last executing test programs:

8.894753477s ago: executing program 2 (id=20):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000200, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x7, 0x4ee, &(0x7f0000002080)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1\x00', 0xc0642, 0x150)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x14, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x4}, 0x94)
pwrite64(r0, &(0x7f00000002c0)=' ', 0x1, 0x20000000003)
linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_on}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
lstat(&(0x7f0000000600)='./file0/file1\x00', &(0x7f0000000480))
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x5, &(0x7f00000000c0)=""/19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_emit_ethernet(0x1f, &(0x7f0000000200)=ANY=[@ANYBLOB="19e0ffffffff006c000000000011424203", @ANYRES16=0x0, @ANYRES32], 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="160a0000000000006111200000000000180000000000000000000000000000009500000000000000b65c9e49567679ff6f9bb6f4cfa105e76bcc8cf44d52cd8d364a4962d44b183843a36c1b1cafc6b7a3204744fb825fac53f885efaf372cce523d886b7ea447e8a401c2b43bf1b01e38e6cfc9b952279ee48203b60133f1772075153ec926a28914393b97eca0b416298687f61fcb90611ec025c2bd889279064c20cb91945d804424dc28014e1abfd3229ef6628ff8c616ccf02dd9d170b39fa78febda2162efe4dd474d057b6ad1598abd8e2970e67cf7a2ada6b891bae428331531595869b1ec177b131d504e5396397a16ee851bf6efdd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

7.406355899s ago: executing program 2 (id=27):
r0 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = signalfd(r0, &(0x7f0000000080)={[0x1]}, 0x8)
sendto$packet(r2, &(0x7f00000000c0)="10030600e0fc020004004788aa96a13bb100001100007fca1a", 0x19, 0x0, 0x0, 0x0)
setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) (async)
bind$can_raw(r1, &(0x7f0000000000), 0x10) (async)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) (async)
bind$can_raw(r3, &(0x7f00000001c0), 0x10)
dup3(r0, r1, 0x0)
rt_sigprocmask(0x0, 0x0, &(0x7f0000000240), 0x8)

7.405702929s ago: executing program 2 (id=28):
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
getpeername$inet6(r0, 0x0, &(0x7f0000000140))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={0xffffffffffffffff, 0x0, 0x31, 0x0, &(0x7f0000000340)="7d0e88789af169261e60cd2d7de28de14b58622fde6d5ea629d334ba6ed1e35af91409165bbde49832a650ed27b7961efb", 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x78}, 0x50)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8ab8, 0x4, 0x80020007, 0x804, 0xfffffffffffffffc, 0x13, 0x4, 0x5, 0xc535, 0x9, 0x8000000000000001, 0x200000000000001, 0x0, 0x102, 0x3, 0xffffffffffffffff], 0x8000000, 0x141202})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioprio_set$uid(0x3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
io_setup(0x20fe, &(0x7f0000000540)=<r6=>0x0)
io_submit(r6, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000200)='p', 0x8200, 0x600}])
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0xd1, 0x82, '\x00', 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r7 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file2\x00', 0x1010051, &(0x7f0000000100), 0x1, 0x581, &(0x7f0000001280)="$eJzs3cFvHFcZAPBvxt7Ejt3aBQ6lEqWiRUmBrOOatFaEAkgITpWAIrggBWOvLStrb2Sv29iKqCuuSEgIQSUucOKCxB+AhHLhDkiV2jsCBEIlgQNIbQfN7mwTr3dth+x6Kvv3iyYzb97ufN/bzbx9szuZCeDUeioiLkTESEQ8GxFTxfq0mGK3PeWPu3vn1mI+JZFlL72dRFKs62zrbDGfKJ42FhFf/0rEd5P9cTe3d64v1Ou1jaI801xL3smynYurawsrtZXa+tzc7PPzL8xfnr80kHZOR8TVL/31Jz/85Zev/vYzr/zp2t8vfC9P679Z9mp0tWOQ2k2vtF6LjtGI2BhGsJKMtlrYdrmz8g9XyksIAIC+8vH+hyLiE63x/1SMtEZzAAAAwEmSfX4y3kkiMgAAAODESiNiMpK0WpzvO1mcsToRI/GROJfWG5vNTy83ttaX8rqI6aiky6v12qUYa507MB2VJC/PFufYdsrPdZXnIuKxiPjx1HirXF1s1JfK/vIDAAAATomJruP/f0+labVaVO6WnBwAAAAwONNlJwAAAAAMneN/AAAAOPmmsx536NovHX4mAAAAwBB89cUX8ynr3P966eXtreuNly8u1TavV9e2FquLjY0b1ZVGY6V1zb61w7ZXbzRufDbWt27ONGubzZnN7Z1ra42t9ea11T23wAYAAACO0WMfv/1WEvmf8di9Mt5ad6aoq0RkI/c/eLSMDIFheaBzev4yvDyA43f/5/t4iXkAx8+QHk6vStkJAKU77D8A9T155/eDzwUAABiO8x+9/VY+9t+9sv/3/7eXS00NGLLi9//kSBcAAU6UkbITAErT/v3vvayt7GyA41Q5aATgoABOvHQwv/8fciphokMBAICSTbamJK0WxwGTkabVasQjrdsCVpLl1XrtUkQ8GhFvTlXO5uXZ1jMTo3kAAAAAAAAAAAAAAAAAAAAAAAAAOKIsSyLLsmwsAwAAAE6qiPRvnTtznZ96ZrL7+4EzyX+mWvOIeOVnL/305kKzuTGbr//n++ubrxfrnyvjGwwAAACgW+c4vXMcDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDdPfOrcW7WZZld24tHmfcf3wxIqaL+MXUrhmNsdZ8LCoRce5fSYze97wkIkYGEH/3tYh4vFf8JE8rposs9sQ/E5FGxPig4scDxo92/IkBxIfT7Hbe/3yh1/6XxlOtee/9b7SYHlb//i99v/8b6dP/PdJvo5W9xSfe+PVM3/ivRTwx2rv/6cRP8u31iP/0Edv4nW/s7BSLk9112S8izvfq/5K9sWaaazdmNrd3Lq6uLazUVmrrc3Ozz8+/MH95/tLM8mq9VvzdM/6PPvab9+6V3t3X/nMH9L+t9vd5/Z85YvvffePmnQ+3F7vemajEz7PswtO93//H89mn9sfvfPZ9svgcyMv5a5i+/s2e8Z/81R+f7Jdb3v6lPu0f62r/2a72Xzhi+5/92vf/fMSHAgDHYHN75/pCvV7bODEL+cjoobcT0x+U5gxyIX9pBrTBfNxZdnNqSSSRL7y5p2rhwRO7+rlHv5XvDYPN8NViH1uod/a2/3uDExFxb83vioOjAaWa/7PYV3V413F2SF0SAAAwJPcG/d01STkJAQAAAAAAAAAAAAAAAAAAwCl02BXC9l8YrFhI91xm79s/OOBqZN0xd8tpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAgf4XAAD//0x8zJo=")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000000400000006"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x200000000000021e, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc)
mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x2070041, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}, 0x0)

