last executing test programs:

13.595317325s ago: executing program 0 (id=1):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x18)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f00000000c0)={[{@block_validity}, {@nojournal_checksum}]}, 0x1, 0x518, &(0x7f0000000640)="$eJzs3d9rc2cdAPDvOU269n27pXNebAPn2CZ9h75Ju7qteLFNEMWLgTovhVrbtJSmTWnT7W0Z0uEfIIio4NWudiP4BwiyP0GEgd6K6FBE3+mFF2okJydbfyRN3Jsmr+3nA6d5nnOek+/3CeRJzjlPcwK4tp6MiFciYiIino2IUr4+zZflVuW43e6Du2+utpYkms3X/ppEkq/rPFeSP95s7xJTEfGNr0R8J+kW+WhrpVar7uW1SmN7t7J/eHR7c3tlo7pR3VlcXHhh6cWl55fmB+9M2nvTbES89KX3f/T9d7780i8/98bvl/9867uttGby7Sf7MUztrhez16KjEBF7lxFsTApZDwEA+H/wSER8IiKeyr7/l2Ii+zY3Oe60AAAAgCFqvjwT/0oimgN6KgZvCwAAANwf0mwObJKW8+mzM5Gm5XJ7Du8n40Zaq+83PrteP9hZa2+fjWK6vlmrzudzhWejmLTqC/kc2079uTP1xYh4OCJ+WJrO6uXVem1t3Cc/AAAA4Jq4eeb4/x+l9vH/O6f/oXN3bAkCAAAAwzE77gQAAACAS+f4HwAAAK4+x/8AAABwpX3t1VdbS7Nz/+u11w8Ptuqv316r7m+Vtw9Wy6v1vd3yRr2+kf1m33a/56vV67ufj52DO5VGdb9R2T88Wt6uH+w0ljdP3QIbAAAAGKGHP/3ub5OIOP7CdLa0PDbupICRSP+Xxn+8vDyA0Zvo1+Dt0eQBjF5h3AkAY1Pss316RHkA45P02f5Qrw2/Gn4uAADA5Zh77Pz1/9LpJubtwxWVRjRL404CABgp1//h+ir2nwEIXHEP9RkHep4EPHf9/+UeDZvNj5EWAAAwRDPZkqTl/H+BZyJNy+WIB7PbAhST9c1adT6f//ubUvGBVn0h2zPpO2cYAAAAAAAAAAAAAAAAAAAAAAAAAGhrNpNoAgAAAFdaRPqnJPs1/4i50jMzZ88PTCb/zG4PPhkRb/z0tR/fWWk09hZa6//24frGT/L1z118ruHmpZ3FAAAAgGvg/cHvxNc5Tu8cxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAMH1w983VzjLYHg8MJe5fvhgRs93iF2Iqe5yKYkTc+HsShRP7JRExMYT4x29FxKPd4iettGI2z6Jb/OmRx//oNU+HEBuuu3db488r3d5/aTyZPXZ//xfy5V71Hv/SD8e/iR7jz4MDxnj8vZ9XesZ/K+LxQvfxpxM/yaKdj//0gPG//c2joxPVUx8czbcj5rp+/iSnYlUa27uV/cOj25vbKxvVjerO4uLCC0svLj2/NF9Z36xV879d4//gU7/4z0X9v3E+/lRn/G33v/vr/8yA/f/3e3fuPtIuFrvFv/V098/fR3vET/PPvs/k5db2uU75uF0+6Ymf/fqJi/q/1uP1n+rT/1sD9v/Zr3/vDwM2BQBGYP/waGulVqvu9St89VvtHQZqrHDZhd8V7os07rkwGZfyzIVx92uMhda7dAjPM+aBCQAAGLqPvvR/jJ2HcQEcAAAAAAAAAAAAAAAAAAAAGPz3/+6hcDbm8Xi6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwof8GAAD//xopzbM=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c0a2)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0)
setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0)

12.150333571s ago: executing program 0 (id=15):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008403, &(0x7f00000001c0)={[{@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}]}, 0x0, 0x540, &(0x7f0000000a40)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_checksum}, {@nojournal_checksum}, {@journal_async_commit}, {@init_itable}]}, 0xfc, 0x581, &(0x7f0000000f80)="$eJzs3d9rU1ccAPDvTX+o1a0VRLY9DMGHOZypbffDwWDucWwyYXt3oY1FmhppUrGdMH2YL3sZMhhjwtgfsPc9yv6Bwf4HYRNkSNlgP6Djpjc1tknTxmqi+Xzg6jn3R8/59txzek5uQgLoW0fSf3IRByLiqyRitOHYYGQHj6ydt3L/6nS6JbG6+vEfSSTZvvr5Sfb//izzQkT8/EXE8dzmcitLy3OFUqm4kOXHq/OXxitLyycuzBdmi7PFi5NTU6femJp8+603dy3WV8/+9e1Ht98/9eXRlW9+vHvwZhKna3HHhjh26vSD5LXG/UcK/2WpocZzaiY6LaxHJd2uAB0ZyPr5UES8GKMxkPV64Nn3eUSsAn0q2bL/D8WI8QGeUfV5QH1t/yjr4KfRvffWFkC12Icb4x9ce20k9tbWRiMryUMro3S9O7YL5adl/PT7rZvpFlu/DrGvTR5gR65dj4iTg4Obx/8kG/86d7L24vHWNpbRb39/oJtup/Of15rN/3Lr859oMv/Z36TvdqJ9/8/d3YViWkrnf+80nf+uD11jA1nuudqcbyg5f6FUPBkRz0fEsVht++jj1Mqd1VbHGud/6ZaWX58LZvW4O7jn4WtmCtVCRAx3GPJD7l2PeGmwWfzJevsnTdo//X2c3WYZh4u3Xm51rH38j9fqDxGvNG3/B82abP18crx2P4zX74rN/rxx+JdW5Xc7/rT9R7aOfyxpfF5b2XkZ3+/9p9jqWKf3/3DySS1d7wRXCtXqwkTEcPLh5v2TD66t5+vnp/EfO7r1+Nfs/k8XX59uM/4bh260PLUX2n9mR+2/88SdDz77rlX522v/12upY9mebPxrLrtXtlvBR/39AQAAAAAAQC/JRcSBSHL59XQul8+vvb/jUIzkSuVK9fj58uLFmbXPCI/FUK7+pHu04f0QE9n7Yev5yQ35qYg4GBFfD+yr5fPT5dJMt4MHAAAAAAAAAAAAAAAAAACAHrG/xef/U78NdLt2wGNX+2KDPd2uBdANbb/yfze+6QnoSW37P/DM0v+hf+n/0L/0f+hfDf3/739/He1mVYAnzN9/6F/6P/Qv/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAB21dkzZ9JtdeX+1ek0P3N5aXGufPnETLEyl59fnM5Plxcu5WfL5dlSMT9dnm/380rl8qWJyVi8Ml4tVqrjlaXlc/PlxYvVcxfmC7PFc8WhJxIVAAAAAAAAAAAAAAAAAAAAPF0qS8tzhVKpuCDRMvFu9EQ1HmeAazq6fLBXopBokbieNe/OrurioAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/wfAAD//0XBMLU=")
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1c001, 0x0)
ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000500)={'\x00', 0x401, 0x2, 0x4})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
write(r0, &(0x7f0000000000)="24f40700091d00000000000000000500000000d42a04000100"/36, 0x24)

11.380916786s ago: executing program 0 (id=23):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000feffffffffffffff000800074000000000040006"], 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a40000000001010400000000000000000a00000544001080080001400000000408000340000000040800024000000afa080002400000000508000140000000060800024000000002080001400000100008000240000000802c0002801400018008000100ac14141008000200ac1414aa0c000280050001000000000006000340000000000800074000000400180006801400040020010000000000000000000000008eb15f771c6f1153f3857ee262de300001e4d9e2f342e4860b1253a84165f6f83c13e262e632631232f8a6c5188c4eae9fa477b9aa8d209544f135d0a3"], 0xa4}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x1, 0x6)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20)
r9 = socket$packet(0x11, 0x2, 0x300)
accept$packet(r9, &(0x7f0000000100), &(0x7f0000000400)=0x14)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20)
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffbfffffffaaaaaaaaaaaa65dd6000000000142cfffe8000004c00000000000000000000000000002000aa21d680004e2000000000000080000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780006"], 0x0)

11.370490906s ago: executing program 0 (id=24):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC], 0xfd, 0x553b, &(0x7f00000024c0)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r0, 0x0)
prlimit64(r0, 0x2, &(0x7f0000000080)={0x401, 0x23}, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x1}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {}], {0x4, 0x7}, [], {0x10, 0x2}}, 0x54, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)

