso_alias_return_thunk+0x5/0xfbef5
[  102.035830][ T5993]  do_syscall_64+0xf3/0x230
[  102.035868][ T5993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.035892][ T5993] RIP: 0033:0x7f612c98d169
[  102.035912][ T5993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.035931][ T5993] RSP: 002b:00007f612d888038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.035957][ T5993] RAX: ffffffffffffffda RBX: 00007f612cba5fa0 RCX: 00007f612c98d169
[  102.035974][ T5993] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  102.035989][ T5993] RBP: 00007f612d888090 R08: 0000000000000000 R09: 0000000000000000
[  102.036004][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.036019][ T5993] R13: 0000000000000000 R14: 00007f612cba5fa0 R15: 00007ffe62df29e8
[  102.036055][ T5993]  </TASK>
[  102.082251][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.169686][ T5940] usb 1-1: Using ep0 maxpacket: 32
[  102.361888][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.587410][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.624236][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.374181][ T5940] usb 1-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  103.383335][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.508231][ T5940] usb 1-1: config 0 descriptor??
[  105.777217][ T5940] usb 1-1: USB disconnect, device number 3
[  105.948331][ T6021] infiniband syz0: set active
[  105.953528][ T6021] infiniband syz0: added bond0
[  105.960447][ T6021] syz0: rxe_create_cq: returned err = -12
[  105.966559][ T6021] infiniband syz0: Couldn't create ib_mad CQ
[  105.972947][ T6021] infiniband syz0: Couldn't open port 1
[  106.041251][ T6021] RDS/IB: syz0: added
[  106.048278][ T6021] smc: adding ib device syz0 with port count 1
[  106.058323][ T6021] smc:    ib device syz0 port 1 has pnetid 
[  107.175358][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  107.237466][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  108.674246][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  108.759819][ T6045] FAULT_INJECTION: forcing a failure.
[  108.759819][ T6045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  108.794548][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.1.21 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  108.794590][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  108.794605][ T6045] Call Trace:
[  108.794614][ T6045]  <TASK>
[  108.794634][ T6045]  dump_stack_lvl+0x241/0x360
[  108.794681][ T6045]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.794718][ T6045]  ? __pfx__printk+0x10/0x10
[  108.794769][ T6045]  should_fail_ex+0x424/0x570
[  108.794802][ T6045]  _copy_from_user+0x2d/0xb0
[  108.794840][ T6045]  copy_msghdr_from_user+0xb3/0x580
[  108.794882][ T6045]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  108.794914][ T6045]  ? __fget_files+0x2a/0x420
[  108.794941][ T6045]  ? __fget_files+0x2a/0x420
[  108.794974][ T6045]  __sys_sendmsg+0x20a/0x360
[  108.795007][ T6045]  ? __pfx___sys_sendmsg+0x10/0x10
[  108.795049][ T6045]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.795124][ T6045]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.795157][ T6045]  do_syscall_64+0xf3/0x230
[  108.795194][ T6045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.795218][ T6045] RIP: 0033:0x7f633b78d169
[  108.795238][ T6045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.795258][ T6045] RSP: 002b:00007f633c5fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.795284][ T6045] RAX: ffffffffffffffda RBX: 00007f633b9a5fa0 RCX: 00007f633b78d169
[  108.795302][ T6045] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  108.795318][ T6045] RBP: 00007f633c5fe090 R08: 0000000000000000 R09: 0000000000000000
[  108.795334][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.795348][ T6045] R13: 0000000000000000 R14: 00007f633b9a5fa0 R15: 00007ffe31d7ccf8
[  108.795385][ T6045]  </TASK>
[  109.003324][ T6047] team0: No ports can be present during mode change
[  109.134383][    T9] usb 4-1: Using ep0 maxpacket: 32
[  109.141783][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  109.154558][    T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  109.163955][    T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  109.172270][    T9] usb 4-1: Product: syz
[  109.178796][    T9] usb 4-1: Manufacturer: syz
[  109.185790][    T9] usb 4-1: SerialNumber: syz
[  109.193603][    T9] usb 4-1: config 0 descriptor??
[  109.277720][ T6037] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  109.524438][ T6043] rdma_rxe: rxe_newlink: failed to add bond0
[  109.714469][ T6049] loop5: detected capacity change from 0 to 512
[  109.780243][ T5990] usb 4-1: USB disconnect, device number 2
[  109.837556][ T6049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.690081][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  111.025387][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!!
[  111.265076][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  111.459449][ T6065] loop3: detected capacity change from 0 to 2048
[  111.567241][ T6049] Zero length message leads to an empty skb
[  111.690816][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  111.805867][ T6065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.895092][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  112.022643][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.142332][ T6073] loop1: detected capacity change from 0 to 2048
[  112.234504][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  112.262560][ T6073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.471027][ T5902] usb 5-1: Using ep0 maxpacket: 8
[  112.527537][ T5902] usb 5-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  112.607529][ T5902] usb 5-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[  112.716981][ T5902] usb 5-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  112.799164][ T5902] usb 5-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[  112.872852][ T5902] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  112.943817][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.044308][ T5902] usb 5-1: Product: syz
[  113.048582][ T5902] usb 5-1: Manufacturer: syz
[  113.206027][ T6079] loop5: detected capacity change from 0 to 4096
[  113.224620][ T5902] usb 5-1: SerialNumber: syz
[  113.244883][ T6079] nilfs2: Unknown parameter ''
[  113.283070][ T5902] usb 5-1: can't set config #6, error -71
[  113.374616][ T5902] usb 5-1: USB disconnect, device number 2
[  114.807396][ T6101] loop3: detected capacity change from 0 to 2048
[  115.089873][ T6106] rdma_rxe: rxe_newlink: failed to add bond0
[  116.149529][ T6110] rdma_rxe: rxe_newlink: failed to add bond0
[  119.106745][    C1] af_packet: tpacket_rcv: packet too big, clamped from 3970 to 3702. macoff=82
[  119.164762][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  120.044221][    T9] usb 2-1: Using ep0 maxpacket: 32
[  121.323884][ T6131] loop2: detected capacity change from 0 to 32768
[  121.340194][ T6131] btrfs: Unknown parameter 'defcontext'
[  122.872280][    T9] usb 2-1: device descriptor read/all, error -71
[  123.154667][ T6144] FAULT_INJECTION: forcing a failure.
[  123.154667][ T6144] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.236513][ T6144] CPU: 1 UID: 0 PID: 6144 Comm: syz.1.48 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  123.236551][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  123.236566][ T6144] Call Trace:
[  123.236575][ T6144]  <TASK>
[  123.236585][ T6144]  dump_stack_lvl+0x241/0x360
[  123.236732][ T6144]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.236780][ T6144]  ? __pfx__printk+0x10/0x10
[  123.236846][ T6144]  should_fail_ex+0x424/0x570
[  123.236881][ T6144]  _copy_to_user+0x31/0xb0
[  123.236930][ T6144]  simple_read_from_buffer+0xc4/0x170
[  123.236986][ T6144]  proc_fail_nth_read+0x1ef/0x260
[  123.237026][ T6144]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  123.237066][ T6144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.237105][ T6144]  ? rw_verify_area+0x246/0x630
[  123.237143][ T6144]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  123.237182][ T6144]  vfs_read+0x221/0xb90
[  123.237229][ T6144]  ? __pfx___mutex_lock+0x10/0x10
[  123.237275][ T6144]  ? __pfx_vfs_read+0x10/0x10
[  123.237308][ T6144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.237354][ T6144]  ? __fget_files+0x2a/0x420
[  123.237388][ T6144]  ? __fget_files+0x39d/0x420
[  123.237417][ T6144]  ? __fget_files+0x2a/0x420
[  123.237455][ T6144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.237500][ T6144]  ksys_read+0x19d/0x2d0
[  123.237550][ T6144]  ? __pfx_ksys_read+0x10/0x10
[  123.237596][ T6144]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.237654][ T6144]  do_syscall_64+0xf3/0x230
[  123.237707][ T6144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.237737][ T6144] RIP: 0033:0x7f633b78bb7c
[  123.237762][ T6144] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  123.237786][ T6144] RSP: 002b:00007f633c5fe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  123.237816][ T6144] RAX: ffffffffffffffda RBX: 00007f633b9a5fa0 RCX: 00007f633b78bb7c
[  123.237837][ T6144] RDX: 000000000000000f RSI: 00007f633c5fe0a0 RDI: 0000000000000006
[  123.237854][ T6144] RBP: 00007f633c5fe090 R08: 0000000000000000 R09: 0000000000000000
[  123.237870][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.237888][ T6144] R13: 0000000000000000 R14: 00007f633b9a5fa0 R15: 00007ffe31d7ccf8
[  123.237934][ T6144]  </TASK>
[  123.502332][ T6150] loop4: detected capacity change from 0 to 512
[  123.594207][ T6150] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  123.738557][ T6150] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  123.823775][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.50'.
[  123.901341][ T6154] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  124.050231][ T6156] loop5: detected capacity change from 0 to 256
[  124.084008][ T6156] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  124.111111][ T6150] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.51: corrupted xattr entries
[  124.169303][ T6150] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  124.205178][ T6150] EXT4-fs (loop4): 1 truncate cleaned up
[  124.232689][ T6150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.151664][ T6164] rdma_rxe: rxe_newlink: failed to add bond0
[  125.239407][ T6150] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.51: corrupted in-inode xattr: e_name out of bounds
[  126.966450][ T6177] rdma_rxe: rxe_newlink: failed to add bond0
[  127.247803][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.889763][ T6183] FAULT_INJECTION: forcing a failure.
[  127.889763][ T6183] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.947264][ T6184] FAULT_INJECTION: forcing a failure.
