last executing test programs:

8.817005392s ago: executing program 0 (id=64):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x101042, 0x65)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffc}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000100000000000000000000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000580), 0x492492492492846, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x412001, 0x0)
unshare(0x22020600)
ppoll(&(0x7f00000005c0)=[{r5, 0x1d8}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r4, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000680))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x1218}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x440e4}, 0x40000)
syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0f38658c432ae1d6778795efa7a386131cdfd6db9d693b149573b69e324dd518", "80f20b589ea815d390be3440806a3dfd", {"68e77bdc832e437bb8b8deadbfca96d4", "8ce907f941ed51d4a10806ad01d87602"}}}}}}}}, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e)

8.656063658s ago: executing program 0 (id=66):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0xd, 0x1a0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "bb060000"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xfff6, 0x1000, 0x70}, {0x6, 0x24, 0x1a, 0x1, 0x29}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xc, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x6, 0x5}}}}}}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

4.525694444s ago: executing program 3 (id=96):
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4}, 0x50)
add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffb)

4.497478567s ago: executing program 3 (id=97):
r0 = socket$inet6(0x10, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000000))
close(0x3)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_ext={0x1c, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9ba7, 0x0, 0x0, 0x0, 0x2fd}, [@printk={@ld}]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0xf, 0x3, 0x2}, 0x10, 0xd318, 0xffffffffffffffff, 0x0, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff8}, 0x94)
r2 = fsopen(&(0x7f0000001300)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001340)={@cgroup=<r4=>r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x40)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x19, 0x3, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000014c0)={r6, r4, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001540)='syz1\x00', 0x200002, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x5, &(0x7f0000001580)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @jmp={0x5, 0x1, 0x1, 0x3, 0x1, 0x40, 0x4}, @jmp={0x5, 0x0, 0xd, 0x8, 0x4, 0xfffffffffffffff8, 0xffffffffffffffff}, @generic={0x0, 0x5, 0x6, 0x9, 0x6}], &(0x7f00000015c0)='GPL\x00', 0xfffffffd, 0x12, &(0x7f0000001600)=""/18, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x4, 0x46a, 0x7ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@cgroup=r7, r1, 0x18, 0x0, 0x0, @void, @value=r8, @void, @void, r5}, 0x20)
socket$inet6(0x10, 0x2, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async)
ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000000)) (async)
close(0x3) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001240)=@bpf_ext={0x1c, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9ba7, 0x0, 0x0, 0x0, 0x2fd}, [@printk={@ld}]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x41000, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0xf, 0x3, 0x2}, 0x10, 0xd318, 0xffffffffffffffff, 0x0, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff8}, 0x94) (async)
fsopen(&(0x7f0000001300)='cgroup2\x00', 0x1) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r2, 0x0, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001340)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x19, 0x3, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000014c0)={r6, r4, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c) (async)
openat$cgroup(0xffffffffffffffff, &(0x7f0000001540)='syz1\x00', 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x5, &(0x7f0000001580)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @jmp={0x5, 0x1, 0x1, 0x3, 0x1, 0x40, 0x4}, @jmp={0x5, 0x0, 0xd, 0x8, 0x4, 0xfffffffffffffff8, 0xffffffffffffffff}, @generic={0x0, 0x5, 0x6, 0x9, 0x6}], &(0x7f00000015c0)='GPL\x00', 0xfffffffd, 0x12, &(0x7f0000001600)=""/18, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x4, 0x46a, 0x7ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)={@cgroup=r7, r1, 0x18, 0x0, 0x0, @void, @value=r8, @void, @void, r5}, 0x20) (async)

4.442230932s ago: executing program 3 (id=98):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000000600010000000000000000000300000a64000000060a010400000000000000000a0000040900010073797a310000000009000201b0797a320000000038000480340001800900010068617368000000002400028008000640000001ff080007400000000108000440000008000800024000000017140000001100010000000000000000000100000a"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async)
r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
add_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="52e22cba", 0x4, r4) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
memfd_create(&(0x7f0000000540)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa5\xed\x05\x12\x0f\x0eu\xe5 \xfe\xcdMX\xb5X\x838\xf5\x18x\xc9\xb9\x03\t\x06\x96g\x8a5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0\x1f\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = fsopen(&(0x7f0000000b40)='cgroup2\x00', 0x0)
r7 = fsmount(r6, 0x0, 0x8b)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80)={r5, r7, 0x16, 0x0, @void}, 0x10)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000bc0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f0000000040)) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)={[{@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@orlov}, {@nodioread_nolock}, {@nodiscard}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nojournal_checksum}, {@orlov}]}, 0x4, 0xbd4, &(0x7f0000001900)="$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")
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)

4.381791748s ago: executing program 1 (id=110):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00')
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) (async)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5})
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(r1, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x155) (async)
mkdirat(r1, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x155)
mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r2, &(0x7f0000000380), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0)
write(r3, &(0x7f0000000440)='1234', 0x4) (async)
write(r3, &(0x7f0000000440)='1234', 0x4)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700180000000b1e76fd5caba68026cf75eb5bf7c8fd60f858815f2d9a9f938007b2b4e3633803bdd77a672ca0"], 0x0}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x25, 0x2, 0x82, 0xfffffffb}, {0x511, 0x0, 0x0, 0x800}, {0xe89, 0xa, 0x0, 0x90}, {0x6, 0x80, 0x0, 0x1000}]})

4.290847808s ago: executing program 0 (id=101):
syz_usb_connect(0x2, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x9, 0x1, 0x5c, 0x20, 0x413c, 0x4005, 0xcb20, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x48, 0x0, 0x50, 0x8}}]}}, 0x0)

4.181762468s ago: executing program 3 (id=102):
syz_mount_image$exfat(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x10000c0, &(0x7f0000000540)=ANY=[], 0x1, 0x1531, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0xc0280, 0x190)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x800714, &(0x7f0000000280)={[{@debug}]}, 0x1, 0x4c0, &(0x7f0000001c00)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000540)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e)
listen(r2, 0x6)
sendmmsg$unix(r2, &(0x7f0000000640), 0x318, 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000002280)=0x2)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', 0x0, r3, 0x2, 0x4, 0x2}, 0x50)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000002340)=ANY=[], 0x8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="0e000000040000ff0f00"/20, @ANYRES32=0x1, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x6, 0xd, &(0x7f00000024c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000100000085000000330000000000070000009500000000000000"], &(0x7f0000002540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002580)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000002600)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x9, 0x0, 0x0, &(0x7f0000002700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002740)={r7, 0xe0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x32, 0xfffffffffffffeb6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
connect$inet6(r4, &(0x7f0000002880)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000028c0)='bridge0\x00', 0x10)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)

4.180963108s ago: executing program 3 (id=103):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109025c0002010d00080904000001020d0000052406000105240004004ed60f0102000008f6ff001000060904010000020d00000904010102020d00000905820200040c0a01090503"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

3.224767175s ago: executing program 0 (id=114):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000f0916e1605d469e7217cda48782a4d95906940b2c2a964b5a140ac50a3d2ebee0b7fd873e5286c167283181039fe7f1bf591771c32d4c2bd6b8f2f53d0b701824e910e6ef6a3bca1fe670766b3145e31a96cc6484c1e0b7cf994d3aa20b2efe58ea562969c2b891a3720ff8b15c3d5002dcdf64cc40071953097ff3539f4351fab5fd67d9188033838cccca4cde5e36446bc6c664a9701b0b356", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x9, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x7ff, 0x6, 0xfffffffffffffffa, 0x1, 0x401, 0x0, 0x7, 0x197d25c5}, &(0x7f00000000c0)={0x8, 0x5, 0xa, 0x1, 0x4, 0x7, 0x9, 0xbe}, &(0x7f0000000100)={0xbf04, 0x9, 0x5, 0x4, 0xfa4, 0x3, 0xc5eb, 0xd59b}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x2]}, 0x8})
setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000140)=0x1, 0x18)
getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4)

3.220815475s ago: executing program 0 (id=115):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xd)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001380)={'syzkaller1\x00', 0x1})
r1 = socket$unix(0x1, 0x3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'syzkaller1\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
r4 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000380)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480))
mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r4, 0x8000000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r5, 0x61, 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'syzkaller1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="0500040073696f6e3d3970323020302c00"])
write$P9_RVERSION(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r9, @ANYRESDEC], 0x15)

3.220293145s ago: executing program 2 (id=116):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x208008de, &(0x7f0000000900)=ANY=[], 0x80, 0x150a, &(0x7f0000001fc0)="$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")
r3 = socket$inet(0x2, 0x3, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000003500)='./bus\x00', 0x1c1840, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000003540)='./bus\x00', 0x1c1002, 0x40)
write(r5, &(0x7f0000003580)='t', 0x1)
sendfile(r5, r4, 0x0, 0x7fffffff)
sendto$inet(r3, 0x0, 0x0, 0x15, 0x0, 0x0)
mkdir(0x0, 0x19e)
unlinkat(r2, &(0x7f00000035c0)='./bus\x00', 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010002000000fcffffff08000000180001801400020073797a5f74756e000000000000000000180002801400038010000180060002005b000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
syz_emit_ethernet(0x6a, &(0x7f0000001e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x21, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x1, 0x6]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = socket(0x11, 0x3, 0xff)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={<r8=>0x0, <r9=>0x0, <r10=>0x0}, &(0x7f0000000380)=0xc)
syz_emit_ethernet(0x22, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1}}}}}, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x15)
preadv2(r11, &(0x7f0000000280)=[{&(0x7f0000001ec0)=""/238, 0xee}], 0x1, 0x0, 0x7, 0xe)
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000400)='./file1\x00', 0x2000084c, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r9, @ANYRES64=r8, @ANYRES8=r10, @ANYRES16=r8, @ANYRES64=r8, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000000940)="$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")
stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040))

2.940854533s ago: executing program 2 (id=117):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000900)={[], [], 0x2c}, 0x1, 0x47c, &(0x7f0000000f00)="$eJzs28tvFdUfAPDvTCnv/tof4gNErRK18dFCfYSFGxJN2JiY6AKXtRRCuFBDayKESHWBS8PKlVGXJv4FrmRj1JXGre6NCTFsRBPJmLl35nLpfXDb23IL9/NJpnfOzJk558yZ03vmnLkBDKzx/E8SsTMifo2I0YgYWh5hvPZx/dqF2b+vXZhNIsve/DPJD4u/rl2YLaMmxeeOIjCR1jc1WTh3/tRMpTJ3tghPLZ5+d2rh3PnnT56eOTF3Yu7M9KFNa1nOkTyvez+Y37fnyNuXX589evmdH77OM7ez2N9YjpqxntMcj/G2F+DJns++sYwUn20rnA0pb+t5Qxuutv/RGIqbzW40Xvuor5kD1lWWZdmWpq31HsBSBtzDkuh3DoD+KL/o8+ffcrmD3Y++u3q49gCUl/t6sdT2bIq0iDPc8Hx7q7Tn9Mcj4ujSP5/nS7QchwAAWFvf5v2f51r1/9J4oCHe/4q5obGI+H9E7IqI+yJid0TcH1GN+2BEPLTC9MeXhW+mf6MYhPp52+pLd3tXD0fySjG3dWv/r963GxsqQiPV8g8nx09W5g4U12Qihrfk4YMd0rjy6i+ftNvX2P/Llzz9si9Y5OOPTcsG6I7NLM70UuZGVz+sjgFebC5/Up8JSCJiT0TsXcX5t0bEyWe+2lffsLnhpIXO5e9gDWYIsy8jnq7V/1IsK380ZLXF/OShfN/L0y9NbY3K3IGp8q5o9uNPl95ol/7t63995fW/veX9Xy//WNI4X7uw8jQu/fZx22ea1d7/m5O3quvl7fT+zOLi2YMRm5Ol5u3TN48tw2X8vPwT+1u3/10RN74ojns4IvKb+JGIeDQiHivy/nhEPBER+zuU//vh9vs2Qv0fW1H9r3xl6NR337RLv7v6f7G6NlFs6eb/X7cZ7OXaAQAAwN0irb4Dn6ST9fU0nZysvcO/O7anlfmFxWePz7935ljtXfmxGE7Lka7RhvHQg8WYSxmeLsaKy/AL1XHjLMuybdXw5Ox8pfWcOnCn7GjT/nO/D/U7d8C6q86jHfq0u8h+4QX3lFvm0TtMVgL3njX9pT1wV9H+YXBp/zC4WrX/ixHX+5AV4A7z/Q+DS/uHwaX9w+DS/mEg9fK7/k4ru4407/psdH3S2vgrVyKiXZyhVZ95S0T0msOndqz28Ej7fVW7XynfaatvSVtE/rdfOczrsdvIF2MFZx7pJWN9/scEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRv4LAAD//2zl4zU=")
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x8})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000300)={0x1, 0x1, 0x73f8, 0x4})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x20000851)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x143041, 0x2a)
pwritev2(r3, 0x0, 0x0, 0xe7b, 0x0, 0x0)
connect$unix(r3, 0x0, 0xfffffffffffffe7f) (async)
connect$unix(r3, 0x0, 0xfffffffffffffe7f)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff", @ANYBLOB='E'], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x40080)
sched_setscheduler(0x0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x87) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x87)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r5, r5, 0x0, 0x546bd1b0) (async)
sendfile(r5, r5, 0x0, 0x546bd1b0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28642, 0x0)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0)) (async)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
getpid() (async)
r6 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
syz_pidfd_open(r6, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x0, 0x75c, &(0x7f0000002bc0)="$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") (async)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x0, 0x75c, &(0x7f0000002bc0)="$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")