9.705296839s ago: executing program 0 (id=31):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x7, &(0x7f00000000c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000280)='./file0\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
io_setup(0x5, &(0x7f0000000140)=<r5=>0x0)
r6 = eventfd2(0x0, 0x0)
io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r6}])
io_pgetevents(r5, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0, 0x0)
shutdown(r4, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)

8.931328094s ago: executing program 0 (id=32):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010004000000000000000a030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x5)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r2], 0x108}}], 0x2, 0xc040)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
unshare(0x6020400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x7d1, 0x0, 0x3, 0x10007e, 0x20000006, 0x450, 0x6, 0x10000, 0x80005, 0xffffffff, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x1, 0x26, 0xe, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x6, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x5, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0x101, 0x4, 0x6, 0x105, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x7fff, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfad, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0xe, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x800004, 0x24], [0x9, 0x40bb33, 0xffffffff, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x3, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0xc, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x7fff, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x10000000010009, 0x8, 0x2, 0x4000000080000e52, 0x1, 0x7ffffffd, 0x1045, 0x200000000006, 0x4, 0x80, 0x1, 0x100000000, 0x800000000000001, 0x9, 0x8000000000005, 0x4fe], 0x30000, 0x40110})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.931020984s ago: executing program 32 (id=32):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010004000000000000000a030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@test_dummy_encryption}, {@grpjquota}, {@auto_da_alloc}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x5)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r2], 0x108}}], 0x2, 0xc040)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
unshare(0x6020400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x7d1, 0x0, 0x3, 0x10007e, 0x20000006, 0x450, 0x6, 0x10000, 0x80005, 0xffffffff, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x1, 0x26, 0xe, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x6, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x5, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0x101, 0x4, 0x6, 0x105, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x7fff, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfad, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0xe, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x800004, 0x24], [0x9, 0x40bb33, 0xffffffff, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x3, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0xc, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x7fff, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x10000000010009, 0x8, 0x2, 0x4000000080000e52, 0x1, 0x7ffffffd, 0x1045, 0x200000000006, 0x4, 0x80, 0x1, 0x100000000, 0x800000000000001, 0x9, 0x8000000000005, 0x4fe], 0x30000, 0x40110})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.292098746s ago: executing program 3 (id=42):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
lstat(&(0x7f00000001c0)='./file1\x00', 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodelalloc}, {@barrier}]}, 0x1, 0x5e9, &(0x7f0000000400)="$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")
syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406"], 0x0)

7.249923528s ago: executing program 1 (id=43):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, 0x0, 0x8008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x20040010)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40820)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000001900)={r5, r6, 0x407f, 0x1000, &(0x7f0000000900)="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", 0x81, 0x6c, 0x6, 0xfff8, 0x6, 0x1, 0x6, 'syz1\x00'})
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6)
pread64(r0, 0x0, 0x0, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setaffinity(r7, 0x8, &(0x7f0000000100)=0xf9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

5.375320487s ago: executing program 2 (id=47):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11)
socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x74, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r7, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x33}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)

5.357589578s ago: executing program 4 (id=48):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
mmap(&(0x7f00000ca000/0x4000)=nil, 0x4000, 0x2, 0x40010, r0, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000240)=0xc, 0x4)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000200)={0x4}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
sendto$inet6(r3, 0x0, 0x0, 0x4008080, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x410, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020)
sendfile(r5, r5, 0x0, 0x80000000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0xe, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018000000000000070000009500000000000040d8c232e1abcaaa3bf4b621ba70c7461c392d2f48c23c39729459037199467af1fb220187653c69279a21c644b0bfeea92281d7973c6d3fd7186f6aa7ab5d44a7c251b5d49066fa9124b40d7e8a0a876ccd0c0bcde0bda77d724932535738af067abc99082ef2a3d789fa5bc7c304a3f284cede3000b171f584882247f8696c0bf51d09f8a9eda19cd799e479568e3727cb49bb0563835d4e853788e6cb84377099367d4e0aab3e49d9f9aa1278737df02c1ffcdc56d9d4533eb5029584d92838c3e4f877eed74fda548f0cfe323294"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, &(0x7f0000000440), &(0x7f0000000040)=@udp=r6}, 0x20)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000480)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x3, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "fe50d41eed24e1cb64593d0938415ffdb9e528964f576f00", "99e9edca63fc5a45b8d43b21df1e26955e80a0f9a1b2e027c76155754ddd1d2ea803520d4c60c95117d1158b15bee7e7", "3b8124ff587200b02a2058d4ec34d69b7f6d355d6ca9323fed4a9c8f", {"4c7907cdfe00100000012929d159f7f6", "6a6e604345d736646795a1b0a3239ecc"}}}}}}}, 0x0)
recvfrom(r6, &(0x7f0000000100)=""/101, 0x65, 0x40, 0x0, 0x0)
getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, &(0x7f0000000040))

5.160608755s ago: executing program 1 (id=50):
memfd_create(0x0, 0xb)
r0 = socket(0x10, 0x803, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
close(0x3)
socket$xdp(0x2c, 0x3, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400))

5.089446257s ago: executing program 1 (id=51):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11)
socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x74, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r7, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x33}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)

4.610308092s ago: executing program 3 (id=52):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x0)

4.227004584s ago: executing program 4 (id=53):
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
close(r0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
recvfrom$inet_nvme(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)

3.987827952s ago: executing program 4 (id=54):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x18)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f00000000c0)={[{@block_validity}, {@nojournal_checksum}]}, 0x1, 0x518, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c0a2)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0)
setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0)

3.821475717s ago: executing program 3 (id=55):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1f, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x4000, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.821145337s ago: executing program 3 (id=56):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flistxattr(r0, &(0x7f0000000340)=""/58, 0x3a)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
fsopen(&(0x7f00000001c0)='smb3\x00', 0x0)
rt_sigprocmask(0x1, &(0x7f0000001440)={[0xffff]}, &(0x7f0000000100), 0x8)
r3 = eventfd(0xfffff75a)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x2e}, 0x94)
writev(0xffffffffffffffff, 0x0, 0x0)
setpriority(0x0, 0x0, 0x9)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r5 = getpid()
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xf7c6d64dad4748c9, 0x30, r6, 0x6be69000)
r7 = syz_pidfd_open(r5, 0x0)
setns(r7, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)
syz_clone(0xb21e0000, 0x0, 0x33, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000800)={0x210000000, &(0x7f0000000000), &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000240), {0xd}, &(0x7f0000000600)=""/180, 0xb4, &(0x7f00000006c0)=""/175, &(0x7f0000000780)=[r5, r5, r5], 0x3}, 0x58)
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x24020000)
mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x2251024, 0x0)
socket(0x10, 0x803, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})

3.782928299s ago: executing program 2 (id=57):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x140482, 0x0)
r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2808008, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@mblk_io_submit}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@bsdgroups}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200009d2a0000000300000dffff0f000d00"], &(0x7f0000001f00)=""/4096, 0x3e, 0x49e, 0x2001}, 0x28)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
io_getevents(0x0, 0x3, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan1\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000680)=<r4=>0x0)
io_submit(r4, 0x0, &(0x7f0000000040))
io_pgetevents(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket(0x11, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24044015)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001000)={[{@xino_auto}, {@redirect_dir_on, 0x3a}], [{@smackfsroot}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, 'e4\x00\x00\x00'}}], 0x2f})
r6 = socket$packet(0x11, 0x2, 0x300)
accept4(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'wg0\x00', {0x2, 0x4e21, @empty}})

3.73787624s ago: executing program 1 (id=58):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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")
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@shortname_lower}, {@fat=@check_strict}, {@fat=@dmask={'dmask', 0x3d, 0x40}}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@utf8}, {@uni_xlate}, {@fat=@nfs}, {@utf8no}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8no}, {@utf8no}, {@utf8no}, {@shortname_mixed}]}, 0x1, 0x38c, &(0x7f00000015c0)="$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")
r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x1a000, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x3)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)=<r6=>0x0)
tkill(r6, 0x1f)
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYRES32=0x41424344, @ANYBLOB], 0x0)
getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x6, 0x0, 0x20, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@empty, {0x8000000000000, 0x195, 0x1, 0xae5, 0x8253c, 0xfffffffffffffffe, 0xfffffffffffffff6}, {0xffffffffffbfffff, 0x0, 0x1e, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x40}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r8, 0x16, 0x0, @void}, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0x17, &(0x7f0000000000)=0x1, 0x4)