[  127.947264][ T6184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.993800][ T6183] CPU: 1 UID: 0 PID: 6183 Comm: syz.5.58 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  127.993837][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  127.993852][ T6183] Call Trace:
[  127.993863][ T6183]  <TASK>
[  127.993874][ T6183]  dump_stack_lvl+0x241/0x360
[  127.993922][ T6183]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.993961][ T6183]  ? __pfx__printk+0x10/0x10
[  127.994018][ T6183]  should_fail_ex+0x424/0x570
[  127.994052][ T6183]  _copy_from_user+0x2d/0xb0
[  127.994092][ T6183]  copy_from_sockptr+0x57/0xb0
[  127.994133][ T6183]  ip_mroute_setsockopt+0x7a2/0x11f0
[  127.994170][ T6183]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.994214][ T6183]  ? __pfx_ip_mroute_setsockopt+0x10/0x10
[  127.994280][ T6183]  do_ip_setsockopt+0x1114/0x39c0
[  127.994323][ T6183]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  127.994358][ T6183]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.994388][ T6183]  ? aa_sk_perm+0x96f/0xac0
[  127.994428][ T6183]  ? ksys_write+0x24e/0x2d0
[  127.994459][ T6183]  ? __pfx_aa_sk_perm+0x10/0x10
[  127.994493][ T6183]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.994530][ T6183]  ip_setsockopt+0x63/0x100
[  127.994563][ T6183]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  127.994602][ T6183]  do_sock_setsockopt+0x3b3/0x710
[  127.994644][ T6183]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  127.994667][ T6183]  ? __fget_files+0x2a/0x420
[  127.994696][ T6183]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.994725][ T6183]  ? __fget_files+0x39d/0x420
[  127.994747][ T6183]  ? __fget_files+0x2a/0x420
[  127.994781][ T6183]  __x64_sys_setsockopt+0x1ee/0x280
[  127.994816][ T6183]  do_syscall_64+0xf3/0x230
[  127.994855][ T6183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.994880][ T6183] RIP: 0033:0x7f9712f8d169
[  127.994901][ T6183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.994921][ T6183] RSP: 002b:00007f9713db2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  127.994948][ T6183] RAX: ffffffffffffffda RBX: 00007f97131a5fa0 RCX: 00007f9712f8d169
[  127.994966][ T6183] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000003
[  127.994981][ T6183] RBP: 00007f9713db2090 R08: 0000000000000004 R09: 0000000000000000
[  127.994998][ T6183] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.995014][ T6183] R13: 0000000000000000 R14: 00007f97131a5fa0 R15: 00007fff001661f8
[  127.995051][ T6183]  </TASK>
[  128.343886][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.4.57 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  128.343926][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  128.343942][ T6184] Call Trace:
[  128.343952][ T6184]  <TASK>
[  128.343963][ T6184]  dump_stack_lvl+0x241/0x360
[  128.344019][ T6184]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.344057][ T6184]  ? __pfx__printk+0x10/0x10
[  128.344111][ T6184]  should_fail_ex+0x424/0x570
[  128.344146][ T6184]  _copy_from_user+0x2d/0xb0
[  128.344187][ T6184]  sk_setsockopt+0x2af/0x3340
[  128.344241][ T6184]  ? __pfx_sk_setsockopt+0x10/0x10
[  128.344290][ T6184]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.344320][ T6184]  ? aa_sk_perm+0x96f/0xac0
[  128.344362][ T6184]  ? ksys_write+0x24e/0x2d0
[  128.344393][ T6184]  ? __pfx_aa_sk_perm+0x10/0x10
[  128.344427][ T6184]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.344459][ T6184]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.344488][ T6184]  ? aa_sock_opt_perm+0x79/0x120
[  128.344527][ T6184]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.344562][ T6184]  do_sock_setsockopt+0x2fe/0x710
[  128.344596][ T6184]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  128.344620][ T6184]  ? __fget_files+0x2a/0x420
[  128.344656][ T6184]  ? srso_alias_return_thunk+0x5/0xfbef5
[  128.344685][ T6184]  ? __fget_files+0x39d/0x420
[  128.344707][ T6184]  ? __fget_files+0x2a/0x420
[  128.344742][ T6184]  __x64_sys_setsockopt+0x1ee/0x280
[  128.344777][ T6184]  do_syscall_64+0xf3/0x230
[  128.344816][ T6184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.344842][ T6184] RIP: 0033:0x7f612c98d169
[  128.344864][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.344885][ T6184] RSP: 002b:00007f612d888038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  128.344913][ T6184] RAX: ffffffffffffffda RBX: 00007f612cba5fa0 RCX: 00007f612c98d169
[  128.344932][ T6184] RDX: 0000000000000042 RSI: 0000000000000001 RDI: 0000000000000003
[  128.344948][ T6184] RBP: 00007f612d888090 R08: 0000000000000010 R09: 0000000000000000
[  128.344964][ T6184] R10: 0000200000abaff9 R11: 0000000000000246 R12: 0000000000000001
[  128.344980][ T6184] R13: 0000000000000000 R14: 00007f612cba5fa0 R15: 00007ffe62df29e8
[  128.345018][ T6184]  </TASK>
[  128.633191][ T6187] loop2: detected capacity change from 0 to 512
[  128.705227][ T6187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  128.950570][ T6187] EXT4-fs (loop2): 1 truncate cleaned up
[  128.961580][ T6187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.310261][ T6192] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.59: inode #1073372648: comm syz.2.59: iget: illegal inode #
[  129.364677][ T6192] EXT4-fs (loop2): Remounting filesystem read-only
[  129.381096][ T6192] EXT4-fs warning (device loop2): ext4_xattr_block_set:2190: inode #20: comm syz.2.59: dec ref error=-30
[  129.594263][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  129.729227][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.764726][ T5902] usb 2-1: Using ep0 maxpacket: 8
[  129.773333][ T5902] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  129.824200][ T5944] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  129.967865][ T5902] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[  129.980979][ T5902] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  129.990860][ T5902] usb 2-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[  130.966545][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  130.975262][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  130.998691][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  131.026457][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  131.033969][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  131.041681][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  131.051674][ T5902] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  131.061743][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.078180][ T5902] usb 2-1: Product: syz
[  131.082433][ T5902] usb 2-1: Manufacturer: syz
[  131.884152][ T5944] usb 4-1: Using ep0 maxpacket: 32
[  131.889941][ T5902] usb 2-1: can't set config #6, error -71
[  131.909852][ T5944] usb 4-1: unable to get BOS descriptor or descriptor too short
[  131.922125][ T5902] usb 2-1: USB disconnect, device number 4
[  131.955035][ T5944] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  131.966330][ T5843] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  132.024151][ T5944] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  132.281101][ T5944] usb 4-1: config 1 interface 0 has no altsetting 0
[  133.196879][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'.
[  133.313009][ T5843] usb 6-1: Using ep0 maxpacket: 8
[  133.325147][ T5843] usb 6-1: device descriptor read/all, error -71
[  133.349968][ T5944] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  133.364297][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.385028][ T5944] usb 4-1: Product: syz
[  133.389277][ T5944] usb 4-1: Manufacturer: syz
[  133.393950][ T5944] usb 4-1: SerialNumber: syz
[  133.447843][ T6200] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  133.512314][ T6219] loop4: detected capacity change from 0 to 256
[  133.588878][ T6219] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.841658][ T5944] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5
[  133.991075][ T5193] bcm5974 4-1:1.0: could not read from device
[  134.697727][ T5944] usb 4-1: USB disconnect, device number 3
[  134.902514][ T6228] loop2: detected capacity change from 0 to 256
[  136.025825][ T6228] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  136.180498][ T5944] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  136.228662][ T6235] input: syz0 as /devices/virtual/input/input6
[  136.394137][ T5944] usb 4-1: Using ep0 maxpacket: 16
[  137.345523][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  137.377408][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  137.532065][ T5944] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  137.611305][ T5944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.650984][ T5944] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  137.692926][ T5944] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  137.731448][ T5944] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.742129][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.756146][ T5944] usb 4-1: Product: syz
[  137.779388][ T5944] usb 4-1: Manufacturer: syz
[  137.807744][ T5944] usb 4-1: SerialNumber: syz
[  137.864497][ T5944] usb 4-1: can't set config #1, error -71
[  137.921134][ T5944] usb 4-1: USB disconnect, device number 4
[  138.241301][ T6249] loop2: detected capacity change from 0 to 32768
[  138.248653][ T6249] XFS: attr2 mount option is deprecated.
[  138.362036][ T6249] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.374272][ T5944] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  138.473570][ T6249] XFS (loop2): Ending clean mount
[  138.485685][ T6249] XFS (loop2): Quotacheck needed: Please wait.
[  138.555111][ T5944] usb 4-1: Using ep0 maxpacket: 16
[  138.568400][ T6249] XFS (loop2): Quotacheck: Done.
[  138.582742][ T6249] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.586810][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.637612][ T6263] netlink: set zone limit has 8 unknown bytes
[  138.674383][ T5944] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  138.719338][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.819521][ T5944] usb 4-1: config 0 descriptor??
[  138.949914][ T5944] usbhid 4-1:0.0: can't add hid device: -22
[  138.976701][ T5944] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[  139.011018][ T6267] loop4: detected capacity change from 0 to 256
[  139.041343][ T6267] =======================================================
[  139.041343][ T6267] WARNING: The mand mount option has been deprecated and
[  139.041343][ T6267]          and is ignored by this kernel. Remove the mand
[  139.041343][ T6267]          option from the mount to silence this warning.
[  139.041343][ T6267] =======================================================
[  139.153373][ T6267] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  139.173482][ T6267] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  139.196591][ T5944] usb 4-1: USB disconnect, device number 5
[  139.306944][ T6267] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  139.358185][ T6269] loop5: detected capacity change from 0 to 1024
[  140.191914][ T6274] FAULT_INJECTION: forcing a failure.
[  140.191914][ T6274] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.514610][ T6274] CPU: 0 UID: 0 PID: 6274 Comm: syz.2.82 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  140.514671][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  140.514686][ T6274] Call Trace:
[  140.514697][ T6274]  <TASK>
[  140.514708][ T6274]  dump_stack_lvl+0x241/0x360
[  140.514758][ T6274]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.514797][ T6274]  ? __pfx__printk+0x10/0x10
[  140.514848][ T6274]  should_fail_ex+0x424/0x570
[  140.514883][ T6274]  _copy_to_user+0x31/0xb0
[  140.514924][ T6274]  simple_read_from_buffer+0xc4/0x170
[  140.514969][ T6274]  proc_fail_nth_read+0x1ef/0x260
[  140.515001][ T6274]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  140.515031][ T6274]  ? srso_alias_return_thunk+0x5/0xfbef5
[  140.515061][ T6274]  ? rw_verify_area+0x246/0x630
[  140.515091][ T6274]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  140.515120][ T6274]  vfs_read+0x221/0xb90
[  140.515162][ T6274]  ? __pfx___mutex_lock+0x10/0x10
[  140.515196][ T6274]  ? __pfx_vfs_read+0x10/0x10
[  140.515221][ T6274]  ? srso_alias_return_thunk+0x5/0xfbef5
[  140.515256][ T6274]  ? __fget_files+0x2a/0x420
[  140.515282][ T6274]  ? __fget_files+0x39d/0x420
[  140.515303][ T6274]  ? __fget_files+0x2a/0x420
[  140.515330][ T6274]  ? srso_alias_return_thunk+0x5/0xfbef5
[  140.515365][ T6274]  ksys_read+0x19d/0x2d0
[  140.515397][ T6274]  ? __pfx_ksys_read+0x10/0x10
[  140.515433][ T6274]  ? srso_alias_return_thunk+0x5/0xfbef5
[  140.515468][ T6274]  do_syscall_64+0xf3/0x230
[  140.515502][ T6274]  ? srso_alias_return_thunk+0x5/0xfbef5
[  140.515536][ T6274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.515562][ T6274] RIP: 0033:0x7fc2ccf8bb7c
[  140.515585][ T6274] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  140.515605][ T6274] RSP: 002b:00007fc2cddd4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  140.515641][ T6274] RAX: ffffffffffffffda RBX: 00007fc2cd1a5fa0 RCX: 00007fc2ccf8bb7c
[  140.515660][ T6274] RDX: 000000000000000f RSI: 00007fc2cddd40a0 RDI: 0000000000000004
[  140.515676][ T6274] RBP: 00007fc2cddd4090 R08: 0000000000000000 R09: 0000000000000000
[  140.515693][ T6274] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  140.515709][ T6274] R13: 0000000000000000 R14: 00007fc2cd1a5fa0 R15: 00007ffff3d4a958
[  140.515748][ T6274]  </TASK>
[  140.759296][ T6277] loop0: detected capacity change from 0 to 40427
[  140.823506][ T6277] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  140.831707][ T6277] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  140.869908][ T6277] F2FS-fs (loop0): invalid crc value
[  141.161493][ T6265] loop1: detected capacity change from 0 to 32768
[  141.192667][ T6265] jfs: Unknown parameter 'd8d¡YÕ*ã˜x000000000000aff9'
[  141.536717][ T6281] loop2: detected capacity change from 0 to 256
[  141.744674][ T6281] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.986618][ T6277] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  141.994781][ T6277] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  142.423635][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[  142.877560][ T6301] openvswitch: netlink: Key type 3856 is out of range max 32
[  142.986990][ T6303] loop3: detected capacity change from 0 to 2048
[  143.041682][ T6303] udf: Bad value for 'lastblock'
[  143.154262][ T5944] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  143.228770][ T6303] loop3: detected capacity change from 0 to 512
[  143.272754][ T6303] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  143.313753][ T6303] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  143.324383][ T5944] usb 6-1: Using ep0 maxpacket: 32
[  143.324840][ T6303] EXT4-fs (loop3): group descriptors corrupted!
[  143.362318][ T5902] IPVS: starting estimator thread 0...
[  143.374844][ T5944] usb 6-1: unable to get BOS descriptor or descriptor too short
[  143.435228][ T5944] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  143.467991][ T6306] IPVS: using max 24 ests per chain, 57600 per kthread
[  143.490972][ T5944] usb 6-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  143.526545][ T5944] usb 6-1: config 1 interface 0 has no altsetting 0
[  143.592729][ T5944] usb 6-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  143.643731][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.693344][ T5944] usb 6-1: Product: syz
[  143.704124][ T5944] usb 6-1: Manufacturer: syz
[  143.708798][ T5944] usb 6-1: SerialNumber: syz
[  143.740498][ T6302] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  143.777607][ T6316] FAULT_INJECTION: forcing a failure.