5.802683565s ago: executing program 4 (id=54):
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4650, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0x81, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0xe5}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1e, 0xa, 0x10, {0xa, 0x25, 0x25, 0x5, 0x50, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe3, 0x1, {0xa, 0x25, 0x25, 0x306, 0x8, 0x3}}}}}}}}]}}, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dd3c86dfda42a7b1ef5755ec5ade478a4e18a9100c7b96fca72373383d82b8ece5db38c6279f1b5837e6cf0d3c84a4ff700bd9b4328b84b94c8899dc3ba1bbadda6c498eea7fffde3d26068ee44dcbb15fd03ae8690252cd817", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',k'])

4.748956777s ago: executing program 1 (id=60):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x10000765, @loopback, 0xa1}, 0x1c)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000001c0)=""/17, &(0x7f0000000200)=0x11)
recvmmsg(r0, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40032060, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x246, 0x7, 0x5, 0xfffffffffffffff8, 0x1, 0x9, 0xf6b})
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000014000000090000002d214296af892dea8a54a3e7693b1b65"], &(0x7f0000000180)=0x38)
mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)

4.678766919s ago: executing program 1 (id=61):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0)
recvmmsg(r1, &(0x7f0000009680)=[{{0x0, 0x0, 0x0}, 0x80200000}], 0x1, 0x10103, 0x0)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50)
ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f00000003c0)={<r6=>r2, &(0x7f0000000200)='-[(\x00', 0x0, &(0x7f0000000240)={@_ha_fsid={[0x159, 0x6]}, {0x7fff, 0x7, 0x6, 0x550}}, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.205289719s ago: executing program 4 (id=65):
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
open(0x0, 0x60840, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x3ffc00000}, 0x16, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000370429bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c040000000000400012800b00010069703667726500003000028004001200140006"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
getdents64(r3, 0x0, 0x43)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="e0000000010a01010000000000000000000000090c00044000000000000000010900010073797a3000000000ab00060038f3f29409ebe8ff4afce19cd642ff5337bab56c025e0deb36263731bc28e695994f9fc43a956f05286f58e4af256f1812458b66cee153ed4c224e8c0c62fdbf0364598df8c6604805c210d53e69c9682795f11efc6b48c7de8885e68c336fdab1ad6aa2fc332381a67849e152029688a937a7927d4fbf640c20fdc01cda5b28cbe05a92f301da8ef112519247218113672893f38ff699e024000800024000000000"], 0xe0}}, 0x40800)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0xfe0c)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r5)
r6 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r5, @ANYRESDEC=r6], 0x114}}, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0xae)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[])
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/15, 0x188, 0xf, 0x0, 0x8}, 0x28)