2.895092858s ago: executing program 1 (id=118):
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x9d, 0x5, 0x9, 0xe, 0x8, 0x10, 0xb1}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001ffe0f00060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

2.832468844s ago: executing program 1 (id=119):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x4, 0xfa, 0x4, 0x2, 0xc, 0x59, 0x6, 0xb, 0x7, [0x1, 0x7fff, 0x3, 0xfffffff8, 0x7, 0x20000, 0x2, 0x4]}})
unshare(0x60000600)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x5f8b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0xfffffffe, 0x0, 0x3, 0x20000000, 0x10000, 0x2, 0x0, 0x6, 0xfffffffa, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x400000, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffc9, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x6, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000100, 0x1, 0x1000, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x80000, 0x9bd, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x1, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x20000000, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000000, 0xfffeffff, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)

2.808553086s ago: executing program 1 (id=120):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901f545fd83a675ba282f"], 0x28}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_open_dev$hidraw(&(0x7f00000002c0), 0x100, 0x100)
write(r1, &(0x7f0000000140)='7', 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f00000001c0)={0x8}, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)

2.554431772s ago: executing program 0 (id=121):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="20015b000000fd958d7b2ea4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.469805961s ago: executing program 4 (id=123):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x4, 0x7, 0x5, 0x801, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0x8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xf, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x2000007f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x5, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0xfffffffd, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff})
recvmmsg(r4, 0x0, 0x0, 0x10141, 0x0) (async)
recvmmsg(r4, 0x0, 0x0, 0x10141, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000800)={0x3, &(0x7f0000000880)=[{0x8, 0x4, 0xf9, 0x600}, {0x6, 0xfe, 0x6, 0x25}, {0x7f, 0xe, 0xf, 0x8000}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000800)={0x3, &(0x7f0000000880)=[{0x8, 0x4, 0xf9, 0x600}, {0x6, 0xfe, 0x6, 0x25}, {0x7f, 0xe, 0xf, 0x8000}]})
connect$inet6(r6, &(0x7f00000008c0)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c)
sendmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0xfffffffffffffddc, 0x2c}, 0x20044884) (async)
sendmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0xfffffffffffffddc, 0x2c}, 0x20044884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280"], 0x64}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = dup2(r7, r7)
setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, 0x0) (async)
setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r9) (async)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)

2.466399491s ago: executing program 1 (id=124):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
exit(0xe)
connect$unix(r0, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000600), 0x318, 0x0)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, &(0x7f0000000100)={{}, {0x0, 0x2710}}, 0x0)
r2 = socket$inet6(0xa, 0xa, 0x0)
unshare(0xd050780)
setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x802)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="2d07000000fd0000"], 0x4a)
r4 = socket(0x10, 0x803, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/65, 0xfffffdfd)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0xd0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000433af4660014001280090001007663616e000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x101840, 0x105)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000140)={'sit0\x00', 0x0})

2.466100381s ago: executing program 4 (id=125):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x2040, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000100)='./file1\x00', 0x200077d) (async)
fcntl$setlease(r1, 0x400, 0x0) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42140, 0x187) (async, rerun: 32)
lseek(r2, 0x4, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x519200, 0x0) (async)
setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x1f) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000002c0)=0x40000401, 0x4)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000300)=0x800001, 0x4)
bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000380)=0x800001, 0x4) (async)
bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async)
listen(r4, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000600000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x28) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000004800010000002000000000000a0093"], 0x20}}, 0x0) (rerun: 64)

2.360790121s ago: executing program 2 (id=126):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x0, <r1=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1a, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x4}, 0x80)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff03076804268c989e14f088a8", 0x0, 0x7ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x45}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0xcd9ad27008a939a2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900dd8d000000000000000002"], 0x24}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000700)={0xffe}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write(r6, &(0x7f0000000d40)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x3000010, &(0x7f0000000140), 0x41, 0x52c, &(0x7f0000000740)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0), 0x8) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1a, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x4}, 0x80) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff03076804268c989e14f088a8", 0x0, 0x7ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x45}, 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0xcd9ad27008a939a2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900dd8d000000000000000002"], 0x24}}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000700)={0xffe}, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
write(r6, &(0x7f0000000d40)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x3000010, &(0x7f0000000140), 0x41, 0x52c, &(0x7f0000000740)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGhbwdqbhrYRQlAucKoElPsSEm8UrR1HsVM2UcWm4j9ASCBx4sQFiT8ACfXAH4AqVYIL4oAAgRBs4YAEdNCMx9qsYydp14l3489HevF7Y89835uRn9/8yEwAU+vpiHglImYi4vmIqJbT0zLFfi/ln3v37hureUoiy177exJJOa2/rLw8GxFXytnmIuIbX434dnI4bmd379ZKs9nYLsv1bmur3tndu7bRWllvrDc2l5YWX1p+efnF5etZ6YHaudDP/PQrX/zlZ7/zhxt/fe67ebW+8LGoxEA7xqnX9EqxLvrydbR9GsEmYKZsT2XSFQEA4ETyMf6HI+JTxfi/GjPFaG7AzCRqBgAAAIxL9qX5+G8SkQEAAADnVhoR85GktfJagPlI0wvlsYGPxuW02e50P3OzvbO5lr8XsRCV9OZGs3G9vFZ4ISpJXl4sr7Htl18YKC9FxOMR8YPqpaJcW2031yZ87AMAAACmxZWB/f9/VdMif7wh/ycAAAAAPLwWRhYAAACA88IuPwAAAJx/g/v/7vcPAAAA58rXXn01T1n/+ddrr+/u3Gq/fm2t0blVa+2s1lbb21u19XZ7vbhnX+u45TXb7a3PxebO7Xq30enWO7t7N1rtnc3ujY37HoENAAAAnKHHP/nWb5OI2P/8pSJFeR9AgPv8adIVAMbJpX4wvdzFG6ZXZdIVACYuOeZ9F+8AAMCj7+rHD5//7z//37EBON9Oeq2P84QAcH44/w/Tq2JkD1NrtjwG8KFe8eKoz408///rk0bKsoi3qwenOL4IAABna75ISVor9wPmI01rtYjHItKFqCQ3N5qN6+X+wW+qlYt5ebGYMzn2mmEAAAAAAAAAAAAAAAAAAAAAAAAAoCfLksgAAACAcy0i/UtS3M0/4mr12fnB4wMXkn9X489l4cev/fD2Sre7vZhP/0fxLK8LEdH9UTn9hZGPDwMAAADGLdkf+VZvP718XTzTWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd69+8ZqP51l3L99OSIWhsWfjbnidS4qEXH5n0nMHpgviYiZMcTffzMinhgWP4n3suxOlLXI4ycD8S+dcvyFYtXci3+w/WlEXBlDfJhmb+X9zyvDvn9pPF28Dv/+zZbpQY3u/9Iy8hNFPzes/3vs0NJaQ2M8+c7P671c5XD8NyOenB3e//T732RE/GcOLe0/WZYdjv+tb+7tjWp/9pOIq0N/f5L7YtW7ra16Z3fv2kZrZb2x3thcWlp8afnl5ReXr9dvbjQb5d+hMb7/iV+8Nyp+3v7LQ+L//ne9/veo9j87aqED/vfO7bsf6WUPbYA8/nPPDP39nYsR8dPyt+/TZT5//2o/v9/LH/TUz95+6qj2r41Y/0dt//fj+a9/748fcFYA4BR0dvdurTSbje0jMnMn+MyjmPnV3ENRjfeZye70ttzDUp8PmslHq/emZHd6A/5xLHl2bFXNjvvMxfJr9ECxLhbj+ZPOdeGMNtMEOyUAAOBU3Bv0T7omAAAAAAAAAAAAAAAAAAAAML3O4mZvgzH3J9NUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAj/T8AAP//iCnYqA==") (async)

2.286983669s ago: executing program 4 (id=127):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f00000002c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r1, r3, 0x16, 0x0, @void}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000340), 0x50)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2.189016619s ago: executing program 4 (id=128):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fcntl$setflags(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_out(r1, 0x5460, &(0x7f0000000000))
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x4}]}, 0x10)
r3 = syz_create_resource$futex(&(0x7f0000000140)=0x1)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
r6 = syz_create_resource$futex(&(0x7f00000002c0))
futex(r3, 0xb, 0x2, &(0x7f0000000280)={r4, r5+10000000}, r6, 0x2)

2.188500499s ago: executing program 4 (id=129):
setns(0xc9, 0x0) (async)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000d80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='P8'], 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) (async)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8, 0x80000)
readv(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/128, 0x80}], 0x1) (async)
r3 = signalfd4(r2, &(0x7f0000000340)={[0x7fffffffffffffff]}, 0x8, 0x0) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xffffffffffffff79) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000740)={'netpci0\x00', &(0x7f0000000480)=@ethtool_per_queue_op={0x4b, 0xe, [0x10000, 0x5, 0x1, 0x4dde, 0x5, 0x237, 0x6, 0x1, 0x7ff, 0x8001, 0x4, 0x1, 0x278, 0x7, 0x5, 0x5, 0x800, 0x0, 0x80, 0xc6, 0xb, 0x7, 0x6, 0x4c6, 0x1, 0x7247, 0x7, 0x10000, 0x400, 0x4, 0x7, 0x7ff, 0x4, 0x2, 0xfffffffb, 0x5, 0x0, 0xcac, 0x8, 0x8, 0x40, 0x1000, 0xb, 0x8da, 0xec4, 0x8, 0x3, 0x1, 0xc3, 0x200, 0x80, 0x3c, 0x3, 0x5, 0x9, 0x8, 0x767c926f, 0x0, 0x401, 0x1000, 0x3, 0x20000, 0x7, 0x0, 0x0, 0x9, 0x3, 0x10, 0xb, 0xfffffff8, 0x0, 0x6, 0x400, 0x9, 0x6, 0x7, 0xedc2, 0x0, 0x8, 0x7e08a9c5, 0xaf12, 0xfffff801, 0x3, 0x6ef, 0xfff, 0x4eef, 0xfffffffc, 0x2, 0x2, 0x8, 0xffffff00, 0x9, 0x3, 0x101, 0xc097, 0x2, 0x9, 0x7, 0xfffffffd, 0x9, 0x4, 0x10000, 0x7, 0x1, 0x2, 0x2, 0xb3, 0xfffffffa, 0x3, 0x80000001, 0x25, 0x9, 0x6, 0x80, 0xfdc8, 0x76a, 0x4, 0xdb84, 0xffff, 0x8, 0x5, 0x7f, 0x7, 0x8, 0xd752, 0xfffff800, 0x5, 0x4], "160bbe8c5ee7e0f20904d51b99e5e6b02d63cf088f51dab9bd3ccafa425e1442fa501ae000b9b73450d996de3768ae280767a6d7c59adad72a6ea8f39a460e756513210f58f47713abf297151ba20549d076ee558991028d7d47e52f457f90ef89b81cf7b31aee56907debba3b61606dc0edc513c54516d158832a7e4a7689fddf7aba0fdaf70e"}}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x503, 0x402, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x44, 0x18, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'ethtool\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2b1cd6660a80da5f91914c3d5f1bdade"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c49dc2c737b1a0f0d8593e0ba9849963"}, @IFLA_PORT_PROFILE={0x6, 0x2, '{\x00'}]}]}]}, 0x64}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

2.017988136s ago: executing program 2 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
open_tree(0xffffffffffffffff, 0x0, 0x89100)
mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x1)
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = gettid()
timer_create(0x1, 0x0, &(0x7f0000002800)=<r1=>0x0)
timer_gettime(r1, &(0x7f0000002840))
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000002880), &(0x7f00000028c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3004018, &(0x7f0000002940)=ANY=[@ANYBLOB="02"], 0x1, 0x28a, &(0x7f0000002980)="$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")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000002c40)=0x400030, 0x4)
timerfd_create(0x7, 0x80000)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000002cc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r5, &(0x7f0000002d00)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000002d40)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000002d80)=ANY=[@ANYBLOB="38010000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00), 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
umount2(&(0x7f0000002e80)='.\x00', 0x2)
timer_create(0x1, &(0x7f0000000640)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000680))
sigaltstack(0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x11)