3.655724673s ago: executing program 3 (id=59):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000200))
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
syz_usb_connect$midi(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x642c0a1c11d7f808, 0x2a39, 0x3fd2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, [@midi_in_jack={0x0, 0x24, 0x2, 0x1, 0xd, 0x2}, @midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x9, 0x0, [], 0x1}], [{{0x9, 0x5, 0x1, 0x12, 0x8, 0x1, 0x3, 0x0, {0x4}}}]}}}}}]}}, &(0x7f0000000600)={0x24, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000380)=@lang_id={0x0, 0x3, 0x416}}, {0x0, &(0x7f0000000400)=@string={0x0, 0x3, "7990207b816a88b9e622151a5e48a2a6ef056607d0239e3b3dfa8b84fc1ffe17cfb8509929cf2fbb45d7b44876acd49b51afa284"}}, {0x0, &(0x7f0000000480)=@string={0x0, 0x3, "50b86ead594b58a3fda766c8afc09e079e01fe6966b09f3699479a03cbf041b4171e2ed828feb3acb31f0ea75df1cadcb9d4ad9c53a5acb61cbf9070f3928ad875d71d384d9ed7d4d0db5d8cba5efb3038835e44e23489ae62133d5da25325a6172e57a68aca1880b825d49282e6799e7e37988d6a0590303621e81518b0fae65edc98de44825ca557fdd597adb54f6e8a88150c19787583c8dd656740e2967ece7e5d2edd667f56ed7d2caa534be7b001a028154c67bbd6c57c3c95d304ff306519929b62238b048db0ef22360ad4d047b2a3976c81"}}, {0x0, &(0x7f0000000580)=@lang_id={0x0, 0x3, 0xf0ff}}, {0x0, &(0x7f00000005c0)=@lang_id={0x0, 0x3, 0x40e}}]})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=<r5=>r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x40)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r7, r5, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r6}}, 0x1c)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000340)=0xc, 0x4)
getsockopt(r8, 0x28, 0x1, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x4e21, 0x401, @private0, 0x9}}}, 0x88)
syz_ublk_setup_io_uring(0x5344, &(0x7f0000000080)={0x0, 0xda20, 0x400, 0x0, 0x407d, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000180), &(0x7f00000001c0))

2.993359224s ago: executing program 4 (id=60):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x8)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000300)={0xfffffffe, 0x8000, 0x6d9d23e5, 0x4}, 0xfffffcc6)
r1 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_getattr(r1, &(0x7f0000000340)={0x38}, 0x38, 0x0)
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000200)=@req3={0xfffffffe, 0x3fd, 0x3, 0x5, 0x800, 0x1, 0x1000}, 0x1c)
socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[], 0x1cb)
close(r6)
execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0)

1.720817135s ago: executing program 1 (id=61):
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x80082, 0x0)
write$cgroup_pid(r0, 0x0, 0x0) (fail_nth: 1)

1.318763528s ago: executing program 1 (id=63):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x7, &(0x7f00000000c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000280)='./file0\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
io_setup(0x5, &(0x7f0000000140)=<r4=>0x0)
r5 = eventfd2(0x0, 0x0)
io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}])
io_pgetevents(r4, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0, 0x0)
shutdown(r3, 0x0)

1.217506091s ago: executing program 2 (id=64):
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0)
close(r0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r1, 0x0, 0x0)
recvfrom$inet_nvme(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)

1.133392183s ago: executing program 5 (id=65):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x18)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f00000000c0)={[{@block_validity}, {@nojournal_checksum}]}, 0x1, 0x518, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c0a2)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0)

1.059543476s ago: executing program 2 (id=66):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x0)

1.031710507s ago: executing program 2 (id=67):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x1c}}, 0x4000)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0)
chdir(0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$tun(0xffffffffffffffff, 0x0, 0x19)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000010, &(0x7f0000000500), 0xf9, 0x48d, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0xea1, 0x109)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000440)=""/182, &(0x7f0000000540)=0xb6)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

829.301583ms ago: executing program 5 (id=68):
r0 = timerfd_create(0x7, 0x80000)
vmsplice(r0, &(0x7f0000000bc0)=[{&(0x7f0000000540)="c41f3c", 0x3}], 0x1, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000001c0)={&(0x7f00000000c0)=""/240, 0xf0}) (async)
mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}})

573.442741ms ago: executing program 3 (id=69):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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")
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000180), 0x1004002, &(0x7f0000000b40)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, 0x0, 0x0, &(0x7f0000000000))
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00010a000000000000000004010000080001"], 0x1c}}, 0x20000080)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x10000043, 0x0, 0x0, 0x3}, 0xb09e2977203cb8be)
bind$tipc(r8, 0x0, 0x0)
r9 = dup(r7)
syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x4, 0x5, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x50)

524.824713ms ago: executing program 5 (id=70):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)=@req3={0xfffffffe, 0x3fd, 0x3, 0x5, 0x800, 0x1, 0x1000}, 0x1c)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

504.653314ms ago: executing program 5 (id=71):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000100001000000000900dbdf256400fc010000000000000000000063000001"], 0x138}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000f31000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000380)="60f30fbdbb0f000fc7ad0000e0b01d1d903e0fc7a8cc4cb8ff000f00d00f09e90900000f66b888bbcf8866efbafc0c66ed2e0f01c8", 0x3e}], 0x1, 0x6f, 0x0, 0xffffffffffffffc3)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0)
splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000001, 0x10, 0x0, {0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x0, 0x338, 0xffffffff, 0x280, 0x0, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'bridge_slave_1\x00', 'syzkaller0\x00', {}, {0xff}, 0x2e, 0x2, 0x36}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @local, @port=0x4e23, @icmp_id=0x68}}}}, {{@ip={@local, @empty, 0xffffff00, 0x0, 'caif0\x00', 'nr0\x00', {}, {0xff}, 0x67, 0x2, 0x20}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x18, @ipv6=@private2, @ipv6=@loopback, @gre_key=0x1, @icmp_id=0x68}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xb}, @multicast2, 0xffffffff, 0xff, 'nr0\x00', 'pim6reg1\x00', {}, {0xff}, 0x2, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv4=@multicast2, @ipv6=@private0, @gre_key=0x4, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
fstat(0xffffffffffffffff, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x4c}}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

458.283145ms ago: executing program 4 (id=72):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020301"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000203010400000000000000000000000508000010080001000000002c"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000004700)=[{{&(0x7f0000000540)={0xa, 0x4e20, 0xffffffc8, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029b55ca44c5ed903c30000000000000016000000000000002900000043"], 0x30}}], 0x1, 0x80040c4)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000d00)={[{@fat=@gid}, {@uni_xlateno}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@shortname_mixed}, {@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@errors_remount}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7}}]}, 0x81, 0x2c8, &(0x7f0000002200)="$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")
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10)
r4 = dup(r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="010600001200ffdbdf2509000000100004800900010073797a30000000006c000480240007800800040006000000080001001800000008000300ffffffff0800020003000000130001"], 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x2000c010)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc0000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x8004, 0x7bf, 0x0, 0x0, 0x1000, 0x6, 0xffffffffffffffff, 0x0, 0x27}}}, &(0x7f0000000880))
r8 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x491, 0x1, 0x17f}, &(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000640)={&(0x7f00000003c0), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x410, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x10)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000940)='TIPCv2\x00', 0x0, r8)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
write$tun(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