[  143.777607][ T6316] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.818957][ T6316] CPU: 0 UID: 0 PID: 6316 Comm: syz.4.95 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  143.818996][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  143.819011][ T6316] Call Trace:
[  143.819020][ T6316]  <TASK>
[  143.819031][ T6316]  dump_stack_lvl+0x241/0x360
[  143.819081][ T6316]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.819119][ T6316]  ? __pfx__printk+0x10/0x10
[  143.819170][ T6316]  should_fail_ex+0x424/0x570
[  143.819204][ T6316]  _copy_from_user+0x2d/0xb0
[  143.819244][ T6316]  move_addr_to_kernel+0x7f/0x170
[  143.819280][ T6316]  __sys_sendto+0x26a/0x4c0
[  143.819311][ T6316]  ? __pfx___sys_sendto+0x10/0x10
[  143.819350][ T6316]  ? __fget_files+0x2a/0x420
[  143.819385][ T6316]  ? srso_alias_return_thunk+0x5/0xfbef5
[  143.819414][ T6316]  ? ksys_write+0x275/0x2d0
[  143.819457][ T6316]  __x64_sys_sendto+0xde/0x100
[  143.819485][ T6316]  do_syscall_64+0xf3/0x230
[  143.819521][ T6316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.819545][ T6316] RIP: 0033:0x7f612c98d169
[  143.819565][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.819585][ T6316] RSP: 002b:00007f612d888038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  143.819611][ T6316] RAX: ffffffffffffffda RBX: 00007f612cba5fa0 RCX: 00007f612c98d169
[  143.819629][ T6316] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003
[  143.819645][ T6316] RBP: 00007f612d888090 R08: 0000200000000140 R09: 0000000000000014
[  143.819660][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.819675][ T6316] R13: 0000000000000000 R14: 00007f612cba5fa0 R15: 00007ffe62df29e8
[  143.819711][ T6316]  </TASK>
[  144.330387][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.85'.
[  144.405589][ T5944] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input7
[  145.294367][ T6320] loop4: detected capacity change from 0 to 512
[  145.327593][ T5193] bcm5974 6-1:1.0: could not read from device
[  145.388930][ T5193] bcm5974 6-1:1.0: could not read from device
[  145.399799][ T6327] loop3: detected capacity change from 0 to 128
[  145.416245][ T6320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.429682][ T5944] usb 6-1: USB disconnect, device number 4
[  145.461773][ T5193] bcm5974 6-1:1.0: could not read from device
[  145.474472][ T6320] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.097874][ T5940] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  146.298227][ T5940] usb 4-1: Using ep0 maxpacket: 16
[  146.365872][ T5940] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.404207][ T5940] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.425177][ T5940] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  146.452433][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0
[  146.473861][ T5940] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  146.492295][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.569905][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.611052][ T5940] usb 4-1: config 0 descriptor??
[  146.688956][ T6344] FAULT_INJECTION: forcing a failure.
[  146.688956][ T6344] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.724143][ T6344] CPU: 1 UID: 0 PID: 6344 Comm: syz.2.102 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  146.724181][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  146.724197][ T6344] Call Trace:
[  146.724206][ T6344]  <TASK>
[  146.724216][ T6344]  dump_stack_lvl+0x241/0x360
[  146.724263][ T6344]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.724299][ T6344]  ? __pfx__printk+0x10/0x10
[  146.724347][ T6344]  should_fail_ex+0x424/0x570
[  146.724380][ T6344]  _copy_from_user+0x2d/0xb0
[  146.724419][ T6344]  move_addr_to_kernel+0x7f/0x170
[  146.724455][ T6344]  __sys_sendto+0x26a/0x4c0
[  146.724485][ T6344]  ? __pfx___sys_sendto+0x10/0x10
[  146.724525][ T6344]  ? __fget_files+0x2a/0x420
[  146.724558][ T6344]  ? srso_alias_return_thunk+0x5/0xfbef5
[  146.724586][ T6344]  ? ksys_write+0x275/0x2d0
[  146.724640][ T6344]  __x64_sys_sendto+0xde/0x100
[  146.724669][ T6344]  do_syscall_64+0xf3/0x230
[  146.724707][ T6344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.724731][ T6344] RIP: 0033:0x7fc2ccf8d169
[  146.724752][ T6344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.724772][ T6344] RSP: 002b:00007fc2cddd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  146.724799][ T6344] RAX: ffffffffffffffda RBX: 00007fc2cd1a5fa0 RCX: 00007fc2ccf8d169
[  146.724818][ T6344] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000004
[  146.724833][ T6344] RBP: 00007fc2cddd4090 R08: 0000200000000140 R09: 0000000000000014
[  146.724851][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.724865][ T6344] R13: 0000000000000000 R14: 00007fc2cd1a5fa0 R15: 00007ffff3d4a958
[  146.724901][ T6344]  </TASK>
[  147.356817][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'.
[  147.425683][ T6327] netlink: 96 bytes leftover after parsing attributes in process `syz.3.99'.
[  147.550795][ T6354] mmap: syz.1.104 (6354) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  147.568684][ T5940] hid (null): global environment stack underflow
[  147.597770][ T5940] hid-generic 0003:045E:05DA.0002: global environment stack underflow
[  147.615614][ T5940] hid-generic 0003:045E:05DA.0002: item 0 2 1 11 parsing failed
[  147.624156][ T5944] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  147.644368][ T5940] hid-generic 0003:045E:05DA.0002: probe with driver hid-generic failed with error -22
[  147.774684][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.785257][ T5906] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  147.814623][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.845192][   T30] audit: type=1400 audit(1744244545.056:2): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  147.918251][ T6360] loop2: detected capacity change from 0 to 2048
[  148.041443][ T6356] loop5: detected capacity change from 0 to 40427
[  148.078379][ T6356] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  148.086321][ T6356] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  148.090306][ T5906] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  148.098178][ T5940] usb 4-1: USB disconnect, device number 6
[  148.134413][ T5944] usb 1-1: Using ep0 maxpacket: 32
[  148.149047][ T5944] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  148.161261][ T5906] usb 5-1: config 0 has no interface number 0
[  148.186107][ T6356] F2FS-fs (loop5): invalid crc value
[  148.204191][ T5906] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  148.222598][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.283572][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.292827][ T5906] usb 5-1: Product: syz
[  148.292836][ T6356] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  148.307639][ T6356] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  148.518071][ T5944] usb 1-1: config 0 descriptor??
[  148.537047][ T5944] gspca_main: nw80x-2.14.0 probing 055f:d001
[  148.580536][ T5906] usb 5-1: Manufacturer: syz
[  148.680690][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.106'.
[  149.280162][ T5906] usb 5-1: SerialNumber: syz
[  149.293527][ T5906] usb 5-1: config 0 descriptor??
[  149.649353][ T5912] usb 1-1: USB disconnect, device number 4
[  150.049623][ T5906] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected
[  150.137621][ T5906] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81
[  150.172437][ T5906] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1
[  150.219063][ T5906] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2
[  150.233811][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.344466][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.366256][ T5906] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  150.637670][ T6380] loop2: detected capacity change from 0 to 512
[  150.648618][ T5944] usb 5-1: USB disconnect, device number 3
[  150.727511][ T5944] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  150.791258][ T5944] keyspan 5-1:0.133: device disconnected
[  150.969880][ T6389] loop1: detected capacity change from 0 to 256
[  151.013747][ T6389] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.079600][ T6380] EXT4-fs (loop2): Test dummy encryption mode enabled
[  151.150031][ T6380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  151.290785][ T6380] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.110: bad orphan inode 131083
[  151.355435][ T6380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.468786][ T5906] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  152.197067][ T6405] FAULT_INJECTION: forcing a failure.
[  152.197067][ T6405] name failslab, interval 1, probability 0, space 0, times 1
[  152.227756][ T5906] usb 1-1: Using ep0 maxpacket: 32
[  152.244577][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short
[  152.254619][ T5847] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  152.275006][ T5906] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  152.304438][ T5906] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.318844][ T6405] CPU: 1 UID: 0 PID: 6405 Comm: syz.5.109 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  152.318880][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  152.318895][ T6405] Call Trace:
[  152.318904][ T6405]  <TASK>
[  152.318913][ T6405]  dump_stack_lvl+0x241/0x360
[  152.318960][ T6405]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.318997][ T6405]  ? __pfx__printk+0x10/0x10
[  152.319039][ T6405]  ? __pfx___might_resched+0x10/0x10
[  152.319075][ T6405]  should_fail_ex+0x424/0x570
[  152.319108][ T6405]  should_failslab+0xac/0x100
[  152.319146][ T6405]  __kmalloc_noprof+0xdf/0x4d0
[  152.319181][ T6405]  ? tomoyo_realpath_from_path+0xc2/0x5e0
[  152.319220][ T6405]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  152.319265][ T6405]  tomoyo_realpath_from_path+0xcf/0x5e0
[  152.319320][ T6405]  tomoyo_path_number_perm+0x245/0x790
[  152.319359][ T6405]  ? tomoyo_path_number_perm+0x215/0x790
[  152.319395][ T6405]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  152.319431][ T6405]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.319464][ T6405]  ? ksys_write+0x24e/0x2d0
[  152.319501][ T6405]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.319529][ T6405]  ? __lock_acquire+0xad5/0xd80
[  152.319578][ T6405]  ? __fget_files+0x2a/0x420
[  152.319600][ T6405]  ? __fget_files+0x2a/0x420
[  152.319631][ T6405]  ? srso_alias_return_thunk+0x5/0xfbef5
[  152.319661][ T6405]  ? __fget_files+0x2a/0x420
[  152.319690][ T6405]  security_file_ioctl+0xc6/0x2a0
[  152.319724][ T6405]  __se_sys_ioctl+0x46/0x160
[  152.319757][ T6405]  do_syscall_64+0xf3/0x230
[  152.319795][ T6405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.319819][ T6405] RIP: 0033:0x7f9712f8d169
[  152.319840][ T6405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.319859][ T6405] RSP: 002b:00007f9713db2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  152.319885][ T6405] RAX: ffffffffffffffda RBX: 00007f97131a5fa0 RCX: 00007f9712f8d169
[  152.319903][ T6405] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000003
[  152.319919][ T6405] RBP: 00007f9713db2090 R08: 0000000000000000 R09: 0000000000000000
[  152.319935][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.319949][ T6405] R13: 0000000000000000 R14: 00007f97131a5fa0 R15: 00007fff001661f8
[  152.319986][ T6405]  </TASK>
[  152.319997][ T6405] ERROR: Out of memory at tomoyo_realpath_from_path.
[  152.578092][ T5906] usb 1-1: config 1 interface 0 has no altsetting 0
[  152.601507][ T5906] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  152.611671][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.622205][ T5906] usb 1-1: Product: syz
[  152.627564][ T5906] usb 1-1: Manufacturer: syz
[  152.636593][ T5906] usb 1-1: SerialNumber: syz
[  152.666608][ T5847] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  152.997458][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.911058][ T5847] usb 3-1: config 0 descriptor??
[  153.917321][ T5847] usb 3-1: can't set config #0, error -71
[  153.954204][ T5847] usb 3-1: USB disconnect, device number 2
[  154.432642][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.807235][ T5906] usb 1-1: can't set config #1, error -71
[  154.895010][ T5906] usb 1-1: USB disconnect, device number 5
[  154.901002][ T6424] loop3: detected capacity change from 0 to 2048
[  154.913798][   T30] audit: type=1400 audit(1744244552.136:3): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  155.028475][ T6424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.119915][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.141228][ T6429] loop2: detected capacity change from 0 to 2048
[  155.654895][ T5906] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  156.804205][ T5906] usb 1-1: device descriptor read/64, error -71
[  156.877477][ T6446] loop3: detected capacity change from 0 to 512
[  156.884604][ T5944] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  156.989096][ T6449] process 'syz.4.129' launched './file1' with NULL argv: empty string added
[  157.219819][ T6453] FAULT_INJECTION: forcing a failure.