1.895159049s ago: executing program 2 (id=131):
r0 = syz_io_uring_complete(0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r0, 0x54a6) (async, rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0xe, 0x2138}], 0x2) (rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) (async)
bind$tipc(r2, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0) (async)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000004c0)={0x42, 0x1}, 0x10) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) (async, rerun: 32)
sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) (rerun: 32)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000780)={0x3c8, 0x25, 0xe01, 0x70bd28, 0x25dfdbfe, {0x7}, [@nested={0xf6, 0x9c, 0x0, 0x1, [@generic="876d1801b3f324a0513d1e8108c59c8feb0ad8ea8c9cb110582ae3fc325a2c6b3bf373d08ad005410b7e74fb40a96d1c54cd5a49ba5844517ad867368c7cc2b8cbe74c394d9c71ab908a2c2707ab5efce7150dd6cfe142b0516004a321f961545c72e75ccaecda0d82516d200004fc1fe4c2a200c8fd6492816c7299cba3794e311100e7919b630afddbd5e03f9cf531482176d45144ebdb1ae7e17f5da184dc162813b22b3940dae2efcfdb5797ac8ed3da5cd9b70128f54f91fc79b5a84582ee92c250cfc44790bfa1a657b5c7c3847a81fa12451a08d12720b22689640799109e75c2b12b", @typed={0xc, 0xe, 0x0, 0x0, @u64=0x8a}]}, @generic="ad265c2150c6f90ce232f9b799ae", @nested={0x214, 0x42, 0x0, 0x1, [@nested={0x4, 0x4f}, @generic, @nested={0x4, 0x9}, @generic="19ff27014d2c7c140edb0c08aad9d5e0c9e3f825fc6c5c3d02efdd8b797044ea37dde2acb0f23517f980d5641af78fac8398c0afdddce600ac807117259d9e3f1d814aa43d532978a1afa567d6043d58bf7e1a4cc07a564acf4c221ffaa3b2bcb7e1321e56f52cacfae153a53218e460fced307e067fba0183c61ac82799c4be20aa6b2b4532de5a814e916ff024e63a0bd48be968623ba1c1", @nested={0x4, 0x166}, @typed={0xa8, 0x127, 0x0, 0x0, @binary="0f69d40f3f1b1d8c440556e8c5ae4b3d118327206b4ec4943a78dff1797dfa287069e3b2ed5086fda9c236a99284cae56546a3bd9f873e116c82a38f6632adcfb1b2b8d8004eb60474d316d0d49909e483ceef700f7674048f53ade21a838beb3bca38511546a2704cd16f125734f079c13406f7da8f434d7fc6d6b3c2c15891ca742a71a4f6e45fa417d669369f576de0931f988d70aa3c7a8ef758d6646e4980ca097b"}, @typed={0x4, 0xce}, @generic="a8c5a8b359ab77666a879f2e6c6bf367d83c850d7bacde76e04812fa064ee7c16a52e3cbbee920fb181a9292c7f6310debdcd2bbb270f421061ecd778bb266c7ce232de36b35c3fa6534f2b520ac8c4de7f0a39a42e840059b1c30b6ef6ed02fe170cfa72ea9df965f3e497e01efce7a53c2e0495952bf1cf8b78d4a293dffd2b7853a8ffd808daac8915062d80ed6b41262310c89639775363359fb60fb1f7da43df086c093498b67ff0e85392530064931dd8901a7581adfb999577552d3"]}, @nested={0x95, 0x56, 0x0, 0x1, [@generic="4f30b1bf8d4d716ea0703459282c6552189151cecaa0024ebf292ce66799139264df04cf57b98e04273219e308a2124246ab2267459128cd7a7d603a3da6b2d5d06355c198a2332cc9f0619e486a4bdf5fa10a605812e928723b8bf97808c1d8e335e76debc4fbf05c885f19996537cf1a1faaae9b813991b6ad4de184381a380608b0971a454ddd0f", @typed={0x8, 0x18, 0x0, 0x0, @fd=r6}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4004}, 0x48000) (async)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x1, 0x8000}, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000280)={0x11, 0x0, r7}, 0x14) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWMDB={0x58, 0x54, 0x409, 0x70bd28, 0x25dfdbfd, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x4, {@in6_addr=@private0, 0x800}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) (async, rerun: 32)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) (rerun: 32)
readv(r9, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1) (async)
ioctl$TIOCVHANGUP(r9, 0x5437, 0x2)

1.814585277s ago: executing program 2 (id=132):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x6, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="bf160000000000001801000020646c2500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000007000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000550000001500020000000000bf01000000000000850000005600000095"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8441, 0x1ac)
fallocate(r3, 0x8, 0x4000, 0x8000)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x8, r0}, 0x18)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x80, 0x18}, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = syz_mount_image$f2fs(&(0x7f00000008c0), &(0x7f0000000900)='./file2\x00', 0x800000, &(0x7f0000000940)=ANY=[], 0x1, 0x5504, &(0x7f0000001b00)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@arena={0x21, 0x0, 0x0, 0x11, 0x20400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)
r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/notes', 0x0, 0xaf)
preadv2(r11, &(0x7f0000000600)=[{&(0x7f0000000640)=""/232, 0xe8}, {0x0}], 0x2, 0x4, 0x7fff, 0x12)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x8541, 0x1a9)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x1000001, 0x10010, r12, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000200)='GPL\x00', 0x4d6, 0x48, &(0x7f0000000240)=""/72, 0x41100, 0x71, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000300)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r4, 0x1, r5, 0x1, r7, r8, r9, r10, r11, r12], &(0x7f00000007c0)=[{0x1, 0x3, 0x3}], 0x10, 0x800}, 0x94)
r13 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xa142, 0x0)
ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000040)=0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={r0, 0x0, 0xe, 0x0, &(0x7f0000001ac0)='\x00'/14, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.643499863s ago: executing program 1 (id=133):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028006000200dcf50000"], 0x40}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)="a61d", &(0x7f00000000c0), 0x3ff, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000140)=""/119, &(0x7f00000001c0), &(0x7f0000000200), 0x7, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000004000800850000003600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r1, r3, 0x25, 0x0, @void}, 0x10)
r4 = syz_io_uring_setup(0x317c, &(0x7f00000003c0)={0x0, 0xa405, 0x400, 0x3, 0x341}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580))
fcntl$getownex(r4, 0x10, &(0x7f00000005c0))
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x800, 0xffffff00, 0x400, r0, 0x574b, '\x00', r3, r5, 0x0, 0x5, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680), 0x1003, r6}, 0x38)

26.650577ms ago: executing program 4 (id=134):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @func_proto, @func={0x1, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, 0x0, 0x41}, 0x28)
syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff8000481100fe8000000000000000000600000000bbff02000000000000000000000000000100004e220048"], 0x0)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xffff}, {0xfff2}, {0x4, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040050)
syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000005752ee528920520490d00702f26010203010902120001f0b5008309040000000e011b"], 0x0)