250.630712ms ago: executing program 5 (id=73):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff})
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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")
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000001fc0), 0x1a1000, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="f7ffffff2360164244f7acffe388caa8755708794ae18d8e92cae0c01d45a53fb3c38bf8eb3d09d73a94b51434022fef97c6fff4a67a411928534a2734d90a28000000000000b25cd50aee745e1d3420b81aeaa5fa4a0f093e7beeddd8ad7a0040d181d04a9e", @ANYRES16=0x0, @ANYBLOB="0002000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008801)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0x5, 0x1, 0x4, 0x9, "518aba4d000000230000000900"})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000000000000f20000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100500000001400128009000100766c616e0000000004000280140003006272696467655f736c6176655f300000"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711817000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000300)=[{r4, 0x4083}], 0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$unix(r1, &(0x7f0000000c40)={&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000680)="14a0890d1363fc496704db29c31570904c966611daa1a235118774a70dd79007ab9d3456a2d9ef3a8306de8c97ad7865f897032c6d04d3087c1a56e0c840598ce6c6bd56a2fd0128a3f2d52e9a0629bfe73a7dedabb00993b46502e8b83ec61984cd32f518c58eb3686ea597c4d921", 0x6f}, {&(0x7f00000007c0)="8037e640554e800bb36b7729aefaa53475dc17c4fa355a645739e18c43f9d419fc093f103a3e68862107193bcc70f7bfc585057219b87a5b660a019479000e534feb21b5762be1828fd777551db7c8ae81602975b40590941700d54bd616bee06e86196cff73cdb5e8f2964dc63e465ab989f716633cc921ab96cd97ddc1f5d52c185b71e6592ab069ec6045f772ba52e7baadc3e9a879e6246371281b50004fb3cedbf28df639a778ad936b0ab234720e7f9480d0775ccb9664414a8758d47220b67fb4703a08444aa2ad1ae2060001b7a5", 0xd2}, {&(0x7f00000008c0)="d8633fd68f775a13d3452427388e902bb7e2371272a9865b3433376c5a52aacf73927538905dfcd063e2596d693d319577d30002e723af0084359ed30a89586036e1f2b013f3fe1946358ac3af070a0956940a1e91618ca2620f295d8002bf447f81d87a04ab5f3484c31af20844adc7e78242d1efdcbc371c8860c401292997a6751be0da5e2098b729c443ee420ed7c4866bc77b92947ae29d2c8afa302ca8f3679325c870304572924b8f0af77142b732e4eaa9c1800a3290784445ae3fc3bbdb70a7c4eeaa6bf8cd", 0xca}, {&(0x7f00000009c0)="1b2919d76f9c85d20d4cdfb3cf802697124dc65828e126be0cccd635bb32f37cef7ec652c8ddd2160a9937e0d9486e08d9b942529791886e37036fcd3e2ca7b8f118c241828f83c9b2b0c92874ce323b9b8ad993bcbd61d6881917a7cb9a4947fcf5dfe0fb071d4568ee047b0017af0f432d6c187db18d9a949b15f81b38ca410f5c61dd5137d379534d8a000cf3e065ad0833ac496939b8988a4c899d8c1608310c52f9e483c133427279b852f50f0bced3612f5527da96c9fd4828ee0897ab427f7817b1298758040c1a3eeb9ea15bb33c443129dda5a907d58e4efc9935c90a6b6b1079889a3f043ca03d", 0xec}, {&(0x7f0000000ac0)="957c102abc1299eeec3d3a801886e06365fb246ba43d6b471f1a0c6233a74ec7c862cf2fa96c869d5b1de4629d943d07400311c0940e11d4bc0bd30b1d8f75bbea9253bb907473739fade75a2db60561ca7abf126d03017ee8b32e75291f26e6547bdbc13b27a7f2f4f2ce00ca78279d0d2d2981133a346bf44192cc4c1ada19dec8cc6c3cab916c5e8ff046d8ee20cd2fc3b368745dc7543ab477a115fad2dddfb1da35c41d27c74ad36721cf25332b6ff6d8c015e35cdce33ff3bf7fc109e769b2017fe56f1c141f3013d65b12bf5f4d", 0xd1}], 0x5, 0x0, 0x0, 0x4}, 0x890)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x13b)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x82, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f0000000240)="1d75e63a491ac218006b8102a1a722b31dbff4046cec7bd033597f6c7a81965d3ac46f23dfd205f62e827113c2d7365e95777ee0cb0113d11a6799672c0f13801fbf78c45b22d28a15dfd1e682cf0c13a1dbcf4e4f4fd14e2ff9e5758f17469fdc69311ade2752629a03df82561851f854d65ead28b13aa60d759b96838f2c2d932e42a95c4ed6fe147180d021ab3d4e0770ef39964d4e9afd8068b29ce0478fad0d9181fa1b6ca2ad26b3dd7052883aa64fdd369d2b3b0749ee074388bb01faeab64a16066805db2fb18b75a9f252839f5914c7173769077caaa45f89c31f9cce0d631c21621d6568af8e07c29ca3276f7a", 0xf2, 0x1, 0x0, 0x2, r9}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb, 0xe, r1, &(0x7f0000000380)="92d379b83d617a38ed2db6b994209d7aec540b745032dd65fe1e6affc0d38e7544929cc9d59f374818cfe91f9893418bea2763a9ac018a51711fe09271a5608786f0973be48e3a2af2445c5eb0b93a27ab151f15544383f97f34454270f3e2a446f9b852233243bfa754cdc9c87689d1baa2a3875171b13e08e12f4a3a5d4a87a8439972fc956de2e4611080db336491bf2e0c876da9", 0x96, 0x7, 0x0, 0x2, r9}])
connect$unix(r3, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00'})
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)

100.626896ms ago: executing program 2 (id=74):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setresuid(0xee00, 0xee01, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

90.799447ms ago: executing program 4 (id=75):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x0, 0x10, 0x3, 0x3f, 0x6, "c5873c", 0xe4}})
syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x0, 0x10, 0x3, 0x3f, 0x6, "c5873c", 0xe4}}) (async)
syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (async)