[  157.219819][ T6453] name failslab, interval 1, probability 0, space 0, times 0
[  157.238256][ T5944] usb 6-1: Using ep0 maxpacket: 32
[  157.245770][ T5906] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  157.249953][ T5944] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  157.265014][ T6455] ipip0: entered promiscuous mode
[  157.274277][ T6453] CPU: 0 UID: 0 PID: 6453 Comm: syz.1.131 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  157.274313][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  157.274329][ T6453] Call Trace:
[  157.274338][ T6453]  <TASK>
[  157.274348][ T6453]  dump_stack_lvl+0x241/0x360
[  157.274394][ T6453]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.274432][ T6453]  ? __pfx__printk+0x10/0x10
[  157.274473][ T6453]  ? __pfx___might_resched+0x10/0x10
[  157.274509][ T6453]  should_fail_ex+0x424/0x570
[  157.274542][ T6453]  should_failslab+0xac/0x100
[  157.274580][ T6453]  __kmalloc_cache_noprof+0x73/0x370
[  157.274623][ T6453]  ? alloc_pipe_info+0xeb/0x4d0
[  157.274670][ T6453]  alloc_pipe_info+0xeb/0x4d0
[  157.274708][ T6453]  splice_direct_to_actor+0xac3/0xc90
[  157.274745][ T6453]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.274774][ T6453]  ? aa_file_perm+0x3f1/0xf60
[  157.274827][ T6453]  ? __pfx_aa_file_perm+0x10/0x10
[  157.274865][ T6453]  ? __pfx_direct_splice_actor+0x10/0x10
[  157.274902][ T6453]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  157.274951][ T6453]  do_splice_direct+0x281/0x3d0
[  157.274994][ T6453]  ? __pfx_do_splice_direct+0x10/0x10
[  157.275027][ T6453]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.275058][ T6453]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  157.275100][ T6453]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.275127][ T6453]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.275164][ T6453]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.275191][ T6453]  ? rw_verify_area+0x246/0x630
[  157.275223][ T6453]  do_sendfile+0x582/0x8c0
[  157.275272][ T6453]  ? __pfx_do_sendfile+0x10/0x10
[  157.275312][ T6453]  ? __fget_files+0x2a/0x420
[  157.275346][ T6453]  __se_sys_sendfile64+0x17e/0x1e0
[  157.275386][ T6453]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  157.275431][ T6453]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.275461][ T6453]  do_syscall_64+0xf3/0x230
[  157.275498][ T6453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.275521][ T6453] RIP: 0033:0x7f633b78d169
[  157.275543][ T6453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.275562][ T6453] RSP: 002b:00007f633c5fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  157.275589][ T6453] RAX: ffffffffffffffda RBX: 00007f633b9a5fa0 RCX: 00007f633b78d169
[  157.275607][ T6453] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  157.275622][ T6453] RBP: 00007f633c5fe090 R08: 0000000000000000 R09: 0000000000000000
[  157.275649][ T6453] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001
[  157.275665][ T6453] R13: 0000000000000000 R14: 00007f633b9a5fa0 R15: 00007ffe31d7ccf8
[  157.275701][ T6453]  </TASK>
[  157.278105][ T5944] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  157.414697][ T5906] usb 1-1: device descriptor read/64, error -71
[  157.505178][    C0] vkms_vblank_simulate: vblank timer overrun
[  157.532282][ T5906] usb usb1-port1: attempt power cycle
[  157.684299][ T5944] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  157.760571][ T5944] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  157.857366][ T5944] usb 6-1: config 0 interface 0 has no altsetting 0
[  157.889890][ T5944] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  158.628621][ T5944] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  158.663046][ T6463] loop2: detected capacity change from 0 to 128
[  158.755839][ T5944] usb 6-1: Product: syz
[  158.760095][ T5944] usb 6-1: Manufacturer: syz
[  158.765456][ T5944] usb 6-1: SerialNumber: syz
[  158.773679][ T6463] vxfs: Unknown parameter '½Å'
[  158.795868][ T5944] usb 6-1: config 0 descriptor??
[  158.815987][ T5944] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  158.873412][ T6463] loop2: detected capacity change from 0 to 128
[  158.881754][ T6463] vxfs: Unknown parameter '½Å'
[  158.892025][ T5944] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  158.965237][ T6463] loop2: detected capacity change from 0 to 128
[  158.972928][ T6463] vxfs: Unknown parameter '½Å'
[  158.997570][ T6471] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  159.105266][ T6463] loop2: detected capacity change from 0 to 128
[  159.133239][ T6463] vxfs: Unknown parameter '½Å'
[  159.188370][ T6463] loop2: detected capacity change from 0 to 128
[  159.229769][ T6463] vxfs: Unknown parameter '½Å'
[  159.287455][ T6463] loop2: detected capacity change from 0 to 128
[  159.324659][ T6463] vxfs: Unknown parameter '½Å'
[  159.652597][ T6473] loop1: detected capacity change from 0 to 40427
[  159.673028][ T6463] loop2: detected capacity change from 0 to 128
[  159.679390][ T6473] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  159.679423][ T6473] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  159.701630][ T6473] F2FS-fs (loop1): invalid crc value
[  159.719977][ T6463] vxfs: Unknown parameter '½Å'
[  159.813666][ T6473] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  159.821315][ T6473] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  160.746409][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'.
[  160.788288][ T6463] loop2: detected capacity change from 0 to 128
[  160.993734][ T5906] usb 6-1: USB disconnect, device number 5
[  161.025105][ T6482] loop3: detected capacity change from 0 to 1024
[  161.036132][ T5906] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  161.084292][ T5912] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  161.275014][ T5912] usb 1-1: Using ep0 maxpacket: 32
[  161.315098][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short
[  161.361202][ T5912] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  161.414981][ T5912] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.547724][ T5912] usb 1-1: config 1 interface 0 has no altsetting 0
[  162.450044][ T5912] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  162.485810][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.493905][ T5912] usb 1-1: Product: syz
[  162.511251][ T5912] usb 1-1: Manufacturer: syz
[  162.520648][ T5912] usb 1-1: SerialNumber: syz
[  162.536326][ T6484] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  162.650806][   T30] audit: type=1400 audit(1744244559.876:4): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  162.733631][ T6496] capability: warning: `syz.2.141' uses deprecated v2 capabilities in a way that may be insecure
[  162.889088][ T6498] loop1: detected capacity change from 0 to 4096
[  162.900145][ T6494] loop5: detected capacity change from 0 to 2048
[  162.990655][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'.
[  163.044736][ T6498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.217410][ T6505] loop4: detected capacity change from 0 to 1024
[  164.227813][ T6505] hfsplus: Unknown parameter '
[  164.227813][ T6505] '
[  164.298190][ T5912] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8
[  164.341428][ T5193] bcm5974 1-1:1.0: could not read from device
[  164.433067][ T5193] bcm5974 1-1:1.0: could not read from device
[  164.436149][ T5912] usb 1-1: USB disconnect, device number 9
[  164.675020][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'.
[  166.026206][ T5940] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  166.161869][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.185400][ T5940] usb 5-1: Using ep0 maxpacket: 16
[  166.193677][ T5940] usb 5-1: config 0 has no interfaces?
[  166.222238][ T5940] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  166.451013][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.483982][ T5940] usb 5-1: Product: syz
[  167.514130][ T5940] usb 5-1: Manufacturer: syz
[  167.524291][ T5940] usb 5-1: SerialNumber: syz
[  167.544680][ T5912] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  167.669484][ T5940] usb 5-1: config 0 descriptor??
[  167.783434][   T36] hfsplus: b-tree write err: -5, ino 8
[  167.834199][ T5912] usb 1-1: Using ep0 maxpacket: 16
[  167.846159][ T5912] usb 1-1: config 0 has no interfaces?
[  167.860096][ T5912] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  167.884122][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.929358][ T5912] usb 1-1: Product: syz
[  167.950750][ T5912] usb 1-1: Manufacturer: syz
[  167.956971][ T5940] usb 5-1: USB disconnect, device number 4
[  167.974360][ T5912] usb 1-1: SerialNumber: syz
[  168.000465][ T5912] usb 1-1: config 0 descriptor??
[  169.014143][ T5843] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  169.088572][ T5847] usb 1-1: USB disconnect, device number 10
[  169.242822][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.288881][ T6535] trusted_key: syz.1.154 sent an empty control message without MSG_MORE.
[  169.305212][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.352867][ T6535] loop9: detected capacity change from 0 to 7
[  169.368676][ T5843] usb 3-1: New USB device found, idVendor=28bd, idProduct=0051, bcdDevice= 0.00
[  169.416687][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.450834][ T6535] Dev loop9: unable to read RDB block 7
[  169.460454][ T6535]  loop9: unable to read partition table
[  169.471340][ T5843] usb 3-1: config 0 descriptor??
[  169.484139][ T6535] loop9: partition table beyond EOD, truncated
[  169.507417][ T6535] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  169.652328][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.156'.
[  170.398268][ T6530] loop2: detected capacity change from 0 to 64
[  170.491285][ T6552] loop0: detected capacity change from 0 to 64
[  171.496550][ T6547] loop4: detected capacity change from 0 to 2048
[  171.613442][ T6547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.806004][ T5843] hid-generic 0003:28BD:0051.0003: hidraw0: USB HID v1.01 Device [HID 28bd:0051] on usb-dummy_hcd.2-1/input0
[  171.841433][ T5843] usb 3-1: USB disconnect, device number 3
[  171.943224][ T6547] netlink: 48 bytes leftover after parsing attributes in process `syz.4.159'.
[  171.981783][ T6565] loop5: detected capacity change from 0 to 2048
[  172.150459][ T6565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.463022][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'.
[  172.536360][ T6575] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  174.172362][   T30] audit: type=1400 audit(1744244571.386:5): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  174.236895][ T6586] loop0: detected capacity change from 0 to 2048
[  175.554460][ T6599] netlink: 'syz.1.169': attribute type 29 has an invalid length.
[  175.562873][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'.
[  176.167895][ T6592] loop5: detected capacity change from 0 to 4096
[  177.361375][ T6614] loop0: detected capacity change from 0 to 32768
[  177.427563][ T6614] 
[  177.427563][ T6614]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.427563][ T6614] 
[  177.442226][ T6614] 
[  177.442226][ T6614]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.442226][ T6614] 
[  177.455231][ T6614] 
[  177.455231][ T6614]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.455231][ T6614] 
[  177.572234][ T6614] loop0: detected capacity change from 0 to 64
[  180.879194][ T6632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'.
[  180.932875][ T6634] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  181.078048][ T6635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  182.297535][ T6646] FAULT_INJECTION: forcing a failure.