0s ago: executing program 3 (id=135):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x49c, &(0x7f0000000740)="$eJzs3M1rXFUbAPDn3knS9u1H8vbtq7ZWjRYh+JE0adUKoigKLioKuqjLmKQldNpIE8WWYlORuhGkoGtxKfgXuBNB1JVQ3OnGlRSKdtPqKnLv3JtOpjNJ005nYvP7wWTOuffcnPPM/Tr3nEkCWLcGsx9JxJaI+CUi+mvZpQUGa29XL5+e+Ovy6YkkFhZe/yPJy125fHqiLFput7nIDKUR6YdJUclSsydPHR2vVqdOFPmRuWNvj8yePPX4u8fGj0wdmTo+duDA/n2jTz059kRb4sziurLr/ZndO19+8/wrE4fOv/XDV1l7txTr6+Nol8Es8D8Xco3rHm53ZV22tS6d9HSxIaxKJSKy3dWbn//9UYlrO68/XvogFp7tavuA2ye7N21ovXp+AbiDJdHtFgDdUd7os+ff8tWhrseacOn52gNQFvfV4lVb0xNpUaa34fm2nQYj4tD8359nr7hN4xAAAPU+nvjsYDzWrP+Xxl35+2/5z23FHMpARPw3IrZHxP8iYkdE/D8iL3t3RNyzyvobp4au7/+kF286uBuQ9f+eKea2lvb/yt5fDFSK3NY8/t7k8HR1am/xmQxF74YsP7pMHd+8eOGTVuvq+3/ZK6u/7AsW7bjY0zBANzk+N553Stvg0tmIXT3N4k8WZwKSiNgZEbtW96u3lYnpR77c3arQyvEvow3zTAtfZOHNZ/HPR0P8paR+fnL6uvnJkY1Rndo7Uh4V1/vxp3Ovtar/luJvg0tTtfe6/d9YZCCpn6+dXX0d5379qOUzzbX4N7U+/pN4un5XT47PpX3JG/k8c1+x7L3xubkToxF9ycE8v2T52LVty3xZPjv+h/Y0P/+3F9tk8d8bEdlBfF9E3B8RDxRtfzAiHoqIPcvE//0LrdeV8Ufapf1/NmKy6fVv8fhv2P8nTx2tRJFYXLJsonL0u69b1X9j17/9eWqoWJJf/1bQrDnZMdTYwFv57AAAAODfIs2/A5+kw4vpNB0ern2Hf0f8J63OzM49enjmneOTte/KD0RvWo509RfjodXp6nOjyXzxG2vjo2PFWHE5XrqvGDf+tLIpzw9PzFQnuxw7rHebW5z/md8r3W4dcJttarp0rK/jDQG6oHEePV2aPfNquBjAncrfa8P6tcL5n3aqHUDnuf/D+tXs/D/TkDcXAHcm939Yv5z/sE6l33a7BUAXLX//v9CxdgAddeN/xd/RxMa10Ywl/ylgvlOf2FrdKXkiokyka6I9Eisnfr6Zrbp9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiPfwIAAP//3/PqEg==")
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200240, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="1c753bc6c9d9f3626cc000f9d9cea1255b662519d49a809a8741b50af4fb308e17f5e1d12e60735fd309a51a236356de562019e425f9d95efc555d2dfe9e79aae6d931eea21966a0f43ec617d2ed9cd9681233be4fe1c9f7f4dda7a379991d76a07bca78", 0x64, 0xd0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts.
[   22.569253][   T28] audit: type=1400 audit(1794200595.527:64): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.573211][  T279] cgroup: Unknown subsys name 'net'
[   22.591959][   T28] audit: type=1400 audit(1794200595.527:65): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.619510][   T28] audit: type=1400 audit(1794200595.567:66): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.619955][  T279] cgroup: Unknown subsys name 'devices'
[   22.762887][  T279] cgroup: Unknown subsys name 'hugetlb'
[   22.768568][  T279] cgroup: Unknown subsys name 'rlimit'
[   22.874163][   T28] audit: type=1400 audit(1794200595.837:67): avc:  denied  { setattr } for  pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.897397][   T28] audit: type=1400 audit(1794200595.837:68): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.922469][   T28] audit: type=1400 audit(1794200595.837:69): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.962728][  T281] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   22.971562][   T28] audit: type=1400 audit(1794200595.937:70): avc:  denied  { relabelto } for  pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.997159][   T28] audit: type=1400 audit(1794200595.937:71): avc:  denied  { write } for  pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.032084][   T28] audit: type=1400 audit(1794200595.997:72): avc:  denied  { read } for  pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.057692][   T28] audit: type=1400 audit(1794200595.997:73): avc:  denied  { open } for  pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.057734][  T279] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.989985][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.997167][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.005019][  T287] device bridge_slave_0 entered promiscuous mode
[   24.012182][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.019248][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.026911][  T287] device bridge_slave_1 entered promiscuous mode
[   24.048537][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.055641][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.063142][  T288] device bridge_slave_0 entered promiscuous mode
[   24.094839][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.102135][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.109624][  T288] device bridge_slave_1 entered promiscuous mode
[   24.208114][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.215272][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.223241][  T289] device bridge_slave_0 entered promiscuous mode
[   24.230360][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.237493][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.245056][  T289] device bridge_slave_1 entered promiscuous mode
[   24.262640][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.269715][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.277250][  T290] device bridge_slave_0 entered promiscuous mode
[   24.306506][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.313652][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.321152][  T290] device bridge_slave_1 entered promiscuous mode
[   24.368642][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.375808][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.383399][  T291] device bridge_slave_0 entered promiscuous mode
[   24.390522][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.397738][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.405470][  T291] device bridge_slave_1 entered promiscuous mode
[   24.456985][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.464100][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.471473][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.478539][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.553392][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.560490][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.567862][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.574937][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.583870][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.591000][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.598323][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.605424][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.648693][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.655814][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.663182][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.670245][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.691369][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.698745][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.706084][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.713562][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.721252][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.728949][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.736577][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.743963][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.751450][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.781096][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.789558][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.797402][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.805288][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.814039][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.821238][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.828810][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.837151][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.844215][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.851696][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.859968][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.867065][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.874546][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.883029][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.890068][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.900988][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.909253][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.916421][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.935316][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.943583][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.950792][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.992979][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.001373][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.009388][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.017685][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.026106][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   25.033801][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.060256][  T288] device veth0_vlan entered promiscuous mode
[   25.070703][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.079239][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.088013][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.096339][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.104574][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.113456][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.122087][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.130129][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.138351][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.146642][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.154791][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   25.162468][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.169934][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.177571][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.187262][  T287] device veth0_vlan entered promiscuous mode
[   25.198435][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.206738][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.215111][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.224069][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.232716][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.239861][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.247468][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.256021][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.264551][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.271746][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.279298][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.287004][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.294709][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   25.309186][  T288] device veth1_macvtap entered promiscuous mode
[   25.322980][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.331921][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.340138][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.347215][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.354792][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.363959][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.372343][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.379412][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.387089][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.395636][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.404095][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.412018][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.420142][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.439122][  T287] device veth1_macvtap entered promiscuous mode
[   25.449274][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.457904][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.466649][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.475137][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.483387][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.491759][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.499894][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.507789][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.515923][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.541234][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.549763][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.558269][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.567558][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.576120][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.584585][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.607816][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.616151][  T288] request_module fs-gadgetfs succeeded, but still no fs?
[   25.616818][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.632564][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.641954][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.649828][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.658028][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.665656][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.674551][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.683153][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.697360][  T289] device veth0_vlan entered promiscuous mode
[   25.713240][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.726770][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.742143][  T313] loop1: detected capacity change from 0 to 256
[   25.748129][  T311] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.4' sets config #0
[   25.756220][  T313] =======================================================
[   25.756220][  T313] WARNING: The mand mount option has been deprecated and
[   25.756220][  T313]          and is ignored by this kernel. Remove the mand
[   25.756220][  T313]          option from the mount to silence this warning.
[   25.756220][  T313] =======================================================
[   25.771766][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.810328][  T311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   25.827992][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.836862][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.845063][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.852054][  T313] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[   25.865472][  T290] device veth0_vlan entered promiscuous mode
[   25.880738][  T291] device veth0_vlan entered promiscuous mode
[   25.895592][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.904480][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.917982][  T290] device veth1_macvtap entered promiscuous mode
[   25.931791][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.948163][  T291] device veth1_macvtap entered promiscuous mode
[   25.957890][  T289] device veth1_macvtap entered promiscuous mode
[   25.971306][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.979967][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.988896][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.000000][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.016665][  T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.029733][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.039685][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.055933][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.064929][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.170116][  T323] loop3: detected capacity change from 0 to 512
[   26.179019][  T323] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   26.327255][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.386485][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.438570][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.447049][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.560047][  T332] loop2: detected capacity change from 0 to 512
[   26.598199][  T331] loop4: detected capacity change from 0 to 1024
[   26.607172][  T331] EXT4-fs: Ignoring removed bh option
[   26.676303][  T340] dyndbg: bad flag-op 0, at start of 0
[   26.681892][  T340] dyndbg: flags parse failed
[   26.693500][  T340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=340 comm=syz.0.1
[   26.826793][  T332] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   27.000834][  T332] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   27.019524][  T331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   27.028982][  T332] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.3: Directory hole found for htree leaf block 0
[   27.049052][  T331] EXT4-fs (loop4): unmounting filesystem.
[   27.082397][  T289] EXT4-fs (loop2): unmounting filesystem.
[   27.627688][  T358] loop2: detected capacity change from 0 to 512
[   27.636161][  T358] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   27.691214][   T28] kauditd_printk_skb: 76 callbacks suppressed
[   27.691407][   T28] audit: type=1400 audit(1794200600.537:150): avc:  denied  { ioctl } for  pid=351 comm="syz.4.10" path="socket:[15337]" dev="sockfs" ino=15337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.830107][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   27.840495][  T362] binder: Bad value for 'max'
[   27.872378][   T28] audit: type=1400 audit(1794200600.537:151): avc:  denied  { ioctl } for  pid=351 comm="syz.4.10" path="socket:[16094]" dev="sockfs" ino=16094 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   27.897042][   T28] audit: type=1400 audit(1794200600.547:152): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   27.917792][   T28] audit: type=1400 audit(1794200600.807:153): avc:  denied  { mounton } for  pid=342 comm="syz.1.8" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   28.032025][  T370] user requested TSC rate below hardware speed