0s ago: executing program 5 (id=76):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x1080)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x21, 0x0, 0x2f, 0x0, @multicast2, @empty}}}})
r2 = socket(0x10, 0x803, 0x0)
write(r2, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x14000, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000880)={<r4=>r1, &(0x7f0000000180)='.+[\x00', 0x208100, &(0x7f00000001c0)={@_ha_fsid={[0x3, 0x1]}, {0xffff, 0x1ff, 0x3, 0x2}}, 0x80, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xfffffff8})
pwrite64(r4, &(0x7f00000008c0)="df20744551af2acc7bbc51b41c847d37fdd5d248c6e147b78247e1ae44d5baf86b1799ccecb29092987e412fe47b5396d280b6d9e12155a18c62601b316e46fcd65824270159e426493a1b26fa5ed7bd5c2755eca9d4ec8be2f5827dbb60ee913b937ef9395eb20d25ba21ee47133a2da6fd58444053e70f9940d2fdb2ca9d8f2d7eac35d5a69e5b39e02871ed712eb6c14c6ae6a256369097eff0ce7bdb9d4f974f0e20194d79067ecac84ebf6a6cdb3ec9eddc", 0xb4, 0x7)
sendto(r2, &(0x7f0000001b00)="120000001200e7ef007b00000000018b4ba1", 0x12, 0x20040090, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12120, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x1c, 0x6, 0xff, @remote, @local, {[], {{0x1000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x96, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabc]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x6, 0x1]}]}}}}}}}}, 0x0)
r6 = accept4$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x800)
bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}, 0x1c)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x33, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @jmp={0x5, 0x0, 0x5, 0xa, 0x9, 0xfffffffffffffffe, 0x1}, @alu={0x7, 0x0, 0x9, 0xb, 0x3, 0x40, 0xfffffffffffffff0}, @tail_call, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x3, 0xca, &(0x7f0000000580)=""/202, 0x41000, 0xfaa7432bb8d6271a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0xc, 0x10000, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x1, 0x1], &(0x7f0000000740)=[{0x5, 0x6, 0x1, 0x1}, {0x5, 0x5, 0xb}], 0x10, 0x1}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r8, 0x0)
ftruncate(r8, 0xc17a)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r7, r8, 0x1e, 0x0, @void}, 0x10)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   14.618290][   T28] kauditd_printk_skb: 48 callbacks suppressed
[   14.618304][   T28] audit: type=1400 audit(1781669567.371:59): avc:  denied  { transition } for  pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   14.627116][   T28] audit: type=1400 audit(1781669567.371:60): avc:  denied  { noatsecure } for  pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   14.630759][   T28] audit: type=1400 audit(1781669567.371:61): avc:  denied  { write } for  pid=225 comm="sh" path="pipe:[14516]" dev="pipefs" ino=14516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   14.636476][   T28] audit: type=1400 audit(1781669567.371:62): avc:  denied  { rlimitinh } for  pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   14.649948][   T28] audit: type=1400 audit(1781669567.371:63): avc:  denied  { siginh } for  pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts.
[   51.003587][   T28] audit: type=1400 audit(1781669603.751:64): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   51.004640][  T279] cgroup: Unknown subsys name 'net'
[   51.026602][   T28] audit: type=1400 audit(1781669603.751:65): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   51.053892][   T28] audit: type=1400 audit(1781669603.781:66): avc:  denied  { unmount } for  pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   51.054074][  T279] cgroup: Unknown subsys name 'devices'
[   51.197855][  T279] cgroup: Unknown subsys name 'hugetlb'
[   51.203572][  T279] cgroup: Unknown subsys name 'rlimit'
[   51.335618][   T28] audit: type=1400 audit(1781669604.081:67): avc:  denied  { setattr } for  pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   51.358963][   T28] audit: type=1400 audit(1781669604.081:68): avc:  denied  { mounton } for  pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   51.367256][  T281] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   51.383946][   T28] audit: type=1400 audit(1781669604.081:69): avc:  denied  { mount } for  pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   51.415484][   T28] audit: type=1400 audit(1781669604.141:70): avc:  denied  { relabelto } for  pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   51.440959][   T28] audit: type=1400 audit(1781669604.141:71): avc:  denied  { write } for  pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   51.470798][   T28] audit: type=1400 audit(1781669604.221:72): avc:  denied  { read } for  pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   51.496360][   T28] audit: type=1400 audit(1781669604.221:73): avc:  denied  { open } for  pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   51.496552][  T279] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.352839][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.359983][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.367405][  T287] device bridge_slave_0 entered promiscuous mode
[   52.381446][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.388680][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.396179][  T287] device bridge_slave_1 entered promiscuous mode
[   52.428477][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.435538][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.442942][  T288] device bridge_slave_0 entered promiscuous mode
[   52.450942][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.458009][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.465293][  T288] device bridge_slave_1 entered promiscuous mode
[   52.574092][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.581301][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.588872][  T289] device bridge_slave_0 entered promiscuous mode
[   52.615338][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.622428][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.629868][  T289] device bridge_slave_1 entered promiscuous mode
[   52.672367][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.679450][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.686746][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.693762][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.712734][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.719892][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.727579][  T293] device bridge_slave_0 entered promiscuous mode
[   52.734322][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.741481][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.748820][  T292] device bridge_slave_0 entered promiscuous mode
[   52.760468][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.767887][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.775152][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.782285][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.793479][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.800709][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.808166][  T293] device bridge_slave_1 entered promiscuous mode
[   52.815278][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.822506][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.829956][  T292] device bridge_slave_1 entered promiscuous mode
[   52.950481][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.958168][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.965523][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.973338][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.980587][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.993173][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.000833][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.017208][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.025487][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.032561][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.040001][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.048345][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.055401][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.084705][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.092904][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.110741][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.119015][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.126053][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.137609][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.145822][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.152908][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.174782][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.182553][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.191235][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.198723][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.206489][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.237514][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.245724][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.252871][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.260868][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.269130][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.277425][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.285337][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.304869][  T287] device veth0_vlan entered promiscuous mode
[   53.315490][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.324128][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.332264][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.340031][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.348800][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.356310][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.364696][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.371743][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.379392][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.387729][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.394751][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.402210][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.410885][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.432044][  T287] device veth1_macvtap entered promiscuous mode
[   53.439171][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.447740][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.455923][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.464499][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.472158][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.480500][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.488776][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.497141][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.505505][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.513843][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.520929][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.535269][  T292] device veth0_vlan entered promiscuous mode
[   53.546827][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.554686][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.563297][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.572008][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.580047][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.588207][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.596681][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.604889][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.613305][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.621513][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.628551][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.640827][  T288] device veth0_vlan entered promiscuous mode
[   53.653683][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.661251][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.668907][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.676883][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.684823][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.693116][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.701176][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.709232][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.719542][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.727010][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.734384][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.742812][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.753781][  T292] device veth1_macvtap entered promiscuous mode
[   53.765319][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.773614][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.781981][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.790168][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.798484][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.807116][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.815249][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.825788][  T288] device veth1_macvtap entered promiscuous mode