[  182.297535][ T6646] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  182.434683][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz.2.182 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  182.434720][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  182.434735][ T6646] Call Trace:
[  182.434744][ T6646]  <TASK>
[  182.434754][ T6646]  dump_stack_lvl+0x241/0x360
[  182.434800][ T6646]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.434838][ T6646]  ? __pfx__printk+0x10/0x10
[  182.434886][ T6646]  should_fail_ex+0x424/0x570
[  182.434919][ T6646]  prepare_alloc_pages+0x220/0x610
[  182.434957][ T6646]  __alloc_frozen_pages_noprof+0x162/0x5b0
[  182.434991][ T6646]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  182.435017][ T6646]  ? srso_alias_return_thunk+0x5/0xfbef5
[  182.435060][ T6646]  ? srso_alias_return_thunk+0x5/0xfbef5
[  182.435097][ T6646]  alloc_pages_mpol+0x339/0x690
[  182.435140][ T6646]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  182.435172][ T6646]  ? srso_alias_return_thunk+0x5/0xfbef5
[  182.435207][ T6646]  vma_alloc_folio_noprof+0x12d/0x260
[  182.435245][ T6646]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  182.435280][ T6646]  ? srso_alias_return_thunk+0x5/0xfbef5
[  182.435310][ T6646]  folio_prealloc+0x2e/0x170
[  182.435332][ T6646]  handle_pte_fault+0x2e45/0x61c0
[  182.435375][ T6646]  ? __pfx_handle_pte_fault+0x10/0x10
[  182.435398][ T6646]  ? kstrtouint+0xfc/0x190
[  182.435433][ T6646]  ? srso_alias_return_thunk+0x5/0xfbef5
[  182.435458][ T6646]  ? __lock_acquire+0xad5/0xd80
[  182.435497][ T6646]  ? srso_alias_return_thunk+0x5/0xfbef5
[  182.435533][ T6646]  ? srso_alias_return_thunk+0x5/0xfbef5
[  182.435566][ T6646]  ? srso_alias_return_thunk+0x5/0xfbef5
[  182.435592][ T6646]  ? rcu_read_lock_any_held+0xbb/0x160
[  182.435651][ T6646]  handle_mm_fault+0x1129/0x1bf0
[  182.435723][ T6646]  ? __pfx_handle_mm_fault+0x10/0x10
[  182.435760][ T6646]  ? lock_vma_under_rcu+0x1f0/0x9a0
[  182.435820][ T6646]  ? srso_alias_return_thunk+0x5/0xfbef5
[  182.435854][ T6646]  exc_page_fault+0x45b/0x920
[  182.435884][ T6646]  ? srso_alias_return_thunk+0x5/0xfbef5
[  182.435911][ T6646]  ? do_syscall_64+0x100/0x230
[  182.435947][ T6646]  asm_exc_page_fault+0x26/0x30
[  182.435969][ T6646] RIP: 0033:0x7fc2cce58b7b
[  182.435987][ T6646] Code: 00 00 00 48 8d 3d 9d 33 19 00 48 89 c1 31 c0 e8 4b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d d1 33 19 00 48 89 34 24 48 8b 14 24 48 8b
[  182.436004][ T6646] RSP: 002b:00007fc2cddb1fb0 EFLAGS: 00010202
[  182.436025][ T6646] RAX: 0000000000000000 RBX: 00007fc2cd1a6080 RCX: 0000000000000000
[  182.436041][ T6646] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000004c0
[  182.436059][ T6646] RBP: 00007fc2cddb3090 R08: 0000000000000000 R09: 0000000000000000
[  182.436074][ T6646] R10: 00002000000004c0 R11: 0000000000000000 R12: 0000000000000001
[  182.436090][ T6646] R13: 0000000000000000 R14: 00007fc2cd1a6080 R15: 00007ffff3d4a958
[  182.436127][ T6646]  </TASK>
[  182.436398][ T6646] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  183.818052][ T6657] loop5: detected capacity change from 0 to 1024
[  183.851283][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'.
[  184.060094][ T6657] hfsplus: bad catalog entry type
[  184.222417][ T3432] hfsplus: b-tree write err: -5, ino 4
[  184.383226][ T6675] 9pnet_fd: Insufficient options for proto=fd
[  184.385793][ T6669] loop1: detected capacity change from 0 to 8192
[  184.437700][ T6669] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  184.654916][ T6682] overlay: ./file0 is not a directory
[  185.978888][ T5842] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  186.004504][ T5842] Bluetooth: hci3: Injecting HCI hardware error event
[  186.023037][ T5856] Bluetooth: hci3: hardware error 0x00
[  186.835615][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.195'.
[  186.862694][ T6699] loop1: detected capacity change from 0 to 512
[  186.904500][ T6702] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  188.445069][ T5856] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  188.474913][ T6699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.594791][ T6699] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.003428][ T6716] loop4: detected capacity change from 0 to 256
[  189.589705][ T6716] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d)
[  189.628179][ T6714] input: syz0 as /devices/virtual/input/input9
[  189.779388][   T30] audit: type=1800 audit(1744244587.006:6): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.196" name="file2" dev="loop1" ino=16 res=0 errno=0
[  189.988285][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.073443][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'.
[  190.187275][ T6729] loop3: detected capacity change from 0 to 1024
[  190.312504][ T6729] hfsplus: bad catalog entry type
[  190.519743][ T5847] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  190.580280][ T6245] hfsplus: b-tree write err: -5, ino 4
[  190.914298][ T5843] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  191.086957][ T5843] usb 1-1: config 0 has no interfaces?
[  191.358129][ T5843] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0
[  191.385502][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.410410][ T5847] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  191.446571][ T5843] usb 1-1: Product: syz
[  191.450822][ T5843] usb 1-1: Manufacturer: syz
[  191.485137][ T5843] usb 1-1: SerialNumber: syz
[  191.505208][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'.
[  191.524814][   T24] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  191.546256][ T5843] usb 1-1: config 0 descriptor??
[  191.578468][ T6743] loop4: detected capacity change from 0 to 2048
[  191.649719][ T6743] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.937947][ T6753] loop2: detected capacity change from 0 to 256
[  191.952944][ T6753] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  192.214050][    C0] hrtimer: interrupt took 86800 ns
[  192.921508][   T24] usb 6-1: config 0 has no interfaces?
[  192.956904][   T24] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0
[  192.966745][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.444363][ T5906] usb 1-1: USB disconnect, device number 11
[  193.454286][   T24] usb 6-1: Product: syz
[  193.465737][   T30] audit: type=1400 audit(1744244590.686:7): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  193.467861][   T24] usb 6-1: Manufacturer: syz
[  194.120135][ T6763] loop3: detected capacity change from 0 to 2048
[  194.267885][   T24] usb 6-1: SerialNumber: syz
[  194.277512][   T24] usb 6-1: config 0 descriptor??
[  194.284990][   T24] usb 6-1: can't set config #0, error -71
[  194.295816][   T24] usb 6-1: USB disconnect, device number 6
[  194.639285][ T6775] input: syz0 as /devices/virtual/input/input10
[  194.714421][ T5906] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  196.122547][ T5906] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  196.141941][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.189708][ T5906] usb 3-1: config 0 has no interface number 0
[  196.242588][ T5906] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  196.263092][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.281228][ T5906] usb 3-1: Product: syz
[  196.289988][ T5906] usb 3-1: Manufacturer: syz
[  196.306044][ T6783] loop5: detected capacity change from 0 to 1024
[  196.483825][ T5906] usb 3-1: SerialNumber: syz
[  196.516664][ T5906] usb 3-1: config 0 descriptor??
[  197.277290][ T6783] hfsplus: bad catalog entry type
[  197.318855][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'.
[  197.410199][ T5906] usb 3-1: Found UVC 0.00 device syz (046d:0823)
[  197.452304][ T6793] loop0: detected capacity change from 0 to 512
[  197.454270][ T5906] usb 3-1: No valid video chain found.
[  197.467844][ T5906] usb 3-1: USB disconnect, device number 4
[  197.514814][ T3574] hfsplus: b-tree write err: -5, ino 4
[  197.629083][ T6793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.654184][ T6793] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.779984][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  198.802157][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  199.507186][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.013066][ T6821] FAULT_INJECTION: forcing a failure.
[  200.013066][ T6821] name failslab, interval 1, probability 0, space 0, times 0
[  200.133675][ T6818] loop5: detected capacity change from 0 to 512
[  200.152857][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.2.230 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  200.152896][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  200.152912][ T6821] Call Trace:
[  200.152922][ T6821]  <TASK>
[  200.152933][ T6821]  dump_stack_lvl+0x241/0x360
[  200.152982][ T6821]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.153021][ T6821]  ? __pfx__printk+0x10/0x10
[  200.153064][ T6821]  ? __pfx___might_resched+0x10/0x10
[  200.153102][ T6821]  should_fail_ex+0x424/0x570
[  200.153138][ T6821]  should_failslab+0xac/0x100
[  200.153178][ T6821]  __kmalloc_noprof+0xdf/0x4d0
[  200.153214][ T6821]  ? tomoyo_realpath_from_path+0xc2/0x5e0
[  200.153254][ T6821]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  200.153302][ T6821]  tomoyo_realpath_from_path+0xcf/0x5e0
[  200.153360][ T6821]  tomoyo_path_number_perm+0x245/0x790
[  200.153401][ T6821]  ? tomoyo_path_number_perm+0x215/0x790
[  200.153435][ T6821]  ? lockdep_hardirqs_on+0x9d/0x150
[  200.153467][ T6821]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  200.153502][ T6821]  ? srso_alias_return_thunk+0x5/0xfbef5
[  200.153532][ T6821]  ? rcu_is_watching+0x15/0xb0
[  200.153571][ T6821]  ? srso_alias_return_thunk+0x5/0xfbef5
[  200.153599][ T6821]  ? trace_sched_exit_tp+0x3c/0x120
[  200.153624][ T6821]  ? srso_alias_return_thunk+0x5/0xfbef5
[  200.153653][ T6821]  ? __schedule+0x1ba6/0x5240
[  200.153689][ T6821]  ? srso_alias_return_thunk+0x5/0xfbef5
[  200.153718][ T6821]  ? __lock_acquire+0xad5/0xd80
[  200.153770][ T6821]  ? __fget_files+0x2a/0x420
[  200.153793][ T6821]  ? __fget_files+0x2a/0x420
[  200.153818][ T6821]  ? srso_alias_return_thunk+0x5/0xfbef5
[  200.153859][ T6821]  ? __fget_files+0x2a/0x420
[  200.153890][ T6821]  security_file_ioctl+0xc6/0x2a0
[  200.153925][ T6821]  __se_sys_ioctl+0x46/0x160
[  200.153961][ T6821]  do_syscall_64+0xf3/0x230
[  200.153994][ T6821]  ? srso_alias_return_thunk+0x5/0xfbef5
[  200.154026][ T6821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.154051][ T6821] RIP: 0033:0x7fc2ccf8d169
[  200.154072][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.154093][ T6821] RSP: 002b:00007fc2cddd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  200.154120][ T6821] RAX: ffffffffffffffda RBX: 00007fc2cd1a5fa0 RCX: 00007fc2ccf8d169
[  200.154139][ T6821] RDX: 0000200000000300 RSI: 00000000c0cc5616 RDI: 0000000000000003
[  200.154156][ T6821] RBP: 00007fc2cddd4090 R08: 0000000000000000 R09: 0000000000000000
[  200.154172][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.154187][ T6821] R13: 0000000000000000 R14: 00007fc2cd1a5fa0 R15: 00007ffff3d4a958
[  200.154227][ T6821]  </TASK>
[  200.751530][ T6821] ERROR: Out of memory at tomoyo_realpath_from_path.
[  200.826493][   T30] audit: type=1400 audit(1744244597.976:8): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0413
[  200.868389][ T6826] loop4: detected capacity change from 0 to 2048
[  201.552118][ T6812] loop1: detected capacity change from 0 to 32768
[  201.561391][ T6812] btrfs: Unknown parameter 'defcontext'
[  202.224597][ T6832] loop0: detected capacity change from 0 to 512
[  202.376526][ T6818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.417646][ T6818] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.171764][ T6840] netlink: 'syz.3.236': attribute type 16 has an invalid length.
[  203.179778][ T6840] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.236'.
[  203.538829][ T6840] loop3: detected capacity change from 0 to 512
[  203.882361][   T30] audit: type=1326 audit(1744244600.666:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e978d169 code=0x7ffc0000
[  203.947375][ T6840] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  204.212029][   T30] audit: type=1326 audit(1744244600.666:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e978d169 code=0x7ffc0000
[  204.272139][ T6840] EXT4-fs (loop3): 1 truncate cleaned up
[  204.272166][   T30] audit: type=1326 audit(1744244600.676:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73e978d169 code=0x7ffc0000
[  204.280195][ T6840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.397186][   T30] audit: type=1326 audit(1744244600.676:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e978d169 code=0x7ffc0000
[  204.402796][ T6832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.463784][   T30] audit: type=1326 audit(1744244600.676:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e978d169 code=0x7ffc0000
[  204.506865][ T6832] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.649664][   T30] audit: type=1326 audit(1744244600.676:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73e978d169 code=0x7ffc0000
[  204.674148][   T30] audit: type=1326 audit(1744244600.686:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e978d169 code=0x7ffc0000
[  204.703874][   T30] audit: type=1326 audit(1744244600.686:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e978d169 code=0x7ffc0000
[  204.732036][   T30] audit: type=1326 audit(1744244600.686:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f73e978d169 code=0x7ffc0000
[  204.749001][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.815476][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.028378][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.167349][ T6852] sctp: [Deprecated]: syz.3.239 (pid 6852) Use of int in max_burst socket option.