[   28.050670][   T24] usb 4-1: device descriptor read/64, error -71
[   28.072382][  T370] kvm [369]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   28.081293][  T370] kvm [369]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   28.099729][  T370] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns
[   28.290674][  T326] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   28.320669][   T24] usb 4-1: device descriptor read/64, error -71
[   28.331602][   T28] audit: type=1400 audit(1794200601.297:154): avc:  denied  { read } for  pid=374 comm="syz.0.16" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   28.370685][   T28] audit: type=1400 audit(1794200601.317:155): avc:  denied  { open } for  pid=374 comm="syz.0.16" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   28.432953][   T28] audit: type=1400 audit(1794200601.367:156): avc:  denied  { sys_module } for  pid=374 comm="syz.0.16" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   28.471831][  T326] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[   28.480211][  T326] usb 3-1: config 1 has no interface number 0
[   28.486901][  T326] usb 3-1: config 1 interface 105 has no altsetting 0
[   28.486957][   T28] audit: type=1400 audit(1794200601.367:157): avc:  denied  { read } for  pid=380 comm="syz.4.18" dev="nsfs" ino=4026532657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   28.500819][   T28] audit: type=1400 audit(1794200601.367:158): avc:  denied  { open } for  pid=380 comm="syz.4.18" path="net:[4026532657]" dev="nsfs" ino=4026532657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   28.526453][  T326] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   28.563395][  T326] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   28.568512][   T28] audit: type=1400 audit(1794200601.367:159): avc:  denied  { connect } for  pid=380 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   28.577996][  T326] usb 3-1: Product: syz
[   28.595799][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   28.610816][  T326] usb 3-1: Manufacturer: syz
[   28.618807][  T326] usb 3-1: SerialNumber: syz
[   28.750683][   T24] usb 4-1: device descriptor read/64, error -71
[   28.800726][   T40] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   28.991980][   T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   29.009523][   T40] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   29.020698][   T24] usb 4-1: device descriptor read/64, error -71
[   29.033542][   T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.047257][  T393] capability: warning: `syz.0.22' uses deprecated v2 capabilities in a way that may be insecure
[   29.048398][   T40] usb 5-1: Product: syz
[   29.070990][   T40] usb 5-1: Manufacturer: syz
[   29.078800][  T393] FAULT_INJECTION: forcing a failure.
[   29.078800][  T393] name failslab, interval 1, probability 0, space 0, times 1
[   29.080839][   T40] usb 5-1: SerialNumber: syz
[   29.117597][  T393] CPU: 0 PID: 393 Comm: syz.0.22 Not tainted syzkaller #0
[   29.124784][  T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   29.134901][  T393] Call Trace:
[   29.138229][  T393]  <TASK>
[   29.141193][  T393]  __dump_stack+0x21/0x24
[   29.141419][   T24] usb usb4-port1: attempt power cycle
[   29.145580][  T393]  dump_stack_lvl+0x110/0x170
[   29.145604][  T393]  ? __cfi_dump_stack_lvl+0x8/0x8
[   29.160749][  T393]  dump_stack+0x15/0x24
[   29.165031][  T393]  should_fail_ex+0x3bf/0x510
[   29.169754][  T393]  ? security_file_alloc+0x33/0x130
[   29.174995][  T393]  __should_failslab+0xac/0xf0
[   29.179816][  T393]  should_failslab+0x9/0x20
[   29.184361][  T393]  kmem_cache_alloc+0x3b/0x320
[   29.189216][  T393]  ? __alloc_file+0x28/0x2a0
[   29.193859][  T393]  security_file_alloc+0x33/0x130
[   29.199023][  T393]  __alloc_file+0xb5/0x2a0
[   29.203509][  T393]  alloc_empty_file+0x97/0x180
[   29.208329][  T393]  alloc_file+0x59/0x600
[   29.212624][  T393]  ? _raw_spin_unlock+0x4c/0x70
[   29.217872][  T393]  alloc_file_pseudo+0x180/0x200
[   29.222868][  T393]  ? __cfi_alloc_file_pseudo+0x10/0x10
[   29.228460][  T393]  ? _raw_spin_unlock+0x4c/0x70
[   29.233410][  T393]  ? alloc_fd+0x4c1/0x570
[   29.237782][  T393]  sock_alloc_file+0xba/0x270
[   29.242509][  T393]  __sys_socket+0x138/0x1a0
[   29.247066][  T393]  __x64_sys_socket+0x7a/0x90
[   29.251792][  T393]  x64_sys_call+0x449/0x9a0
[   29.256342][  T393]  do_syscall_64+0x4c/0xa0
[   29.260798][  T393]  ? clear_bhb_loop+0x30/0x80
[   29.265521][  T393]  ? clear_bhb_loop+0x30/0x80
[   29.270254][  T393]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   29.276194][  T393] RIP: 0033:0x7f5249b9fb19
[   29.280661][  T393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   29.300391][  T393] RSP: 002b:00007f524aa73fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   29.309049][  T393] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5249b9fb19
[   29.317418][  T393] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f
[   29.325434][  T393] RBP: 00007f5249c37b70 R08: 0000000000000000 R09: 0000000000000000
[   29.333463][  T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   29.341577][  T393] R13: 00007f5249e26038 R14: 00007f5249e25fa0 R15: 00007ffc88222f18
[   29.349599][  T393]  </TASK>
[   29.362335][   T40] usb 5-1: 1:1 : unsupported format bits 0x20000
[   29.371023][   T40] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[   29.378920][   T40] usb 5-1: 2:1 : unsupported format bits 0x20000
[   29.431758][   T40] usb 5-1: USB disconnect, device number 2
[   29.503346][  T396] loop0: detected capacity change from 0 to 512
[   29.514567][  T396] EXT4-fs: Ignoring removed nobh option
[   29.521296][  T396] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   29.534659][  T396] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   29.550737][  T396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c028, mo2=0002]
[   29.558929][  T326] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[   29.570674][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   29.581063][  T396] System zones: 1-12
[   29.593332][  T396] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.23: bad orphan inode 16
[   29.611791][   T24] usb 4-1: device descriptor read/8, error -71
[   29.614200][  T396] EXT4-fs (loop0): Remounting filesystem read-only
[   29.625030][  T396] ext4_test_bit(bit=15, block=4) = 0
[   29.630374][  T396] EXT4-fs (loop0): 1 orphan inode deleted
[   29.636255][  T396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   29.761790][   T24] usb 4-1: device descriptor read/8, error -71
[   29.785487][  T326] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[   29.802960][  T326] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 32:2c:c9:5e:fb:8b
[   29.828007][  T326] usb 3-1: USB disconnect, device number 2
[   29.840977][  T326] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[   29.911489][  T326] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   29.930717][  T326] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[   29.942433][  T326] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[   30.006856][  T415] netlink: 48 bytes leftover after parsing attributes in process `syz.4.26'.
[   30.046481][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   30.111385][   T24] usb 4-1: device descriptor read/8, error -71
[   30.130708][   T40] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   30.262068][   T24] usb 4-1: device descriptor read/8, error -71
[   30.322305][   T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.343980][   T40] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   30.358593][   T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.380996][   T24] usb usb4-port1: unable to enumerate USB device
[   30.435296][   T40] usb 2-1: config 0 descriptor??
[   30.477458][  T428] FAULT_INJECTION: forcing a failure.
[   30.477458][  T428] name fail_futex, interval 1, probability 0, space 0, times 1
[   30.510777][  T428] CPU: 1 PID: 428 Comm: syz.2.28 Not tainted syzkaller #0
[   30.518053][  T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   30.528145][  T428] Call Trace:
[   30.531458][  T428]  <TASK>
[   30.534420][  T428]  __dump_stack+0x21/0x24
[   30.538791][  T428]  dump_stack_lvl+0x110/0x170
[   30.543512][  T428]  ? __cfi_dump_stack_lvl+0x8/0x8
[   30.548671][  T428]  dump_stack+0x15/0x24
[   30.552869][  T428]  should_fail_ex+0x3bf/0x510
[   30.557605][  T428]  should_fail+0xb/0x10
[   30.561932][  T428]  get_futex_key+0x143/0xb10
[   30.566575][  T428]  ? kasan_set_track+0x60/0x70
[   30.571472][  T428]  ? kasan_save_free_info+0x2b/0x40
[   30.576707][  T428]  ? slab_free_freelist_hook+0xc2/0x190
[   30.582289][  T428]  ? __se_sys_mount+0x341/0x390
[   30.587182][  T428]  ? __x64_sys_mount+0xbf/0xd0
[   30.591987][  T428]  ? __cfi_get_futex_key+0x10/0x10
[   30.597184][  T428]  futex_wake+0x150/0x8e0
[   30.601652][  T428]  ? __cfi_futex_wake+0x10/0x10
[   30.606548][  T428]  ? debug_smp_processor_id+0x17/0x20
[   30.611971][  T428]  do_futex+0x2bf/0x430
[   30.616183][  T428]  ? slab_free_freelist_hook+0xc2/0x190
[   30.621771][  T428]  ? __cfi_do_futex+0x10/0x10
[   30.626488][  T428]  ? __se_sys_mount+0x341/0x390
[   30.627783][  T432] Zero length message leads to an empty skb
[   30.631379][  T428]  __se_sys_futex+0x136/0x310
[   30.631408][  T428]  ? __x64_sys_futex+0x100/0x100
[   30.647128][  T428]  ? xfd_validate_state+0x70/0x150
[   30.652310][  T428]  ? __kasan_check_write+0x14/0x20
[   30.657705][  T428]  __x64_sys_futex+0xe5/0x100
[   30.662432][  T428]  x64_sys_call+0x7ec/0x9a0
[   30.666982][  T428]  do_syscall_64+0x4c/0xa0
[   30.671439][  T428]  ? clear_bhb_loop+0x30/0x80
[   30.676161][  T428]  ? clear_bhb_loop+0x30/0x80
[   30.680895][  T428]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   30.686839][  T428] RIP: 0033:0x7efdd7d9fb19
[   30.691300][  T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   30.710942][  T428] RSP: 002b:00007efdd8d350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   30.719409][  T428] RAX: ffffffffffffffda RBX: 00007efdd8025fa8 RCX: 00007efdd7d9fb19
[   30.727423][  T428] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efdd8025fac
[   30.735438][  T428] RBP: 00007efdd8025fa0 R08: 0019acf9c02367bc R09: 0000000000000000
[   30.743453][  T428] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[   30.751497][  T428] R13: 00007efdd8026038 R14: 00007ffcc4bdd3d0 R15: 00007ffcc4bdd4b8
[   30.759519][  T428]  </TASK>
[   30.893493][   T40] usbhid 2-1:0.0: can't add hid device: -71
[   30.899493][   T40] usbhid: probe of 2-1:0.0 failed with error -71
[   30.923475][   T40] usb 2-1: USB disconnect, device number 2
[   31.055890][  T440] kvm [439]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   31.100278][  T440] kvm [439]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   31.195334][  T451] netlink: 128 bytes leftover after parsing attributes in process `syz.2.32'.
[   31.228527][  T451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'.
[   31.266608][  T451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'.
[   31.990751][   T40] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   32.290377][   T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.310661][   T40] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   32.320316][   T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.329517][   T40] usb 2-1: config 0 descriptor??
[   32.500682][  T426] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   32.650674][  T326] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   32.680657][  T426] usb 3-1: Using ep0 maxpacket: 8
[   32.687046][  T426] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   32.697534][  T426] usb 3-1: config 0 has no interfaces?
[   32.703208][  T426] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[   32.712474][  T426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   32.723944][  T426] usb 3-1: config 0 descriptor??
[   32.740663][  T298] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   32.800779][  T326] usb 5-1: device descriptor read/64, error -71
[   32.909837][  T290] EXT4-fs (loop0): unmounting filesystem.
[   32.918042][  T346] udevd[346]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[   32.928331][  T346] udevd[346]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[   32.936165][   T28] kauditd_printk_skb: 20 callbacks suppressed
[   32.936206][   T28] audit: type=1400 audit(1794200605.897:180): avc:  denied  { create } for  pid=473 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.963193][  T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   32.966804][   T28] audit: type=1400 audit(1794200605.927:181): avc:  denied  { accept } for  pid=473 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   32.981791][  T298] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   33.003590][  T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.014985][  T298] usb 4-1: config 0 descriptor??
[   33.020133][   T28] audit: type=1400 audit(1794200605.927:182): avc:  denied  { ioctl } for  pid=473 comm="syz.0.38" path="socket:[16616]" dev="sockfs" ino=16616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.056657][  T483] loop0: detected capacity change from 0 to 1024
[   33.065026][  T350] udevd[350]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[   33.073856][  T326] usb 5-1: device descriptor read/64, error -71
[   33.079914][  T483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   33.092378][   T28] audit: type=1400 audit(1794200606.057:183): avc:  denied  { read write } for  pid=482 comm="syz.0.40" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.114959][   T28] audit: type=1400 audit(1794200606.057:184): avc:  denied  { open } for  pid=482 comm="syz.0.40" path="/9/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.161090][   T40] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[   33.168885][   T40] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4
[   33.251535][  T298] usbhid 4-1:0.0: can't add hid device: -71
[   33.257570][  T298] usbhid: probe of 4-1:0.0 failed with error -71
[   33.268782][  T298] usb 4-1: USB disconnect, device number 6
[   33.340744][  T326] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   33.472431][   T40] usb 2-1: USB disconnect, device number 3
[   33.478367][    C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[   33.490674][  T326] usb 5-1: device descriptor read/64, error -71
[   33.686440][  T488] FAULT_INJECTION: forcing a failure.
[   33.686440][  T488] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   33.699848][  T488] CPU: 0 PID: 488 Comm: syz.2.36 Not tainted syzkaller #0
[   33.707091][  T488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   33.717449][  T488] Call Trace:
[   33.720743][  T488]  <TASK>
[   33.723688][  T488]  __dump_stack+0x21/0x24
[   33.728111][  T488]  dump_stack_lvl+0x110/0x170
[   33.732796][  T488]  ? __cfi_dump_stack_lvl+0x8/0x8
[   33.737822][  T488]  ? stack_trace_save+0xa6/0xf0
[   33.742683][  T488]  ? __stack_depot_save+0x36/0x490
[   33.747824][  T488]  dump_stack+0x15/0x24
[   33.751990][  T488]  should_fail_ex+0x3bf/0x510
[   33.756675][  T488]  should_fail_alloc_page+0x61/0x90
[   33.760865][  T326] usb 5-1: device descriptor read/64, error -71
[   33.761907][  T488]  prepare_alloc_pages+0x131/0x570
[   33.773292][  T488]  ? path_openat+0x13fe/0x2f30
[   33.778095][  T488]  ? __alloc_pages_bulk+0x9d0/0x9d0
[   33.783335][  T488]  __alloc_pages+0x15b/0x610
[   33.787945][  T488]  ? __cfi___alloc_pages+0x10/0x10
[   33.793084][  T488]  ? __kasan_check_write+0x14/0x20
[   33.798241][  T488]  ? lockref_get+0x12d/0x1c0
[   33.802856][  T488]  ? __kasan_check_write+0x14/0x20
[   33.807993][  T488]  __get_free_pages+0xe/0x30
[   33.812605][  T488]  selinux_genfs_get_sid+0x59/0x250
[   33.817909][  T488]  inode_doinit_with_dentry+0x884/0xd90
[   33.823566][  T488]  ? sb_finish_set_opts+0xa10/0xa10
[   33.828780][  T488]  ? __cfi_current_time+0x10/0x10
[   33.833822][  T488]  selinux_d_instantiate+0x27/0x40
[   33.838943][  T488]  security_d_instantiate+0xb3/0x110
[   33.844251][  T488]  d_splice_alias+0x6d/0x390
[   33.848855][  T488]  kernfs_iop_lookup+0x2c2/0x310
[   33.853814][  T488]  ? __cfi_kernfs_iop_lookup+0x10/0x10
[   33.859365][  T488]  path_openat+0x13fe/0x2f30
[   33.863972][  T488]  ? do_filp_open+0x420/0x420
[   33.868679][  T488]  do_filp_open+0x1ee/0x420
[   33.873199][  T488]  ? __cfi_do_filp_open+0x10/0x10
[   33.878271][  T488]  ? alloc_fd+0x4c1/0x570
[   33.881045][  T326] usb usb5-port1: attempt power cycle
[   33.882643][  T488]  do_sys_openat2+0x15e/0x820
[   33.892720][  T488]  ? do_sys_open+0xe0/0xe0
[   33.897182][  T488]  ? do_user_addr_fault+0x9a5/0x1030
[   33.902486][  T488]  __x64_sys_openat+0x136/0x160
[   33.907353][  T488]  x64_sys_call+0x783/0x9a0
[   33.911861][  T488]  do_syscall_64+0x4c/0xa0
[   33.916279][  T488]  ? clear_bhb_loop+0x30/0x80
[   33.921053][  T488]  ? clear_bhb_loop+0x30/0x80
[   33.925762][  T488]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   33.931760][  T488] RIP: 0033:0x7efdd7d6034e