[   53.837017][  T289] device veth0_vlan entered promiscuous mode
[   53.847304][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.855560][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.863817][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.871490][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.879411][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.887525][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.895863][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.905247][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.912781][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.920927][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.929269][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.948400][  T287] request_module fs-gadgetfs succeeded, but still no fs?
[   53.951901][  T289] device veth1_macvtap entered promiscuous mode
[   53.969308][  T293] device veth0_vlan entered promiscuous mode
[   53.977449][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.986793][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.995207][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.003883][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.012417][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.020665][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.028967][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   54.036703][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.044967][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.053438][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   54.061682][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   54.072202][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   54.080386][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   54.099135][  T293] device veth1_macvtap entered promiscuous mode
[   54.116881][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.125544][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.133866][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   54.142007][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.150516][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.171245][  T313] Driver unsupported XDP return value 0 on prog  (id 1) dev N/A, expect packet loss!
[   54.181635][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.200826][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.212191][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.219973][  T318] loop3: detected capacity change from 0 to 4096
[   54.221133][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.234880][  T318] EXT4-fs: Mount option(s) incompatible with ext3
[   54.238837][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.250143][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.260451][  T318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   54.342552][  T329] loop0: detected capacity change from 0 to 512
[   54.350132][  T328] loop2: detected capacity change from 0 to 512
[   54.378004][  T334] loop1: detected capacity change from 0 to 1024
[   54.387930][  T329] EXT4-fs (loop0): orphan cleanup on readonly fs
[   54.389971][  T334] =======================================================
[   54.389971][  T334] WARNING: The mand mount option has been deprecated and
[   54.389971][  T334]          and is ignored by this kernel. Remove the mand
[   54.389971][  T334]          option from the mount to silence this warning.
[   54.389971][  T334] =======================================================
[   54.394367][  T329] EXT4-fs error (device loop0): ext4_find_extent:900: inode #4: comm syz.0.1: inode has invalid extent depth: 7
[   54.429717][  T334] EXT4-fs: Ignoring removed bh option
[   54.449006][  T328] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   54.459266][  T338] capability: warning: `syz.4.10' uses deprecated v2 capabilities in a way that may be insecure
[   54.465756][  T340] Zero length message leads to an empty skb
[   54.469885][  T329] EXT4-fs warning (device loop0): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   54.486520][  T328] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[   54.492118][  T329] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   54.505427][  T329] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   54.529586][  T334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   54.551873][  T344] loop4: detected capacity change from 0 to 512
[   54.559492][  T344] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   54.572768][  T344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   54.598184][  T344] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.10: invalid indirect mapped block 9 (level 0)
[   54.611826][  T344] EXT4-fs (loop4): Remounting filesystem read-only
[   54.618509][  T344] EXT4-fs (loop4): 1 truncate cleaned up
[   54.624215][  T344] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   54.685499][  T334] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.1.9: path /2/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[   54.712308][  T287] EXT4-fs (loop1): unmounting filesystem.
[   54.734273][  T347] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   54.754587][  T347] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.761854][  T347] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.764084][  T349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   54.842687][  T349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'.
[   54.853798][  T349] loop1: detected capacity change from 0 to 256
[   54.868601][  T349] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET)
[   54.876761][  T349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12'.
[   54.934593][  T349] overlayfs: filesystem on './file2' not supported
[   54.947640][  T354] usb usb8: check_ctrlrecip: process 354 (syz.3.13) requesting ep 01 but needs 81
[   54.957169][  T354] usb usb8: usbfs: process 354 (syz.3.13) did not claim interface 0 before use
[   55.385408][  T289] EXT4-fs (loop0): unmounting filesystem.
[   55.696888][  T362] loop1: detected capacity change from 0 to 256
[   55.708521][  T364] loop2: detected capacity change from 0 to 512
[   55.816960][  T372] loop1: detected capacity change from 0 to 2048
[   55.840027][    T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   55.840556][  T370] loop0: detected capacity change from 0 to 512
[   55.850229][  T364] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   55.854308][  T370] EXT4-fs: Ignoring removed orlov option
[   55.867116][  T372] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   55.869174][  T364] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.877277][  T372] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.029785][  T370] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   56.138855][  T378] EXT4-fs (loop3): Test dummy encryption mode enabled
[   56.143852][  T370] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   56.155695][  T378] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   56.165390][  T378] EXT4-fs (loop3): group descriptors corrupted!
[   56.186101][  T370] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   56.214177][  T370] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   56.232234][  T370] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e11c, mo2=0080]
[   56.240162][    T6] usb 5-1: Using ep0 maxpacket: 32
[   56.240374][  T370] EXT4-fs (loop0): failed to initialize system zone (-117)
[   56.253000][    T6] usb 5-1: unable to get BOS descriptor or descriptor too short
[   56.253456][  T370] EXT4-fs (loop0): mount failed
[   56.268226][    T6] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   56.277356][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.285497][    T6] usb 5-1: Product: syz
[   56.289945][    T6] usb 5-1: Manufacturer: syz
[   56.413162][    T6] usb 5-1: SerialNumber: syz
[   56.425133][  T370] EXT4-fs: Mount option(s) incompatible with ext3
[   56.433399][  T287] EXT4-fs (loop1): unmounting filesystem.
[   56.440652][   T28] kauditd_printk_skb: 71 callbacks suppressed
[   56.440663][   T28] audit: type=1400 audit(1781669609.191:144): avc:  denied  { unlink } for  pid=365 comm="syz.0.15" name="#1" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   56.503173][  T388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[   56.546487][  T388] syz.0.23 (388) used greatest stack depth: 22048 bytes left
[   56.573458][   T28] audit: type=1400 audit(1781669609.271:145): avc:  denied  { accept } for  pid=387 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   57.045371][  T292] EXT4-fs (loop2): unmounting filesystem.
[   57.764173][   T28] audit: type=1400 audit(1781669610.491:146): avc:  denied  { create } for  pid=395 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.784529][   T28] audit: type=1400 audit(1781669610.501:147): avc:  denied  { connect } for  pid=395 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.913356][   T28] audit: type=1400 audit(1781669610.661:148): avc:  denied  { read } for  pid=400 comm="syz.1.27" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.974252][  T390] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   57.993018][   T28] audit: type=1400 audit(1781669610.721:149): avc:  denied  { open } for  pid=400 comm="syz.1.27" path="/9/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.993344][  T390] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   58.023877][   T28] audit: type=1400 audit(1781669610.731:150): avc:  denied  { ioctl } for  pid=400 comm="syz.1.27" path="/9/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   58.055031][  T390] F2FS-fs (loop0): Found nat_bits in checkpoint
[   58.072440][   T28] audit: type=1400 audit(1781669610.731:151): avc:  denied  { nlmsg_write } for  pid=400 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   58.096739][   T28] audit: type=1400 audit(1781669610.741:152): avc:  denied  { write } for  pid=403 comm="syz.2.25" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   58.103720][  T390] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   58.126636][  T390] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   58.164721][   T28] audit: type=1400 audit(1781669610.911:153): avc:  denied  { setattr } for  pid=389 comm="syz.0.24" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   58.195471][  T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   58.195491][  T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   58.204501][  T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   58.212621][  T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   58.220738][  T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   58.228543][  T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   58.236248][  T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[   58.317124][  T421] usb usb8: check_ctrlrecip: process 421 (syz.2.30) requesting ep 01 but needs 81
[   58.334517][  T421] usb usb8: usbfs: process 421 (syz.2.30) did not claim interface 0 before use
[   59.192082][   T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   59.200980][    T6] usb 5-1: unit 0 not found!
[   59.210497][  T293] EXT4-fs (loop4): unmounting filesystem.
[   59.210643][    T6] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[   59.233736][    T6] usb 5-1: unit 0 not found!
[   59.241184][    T6] snd-usb-audio: probe of 5-1:1.1 failed with error -22
[   59.261044][    T6] usb 5-1: unit 0 not found!
[   59.266128][  T412] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   59.285277][    T6] snd-usb-audio: probe of 5-1:1.2 failed with error -22
[   59.294302][    T6] usb 5-1: USB disconnect, device number 2
[   59.324425][  T423] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.331560][  T423] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.339817][  T423] device bridge_slave_0 entered promiscuous mode
[   59.349341][  T423] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.356556][  T423] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.364152][  T423] device bridge_slave_1 entered promiscuous mode
[   59.390335][   T19] usb 2-1: Using ep0 maxpacket: 8
[   59.446832][  T439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.35'.
[   59.456753][  T439] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   59.613754][   T19] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[   59.622017][   T19] usb 2-1: config 0 has no interface number 0
[   59.637248][  T412] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.647500][   T19] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   59.656795][   T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.664818][  T412] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   59.673749][   T19] usb 2-1: Product: syz
[   59.677953][   T19] usb 2-1: Manufacturer: syz
[   59.679826][  T423] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.682546][   T19] usb 2-1: SerialNumber: syz