[  205.167349][ T6852] Use struct sctp_assoc_value instead
[  205.368871][ T6860] loop2: detected capacity change from 0 to 64
[  205.494123][ T5904] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  205.593461][ T6870] FAULT_INJECTION: forcing a failure.
[  205.593461][ T6870] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.633244][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.0.246 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  205.633281][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  205.633296][ T6870] Call Trace:
[  205.633306][ T6870]  <TASK>
[  205.633317][ T6870]  dump_stack_lvl+0x241/0x360
[  205.633365][ T6870]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.633404][ T6870]  ? __pfx__printk+0x10/0x10
[  205.633457][ T6870]  should_fail_ex+0x424/0x570
[  205.633491][ T6870]  _copy_from_user+0x2d/0xb0
[  205.633532][ T6870]  move_addr_to_kernel+0x7f/0x170
[  205.633570][ T6870]  __sys_connect+0xb8/0x2d0
[  205.633613][ T6870]  ? __pfx___sys_connect+0x10/0x10
[  205.633683][ T6870]  __x64_sys_connect+0x7a/0x90
[  205.633725][ T6870]  do_syscall_64+0xf3/0x230
[  205.633764][ T6870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.633790][ T6870] RIP: 0033:0x7fc06d18d169
[  205.633811][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.633831][ T6870] RSP: 002b:00007fc06df3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  205.633857][ T6870] RAX: ffffffffffffffda RBX: 00007fc06d3a5fa0 RCX: 00007fc06d18d169
[  205.633876][ T6870] RDX: 000000000000002e RSI: 0000200000000740 RDI: 0000000000000004
[  205.633892][ T6870] RBP: 00007fc06df3d090 R08: 0000000000000000 R09: 0000000000000000
[  205.633908][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.633923][ T6870] R13: 0000000000000000 R14: 00007fc06d3a5fa0 R15: 00007ffdcb60b918
[  205.633969][ T6870]  </TASK>
[  205.874156][ T5904] usb 6-1: Using ep0 maxpacket: 32
[  206.125682][ T5904] usb 6-1: unable to get BOS descriptor or descriptor too short
[  206.450432][ T5904] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  206.547514][ T5904] usb 6-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  206.674407][ T5904] usb 6-1: config 1 interface 0 has no altsetting 0
[  206.711490][ T5904] usb 6-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  206.731081][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.744112][ T5843] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  206.771639][ T5904] usb 6-1: Product: syz
[  206.798703][ T5904] usb 6-1: Manufacturer: syz
[  206.803534][ T5904] usb 6-1: SerialNumber: syz
[  206.821048][ T6856] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  206.823314][ T6885] loop0: detected capacity change from 0 to 256
[  206.896579][ T5843] usb 4-1: Using ep0 maxpacket: 32
[  206.931272][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  206.952635][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  206.977631][ T5843] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  206.987948][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.993464][ T6885] FAT-fs (loop0): Directory bread(block 64) failed
[  207.007368][ T6885] FAT-fs (loop0): Directory bread(block 65) failed
[  207.031907][ T5843] usb 4-1: config 0 descriptor??
[  207.034271][ T6885] FAT-fs (loop0): Directory bread(block 66) failed
[  207.043660][ T6885] FAT-fs (loop0): Directory bread(block 67) failed
[  207.052485][ T6873] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  207.067598][ T5904] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input11
[  207.070684][ T6885] FAT-fs (loop0): Directory bread(block 68) failed
[  207.092581][ T5843] hub 4-1:0.0: USB hub found
[  207.098356][ T6885] FAT-fs (loop0): Directory bread(block 69) failed
[  207.125880][ T6885] FAT-fs (loop0): Directory bread(block 70) failed
[  207.167946][ T6885] FAT-fs (loop0): Directory bread(block 71) failed
[  207.188812][ T6885] FAT-fs (loop0): Directory bread(block 72) failed
[  207.208503][ T6885] FAT-fs (loop0): Directory bread(block 73) failed
[  207.273778][ T5843] hub 4-1:0.0: 1 port detected
[  207.627523][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'.
[  207.641705][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.240'.
[  207.651618][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  207.677161][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.687879][ T5193] bcm5974 6-1:1.0: could not read from device
[  207.705814][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.727700][ T5193] bcm5974 6-1:1.0: could not read from device
[  207.735797][ T6904] openvswitch: netlink: Actions may not be safe on all matching packets
[  207.762065][ T5904] usb 6-1: USB disconnect, device number 7
[  208.030235][ T6906] loop4: detected capacity change from 0 to 32768
[  208.037717][ T6906] btrfs: Unknown parameter 'defcontext'
[  208.142932][   T24] usb 1-1: Using ep0 maxpacket: 8
[  208.268966][   T24] usb 1-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17
[  208.287845][ T5843] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  208.297598][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.320150][   T24] usb 1-1: Product: syz
[  208.345051][   T24] usb 1-1: Manufacturer: syz
[  208.356451][   T24] usb 1-1: SerialNumber: syz
[  208.381172][   T24] usb 1-1: config 0 descriptor??
[  208.411653][   T24] hub 1-1:0.0: bad descriptor, ignoring hub
[  208.430859][   T24] hub 1-1:0.0: probe with driver hub failed with error -5
[  208.489590][   T24] gspca_main: jeilinj-2.14.0 probing 0979:0270
[  208.490687][ T5856] Bluetooth: hci1: link tx timeout
[  208.502887][ T5856] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  208.518649][ T5843] usb 3-1: unable to get BOS descriptor or descriptor too short
[  208.536054][ T5843] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[  208.544971][ T5843] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[  208.553338][ T5843] usb 3-1: config 129 descriptor has 1 excess byte, ignoring
[  208.567436][ T5843] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  208.578027][ T5843] usb 3-1: config 129 has no interface number 0
[  208.584998][ T5843] usb 3-1: config 129 has no interface number 1
[  208.591415][ T5843] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  208.605597][ T5843] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  208.617125][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.626036][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.684135][ T5843] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  208.712466][ T5904] usb 1-1: USB disconnect, device number 12
[  208.728759][ T5912] usb 4-1-port1: cannot reset (err = -71)
[  208.745716][ T5906] usb 4-1: USB disconnect, device number 7
[  208.762948][ T5912] usb 4-1-port1: attempt power cycle
[  208.794155][ T5843] usb 3-1: config 129 interface 135 has no altsetting 0
[  208.820452][ T5843] usb 3-1: config 129 interface 5 has no altsetting 0
[  208.847226][ T5843] usb 3-1: string descriptor 0 read error: -22
[  208.865345][ T6915] loop1: detected capacity change from 0 to 64
[  208.874304][ T5843] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  208.892057][ T5856] Bluetooth: hci1: link tx timeout
[  208.898053][ T5856] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  208.916527][ T5856] Bluetooth: hci1: link tx timeout
[  208.923446][ T5856] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  208.933583][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.979163][ T5843] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  208.987574][ T5843] usb 3-1: MIDIStreaming interface descriptor not found
[  209.031737][ T5852] Bluetooth: hci1: link tx timeout
[  209.037631][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  209.215303][ T5940] usb 3-1: USB disconnect, device number 5
[  209.595165][ T5852] Bluetooth: hci1: link tx timeout
[  209.600580][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  210.384142][ T5852] Bluetooth: hci1: link tx timeout
[  210.389426][ T5852] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  210.491196][ T6931] FAULT_INJECTION: forcing a failure.
[  210.491196][ T6931] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  210.514335][ T6931] CPU: 1 UID: 0 PID: 6931 Comm: syz.3.259 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  210.514374][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  210.514391][ T6931] Call Trace:
[  210.514400][ T6931]  <TASK>
[  210.514412][ T6931]  dump_stack_lvl+0x241/0x360
[  210.514459][ T6931]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.514497][ T6931]  ? __pfx__printk+0x10/0x10
[  210.514543][ T6931]  should_fail_ex+0x424/0x570
[  210.514571][ T6931]  _copy_from_user+0x2d/0xb0
[  210.514606][ T6931]  __sys_bpf+0x1c5/0x8b0
[  210.514631][ T6931]  ? __pfx___sys_bpf+0x10/0x10
[  210.514666][ T6931]  ? ksys_write+0x266/0x2d0
[  210.514707][ T6931]  __x64_sys_bpf+0x7c/0x90
[  210.514744][ T6931]  do_syscall_64+0xf3/0x230
[  210.514778][ T6931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.514800][ T6931] RIP: 0033:0x7f73e978d169
[  210.514821][ T6931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.514839][ T6931] RSP: 002b:00007f73ea5fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  210.514863][ T6931] RAX: ffffffffffffffda RBX: 00007f73e99a5fa0 RCX: 00007f73e978d169
[  210.514882][ T6931] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000
[  210.514899][ T6931] RBP: 00007f73ea5fd090 R08: 0000000000000000 R09: 0000000000000000
[  210.514916][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  210.514945][ T6931] R13: 0000000000000000 R14: 00007f73e99a5fa0 R15: 00007ffc0f567168
[  210.514985][ T6931]  </TASK>
[  210.679437][    C1] vkms_vblank_simulate: vblank timer overrun
[  210.715328][ T5852] Bluetooth: hci1: command 0x0406 tx timeout
[  210.909781][ T6937] FAULT_INJECTION: forcing a failure.
[  210.909781][ T6937] name failslab, interval 1, probability 0, space 0, times 0
[  210.984294][ T6937] CPU: 0 UID: 0 PID: 6937 Comm: syz.1.261 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  210.984333][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  210.984349][ T6937] Call Trace:
[  210.984359][ T6937]  <TASK>
[  210.984370][ T6937]  dump_stack_lvl+0x241/0x360
[  210.984419][ T6937]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.984458][ T6937]  ? __pfx__printk+0x10/0x10
[  210.984501][ T6937]  ? __pfx___might_resched+0x10/0x10
[  210.984540][ T6937]  should_fail_ex+0x424/0x570
[  210.984574][ T6937]  should_failslab+0xac/0x100
[  210.984614][ T6937]  __kmalloc_noprof+0xdf/0x4d0
[  210.984650][ T6937]  ? tomoyo_realpath_from_path+0xc2/0x5e0
[  210.984698][ T6937]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  210.984746][ T6937]  tomoyo_realpath_from_path+0xcf/0x5e0
[  210.984804][ T6937]  tomoyo_path_number_perm+0x245/0x790
[  210.984843][ T6937]  ? tomoyo_path_number_perm+0x215/0x790
[  210.984881][ T6937]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  210.984919][ T6937]  ? srso_alias_return_thunk+0x5/0xfbef5
[  210.984954][ T6937]  ? ksys_write+0x24e/0x2d0
[  210.984993][ T6937]  ? srso_alias_return_thunk+0x5/0xfbef5
[  210.985022][ T6937]  ? __lock_acquire+0xad5/0xd80
[  210.985073][ T6937]  ? __fget_files+0x2a/0x420
[  210.985097][ T6937]  ? __fget_files+0x2a/0x420
[  210.985121][ T6937]  ? srso_alias_return_thunk+0x5/0xfbef5
[  210.985152][ T6937]  ? __fget_files+0x2a/0x420
[  210.985182][ T6937]  security_file_ioctl+0xc6/0x2a0
[  210.985217][ T6937]  __se_sys_ioctl+0x46/0x160
[  210.985251][ T6937]  do_syscall_64+0xf3/0x230
[  210.985292][ T6937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.985322][ T6937] RIP: 0033:0x7f633b78d169
[  210.985343][ T6937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.985365][ T6937] RSP: 002b:00007f633c5fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  210.985391][ T6937] RAX: ffffffffffffffda RBX: 00007f633b9a5fa0 RCX: 00007f633b78d169
[  210.985411][ T6937] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004
[  210.985428][ T6937] RBP: 00007f633c5fe090 R08: 0000000000000000 R09: 0000000000000000
[  210.985445][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  210.985461][ T6937] R13: 0000000000000000 R14: 00007f633b9a5fa0 R15: 00007ffe31d7ccf8
[  210.985500][ T6937]  </TASK>
[  210.985545][ T6937] ERROR: Out of memory at tomoyo_realpath_from_path.