[   33.936191][  T488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   33.955809][  T488] RSP: 002b:00007efdd8cf2ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   33.964318][  T488] RAX: ffffffffffffffda RBX: 00007efdd8cf36c0 RCX: 00007efdd7d6034e
[   33.972297][  T488] RDX: 0000000000000000 RSI: 00007efdd7e36d42 RDI: ffffffffffffff9c
[   33.980308][  T488] RBP: 00007efdd7e37b70 R08: 0000000000000000 R09: 0000000000000000
[   33.988319][  T488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   33.996328][  T488] R13: 0000000000000000 R14: 00007efdd8026180 R15: 00007ffcc4bdd4b8
[   34.004342][  T488]  </TASK>
[   34.018594][  T290] EXT4-fs (loop0): unmounting filesystem.
[   34.031895][  T314] udevd[314]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[   34.045760][  T314] udevd[314]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[   34.056601][  T492] FAULT_INJECTION: forcing a failure.
[   34.056601][  T492] name failslab, interval 1, probability 0, space 0, times 0
[   34.069886][  T492] CPU: 0 PID: 492 Comm: syz.0.42 Not tainted syzkaller #0
[   34.077138][  T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   34.087236][  T492] Call Trace:
[   34.090555][  T492]  <TASK>
[   34.093521][  T492]  __dump_stack+0x21/0x24
[   34.097888][  T492]  dump_stack_lvl+0x110/0x170
[   34.102620][  T492]  ? __cfi_dump_stack_lvl+0x8/0x8
[   34.107691][  T492]  ? __cfi_avc_has_perm+0x10/0x10
[   34.112772][  T492]  dump_stack+0x15/0x24
[   34.116963][  T492]  should_fail_ex+0x3bf/0x510
[   34.121719][  T492]  __should_failslab+0xac/0xf0
[   34.126531][  T492]  should_failslab+0x9/0x20
[   34.131104][  T492]  __kmem_cache_alloc_node+0x3d/0x2d0
[   34.136560][  T492]  ? nd_alloc_stack+0x81/0xf0
[   34.141277][  T492]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[   34.147057][  T492]  ? nd_alloc_stack+0x81/0xf0
[   34.151762][  T492]  kmalloc_trace+0x29/0xb0
[   34.156219][  T492]  nd_alloc_stack+0x81/0xf0
[   34.160759][  T492]  pick_link+0xc7f/0xe30
[   34.165038][  T492]  ? selinux_inode_permission+0x404/0x5d0
[   34.170808][  T492]  step_into+0xc27/0xf00
[   34.175097][  T492]  ? __d_lookup_rcu+0x37b/0x400
[   34.179990][  T492]  ? set_root+0x400/0x400
[   34.184391][  T492]  ? lookup_fast+0x15f/0x520
[   34.189024][  T492]  ? inode_permission+0xef/0x4b0
[   34.194116][  T492]  link_path_walk+0x744/0xeb0
[   34.198832][  T492]  ? handle_lookup_down+0x130/0x130
[   34.204075][  T492]  ? walk_component+0x245/0x430
[   34.209005][  T492]  path_lookupat+0x8d/0x430
[   34.213551][  T492]  filename_lookup+0x229/0x580
[   34.218368][  T492]  ? __cfi_filename_lookup+0x10/0x10
[   34.223700][  T492]  ? strncpy_from_user+0x172/0x2c0
[   34.228854][  T492]  ? getname_flags+0x205/0x510
[   34.233717][  T492]  user_path_at_empty+0x46/0x1c0
[   34.238671][  T492]  __se_sys_mount+0x2eb/0x390
[   34.243364][  T492]  ? __this_cpu_preempt_check+0x13/0x20
[   34.248952][  T492]  ? __x64_sys_mount+0xd0/0xd0
[   34.253726][  T492]  ? __kasan_check_write+0x14/0x20
[   34.258849][  T492]  ? fpregs_restore_userregs+0x128/0x260
[   34.264566][  T492]  __x64_sys_mount+0xbf/0xd0
[   34.269276][  T492]  x64_sys_call+0x65d/0x9a0
[   34.273792][  T492]  do_syscall_64+0x4c/0xa0
[   34.278237][  T492]  ? clear_bhb_loop+0x30/0x80
[   34.282974][  T492]  ? clear_bhb_loop+0x30/0x80
[   34.287680][  T492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   34.290828][  T326] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   34.293596][  T492] RIP: 0033:0x7f5249b9fb19
[   34.305770][  T492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   34.325569][  T492] RSP: 002b:00007f524aa74028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   34.332580][  T326] usb 5-1: device descriptor read/8, error -71
[   34.334008][  T492] RAX: ffffffffffffffda RBX: 00007f5249e25fa0 RCX: 00007f5249b9fb19
[   34.334027][  T492] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000
[   34.334042][  T492] RBP: 00007f5249c37b70 R08: 0000200000000380 R09: 0000000000000000
[   34.364478][  T492] R10: 0000000000100422 R11: 0000000000000246 R12: 0000000000000000
[   34.372483][  T492] R13: 00007f5249e26038 R14: 00007f5249e25fa0 R15: 00007ffc88222f18
[   34.380491][  T492]  </TASK>
[   34.385002][  T495] netlink: 48 bytes leftover after parsing attributes in process `syz.1.41'.
[   34.424967][  T298] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   34.482163][  T326] usb 5-1: device descriptor read/8, error -71
[   34.537073][  T497] netlink: 128 bytes leftover after parsing attributes in process `syz.0.43'.
[   34.546359][  T497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'.
[   34.555729][  T497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'.
[   34.612774][  T298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.612992][  T298] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   34.613130][  T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.628040][  T298] usb 4-1: config 0 descriptor??
[   34.669263][   T28] audit: type=1400 audit(1794200607.627:185): avc:  denied  { setopt } for  pid=498 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   34.688598][   T28] audit: type=1400 audit(1794200607.627:186): avc:  denied  { bind } for  pid=498 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   34.750650][  T326] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   34.772102][  T501] 
: renamed from bond_slave_0
[   34.783376][  T326] usb 5-1: device descriptor read/8, error -71
[   34.941675][  T326] usb 5-1: device descriptor read/8, error -71
[   35.060798][  T326] usb usb5-port1: unable to enumerate USB device
[   35.070305][  T503] kvm [502]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   35.078824][  T503] kvm [502]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   36.121948][  T298] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[   36.160269][   T40] usb 3-1: USB disconnect, device number 3
[   36.228873][   T28] audit: type=1400 audit(1794200609.187:187): avc:  denied  { mounton } for  pid=516 comm="syz.4.50" path="/syzcgroup/cpu/syz4/cpuset.cpus" dev="cgroup" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   36.315682][   T28] audit: type=1400 audit(1794200609.227:188): avc:  denied  { read write } for  pid=516 comm="syz.4.50" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   36.475409][  T530] loop0: detected capacity change from 0 to 512
[   36.492281][  T346] udevd[346]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[   36.528378][  T530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   36.536662][  T530] System zones: 1-12
[   36.569638][  T530] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.52: missing EA_INODE flag
[   36.584867][  T530] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.52: error while reading EA inode 12 err=-117
[   36.598343][  T530] EXT4-fs (loop0): 1 orphan inode deleted
[   36.604167][  T530] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   36.807913][   T28] audit: type=1400 audit(1794200609.227:189): avc:  denied  { open } for  pid=516 comm="syz.4.50" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   36.882628][  T298] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[   37.021536][  T298] usb 4-1: USB disconnect, device number 7
[   37.027456][    C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[   37.616075][  T290] EXT4-fs (loop0): unmounting filesystem.
[   37.720245][  T314] udevd[314]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[   37.744394][  T568] FAULT_INJECTION: forcing a failure.
[   37.744394][  T568] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   37.763310][  T314] udevd[314]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory
[   37.803813][  T568] CPU: 0 PID: 568 Comm: syz.0.60 Not tainted syzkaller #0
[   37.811088][  T568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   37.821187][  T568] Call Trace:
[   37.824541][  T568]  <TASK>
[   37.827504][  T568]  __dump_stack+0x21/0x24
[   37.831883][  T568]  dump_stack_lvl+0x110/0x170
[   37.836593][  T568]  ? __cfi_dump_stack_lvl+0x8/0x8
[   37.841661][  T568]  ? __kasan_slab_free+0x11/0x20
[   37.846660][  T568]  ? kmem_cache_free+0x12d/0x300
[   37.851652][  T568]  ? kfree_skbmem+0x10c/0x180
[   37.856378][  T568]  ? consume_skb+0xb3/0x1f0
[   37.860932][  T568]  ? netlink_sendmsg+0x8b9/0xbd0
[   37.865912][  T568]  ? __sys_sendto+0x4ac/0x660
[   37.870639][  T568]  ? __x64_sys_sendto+0xe5/0x100
[   37.875632][  T568]  ? x64_sys_call+0x83/0x9a0
[   37.880266][  T568]  dump_stack+0x15/0x24
[   37.884454][  T568]  should_fail_ex+0x3bf/0x510
[   37.889179][  T568]  should_fail+0xb/0x10
[   37.893386][  T568]  should_fail_usercopy+0x1a/0x20
[   37.898446][  T568]  copyout+0x20/0xa0
[   37.902395][  T568]  _copy_to_iter+0x3ce/0xe60
[   37.907072][  T568]  ? __cfi__copy_to_iter+0x10/0x10
[   37.912233][  T568]  ? __skb_try_recv_from_queue+0x29b/0x6f0
[   37.918097][  T568]  ? __check_object_size+0x45a/0x600
[   37.923419][  T568]  simple_copy_to_iter+0x50/0x70
[   37.928406][  T568]  __skb_datagram_iter+0xf1/0x730
[   37.933485][  T568]  ? __cfi_simple_copy_to_iter+0x10/0x10
[   37.939200][  T568]  skb_copy_datagram_iter+0x40/0x150
[   37.944546][  T568]  netlink_recvmsg+0x2d0/0xe00
[   37.949374][  T568]  ? __cfi_netlink_recvmsg+0x10/0x10
[   37.954751][  T568]  ? netlink_sendmsg+0x8fe/0xbd0
[   37.959757][  T568]  ? security_socket_recvmsg+0x99/0xc0
[   37.965300][  T568]  __sys_recvfrom+0x354/0x4d0
[   37.970039][  T568]  ? __cfi___sys_recvfrom+0x10/0x10
[   37.975311][  T568]  ? do_user_addr_fault+0x9a5/0x1030
[   37.980656][  T568]  __x64_sys_recvfrom+0xe5/0x100
[   37.985645][  T568]  x64_sys_call+0x7c/0x9a0
[   37.990106][  T568]  do_syscall_64+0x4c/0xa0
[   37.994648][  T568]  ? clear_bhb_loop+0x30/0x80
[   37.999379][  T568]  ? clear_bhb_loop+0x30/0x80
[   38.004104][  T568]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   38.010093][  T568] RIP: 0033:0x7f5249b6034e
[   38.014549][  T568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   38.034194][  T568] RSP: 002b:00007f524aa72e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[   38.042656][  T568] RAX: ffffffffffffffda RBX: 00007f524aa746c0 RCX: 00007f5249b6034e
[   38.050670][  T568] RDX: 0000000000001000 RSI: 00007f524aa73000 RDI: 0000000000000008
[   38.058684][  T568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   38.066696][  T568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[   38.074715][  T568] R13: 00007f524aa72f58 R14: 00007f524aa73000 R15: 0000000000000000
[   38.082735][  T568]  </TASK>
[   38.190619][    C1] sched: RT throttling activated
[   38.194710][  T548] loop3: detected capacity change from 0 to 40427
[   38.208653][  T548] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   38.215063][  T548] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   38.319283][  T314] udevd[314]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory
[   38.329853][  T314] udevd[314]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory
[   38.335839][  T548] F2FS-fs (loop3): invalid crc value
[   38.364120][  T548] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   38.397941][  T548] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   38.405474][  T548] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   38.423395][   T28] kauditd_printk_skb: 12 callbacks suppressed
[   38.423410][   T28] audit: type=1400 audit(1794200611.387:202): avc:  denied  { create } for  pid=547 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   38.456342][  T288] syz-executor: attempt to access beyond end of device
[   38.456342][  T288] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   38.474133][  T582] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[   38.510178][  T314] udevd[314]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory
[   38.533123][  T314] udevd[314]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory
[   38.599568][   T28] audit: type=1400 audit(1794200611.557:203): avc:  denied  { write } for  pid=586 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.628283][   T28] audit: type=1400 audit(1794200611.557:204): avc:  denied  { create } for  pid=586 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   38.672470][  T593] loop1: detected capacity change from 0 to 512
[   38.681044][  T314] udevd[314]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory
[   38.690857][  T593] EXT4-fs (loop1): Test dummy encryption mode enabled
[   38.697704][  T593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   38.708097][  T314] udevd[314]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory
[   38.722744][  T593] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.68: bad orphan inode 131083
[   38.733737][  T593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   38.756740][   T28] audit: type=1400 audit(1794200611.717:205): avc:  denied  { create } for  pid=592 comm="syz.1.68" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   38.824500][   T28] audit: type=1400 audit(1794200611.787:206): avc:  denied  { setopt } for  pid=598 comm="syz.2.69" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   38.845259][  T599] ip_tables: iptables: counters copy to user failed while replacing table
[   38.860663][    T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   38.861601][   T28] audit: type=1400 audit(1794200611.817:207): avc:  denied  { create } for  pid=592 comm="syz.1.68" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   38.915301][  T604] loop2: detected capacity change from 0 to 128
[   38.921698][  T600] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   38.936438][  T597] loop3: detected capacity change from 0 to 128
[   38.947667][  T314] udevd[314]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   38.957420][  T607] 9pnet_fd: Insufficient options for proto=fd
[   38.963803][  T314] udevd[314]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory
[   38.973774][  T604] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   38.982720][  T611] 9pnet_fd: Insufficient options for proto=fd
[   38.989219][  T604] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.017948][  T604] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.70: No space for directory leaf checksum. Please run e2fsck -D.
[   39.034247][  T314] udevd[314]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory
[   39.046706][  T604] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.70: checksumming directory block 0
[   39.059733][  T314] udevd[314]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory
[   39.064164][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   39.081612][   T28] audit: type=1400 audit(1794200612.047:208): avc:  denied  { setopt } for  pid=588 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   39.085440][    T6] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   39.108331][  T604] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.70: No space for directory leaf checksum. Please run e2fsck -D.
[   39.111162][   T28] audit: type=1400 audit(1794200612.067:209): avc:  denied  { write } for  pid=603 comm="syz.2.70" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.125716][  T604] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.70: Directory block failed checksum
[   39.154894][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.164072][  T589] syz.3.67 (589) used greatest stack depth: 21768 bytes left
[   39.172643][   T28] audit: type=1400 audit(1794200612.067:210): avc:  denied  { open } for  pid=603 comm="syz.2.70" path="/dev/input/event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.201542][    T6] usb 1-1: config 0 descriptor??
[   39.208389][   T28] audit: type=1400 audit(1794200612.067:211): avc:  denied  { ioctl } for  pid=603 comm="syz.2.70" path="/dev/input/event2" dev="devtmpfs" ino=275 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.233981][  T298] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   39.248461][  T289] EXT4-fs (loop2): unmounting filesystem.
[   39.268193][  T627] loop2: detected capacity change from 0 to 512
[   39.275031][  T627] EXT4-fs: Ignoring removed orlov option
[   39.282924][  T627] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   39.295149][  T627] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz.2.74: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[   39.312531][  T627] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.74: couldn't read orphan inode 16 (err -117)
[   39.325034][  T627] EXT4-fs (loop2): 1 orphan inode deleted
[   39.331134][  T627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   39.351505][  T289] EXT4-fs (loop2): unmounting filesystem.
[   39.368450][  T634] loop2: detected capacity change from 0 to 256
[   39.410689][    T6] usbhid 1-1:0.0: can't add hid device: -71
[   39.416759][    T6] usbhid: probe of 1-1:0.0 failed with error -71
[   39.423216][  T298] usb 2-1: Using ep0 maxpacket: 16
[   39.429905][  T298] usb 2-1: unable to get BOS descriptor or descriptor too short
[   39.446787][    T6] usb 1-1: USB disconnect, device number 2
[   39.453763][  T298] usb 2-1: unable to read config index 0 descriptor/start: -61
[   39.462255][  T298] usb 2-1: can't read configurations, error -61
[   39.479538][  T634] loop2: detected capacity change from 0 to 256
[   39.495365][  T634] FAT-fs (loop2): Directory bread(block 64) failed