[   59.683300][   T19] usb 2-1: config 0 descriptor??
[   59.689603][  T423] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.689688][  T423] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.694694][  T412] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   59.699529][  T423] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.730632][  T367] udevd[367]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   59.730961][  T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   59.754873][  T412] usb 4-1: SerialNumber: syz
[   59.784157][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.800026][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.807449][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.819847][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.828109][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.835141][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.842527][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.850736][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.857776][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.872277][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.881916][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.897118][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.910912][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.919414][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.927044][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.935489][  T423] device veth0_vlan entered promiscuous mode
[   59.942079][   T19] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[   59.948904][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.956908][   T19] usb 2-1: No valid video chain found.
[   59.964213][   T19] usb 2-1: USB disconnect, device number 2
[   59.965484][  T423] device veth1_macvtap entered promiscuous mode
[   59.985818][  T412] usb 4-1: 0:2 : does not exist
[   60.000290][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.002829][  T412] usb 4-1: USB disconnect, device number 2
[   60.019400][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.041459][  T310] device bridge_slave_1 left promiscuous mode
[   60.048097][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.056526][  T310] device bridge_slave_0 left promiscuous mode
[   60.062786][  T310] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.147216][  T445] set_capacity_and_notify: 3 callbacks suppressed
[   60.147228][  T445] loop4: detected capacity change from 0 to 4096
[   60.160596][  T445] ext4: Unknown parameter 'nouser_xattr'
[   60.309435][  T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   60.397391][  T457] loop5: detected capacity change from 0 to 16
[   60.427488][  T457] erofs: (device loop5): mounted with root inode @ nid 36.
[   60.541951][  T445] loop4: detected capacity change from 0 to 131072
[   60.588230][  T463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.636908][  T463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.388270][  T471] syz.5.40: attempt to access beyond end of device
[   61.388270][  T471] loop5: rw=0, sector=296, nr_sectors = 8 limit=16
[   61.401253][  T471] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36
[   61.559227][  T466] loop3: detected capacity change from 0 to 1024
[   61.630900][  T466] incfs_lookup_dentry err:-40
[   61.635822][  T466] incfs_lookup_dentry err:-40
[   61.659426][  T366] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   61.726538][  T481] usb usb8: check_ctrlrecip: process 481 (syz.4.44) requesting ep 01 but needs 81
[   61.735904][  T481] usb usb8: usbfs: process 481 (syz.4.44) did not claim interface 0 before use
[   61.946318][  T309] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   62.135367][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   62.135387][   T28] audit: type=1400 audit(1781669614.881:162): avc:  denied  { getopt } for  pid=476 comm="syz.5.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   62.164101][  T309] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   62.230990][  T309] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[   62.354764][  T309] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   62.457152][   T28] audit: type=1400 audit(1781669614.961:163): avc:  denied  { getopt } for  pid=478 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   62.489526][  T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   62.506005][  T309] usb 4-1: SerialNumber: syz
[   62.519388][   T28] audit: type=1400 audit(1781669614.961:164): avc:  denied  { ioctl } for  pid=478 comm="syz.2.46" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16973 ioctlcmd=0x5881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   62.554307][  T469] overlayfs: overlapping lowerdir path
[   62.566916][   T28] audit: type=1400 audit(1781669615.321:165): avc:  denied  { connect } for  pid=489 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   62.605407][   T28] audit: type=1400 audit(1781669615.321:166): avc:  denied  { setopt } for  pid=489 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   62.614350][  T309] hub 4-1:1.0: bad descriptor, ignoring hub
[   62.631264][  T309] hub: probe of 4-1:1.0 failed with error -5
[   62.664204][   T28] audit: type=1400 audit(1781669615.411:167): avc:  denied  { name_bind } for  pid=489 comm="syz.4.48" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   62.726486][   T28] audit: type=1400 audit(1781669615.411:168): avc:  denied  { create } for  pid=489 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   62.747287][  T496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.47'.
[   62.756624][  T496] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   62.863285][   T63] usb 4-1: USB disconnect, device number 3
[   62.872837][   T28] audit: type=1400 audit(1781669615.411:169): avc:  denied  { getopt } for  pid=489 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   63.014995][  T502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.51'.
[   63.025053][  T502] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   63.058974][  T309] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   63.226047][  T309] usb 6-1: device descriptor read/64, error -71
[   63.297329][  T288] ------------[ cut here ]------------
[   63.302880][  T288] WARNING: CPU: 1 PID: 288 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0
[   63.312354][  T288] Modules linked in:
[   63.316305][  T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0
[   63.323781][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   63.333893][  T288] RIP: 0010:ovl_dir_modified+0x189/0x1c0
[   63.339700][  T288] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1e 93 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 27 08 5e ff <0f> 0b e9 17 ff ff ff e8 1b 08 5e ff 0f 0b e9 51 ff ff ff 44 89 e1
[   63.359416][  T288] RSP: 0018:ffffc9000b757b60 EFLAGS: 00010293
[   63.365494][  T288] RAX: ffffffff82134cf9 RBX: 1ffff11022b1075a RCX: ffff88810e1c6540
[   63.373503][  T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   63.381529][  T288] RBP: ffffc9000b757b90 R08: ffff888132ec5e07 R09: 1ffff110265d8bc0
[   63.389548][  T288] R10: dffffc0000000000 R11: ffffed10265d8bc1 R12: ffff888115883aa0
[   63.397545][  T288] R13: 0000000000000000 R14: ffff888132ec5d60 R15: ffff888115883ad0
[   63.405546][  T288] FS:  00005555733b0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   63.414560][  T288] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   63.421212][  T288] CR2: 00005555733db988 CR3: 000000012d4c5000 CR4: 00000000003526a0
[   63.429231][  T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   63.437236][  T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   63.445227][  T288] Call Trace:
[   63.448533][  T288]  <TASK>
[   63.451467][  T288]  ovl_do_remove+0x6d3/0xa60
[   63.456091][  T288]  ? ovl_set_redirect+0x6b0/0x6b0
[   63.461125][  T288]  ? selinux_inode_rmdir+0x22/0x30
[   63.466269][  T288]  ovl_rmdir+0x1a/0x20
[   63.470345][  T288]  vfs_rmdir+0x381/0x4f0
[   63.474600][  T288]  incfs_kill_sb+0xfe/0x210
[   63.479179][  T288]  deactivate_locked_super+0xb5/0x120
[   63.484570][  T288]  deactivate_super+0xaf/0xe0
[   63.489300][  T288]  cleanup_mnt+0x45e/0x4e0
[   63.493900][  T288]  __cleanup_mnt+0x19/0x20
[   63.498363][  T288]  task_work_run+0x1e1/0x250
[   63.502960][  T288]  ? __cfi_task_work_run+0x10/0x10
[   63.508114][  T288]  ? __x64_sys_umount+0x12d/0x170
[   63.513147][  T288]  ? __cfi___x64_sys_umount+0x10/0x10
[   63.518672][  T288]  exit_to_user_mode_loop+0x9b/0xb0
[   63.523907][  T288]  exit_to_user_mode_prepare+0x87/0xd0
[   63.529424][  T288]  syscall_exit_to_user_mode+0x1a/0x30
[   63.534894][  T288]  do_syscall_64+0x58/0xa0
[   63.539378][  T288]  ? clear_bhb_loop+0x30/0x80
[   63.544145][  T288]  ? clear_bhb_loop+0x30/0x80
[   63.548871][  T288]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   63.554770][  T288] RIP: 0033:0x7fe011b9e097
[   63.559237][  T288] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   63.579138][  T288] RSP: 002b:00007ffddaaf47e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   63.587606][  T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe011b9e097
[   63.595586][  T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddaaf48a0
[   63.604079][  T288] RBP: 00007ffddaaf48a0 R08: 00007ffddaaf58a0 R09: 00000000ffffffff
[   63.612085][  T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddaaf5930
[   63.620109][  T288] R13: 00007fe011c321ca R14: 000000000000f5dc R15: 00007ffddaaf5970
[   63.628123][  T288]  </TASK>
[   63.631148][  T288] ---[ end trace 0000000000000000 ]---
[   63.646121][  T288] ------------[ cut here ]------------
[   63.651616][  T288] WARNING: CPU: 1 PID: 288 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0
[   63.661295][  T288] Modules linked in:
[   63.665210][  T288] CPU: 1 PID: 288 Comm: syz-executor Tainted: G        W          syzkaller #0
[   63.674388][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   63.684681][  T288] RIP: 0010:ovl_dir_modified+0x189/0x1c0
[   63.691049][  T288] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1e 93 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 27 08 5e ff <0f> 0b e9 17 ff ff ff e8 1b 08 5e ff 0f 0b e9 51 ff ff ff 44 89 e1
[   63.710795][  T288] RSP: 0018:ffffc9000b757b60 EFLAGS: 00010293
[   63.716919][  T288] RAX: ffffffff82134cf9 RBX: 1ffff11022b1075a RCX: ffff88810e1c6540
[   63.724901][  T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   63.732938][  T288] RBP: ffffc9000b757b90 R08: ffff888132ec5e07 R09: 1ffff110265d8bc0
[   63.740990][  T288] R10: dffffc0000000000 R11: ffffed10265d8bc1 R12: ffff888115883aa0
[   63.749000][  T288] R13: 0000000000000000 R14: ffff888132ec5d60 R15: ffff888115883ad0
[   63.756997][  T288] FS:  00005555733b0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   63.765937][  T288] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   63.772655][  T288] CR2: 00005555733db988 CR3: 000000012d4c5000 CR4: 00000000003526a0
[   63.780683][  T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   63.788674][  T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   63.796677][  T288] Call Trace:
[   63.799952][  T288]  <TASK>
[   63.802889][  T288]  ovl_do_remove+0x6d3/0xa60
[   63.807520][  T288]  ? ovl_set_redirect+0x6b0/0x6b0
[   63.812629][  T288]  ? selinux_inode_rmdir+0x22/0x30
[   63.817806][  T288]  ovl_rmdir+0x1a/0x20
[   63.821891][  T288]  vfs_rmdir+0x381/0x4f0
[   63.826176][  T288]  incfs_kill_sb+0x18f/0x210
[   63.830772][  T288]  deactivate_locked_super+0xb5/0x120
[   63.836203][  T288]  deactivate_super+0xaf/0xe0
[   63.840888][  T288]  cleanup_mnt+0x45e/0x4e0
[   63.845317][  T288]  __cleanup_mnt+0x19/0x20
[   63.849768][  T288]  task_work_run+0x1e1/0x250
[   63.854362][  T288]  ? __cfi_task_work_run+0x10/0x10
[   63.859513][  T288]  ? __x64_sys_umount+0x12d/0x170
[   63.864542][  T288]  ? __cfi___x64_sys_umount+0x10/0x10
[   63.869965][  T288]  exit_to_user_mode_loop+0x9b/0xb0
[   63.875177][  T288]  exit_to_user_mode_prepare+0x87/0xd0
[   63.879612][   T28] audit: type=1400 audit(1781669616.631:170): avc:  denied  { setopt } for  pid=503 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   63.880676][  T288]  syscall_exit_to_user_mode+0x1a/0x30
[   63.905173][  T288]  do_syscall_64+0x58/0xa0
[   63.909666][  T288]  ? clear_bhb_loop+0x30/0x80
[   63.914361][  T288]  ? clear_bhb_loop+0x30/0x80
[   63.917051][   T28] audit: type=1400 audit(1781669616.661:171): avc:  denied  { create } for  pid=503 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   63.919100][  T288]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   63.919131][  T288] RIP: 0033:0x7fe011b9e097
[   63.919144][  T288] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   63.919157][  T288] RSP: 002b:00007ffddaaf47e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   63.919174][  T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe011b9e097