[  211.208970][ T5852] Bluetooth: hci5: command 0x0406 tx timeout
[  211.242641][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  211.255126][ T5852] Bluetooth: hci4: command 0x0406 tx timeout
[  211.818727][ T6944] loop2: detected capacity change from 0 to 1024
[  212.527927][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.555854][ T6815] hfsplus: b-tree write err: -5, ino 4
[  212.599079][ T6960] loop1: detected capacity change from 0 to 2048
[  212.710640][ T6960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.072616][ T6972] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  213.382132][ T6978] loop2: detected capacity change from 0 to 1024
[  213.504273][ T5904] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  213.539871][ T5990] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  213.687713][ T6978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.994127][ T5904] usb 4-1: Using ep0 maxpacket: 32
[  214.150798][ T5990] usb 1-1: Using ep0 maxpacket: 32
[  214.184972][ T5904] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  214.193387][ T5904] usb 4-1: config 0 has no interface number 0
[  214.252529][ T5990] usb 1-1: unable to get BOS descriptor or descriptor too short
[  214.276838][ T5904] usb 4-1: config 0 interface 12 has no altsetting 0
[  214.298847][ T5990] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  215.094940][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.194119][ T5990] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  215.224644][ T5904] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  215.233804][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.237032][ T6988] loop4: detected capacity change from 0 to 64
[  215.254460][ T5990] usb 1-1: config 1 interface 0 has no altsetting 0
[  215.263374][ T5904] usb 4-1: Product: syz
[  215.287187][ T5904] usb 4-1: Manufacturer: syz
[  215.291892][ T5904] usb 4-1: SerialNumber: syz
[  215.304681][ T5990] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  215.344585][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.365183][ T5904] usb 4-1: config 0 descriptor??
[  215.376088][ T5990] usb 1-1: Product: syz
[  215.380355][ T5990] usb 1-1: Manufacturer: syz
[  215.449767][ T5990] usb 1-1: SerialNumber: syz
[  215.482157][ T6965] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  215.537837][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.749944][ T5990] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12
[  215.834398][ T5193] bcm5974 1-1:1.0: could not read from device
[  215.874773][ T6998] FAULT_INJECTION: forcing a failure.
[  215.874773][ T6998] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.896275][ T5193] bcm5974 1-1:1.0: could not read from device
[  215.902768][ T5990] usb 1-1: USB disconnect, device number 13
[  215.924517][ T6998] CPU: 0 UID: 0 PID: 6998 Comm: syz.1.276 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  215.924557][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  215.924574][ T6998] Call Trace:
[  215.924583][ T6998]  <TASK>
[  215.924594][ T6998]  dump_stack_lvl+0x241/0x360
[  215.924645][ T6998]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.924685][ T6998]  ? __pfx__printk+0x10/0x10
[  215.924739][ T6998]  should_fail_ex+0x424/0x570
[  215.924775][ T6998]  _copy_from_user+0x2d/0xb0
[  215.924815][ T6998]  move_addr_to_kernel+0x7f/0x170
[  215.924853][ T6998]  __sys_connect+0xb8/0x2d0
[  215.924895][ T6998]  ? __fget_files+0x2a/0x420
[  215.924931][ T6998]  ? __pfx___sys_connect+0x10/0x10
[  215.925002][ T6998]  __x64_sys_connect+0x7a/0x90
[  215.925046][ T6998]  do_syscall_64+0xf3/0x230
[  215.925086][ T6998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.925113][ T6998] RIP: 0033:0x7f633b78d169
[  215.925134][ T6998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.925157][ T6998] RSP: 002b:00007f633c5fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  215.925185][ T6998] RAX: ffffffffffffffda RBX: 00007f633b9a5fa0 RCX: 00007f633b78d169
[  215.925204][ T6998] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004
[  215.925220][ T6998] RBP: 00007f633c5fe090 R08: 0000000000000000 R09: 0000000000000000
[  215.925237][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.925252][ T6998] R13: 0000000000000000 R14: 00007f633b9a5fa0 R15: 00007ffe31d7ccf8
[  215.925292][ T6998]  </TASK>
[  216.202677][ T7009] loop3: detected capacity change from 0 to 512
[  216.247670][ T7009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  216.411314][ T7009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.489508][ T7009] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.946634][ T7019] loop2: detected capacity change from 0 to 512
[  217.207887][ T7024] FAULT_INJECTION: forcing a failure.
[  217.207887][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.243484][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'.
[  217.275160][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'.
[  217.308420][ T7024] CPU: 1 UID: 0 PID: 7024 Comm: syz.5.282 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  217.308457][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  217.308478][ T7024] Call Trace:
[  217.308487][ T7024]  <TASK>
[  217.308498][ T7024]  dump_stack_lvl+0x241/0x360
[  217.308546][ T7024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.308585][ T7024]  ? __pfx__printk+0x10/0x10
[  217.308637][ T7024]  should_fail_ex+0x424/0x570
[  217.308672][ T7024]  _copy_to_user+0x31/0xb0
[  217.308714][ T7024]  simple_read_from_buffer+0xc4/0x170
[  217.308759][ T7024]  proc_fail_nth_read+0x1ef/0x260
[  217.308790][ T7024]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  217.308821][ T7024]  ? srso_alias_return_thunk+0x5/0xfbef5
[  217.308851][ T7024]  ? rw_verify_area+0x246/0x630
[  217.308879][ T7024]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  217.308908][ T7024]  vfs_read+0x221/0xb90
[  217.308948][ T7024]  ? __pfx___mutex_lock+0x10/0x10
[  217.308982][ T7024]  ? __pfx_vfs_read+0x10/0x10
[  217.309007][ T7024]  ? srso_alias_return_thunk+0x5/0xfbef5
[  217.309042][ T7024]  ? __fget_files+0x2a/0x420
[  217.309068][ T7024]  ? __fget_files+0x39d/0x420
[  217.309090][ T7024]  ? __fget_files+0x2a/0x420
[  217.309118][ T7024]  ? srso_alias_return_thunk+0x5/0xfbef5
[  217.309153][ T7024]  ksys_read+0x19d/0x2d0
[  217.309185][ T7024]  ? __pfx_ksys_read+0x10/0x10
[  217.309222][ T7024]  ? srso_alias_return_thunk+0x5/0xfbef5
[  217.309257][ T7024]  do_syscall_64+0xf3/0x230
[  217.309295][ T7024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.309320][ T7024] RIP: 0033:0x7f9712f8bb7c
[  217.309341][ T7024] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  217.309362][ T7024] RSP: 002b:00007f9713db2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  217.309389][ T7024] RAX: ffffffffffffffda RBX: 00007f97131a5fa0 RCX: 00007f9712f8bb7c
[  217.309408][ T7024] RDX: 000000000000000f RSI: 00007f9713db20a0 RDI: 0000000000000004
[  217.309425][ T7024] RBP: 00007f9713db2090 R08: 0000000000000000 R09: 0000000000000000
[  217.309441][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.309460][ T7024] R13: 0000000000000000 R14: 00007f97131a5fa0 R15: 00007fff001661f8
[  217.309500][ T7024]  </TASK>
[  217.610396][ T7025] netlink: 'syz.3.272': attribute type 14 has an invalid length.
[  217.652488][ T7025] netlink: 'syz.3.272': attribute type 12 has an invalid length.
[  217.769123][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  217.769146][   T30] audit: type=1800 audit(1744244614.976:39): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.272" name="file2" dev="loop3" ino=16 res=0 errno=0
[  217.815171][   T30] audit: type=1800 audit(1744244614.986:40): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.272" name="file1" dev="loop3" ino=15 res=0 errno=0
[  218.430370][ T5904] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -32
[  218.438360][ T5904] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32
[  218.494572][ T7019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.513462][ T5904] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32
[  218.594318][ T7019] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.636665][ T5904] f81534 4-1:0.12: probe with driver f81534 failed with error -32
[  219.239965][ T5904] usb 4-1: USB disconnect, device number 12
[  219.480166][ T7051] loop0: detected capacity change from 0 to 64
[  220.566698][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.708972][ T7059] loop1: detected capacity change from 0 to 512
[  220.831519][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.893005][ T7059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.091733][ T7059] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.021572][ T7075] loop4: detected capacity change from 0 to 128
[  222.046512][ T5843] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  222.464585][ T5843] usb 4-1: Using ep0 maxpacket: 32
[  222.614904][ T5904] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  222.720792][   T30] audit: type=1800 audit(1744244619.816:41): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.291" name="file2" dev="loop1" ino=16 res=0 errno=0
[  222.935943][ T5843] usb 4-1: unable to get BOS descriptor or descriptor too short
[  223.477643][ T5904] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  223.477674][ T5843] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  223.499395][ T5904] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1
[  223.545029][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.556227][ T7088] loop2: detected capacity change from 0 to 64
[  223.569551][ T5904] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  223.587603][ T5843] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  223.606468][ T5843] usb 4-1: config 1 interface 0 has no altsetting 0
[  223.634248][ T5904] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  223.652493][ T5843] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  223.662524][ T5904] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  223.673099][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.690742][ T7088] ==================================================================
[  223.690764][ T7088] BUG: KASAN: slab-out-of-bounds in hfs_bnode_read+0x16a/0x200
[  223.690796][ T7088] Write of size 94 at addr ffff888029678c00 by task syz.2.297/7088
[  223.690818][ T7088] 
[  223.690830][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.2.297 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  223.690861][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  223.690879][ T7088] Call Trace:
[  223.690889][ T7088]  <TASK>
[  223.690899][ T7088]  dump_stack_lvl+0x241/0x360
[  223.690941][ T7088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.690979][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.691009][ T7088]  ? rcu_is_watching+0x15/0xb0
[  223.691041][ T7088]  ? __virt_addr_valid+0x183/0x530
[  223.691076][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.691107][ T7088]  ? lock_release+0x4e/0x3e0
[  223.691136][ T7088]  ? __virt_addr_valid+0x183/0x530
[  223.691172][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.691205][ T7088]  print_report+0x16e/0x5b0
[  223.691239][ T7088]  ? __virt_addr_valid+0x183/0x530