[   39.502284][  T634] FAT-fs (loop2): Directory bread(block 65) failed
[   39.508874][  T634] FAT-fs (loop2): Directory bread(block 66) failed
[   39.515795][  T634] FAT-fs (loop2): Directory bread(block 67) failed
[   39.523227][  T634] FAT-fs (loop2): Directory bread(block 68) failed
[   39.529920][  T634] FAT-fs (loop2): Directory bread(block 69) failed
[   39.536953][  T634] FAT-fs (loop2): Directory bread(block 70) failed
[   39.544192][  T634] FAT-fs (loop2): Directory bread(block 71) failed
[   39.550845][  T634] FAT-fs (loop2): Directory bread(block 72) failed
[   39.557637][  T634] FAT-fs (loop2): Directory bread(block 73) failed
[   39.609252][  T644] loop2: detected capacity change from 0 to 512
[   39.620866][  T298] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   39.631889][  T644] EXT4-fs (loop2): Test dummy encryption mode enabled
[   39.651450][  T644] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #11: comm syz.2.80: casefold flag without casefold feature
[   39.664218][  T644] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.80: couldn't read orphan inode 11 (err -117)
[   39.676213][  T644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   39.850660][  T298] usb 2-1: Using ep0 maxpacket: 16
[   39.857914][  T298] usb 2-1: unable to get BOS descriptor or descriptor too short
[   39.868380][  T298] usb 2-1: unable to read config index 0 descriptor/start: -61
[   40.368213][  T298] usb 2-1: can't read configurations, error -61
[   40.374944][  T298] usb usb2-port1: attempt power cycle
[   40.420465][  T649] fuse: Bad value for 'fd'
[   40.560707][    T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   40.696206][  T289] EXT4-fs (loop2): unmounting filesystem.
[   40.781906][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.792920][    T6] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   40.802025][  T298] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   40.809586][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.818731][    T6] usb 1-1: config 0 descriptor??
[   40.851008][  T298] usb 2-1: Using ep0 maxpacket: 16
[   40.857726][  T298] usb 2-1: unable to get BOS descriptor or descriptor too short
[   40.866694][  T298] usb 2-1: unable to read config index 0 descriptor/start: -61
[   40.874388][  T298] usb 2-1: can't read configurations, error -61
[   40.960697][  T654] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   41.030692][  T298] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   41.061555][  T298] usb 2-1: Using ep0 maxpacket: 16
[   41.068286][  T298] usb 2-1: unable to get BOS descriptor or descriptor too short
[   41.077398][  T298] usb 2-1: unable to read config index 0 descriptor/start: -61
[   41.085192][  T298] usb 2-1: can't read configurations, error -61
[   41.092137][  T298] usb usb2-port1: unable to enumerate USB device
[   41.140666][  T654] usb 4-1: Using ep0 maxpacket: 8
[   41.147638][  T654] usb 4-1: config 1 has an invalid interface number: 150 but max is 0
[   41.156016][  T654] usb 4-1: config 1 has no interface number 0
[   41.162181][  T654] usb 4-1: config 1 interface 150 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64
[   41.173110][  T654] usb 4-1: config 1 interface 150 has no altsetting 0
[   41.180290][  T654] usb 4-1: language id specifier not provided by device, defaulting to English
[   41.197701][  T654] usb 4-1: New USB device found, idVendor=0582, idProduct=006d, bcdDevice= 5.3b
[   41.206926][  T654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.215092][  T654] usb 4-1: Product: ь
[   41.219346][  T654] usb 4-1: Manufacturer: 塮䍲떋떘䱫紡ꙃⶇ퓹
[   41.226423][  T654] usb 4-1: SerialNumber: syz
[   41.531505][  T654] usb 4-1: USB disconnect, device number 8
[   41.626529][  T673] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   41.641217][    T6] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[   41.649207][    T6] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[   41.691397][  T287] EXT4-fs (loop1): unmounting filesystem.
[   42.219767][    C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[   42.233007][    T6] usb 1-1: USB disconnect, device number 3
[   42.360497][  T695] FAULT_INJECTION: forcing a failure.
[   42.360497][  T695] name failslab, interval 1, probability 0, space 0, times 0
[   42.374223][  T695] CPU: 0 PID: 695 Comm: syz.3.92 Not tainted syzkaller #0
[   42.381438][  T695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   42.391624][  T695] Call Trace:
[   42.394936][  T695]  <TASK>
[   42.397892][  T695]  __dump_stack+0x21/0x24
[   42.402251][  T695]  dump_stack_lvl+0x110/0x170
[   42.406959][  T695]  ? __cfi_dump_stack_lvl+0x8/0x8
[   42.412015][  T695]  ? security_file_alloc+0x33/0x130
[   42.417243][  T695]  ? security_file_alloc+0x33/0x130
[   42.422465][  T695]  dump_stack+0x15/0x24
[   42.426680][  T695]  should_fail_ex+0x3bf/0x510
[   42.431398][  T695]  ? create_new_namespaces+0x34/0x660
[   42.436809][  T695]  __should_failslab+0xac/0xf0
[   42.441607][  T695]  should_failslab+0x9/0x20
[   42.446142][  T695]  kmem_cache_alloc+0x3b/0x320
[   42.450964][  T695]  create_new_namespaces+0x34/0x660
[   42.456208][  T695]  __se_sys_setns+0x2c2/0x1180
[   42.461103][  T695]  ? __x64_sys_setns+0x70/0x70
[   42.465910][  T695]  ? debug_smp_processor_id+0x17/0x20
[   42.471587][  T695]  __x64_sys_setns+0x5b/0x70
[   42.476215][  T695]  x64_sys_call+0x672/0x9a0
[   42.480766][  T695]  do_syscall_64+0x4c/0xa0
[   42.485207][  T695]  ? clear_bhb_loop+0x30/0x80
[   42.489919][  T695]  ? clear_bhb_loop+0x30/0x80
[   42.494632][  T695]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.500570][  T695] RIP: 0033:0x7f6b6aba0e17
[   42.505006][  T695] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.524636][  T695] RSP: 002b:00007f6b6ba08fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[   42.533078][  T695] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6b6aba0e17
[   42.541073][  T695] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004
[   42.549063][  T695] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
[   42.557051][  T695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b6ba096a8
[   42.565038][  T695] R13: 000000000000000e R14: 00007f6b6ae25fa0 R15: 00007fff1d680728
[   42.573035][  T695]  </TASK>
[   42.803236][  T724] loop2: detected capacity change from 0 to 512
[   42.834441][  T724] loop2: detected capacity change from 0 to 512
[   42.846795][  T722] EXT4-fs: Ignoring removed orlov option
[   42.852595][  T722] EXT4-fs: Ignoring removed orlov option
[   42.863137][  T722] EXT4-fs (loop3): #clusters per group too big: 32768
[   43.004444][  T745] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[   43.121100][  T326] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   43.170756][  T420] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   43.214061][  T724] set_capacity_and_notify: 9 callbacks suppressed
[   43.214078][  T724] loop2: detected capacity change from 0 to 512
[   43.264059][  T724] loop2: detected capacity change from 0 to 512
[   43.301860][  T326] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[   43.310886][  T654] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   43.312209][  T326] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   43.332441][  T326] usb 2-1: config 0 interface 0 has no altsetting 0
[   43.339145][  T326] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00
[   43.349704][  T314] udevd[314]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   43.354697][  T724] loop2: detected capacity change from 0 to 512
[   43.363528][  T314] udevd[314]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   43.364964][  T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.379588][  T314] udevd[314]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   43.386479][  T420] usb 1-1: unable to get BOS descriptor or descriptor too short
[   43.398672][  T326] usb 2-1: config 0 descriptor??
[   43.405305][  T420] usb 1-1: unable to read config index 0 descriptor/start: -71
[   43.412992][  T420] usb 1-1: can't read configurations, error -71
[   43.422249][  T346] udevd[346]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   43.428656][  T724] loop2: detected capacity change from 0 to 512
[   43.435177][  T346] udevd[346]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   43.447667][  T346] udevd[346]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   43.492176][  T654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   43.500098][  T724] loop2: detected capacity change from 0 to 512
[   43.505195][  T346] udevd[346]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   43.518171][  T654] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   43.524713][  T346] udevd[346]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   43.527378][  T654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.543368][  T346] udevd[346]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   43.546747][  T654] usb 4-1: config 0 descriptor??
[   43.560768][  T346] udevd[346]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory
[   43.560920][  T724] loop2: detected capacity change from 0 to 512
[   43.624665][   T28] kauditd_printk_skb: 19 callbacks suppressed
[   43.624681][   T28] audit: type=1400 audit(1794200616.587:231): avc:  denied  { remount } for  pid=755 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   43.658886][   T28] audit: type=1400 audit(1794200616.587:232): avc:  denied  { ioctl } for  pid=755 comm="syz.4.107" path="socket:[17060]" dev="sockfs" ino=17060 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   43.691691][   T28] audit: type=1400 audit(1794200616.647:233): avc:  denied  { bind } for  pid=758 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   43.711624][   T28] audit: type=1400 audit(1794200616.657:234): avc:  denied  { connect } for  pid=758 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   43.714742][  T761] netlink: 'syz.2.109': attribute type 9 has an invalid length.
[   43.738475][   T28] audit: type=1400 audit(1794200616.677:235): avc:  denied  { accept } for  pid=758 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   43.763773][   T28] audit: type=1400 audit(1794200616.727:236): avc:  denied  { create } for  pid=764 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   43.773095][  T654] usbhid 4-1:0.0: can't add hid device: -71
[   43.790490][  T766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'.
[   43.807004][  T326] usbhid 2-1:0.0: can't add hid device: -71
[   43.812886][  T654] usbhid: probe of 4-1:0.0 failed with error -71
[   43.817504][  T326] usbhid: probe of 2-1:0.0 failed with error -71
[   43.823557][  T654] usb 4-1: USB disconnect, device number 9
[   43.838442][  T326] usb 2-1: USB disconnect, device number 8
[   43.876752][   T28] audit: type=1400 audit(1794200616.837:237): avc:  denied  { mount } for  pid=773 comm="syz.4.112" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   43.903305][   T28] audit: type=1400 audit(1794200616.867:238): avc:  denied  { mount } for  pid=773 comm="syz.4.112" name="/" dev="ramfs" ino=17086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   43.986638][  T782] loop2: detected capacity change from 0 to 256
[   43.998376][  T782] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[   44.029833][   T28] audit: type=1400 audit(1794200616.987:239): avc:  denied  { search } for  pid=779 comm="syz.0.115" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   44.076439][   T28] audit: type=1400 audit(1794200616.987:240): avc:  denied  { read write } for  pid=779 comm="syz.0.115" name="filter" dev="tracefs" ino=2388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   44.286427][  T789] loop2: detected capacity change from 0 to 512
[   44.295950][  T789] EXT4-fs error (device loop2): __ext4_iget:5104: inode #2: block 131072: comm syz.2.117: invalid block
[   44.307504][  T789] EXT4-fs (loop2): get root inode failed
[   44.313294][  T789] EXT4-fs (loop2): mount failed
[   44.360658][  T654] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   44.378905][  T794] input: syz0 as /devices/virtual/input/input7
[   44.422756][  T797] FAULT_INJECTION: forcing a failure.
[   44.422756][  T797] name failslab, interval 1, probability 0, space 0, times 0
[   44.450789][  T797] CPU: 0 PID: 797 Comm: syz.1.120 Not tainted syzkaller #0
[   44.458117][  T797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   44.468302][  T797] Call Trace:
[   44.471614][  T797]  <TASK>
[   44.474571][  T797]  __dump_stack+0x21/0x24
[   44.478945][  T797]  dump_stack_lvl+0x110/0x170
[   44.483657][  T797]  ? __cfi_dump_stack_lvl+0x8/0x8
[   44.488718][  T797]  ? avc_has_perm+0x163/0x250
[   44.493433][  T797]  ? __x64_sys_socketpair+0x9b/0xb0
[   44.498673][  T797]  dump_stack+0x15/0x24
[   44.502866][  T797]  should_fail_ex+0x3bf/0x510
[   44.507596][  T797]  __should_failslab+0xac/0xf0
[   44.512405][  T797]  should_failslab+0x9/0x20
[   44.516949][  T797]  slab_pre_alloc_hook+0x30/0x1d0
[   44.522069][  T797]  kmem_cache_alloc_lru+0x49/0x280
[   44.527233][  T797]  ? sock_alloc_inode+0x28/0xc0
[   44.532121][  T797]  sock_alloc_inode+0x28/0xc0
[   44.537361][  T797]  ? __cfi_sock_alloc_inode+0x10/0x10
[   44.542773][  T797]  new_inode_pseudo+0x70/0x1f0
[   44.547581][  T797]  __sock_create+0x12c/0x7c0
[   44.552220][  T797]  __sys_socketpair+0x218/0x5b0
[   44.557118][  T797]  __x64_sys_socketpair+0x9b/0xb0
[   44.562523][  T797]  x64_sys_call+0x6e/0x9a0
[   44.566993][  T797]  do_syscall_64+0x4c/0xa0
[   44.571487][  T797]  ? clear_bhb_loop+0x30/0x80
[   44.576208][  T797]  ? clear_bhb_loop+0x30/0x80
[   44.580928][  T797]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   44.586862][  T797] RIP: 0033:0x7fb30d39fb19
[   44.591313][  T797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.610949][  T797] RSP: 002b:00007fb30e1f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[   44.619398][  T797] RAX: ffffffffffffffda RBX: 00007fb30d625fa0 RCX: 00007fb30d39fb19
[   44.627381][  T797] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[   44.635376][  T797] RBP: 00007fb30d437b70 R08: 0000000000000000 R09: 0000000000000000
[   44.643447][  T797] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[   44.651451][  T797] R13: 00007fb30d626038 R14: 00007fb30d625fa0 R15: 00007ffd83a4ae18
[   44.659468][  T797]  </TASK>
[   44.666609][  T797] socket: no more sockets
[   44.684990][  T795] loop2: detected capacity change from 0 to 2048
[   44.701866][  T654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.709158][  T811] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   44.722697][  T654] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   44.738911][  T654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.747089][  T795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   44.757297][  T654] usb 4-1: config 0 descriptor??
[   44.761458][  T795] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.783436][  T823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   44.803264][  T823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   44.822871][  T823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   44.838339][  T823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   44.847629][  T823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   44.848342][  T289] EXT4-fs (loop2): unmounting filesystem.
[   44.857426][  T823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   44.871611][  T823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   44.880749][  T823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   44.889620][  T823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   44.915354][  T827] loop2: detected capacity change from 0 to 512
[   44.951869][  T420] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   44.964060][  T827] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.126: corrupted inode contents
[   44.986106][  T827] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #16: comm syz.2.126: mark_inode_dirty error
[   45.001219][  T827] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.126: corrupted inode contents
[   45.017450][  T827] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.126: mark_inode_dirty error
[   45.029939][  T827] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.126: corrupted inode contents
[   45.042713][  T836] xt_hashlimit: size too large, truncated to 1048576
[   45.058508][  T827] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   45.077564][  T827] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #16: comm syz.2.126: corrupted inode contents
[   45.091478][  T827] EXT4-fs error (device loop2): ext4_truncate:4327: inode #16: comm syz.2.126: mark_inode_dirty error
[   45.102962][  T827] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[   45.112703][  T827] EXT4-fs (loop2): 1 truncate cleaned up
[   45.123957][  T827] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   45.133461][   T43] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:2: Failed to release dquot type 1
[   45.140992][  T827] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.156555][  T420] usb 1-1: unable to get BOS descriptor or descriptor too short