[   63.919185][  T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddaaf48a0
[   63.919195][  T288] RBP: 00007ffddaaf48a0 R08: 00007ffddaaf58a0 R09: 00000000ffffffff
[   63.957422][  T506] loop4: detected capacity change from 0 to 512
[   63.968358][  T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddaaf5930
[   63.968384][  T288] R13: 00007fe011c321ca R14: 000000000000f5dc R15: 00007ffddaaf5970
[   63.968399][  T288]  </TASK>
[   63.968405][  T288] ---[ end trace 0000000000000000 ]---
[   64.042791][  T506] EXT4-fs (loop4): orphan cleanup on readonly fs
[   64.049861][  T506] EXT4-fs error (device loop4): ext4_find_extent:900: inode #4: comm syz.4.54: inode has invalid extent depth: 7
[   64.063708][  T506] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   64.078601][  T506] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   64.085203][  T506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   64.126025][  T309] usb 6-1: device descriptor read/64, error -71
[   64.193273][  T520] loop1: detected capacity change from 0 to 16
[   64.222029][  T517] loop2: detected capacity change from 0 to 4096
[   64.232054][  T522] loop3: detected capacity change from 0 to 2048
[   64.243602][  T520] erofs: (device loop1): mounted with root inode @ nid 36.
[   64.263972][  T517] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.277905][  T517] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   64.295404][  T517] EXT4-fs (loop2): Test dummy encryption mode enabled
[   64.383682][  T517] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[   64.392417][  T517] System zones: 0-5
[   64.402359][  T517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   64.412065][  T522] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   64.558968][  T527] syz.1.58: attempt to access beyond end of device
[   64.558968][  T527] loop1: rw=0, sector=296, nr_sectors = 8 limit=16
[   64.572107][  T527] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36
[   64.592704][  T528] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.599949][  T528] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.674717][  T522] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.820837][  T528] syz.4.54 (528) used greatest stack depth: 21992 bytes left
[   64.908063][  T309] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   64.916728][  T293] EXT4-fs (loop4): unmounting filesystem.
[   65.347352][  T536] overlayfs: unrecognized mount option "euid=00000000000000000000" or missing value
[   66.155019][  T309] usb 6-1: device descriptor read/64, error -71
[   66.576433][  T541] process 'syz.4.60' launched './file1' with NULL argv: empty string added
[   66.612082][  T543] loop5: detected capacity change from 0 to 256
[   66.680621][  T412] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   66.688690][  T292] EXT4-fs (loop2): unmounting filesystem.
[   66.791081][  T550] loop5: detected capacity change from 0 to 512
[   66.828629][  T550] EXT4-fs (loop5): orphan cleanup on readonly fs
[   66.835047][  T550] EXT4-fs error (device loop5): ext4_find_extent:900: inode #4: comm syz.5.65: inode has invalid extent depth: 7
[   66.876003][  T412] usb 4-1: Using ep0 maxpacket: 8
[   66.884640][  T550] EXT4-fs warning (device loop5): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   66.900570][  T412] usb 4-1: unable to get BOS descriptor or descriptor too short
[   66.907897][  T550] EXT4-fs (loop5): Cannot turn on quotas: error -22
[   66.915402][  T550] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   66.915629][  T412] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.934806][  T412] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   66.957613][  T412] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40
[   66.968035][  T550] netlink: 'syz.5.65': attribute type 4 has an invalid length.
[   66.990606][  T550] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.997910][  T550] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.061775][  T423] EXT4-fs (loop5): unmounting filesystem.
[   67.077464][  T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.078269][  T562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'.
[   67.085755][  T412] usb 4-1: Product: syz
[   67.098622][  T412] usb 4-1: Manufacturer: syz
[   67.105640][  T564] loop2: detected capacity change from 0 to 512
[   67.210549][  T412] usb 4-1: SerialNumber: syz
[   67.216790][  T564] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.67: inode has both inline data and extents flags
[   67.230641][  T564] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.67: couldn't read orphan inode 15 (err -117)
[   67.242651][  T564] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   67.261940][  T561] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.67: bg 0: block 481: padding at end of block bitmap is not set
[   67.284698][  T412] usb 4-1: MIDIStreaming interface descriptor not found
[   67.293565][  T288] EXT4-fs (loop3): unmounting filesystem.
[   67.302865][  T412] usb 4-1: USB disconnect, device number 4
[   67.318335][   T28] kauditd_printk_skb: 27 callbacks suppressed
[   67.318354][   T28] audit: type=1400 audit(1781669620.071:197): avc:  denied  { mounton } for  pid=567 comm="syz.5.68" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   67.357359][  T568] 9pnet_fd: p9_fd_create_tcp (568): problem connecting socket to 127.0.0.1
[   67.437649][  T575] loop3: detected capacity change from 0 to 512
[   67.458735][  T577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'.
[   67.480619][  T577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.72'.
[   67.490729][  T575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   67.503945][  T577] loop4: detected capacity change from 0 to 256
[   67.516534][  T367] udevd[367]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   67.542591][  T575] fuse: Bad value for 'fd'
[   67.574054][  T577] netlink: 48 bytes leftover after parsing attributes in process `syz.4.72'.
[   67.599887][   T28] audit: type=1400 audit(1781669620.351:198): avc:  denied  { bind } for  pid=574 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   67.619038][   T28] audit: type=1400 audit(1781669620.351:199): avc:  denied  { map } for  pid=574 comm="syz.3.69" path="socket:[17549]" dev="sockfs" ino=17549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   67.631767][  T577] overlayfs: filesystem on './file2' not supported
[   67.687413][  T587] loop5: detected capacity change from 0 to 256
[   67.723844][  T587] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   67.759025][  T292] EXT4-fs (loop2): unmounting filesystem.
[   67.764852][  T587] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[   67.793571][  T587] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[   67.851020][  T587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=587 comm=syz.5.73
[   67.877658][   T28] audit: type=1400 audit(1781669620.631:200): avc:  denied  { write } for  pid=586 comm="syz.5.73" name="file0" dev="loop5" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   67.916574][  T423] ------------[ cut here ]------------
[   67.922067][  T423] kernel BUG at fs/namei.c:2962!
[   67.932803][  T423] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   67.938918][  T423] CPU: 0 PID: 423 Comm: syz-executor Tainted: G        W          syzkaller #0
[   67.947859][  T423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   67.957924][  T423] RIP: 0010:may_delete+0x727/0x730
[   67.963049][  T423] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 3a e8 f3 ff e9 75 fe ff ff e8 80 5d ae ff 0f 0b e8 79 5d ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 61 5d
[   67.982660][  T423] RSP: 0018:ffffc900012e7ad8 EFLAGS: 00010293
[   67.988734][  T423] RAX: ffffffff81c2f7a7 RBX: ffff888132f45cc0 RCX: ffff888118c83cc0
[   67.996711][  T423] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[   68.004689][  T423] RBP: ffffc900012e7b30 R08: 0000000000000003 R09: 0000000000000004
[   68.012667][  T423] R10: dffffc0000000000 R11: fffff5200025cf38 R12: 1ffff110265e8b98
[   68.020642][  T423] R13: 0000000000000001 R14: ffff888132f44030 R15: dffffc0000000000
[   68.028616][  T423] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   68.037551][  T423] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.044138][  T423] CR2: 00007f4ea1f32558 CR3: 000000011ef4f000 CR4: 00000000003506b0
[   68.052111][  T423] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   68.060087][  T423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   68.068064][  T423] Call Trace:
[   68.071345][  T423]  <TASK>
[   68.074280][  T423]  vfs_rmdir+0x2f/0x4f0
[   68.078441][  T423]  ? incfs_kill_sb+0xec/0x210
[   68.083119][  T423]  incfs_kill_sb+0xfe/0x210
[   68.087626][  T423]  deactivate_locked_super+0xb5/0x120
[   68.093004][  T423]  deactivate_super+0xaf/0xe0
[   68.095121][   T28] audit: type=1400 audit(1781669620.631:201): avc:  denied  { add_name } for  pid=586 comm="syz.5.73" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   68.097678][  T423]  cleanup_mnt+0x45e/0x4e0
[   68.097697][  T423]  __cleanup_mnt+0x19/0x20
[   68.097712][  T423]  task_work_run+0x1e1/0x250
[   68.131383][  T423]  ? __cfi_task_work_run+0x10/0x10
[   68.136290][   T28] audit: type=1400 audit(1781669620.631:202): avc:  denied  { associate } for  pid=586 comm="syz.5.73" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   68.136512][  T423]  ? free_nsproxy+0x21f/0x270
[   68.162408][  T423]  do_exit+0xa7c/0x27c0
[   68.166574][  T423]  ? __cfi_do_exit+0x10/0x10
[   68.171164][  T423]  ? __kasan_check_write+0x14/0x20
[   68.175122][   T28] audit: type=1400 audit(1781669620.631:203): avc:  denied  { mounton } for  pid=586 comm="syz.5.73" path="/10/file0/file0/file0" dev="loop5" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   68.176268][  T423]  ? _raw_spin_lock_irq+0x95/0xf0
[   68.176290][  T423]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   68.210608][  T423]  ? ksys_write+0x1eb/0x260
[   68.215206][  T423]  ? zap_other_threads+0x2c1/0x2f0
[   68.220322][  T423]  do_group_exit+0x21b/0x2e0
[   68.221850][   T28] audit: type=1400 audit(1781669620.651:204): avc:  denied  { remove_name } for  pid=423 comm="syz-executor" name=".index" dev="loop5" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   68.224945][  T423]  __x64_sys_exit_group+0x3f/0x40
[   68.253017][  T423]  x64_sys_call+0x7b4/0x9a0
[   68.257527][  T423]  do_syscall_64+0x4c/0xa0
[   68.261943][  T423]  ? clear_bhb_loop+0x30/0x80
[   68.266619][  T423]  ? clear_bhb_loop+0x30/0x80
[   68.269488][   T28] audit: type=1400 audit(1781669620.651:205): avc:  denied  { rmdir } for  pid=423 comm="syz-executor" name=".index" dev="loop5" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   68.271290][  T423]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   68.299707][  T423] RIP: 0033:0x7f8e32b9ce59
[   68.304124][  T423] Code: Unable to access opcode bytes at 0x7f8e32b9ce2f.
[   68.311135][  T423] RSP: 002b:00007fff5bb8d6f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   68.319554][  T423] RAX: ffffffffffffffda RBX: 00007f8e32c3223c RCX: 00007f8e32b9ce59
[   68.327527][  T423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[   68.335495][  T423] RBP: 0000000000000010 R08: 0000000000000000 R09: 00007f8e32c321ca
[   68.343461][  T423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5bb8e9b0
[   68.351524][  T423] R13: 00007f8e32c321ca R14: 0000555557bd94e8 R15: 00007fff5bb8fa80
[   68.359512][  T423]  </TASK>
[   68.362529][  T423] Modules linked in:
[   68.400464][  T423] ---[ end trace 0000000000000000 ]---
[   68.405957][  T423] RIP: 0010:may_delete+0x727/0x730
[   68.411158][  T423] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 3a e8 f3 ff e9 75 fe ff ff e8 80 5d ae ff 0f 0b e8 79 5d ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 61 5d
[   68.431373][  T423] RSP: 0018:ffffc900012e7ad8 EFLAGS: 00010293
[   68.438094][  T288] EXT4-fs (loop3): unmounting filesystem.
[   68.443930][  T423] RAX: ffffffff81c2f7a7 RBX: ffff888132f45cc0 RCX: ffff888118c83cc0
[   68.452192][  T423] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000
[   68.466488][  T423] RBP: ffffc900012e7b30 R08: 0000000000000003 R09: 0000000000000004
[   68.474580][  T423] R10: dffffc0000000000 R11: fffff5200025cf38 R12: 1ffff110265e8b98
[   68.482593][  T423] R13: 0000000000000001 R14: ffff888132f44030 R15: dffffc0000000000
[   68.490776][  T423] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   68.499802][  T423] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.506444][  T423] CR2: 00007fe011dea2f8 CR3: 000000012d4c5000 CR4: 00000000003506b0
[   68.514446][  T423] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   68.522706][  T423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   68.526039][    T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   68.531048][  T423] Kernel panic - not syncing: Fatal exception
[   68.538365][  T423] Kernel Offset: disabled
[   68.548795][  T423] Rebooting in 86400 seconds..