[  223.691274][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.691303][ T7088]  ? __virt_addr_valid+0x45f/0x530
[  223.691338][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.691368][ T7088]  ? __phys_addr+0xba/0x170
[  223.691404][ T7088]  ? hfs_bnode_read+0x16a/0x200
[  223.691428][ T7088]  kasan_report+0x143/0x180
[  223.691463][ T7088]  ? hfs_bnode_read+0x16a/0x200
[  223.691491][ T7088]  kasan_check_range+0x28f/0x2a0
[  223.691525][ T7088]  ? hfs_bnode_read+0x16a/0x200
[  223.691549][ T7088]  __asan_memcpy+0x40/0x70
[  223.691577][ T7088]  hfs_bnode_read+0x16a/0x200
[  223.691605][ T7088]  hfs_bnode_read_key+0x174/0x240
[  223.691630][ T7088]  ? srso_alias_safe_ret+0x2/0x7
[  223.691657][ T7088]  ? do_raw_spin_unlock+0x13c/0x8b0
[  223.691704][ T7088]  ? __pfx_hfs_bnode_read_key+0x10/0x10
[  223.691731][ T7088]  ? _raw_spin_unlock+0x28/0x50
[  223.691755][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.691785][ T7088]  ? block_dirty_folio+0x167/0x1e0
[  223.691828][ T7088]  hfs_brec_insert+0x6a5/0xbe0
[  223.691854][ T7088]  ? __entry_text_end+0xfdfd3/0x1020c9
[  223.691900][ T7088]  ? __pfx_hfs_brec_insert+0x10/0x10
[  223.691933][ T7088]  hfs_cat_create+0x3de/0x760
[  223.691968][ T7088]  ? __pfx_hfs_cat_create+0x10/0x10
[  223.692010][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.692040][ T7088]  ? _raw_spin_unlock+0x28/0x50
[  223.692063][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.692092][ T7088]  ? hfs_new_inode+0x8df/0xba0
[  223.692132][ T7088]  hfs_create+0x66/0xe0
[  223.692160][ T7088]  ? __pfx_hfs_create+0x10/0x10
[  223.692190][ T7088]  path_openat+0x194d/0x35d0
[  223.692241][ T7088]  ? __pfx_path_openat+0x10/0x10
[  223.692268][ T7088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.692309][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.692340][ T7088]  do_filp_open+0x284/0x4e0
[  223.692372][ T7088]  ? __pfx_do_filp_open+0x10/0x10
[  223.692402][ T7088]  ? do_raw_spin_lock+0x151/0x370
[  223.692466][ T7088]  do_sys_openat2+0x12b/0x1d0
[  223.692505][ T7088]  ? __pfx_do_sys_openat2+0x10/0x10
[  223.692541][ T7088]  ? __phys_addr+0xba/0x170
[  223.692583][ T7088]  __x64_sys_openat+0x249/0x2a0
[  223.692624][ T7088]  ? __pfx___x64_sys_openat+0x10/0x10
[  223.692670][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.692710][ T7088]  do_syscall_64+0xf3/0x230
[  223.692744][ T7088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.692768][ T7088] RIP: 0033:0x7fc2ccf8d169
[  223.692789][ T7088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.692811][ T7088] RSP: 002b:00007fc2cddd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  223.692838][ T7088] RAX: ffffffffffffffda RBX: 00007fc2cd1a5fa0 RCX: 00007fc2ccf8d169
[  223.692857][ T7088] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  223.692876][ T7088] RBP: 00007fc2cd00e730 R08: 0000000000000000 R09: 0000000000000000
[  223.692892][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.692907][ T7088] R13: 0000000000000000 R14: 00007fc2cd1a5fa0 R15: 00007ffff3d4a958
[  223.692936][ T7088]  </TASK>
[  223.692946][ T7088] 
[  223.692953][ T7088] Allocated by task 7088:
[  223.692967][ T7088]  kasan_save_track+0x3f/0x80
[  223.692993][ T7088]  __kasan_kmalloc+0x9d/0xb0
[  223.693021][ T7088]  __kmalloc_noprof+0x28e/0x4d0
[  223.693055][ T7088]  hfs_find_init+0x92/0x1f0
[  223.693074][ T7088]  hfs_cat_create+0x181/0x760
[  223.693100][ T7088]  hfs_create+0x66/0xe0
[  223.693126][ T7088]  path_openat+0x194d/0x35d0
[  223.693151][ T7088]  do_filp_open+0x284/0x4e0
[  223.693178][ T7088]  do_sys_openat2+0x12b/0x1d0
[  223.693213][ T7088]  __x64_sys_openat+0x249/0x2a0
[  223.693249][ T7088]  do_syscall_64+0xf3/0x230
[  223.693277][ T7088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.693300][ T7088] 
[  223.693307][ T7088] The buggy address belongs to the object at ffff888029678c00
[  223.693307][ T7088]  which belongs to the cache kmalloc-96 of size 96
[  223.693328][ T7088] The buggy address is located 0 bytes inside of
[  223.693328][ T7088]  allocated 78-byte region [ffff888029678c00, ffff888029678c4e)
[  223.693355][ T7088] 
[  223.693362][ T7088] The buggy address belongs to the physical page:
[  223.693374][ T7088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29678
[  223.693396][ T7088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  223.693418][ T7088] page_type: f5(slab)
[  223.693441][ T7088] raw: 00fff00000000000 ffff88801b041280 ffffea0000a0ec80 dead000000000002
[  223.693464][ T7088] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000
[  223.693479][ T7088] page dumped because: kasan: bad access detected
[  223.693491][ T7088] page_owner tracks the page as allocated
[  223.693502][ T7088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3574, tgid 3574 (kworker/u8:10), ts 100580478140, free_ts 100177939286
[  223.693544][ T7088]  post_alloc_hook+0x1f4/0x240
[  223.693581][ T7088]  get_page_from_freelist+0x352b/0x36c0
[  223.693607][ T7088]  __alloc_frozen_pages_noprof+0x211/0x5b0
[  223.693633][ T7088]  alloc_pages_mpol+0x339/0x690
[  223.693665][ T7088]  allocate_slab+0x8f/0x3a0
[  223.693699][ T7088]  ___slab_alloc+0xc3b/0x1500
[  223.693721][ T7088]  __slab_alloc+0x58/0xa0
[  223.693741][ T7088]  __kmalloc_noprof+0x2ea/0x4d0
[  223.693774][ T7088]  cfg80211_inform_single_bss_data+0xb46/0x1ed0
[  223.693804][ T7088]  cfg80211_inform_bss_data+0x3c5/0x5860
[  223.693831][ T7088]  cfg80211_inform_bss_frame_data+0x3c5/0x720
[  223.693861][ T7088]  ieee80211_bss_info_update+0x8ac/0xbc0
[  223.693888][ T7088]  ieee80211_scan_rx+0x526/0x9c0
[  223.693912][ T7088]  ieee80211_rx_list+0x28cd/0x3490
[  223.693939][ T7088]  ieee80211_rx_napi+0x187/0x3c0
[  223.693966][ T7088]  ieee80211_handle_queued_frames+0xe7/0x1e0
[  223.693992][ T7088] page last free pid 15 tgid 15 stack trace:
[  223.694007][ T7088]  __free_frozen_pages+0xde8/0x10a0
[  223.694028][ T7088]  __tlb_remove_table+0x36b/0x460
[  223.694055][ T7088]  tlb_remove_table_rcu+0x79/0xf0
[  223.694081][ T7088]  rcu_core+0xaae/0x17a0
[  223.694108][ T7088]  handle_softirqs+0x2d8/0x9b0
[  223.694131][ T7088]  run_ksoftirqd+0xcf/0x130
[  223.694158][ T7088]  smpboot_thread_fn+0x578/0xaa0
[  223.694187][ T7088]  kthread+0x7b9/0x940
[  223.694219][ T7088]  ret_from_fork+0x4d/0x80
[  223.694245][ T7088]  ret_from_fork_asm+0x1a/0x30
[  223.694268][ T7088] 
[  223.694274][ T7088] Memory state around the buggy address:
[  223.694288][ T7088]  ffff888029678b00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  223.694306][ T7088]  ffff888029678b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  223.694325][ T7088] >ffff888029678c00: 00 00 00 00 00 00 00 00 00 06 fc fc fc fc fc fc
[  223.694340][ T7088]                                               ^
[  223.694355][ T7088]  ffff888029678c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  223.694373][ T7088]  ffff888029678d00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  223.694387][ T7088] ==================================================================
[  223.712461][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.712498][ T5843] usb 4-1: Product: syz
[  223.712518][ T5843] usb 4-1: Manufacturer: syz
[  223.712538][ T5843] usb 4-1: SerialNumber: syz
[  223.718711][ T7088] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  223.718743][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.2.297 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) 
[  223.718774][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  223.718790][ T7088] Call Trace:
[  223.718801][ T7088]  <TASK>
[  223.718812][ T7088]  dump_stack_lvl+0x241/0x360
[  223.718858][ T7088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.718896][ T7088]  ? __pfx__printk+0x10/0x10
[  223.718942][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.718972][ T7088]  ? vscnprintf+0x5d/0x90
[  223.719014][ T7088]  panic+0x349/0x880
[  223.719047][ T7088]  ? check_panic_on_warn+0x21/0xb0
[  223.719084][ T7088]  ? __pfx_panic+0x10/0x10
[  223.719115][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.719151][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.719180][ T7088]  ? _raw_spin_unlock_irqrestore+0x134/0x140
[  223.719209][ T7088]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  223.719237][ T7088]  ? print_report+0x519/0x5b0
[  223.719275][ T7088]  check_panic_on_warn+0x86/0xb0
[  223.719310][ T7088]  ? hfs_bnode_read+0x16a/0x200
[  223.719335][ T7088]  end_report+0x77/0x160
[  223.719369][ T7088]  kasan_report+0x154/0x180
[  223.719403][ T7088]  ? hfs_bnode_read+0x16a/0x200
[  223.719431][ T7088]  kasan_check_range+0x28f/0x2a0
[  223.719464][ T7088]  ? hfs_bnode_read+0x16a/0x200
[  223.719489][ T7088]  __asan_memcpy+0x40/0x70
[  223.719516][ T7088]  hfs_bnode_read+0x16a/0x200
[  223.719545][ T7088]  hfs_bnode_read_key+0x174/0x240
[  223.719569][ T7088]  ? srso_alias_safe_ret+0x2/0x7
[  223.719596][ T7088]  ? do_raw_spin_unlock+0x13c/0x8b0
[  223.719633][ T7088]  ? __pfx_hfs_bnode_read_key+0x10/0x10
[  223.719661][ T7088]  ? _raw_spin_unlock+0x28/0x50
[  223.719685][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.719713][ T7088]  ? block_dirty_folio+0x167/0x1e0
[  223.719756][ T7088]  hfs_brec_insert+0x6a5/0xbe0
[  223.719782][ T7088]  ? __entry_text_end+0xfdfd3/0x1020c9
[  223.719824][ T7088]  ? __pfx_hfs_brec_insert+0x10/0x10
[  223.719859][ T7088]  hfs_cat_create+0x3de/0x760
[  223.719894][ T7088]  ? __pfx_hfs_cat_create+0x10/0x10
[  223.719944][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.719973][ T7088]  ? _raw_spin_unlock+0x28/0x50
[  223.719996][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.720026][ T7088]  ? hfs_new_inode+0x8df/0xba0
[  223.720066][ T7088]  hfs_create+0x66/0xe0
[  223.720095][ T7088]  ? __pfx_hfs_create+0x10/0x10
[  223.720125][ T7088]  path_openat+0x194d/0x35d0
[  223.720177][ T7088]  ? __pfx_path_openat+0x10/0x10
[  223.720204][ T7088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.720238][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.720273][ T7088]  do_filp_open+0x284/0x4e0
[  223.720304][ T7088]  ? __pfx_do_filp_open+0x10/0x10
[  223.720332][ T7088]  ? do_raw_spin_lock+0x151/0x370
[  223.720395][ T7088]  do_sys_openat2+0x12b/0x1d0
[  223.720436][ T7088]  ? __pfx_do_sys_openat2+0x10/0x10
[  223.720475][ T7088]  ? __phys_addr+0xba/0x170
[  223.720520][ T7088]  __x64_sys_openat+0x249/0x2a0
[  223.720562][ T7088]  ? __pfx___x64_sys_openat+0x10/0x10
[  223.720609][ T7088]  ? srso_alias_return_thunk+0x5/0xfbef5
[  223.720643][ T7088]  do_syscall_64+0xf3/0x230
[  223.720679][ T7088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.720703][ T7088] RIP: 0033:0x7fc2ccf8d169
[  223.720725][ T7088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.720748][ T7088] RSP: 002b:00007fc2cddd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  223.720777][ T7088] RAX: ffffffffffffffda RBX: 00007fc2cd1a5fa0 RCX: 00007fc2ccf8d169
[  223.720798][ T7088] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  223.720818][ T7088] RBP: 00007fc2cd00e730 R08: 0000000000000000 R09: 0000000000000000
[  223.720836][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.720853][ T7088] R13: 0000000000000000 R14: 00007fc2cd1a5fa0 R15: 00007ffff3d4a958
[  223.720884][ T7088]  </TASK>
[  223.721176][ T7088] Kernel Offset: disabled