[   45.171211][  T420] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.184727][  T420] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   45.199118][  T420] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   45.210281][  T420] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   45.223861][  T420] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   45.224888][  T289] EXT4-fs (loop2): unmounting filesystem.
[   45.234807][  T420] usb 1-1: config 1 interface 1 has no altsetting 0
[   45.260278][  T859] FAT-fs (loop2): Unrecognized mount option "" or missing value
[   45.262359][  T420] usb 1-1: string descriptor 0 read error: -22
[   45.274441][  T420] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   45.283729][  T420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.498235][  T864] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[   45.505029][  T864] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   45.515846][  T864] F2FS-fs (loop2): Found nat_bits in checkpoint
[   45.553977][  T864] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   45.561256][  T864] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   47.194617][  T654] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[   47.206513][  T654] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[  145.580588][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  145.587679][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P864
[  145.594922][    C1] 	(detected by 1, t=10003 jiffies, g=3401, q=757 ncpus=2)
[  145.602194][    C1] task:syz.2.132       state:R  running task     stack:25760 pid:864   ppid:289    flags:0x00004000
[  145.613022][    C1] Call Trace:
[  145.616324][    C1]  <TASK>
[  145.619284][    C1]  ? __cfi___udp4_lib_lookup+0x10/0x10
[  145.624794][    C1]  ? irqentry_exit+0x37/0x40
[  145.629419][    C1]  ? irqentry_exit+0x37/0x40
[  145.634132][    C1]  ? sysvec_apic_timer_interrupt+0x89/0xc0
[  145.639975][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  145.646163][    C1]  ? sk_lookup+0x237/0x500
[  145.650606][    C1]  ? sk_lookup+0x351/0x500
[  145.655058][    C1]  ? __bpf_skc_lookup+0x15c/0x1c0
[  145.660111][    C1]  ? __bpf_sk_lookup+0xaf/0x220
[  145.664989][    C1]  ? prandom_u32_state+0x1d/0x170
[  145.670061][    C1]  ? bpf_prog_ad16571d853badc0+0x58/0x68
[  145.675729][    C1]  ? 0xffffffffa0000650
[  145.679910][    C1]  ? bpf_test_timer_continue+0xcb/0x4a0
[  145.685501][    C1]  ? bpf_test_run+0x456/0x940
[  145.690221][    C1]  ? dst_hold+0xc0/0xc0
[  145.694412][    C1]  ? __kasan_check_write+0x14/0x20
[  145.699558][    C1]  ? _copy_from_user+0x8f/0xc0
[  145.704350][    C1]  ? bpf_prog_test_run_xdp+0x72c/0xf80
[  145.710452][    C1]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[  145.716317][    C1]  ? __kasan_check_read+0x11/0x20
[  145.721372][    C1]  ? __cfi_bpf_prog_test_run_xdp+0x10/0x10
[  145.727212][    C1]  ? bpf_prog_test_run+0x3b4/0x5c0
[  145.732366][    C1]  ? bpf_prog_query+0x270/0x270
[  145.737254][    C1]  ? selinux_bpf+0xce/0xf0
[  145.741707][    C1]  ? security_bpf+0x93/0xb0
[  145.746238][    C1]  ? __sys_bpf+0x5ee/0x850
[  145.750768][    C1]  ? bpf_link_show_fdinfo+0x330/0x330
[  145.756188][    C1]  ? fpregs_restore_userregs+0x128/0x260
[  145.761870][    C1]  ? __x64_sys_bpf+0x7c/0x90
[  145.766489][    C1]  ? x64_sys_call+0x488/0x9a0
[  145.771200][    C1]  ? do_syscall_64+0x4c/0xa0
[  145.775814][    C1]  ? clear_bhb_loop+0x30/0x80
[  145.780520][    C1]  ? clear_bhb_loop+0x30/0x80
[  145.785225][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.791322][    C1]  </TASK>
[  145.794377][    C1] rcu: rcu_preempt kthread starved for 2672 jiffies! g3401 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  145.805443][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  145.815443][    C1] rcu: RCU grace-period kthread stack dump:
[  145.821346][    C1] task:rcu_preempt     state:R  running task     stack:28448 pid:14    ppid:2      flags:0x00004000
[  145.832162][    C1] Call Trace:
[  145.835463][    C1]  <TASK>
[  145.838426][    C1]  __schedule+0xcb3/0x1700
[  145.843060][    C1]  ? release_firmware_map_entry+0x190/0x190
[  145.849009][    C1]  ? __mod_timer+0x865/0xc00
[  145.853636][    C1]  ? task_woken_rt+0x130/0x1e0
[  145.858440][    C1]  schedule+0xbd/0x170
[  145.862540][    C1]  schedule_timeout+0x159/0x340
[  145.867442][    C1]  ? __cfi_schedule_timeout+0x10/0x10
[  145.872865][    C1]  ? __cfi_process_timeout+0x10/0x10
[  145.878199][    C1]  ? prepare_to_swait_event+0x30f/0x330
[  145.883788][    C1]  rcu_gp_fqs_loop+0x2ed/0x1100
[  145.888667][    C1]  ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10
[  145.894769][    C1]  ? rcu_gp_init+0xf30/0xf30
[  145.899385][    C1]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[  145.905223][    C1]  ? finish_swait+0x185/0x1c0
[  145.910111][    C1]  rcu_gp_kthread+0x99/0x390
[  145.914729][    C1]  ? __cfi_rcu_gp_kthread+0x10/0x10
[  145.919958][    C1]  ? set_cpus_allowed_ptr+0x88/0xd0
[  145.925197][    C1]  ? __kasan_check_read+0x11/0x20
[  145.930252][    C1]  ? __kthread_parkme+0x13a/0x180
[  145.935320][    C1]  kthread+0x281/0x320
[  145.939418][    C1]  ? __cfi_rcu_gp_kthread+0x10/0x10
[  145.944642][    C1]  ? __cfi_kthread+0x10/0x10
[  145.949261][    C1]  ret_from_fork+0x1f/0x30
[  145.953715][    C1]  </TASK>
[  145.956767][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  145.963141][    C1] CPU: 1 PID: 15 Comm: rcub/0 Not tainted syzkaller #0
[  145.970017][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  145.980194][    C1] RIP: 0010:rt_mutex_slowlock_block+0x344/0x5a0
[  145.986482][    C1] Code: 0d 01 00 00 4c 89 e7 e8 fa 63 33 fc 90 84 c0 4c 8b 65 c0 0f 85 c5 00 00 00 4c 89 f7 be 08 00 00 00 e8 30 61 b5 fc 48 8b 45 b8 <42> 80 3c 28 00 74 08 4c 89 f7 e8 ad 5e b5 fc 49 f7 06 08 00 00 00
[  146.006240][    C1] RSP: 0018:ffffc900000f7c00 EFLAGS: 00000256
[  146.012350][    C1] RAX: 1ffff11020064510 RBX: ffffffff871b47f0 RCX: ffffffff8501b150
[  146.020355][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888100322880
[  146.028354][    C1] RBP: ffffc900000f7c90 R08: ffff888100322887 R09: 1ffff11020064510
[  146.036442][    C1] R10: dffffc0000000000 R11: ffffed1020064511 R12: ffffc900000f7ce0
[  146.044445][    C1] R13: dffffc0000000000 R14: ffff888100322880 R15: ffff888119edd100
[  146.052622][    C1] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  146.061636][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.068261][    C1] CR2: 00007f6b6ab88c80 CR3: 0000000133392000 CR4: 00000000003506a0
[  146.076274][    C1] Call Trace:
[  146.079588][    C1]  <TASK>
[  146.082556][    C1]  rt_mutex_slowlock+0x18e/0x430
[  146.087533][    C1]  ? rt_mutex_adjust_prio_chain+0x1750/0x1750
[  146.093664][    C1]  rt_mutex_lock+0x10e/0x1c0
[  146.098325][    C1]  ? __cfi_rt_mutex_lock+0x10/0x10
[  146.103568][    C1]  ? __kasan_check_write+0x14/0x20
[  146.108806][    C1]  rcu_boost_kthread+0x237/0x7f0
[  146.113775][    C1]  kthread+0x281/0x320
[  146.117902][    C1]  ? __cfi_rcu_boost_kthread+0x10/0x10
[  146.123392][    C1]  ? __cfi_kthread+0x10/0x10
[  146.128021][    C1]  ret_from_fork+0x1f/0x30
[  146.132761][    C1]  </TASK>
[  285.540870][    C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 237s!
[  285.549853][    C0] Showing busy workqueues and worker pools:
[  285.555785][    C0] workqueue events: flags=0x0
[  285.560506][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
[  285.560556][    C0]     pending: kfree_rcu_monitor, psi_avgs_work, key_garbage_collector, rht_deferred_worker
[  285.578413][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  285.578453][    C0]     pending: kfree_rcu_monitor, vmstat_shepherd
[  285.578501][    C0] workqueue events_unbound: flags=0x2
[  285.598050][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4
[  285.598084][    C0]     pending: toggle_allocation_gate, flush_memcg_stats_dwork
[  285.598133][    C0] workqueue events_power_efficient: flags=0x80
[  285.619077][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
[  285.619115][    C0]     pending: neigh_managed_work, neigh_periodic_work, gc_worker, reg_check_chans_work
[  285.619187][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
[  285.619230][    C0]     pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, check_lifetime
[  285.619293][    C0] workqueue mm_percpu_wq: flags=0x8
[  285.660179][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.660219][    C0]     pending: vmstat_update
[  285.660251][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.660282][    C0]     pending: vmstat_update
[  285.660313][    C0] workqueue writeback: flags=0x4a
[  285.689866][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
[  285.689902][    C0]     pending: wb_workfn, wb_workfn
[  285.689944][    C0] workqueue kblockd: flags=0x18
[  285.707224][    C0]   pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2
[  285.707260][    C0]     pending: blk_mq_timeout_work
[  285.707292][    C0]   pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2
[  285.707322][    C0]     pending: blk_mq_timeout_work
[  285.707350][    C0] workqueue usb_hub_wq: flags=0x4
[  285.738262][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  285.738302][    C0]     in-flight: 420:hub_event hub_event
[  285.738355][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  285.738385][    C0]     in-flight: 654:hub_event hub_event
[  285.738437][    C0] workqueue dm_bufio_cache: flags=0x8
[  285.770424][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.770469][    C0]     pending: work_fn
[  285.782237][    C0] workqueue ipv6_addrconf: flags=0x40008
[  285.787883][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=7
[  285.787927][    C0]     pending: addrconf_verify_work
[  285.787958][    C0]     inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work
[  285.788067][    C0] workqueue wg-kex-wg0: flags=0x6
[  285.819065][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  285.819106][    C0]     pending: wg_packet_handshake_send_worker
[  285.819143][    C0] workqueue wg-crypt-wg0: flags=0x28
[  285.837868][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.837914][    C0]     pending: wg_packet_encrypt_worker
[  285.837941][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.837973][    C0]     pending: wg_packet_encrypt_worker
[  285.837995][    C0] workqueue wg-kex-wg0: flags=0x6
[  285.869540][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  285.869576][    C0]     pending: wg_packet_handshake_send_worker
[  285.869614][    C0] workqueue wg-crypt-wg0: flags=0x28
[  285.888341][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.888388][    C0]     pending: wg_packet_encrypt_worker
[  285.888414][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.888444][    C0]     pending: wg_packet_encrypt_worker
[  285.888466][    C0] workqueue wg-kex-wg1: flags=0x6
[  285.920002][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  285.920040][    C0]     pending: wg_packet_handshake_send_worker
[  285.920076][    C0] workqueue wg-crypt-wg1: flags=0x28
[  285.938784][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.938825][    C0]     pending: wg_packet_encrypt_worker
[  285.938849][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.938881][    C0]     pending: wg_packet_encrypt_worker
[  285.938901][    C0] workqueue wg-kex-wg1: flags=0x6
[  285.970341][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  285.970378][    C0]     pending: wg_packet_handshake_send_worker
[  285.970412][    C0] workqueue wg-crypt-wg1: flags=0x28
[  285.989126][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.989165][    C0]     pending: wg_packet_encrypt_worker
[  285.989189][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  285.989227][    C0]     pending: wg_packet_encrypt_worker
[  285.989247][    C0] workqueue wg-kex-wg2: flags=0x6
[  286.020953][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.020990][    C0]     pending: wg_packet_handshake_send_worker
[  286.021025][    C0] workqueue wg-crypt-wg2: flags=0x28
[  286.039730][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.039773][    C0]     pending: wg_packet_encrypt_worker
[  286.039797][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.039829][    C0]     pending: wg_packet_encrypt_worker
[  286.039849][    C0] workqueue wg-kex-wg2: flags=0x6
[  286.071895][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.071934][    C0]     pending: wg_packet_handshake_send_worker
[  286.071973][    C0] workqueue wg-crypt-wg2: flags=0x28
[  286.090660][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.090703][    C0]     pending: wg_packet_encrypt_worker
[  286.090727][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.090760][    C0]     pending: wg_packet_encrypt_worker
[  286.090780][    C0] workqueue wg-kex-wg0: flags=0x6
[  286.122224][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.122260][    C0]     pending: wg_packet_handshake_send_worker
[  286.122298][    C0] workqueue wg-crypt-wg0: flags=0x28
[  286.141187][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.141225][    C0]     pending: wg_packet_encrypt_worker
[  286.141250][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.141281][    C0]     pending: wg_packet_encrypt_worker
[  286.141301][    C0] workqueue wg-kex-wg1: flags=0x6
[  286.172771][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.172807][    C0]     pending: wg_packet_handshake_send_worker
[  286.172843][    C0] workqueue wg-crypt-wg1: flags=0x28
[  286.191518][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.191557][    C0]     pending: wg_packet_encrypt_worker
[  286.191579][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.191612][    C0]     pending: wg_packet_encrypt_worker
[  286.191631][    C0] workqueue wg-kex-wg2: flags=0x6
[  286.223855][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.223892][    C0]     pending: wg_packet_handshake_send_worker
[  286.223928][    C0] workqueue wg-crypt-wg2: flags=0x28
[  286.242606][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.242647][    C0]     pending: wg_packet_encrypt_worker
[  286.242672][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.242704][    C0]     pending: wg_packet_encrypt_worker
[  286.242723][    C0] workqueue wg-kex-wg0: flags=0x6
[  286.274786][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4
[  286.274828][    C0]     pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker
[  286.274887][    C0] workqueue wg-crypt-wg0: flags=0x28
[  286.296459][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.296497][    C0]     pending: wg_packet_encrypt_worker
[  286.296521][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.296552][    C0]     pending: wg_packet_encrypt_worker
[  286.296573][    C0] workqueue wg-kex-wg1: flags=0x6
[  286.328036][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.328074][    C0]     pending: wg_packet_handshake_send_worker
[  286.328108][    C0] workqueue wg-crypt-wg1: flags=0x28
[  286.346782][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.346820][    C0]     pending: wg_packet_encrypt_worker
[  286.346845][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.346876][    C0]     pending: wg_packet_encrypt_worker
[  286.346897][    C0] workqueue wg-kex-wg2: flags=0x6
[  286.378524][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.378560][    C0]     pending: wg_packet_handshake_send_worker
[  286.378594][    C0] workqueue wg-crypt-wg2: flags=0x28
[  286.397260][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.397296][    C0]     pending: wg_packet_encrypt_worker
[  286.397318][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.397350][    C0]     pending: wg_packet_encrypt_worker
[  286.397371][    C0] workqueue wg-kex-wg0: flags=0x6
[  286.428792][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.428825][    C0]     pending: wg_packet_handshake_send_worker
[  286.428857][    C0] workqueue wg-crypt-wg0: flags=0x28
[  286.447523][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.447560][    C0]     pending: wg_packet_encrypt_worker
[  286.447583][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.447616][    C0]     pending: wg_packet_encrypt_worker
[  286.447636][    C0] workqueue wg-kex-wg1: flags=0x6
[  286.479189][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.479224][    C0]     pending: wg_packet_handshake_send_worker
[  286.479259][    C0] workqueue wg-crypt-wg1: flags=0x28
[  286.497942][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.497979][    C0]     pending: wg_packet_encrypt_worker
[  286.498003][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.498035][    C0]     pending: wg_packet_encrypt_worker
[  286.498054][    C0] workqueue wg-kex-wg2: flags=0x6
[  286.529542][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3
[  286.529578][    C0]     pending: wg_packet_handshake_send_worker
[  286.529611][    C0] workqueue wg-crypt-wg2: flags=0x28
[  286.548284][    C0]   pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.548323][    C0]     pending: wg_packet_encrypt_worker
[  286.548344][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  286.548376][    C0]     pending: wg_packet_encrypt_worker
[  286.548398][    C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=238s workers=6 idle: 309 6 298 426 19
[  286.548458][    C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=239s workers=7 idle: 326 24 40 360 59 414