4.009507653s ago: executing program 2 (id=68):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80)
r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000)
r7 = fsmount(r5, 0x0, 0x8)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r4, r7, 0x0, 0x0, @val=@uprobe_multi={&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000400)=[0x6, 0x104, 0x7, 0x81, 0xa], &(0x7f0000000440)=[0x3, 0x4, 0x2, 0x2], 0xd06, 0x5, 0x1}}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r7, 0xc, 0x0, 0xce2c, &(0x7f0000002100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r8 = fsmount(r3, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r8, 0x16, 0x0, @void}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4004)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x1)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x1, &(0x7f0000002240)=ANY=[@ANYBLOB="1800000000000000000000000000000071180f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.805652388s ago: executing program 1 (id=69):
unshare(0x24020400)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101000, 0x2)
sendfile(r0, r0, 0x0, 0x6)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0)
r2 = syz_usb_connect$uac2(0x0, 0x121, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10f, 0x3, 0x1, 0xf9, 0x80, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x9, 0x20, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x2, 0x4e, 0x4e}, [@selector_unit={0x9, 0x24, 0xb, 0x3, 0x4, "c4c69d1c"}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x1, [0xc, 0x6, 0x5, 0x1, 0x4, 0xb]}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x3, [0x3, 0x9]}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x401, 0x7, 0x2, 0x5, 0xb, 0x4}, @input_terminal={0x10, 0x24, 0x2, 0x4, 0x202, 0x5, 0xb, 0x2, 0x5, 0x9, 0x79, 0x7}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x1, "f3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x4, 0x7, 0x31, "b3aab9458bd6bc5c"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x2, 0x0, "2b9f0629"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xdd}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfb, 0x1, 0x4, {0x8, 0x25, 0x1, 0x2, 0x28, 0xfb, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x4, 0x0, 0xa, "2eccad82d0642b18"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x200, 0x4, 0x0, 0x6}, @as_header={0x10, 0x24, 0x1, 0xa7, 0x2, 0x1, 0x1001, 0x2, 0x6, 0x6}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x2, 0xe, 0x7}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x10, 0x3, 0xff, 0x28, "bba0", "a68441"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x5, 0x4, {0x8, 0x25, 0x1, 0x83, 0xf, 0x0, 0xf800}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x0, 0x0, 0x7, 0x5, 0x10, 0xc}, 0xf6, &(0x7f0000000340)={0x5, 0xf, 0xf6, 0x4, [@ptm_cap={0x3}, @generic={0xe4, 0x10, 0xa, "b560e4a1c1efd23fd9facf805ae81ffda9ad77e91039d62fb25be24b30f6149a28e4ec2c92e792df65007e2d6c7374cc08a9fe4f20b6de89f48684aeea492beed858155d64e200be15f7424d8c739e452051d613e6195d2a4b5a37678d59863aebcf0a2b0455239e5419875409acf899a69dbbee30731a0dd5661358dff1611aa835e98f671871b2614c2e2745e2f5ff49ee098df594217976319b0afdc0fbf6863442df6f3d1c4a63f6eb74616faaa4068f067602b188ec09f81523fbf2cfc581e2afe4852f75fc20acf3f5ca729005c86de5ae9398bb463093a04ca7da41b841"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x4, 0x1000}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40c}}, {0xb0, &(0x7f0000000480)=@string={0xb0, 0x3, "8dc700d18bdc79902fcde71c9b25b2dfc2a2c7d5cb4f846090a8f44bd3ccc0f93ac1e1dd4aaae368183aeec0dcbeb2ca18135e8b05d64bbe3025d12acff42d74358de9df20c94d943b1784436c1c595bcab83763879d549bf6d2f0aec3b4219a5df6264f2e9c772f156523a68853e86e9f6f571cc82c437980b1af76fcd982b2000513876b0a0112e623bb35712e4d90c09c8e8a360f834f4fa37385b7b4f6c4f5f5bbbc34ea8ee18c2aeb6f517f"}}]})
syz_usb_control_io$uac2(r2, &(0x7f0000000740)={0x14, &(0x7f0000000580)={0x0, 0xc, 0xf8, {0xf8, 0x3, "f29ff98db549672421428052589e8375aa34b5759e365d6c23bd5d8949c2c68f5ad04016d7d404045d347b88ab637b66ef180ccaa427d35a89d55dd89e79e9884625dd2ef5568666d47c30f1b9736fc79100b2e02657fb286cfb1cad22b82b712d84cc1a7073f987ed6838b5a5e320eb1b519f722cfd984a70a03967bfe9f0ed8b3ee4f91029001432f15c67c757f3eaee9ec4b7e5ddd563c1ab5e35880bef227c3dfd8ca70aa26098241b50ba0fab6c6299846e30fd7fe1f7597a455b3741b037d59a3256eafc2d2dc1a7ed2423430483810120bbf111609086c0d16de624498663ed257f8e484c06c69cdb1612cad705cdd8db0f18"}}, &(0x7f0000000680)={0x0, 0x3, 0x82, @string={0x82, 0x3, "1a8471aa3c4e8926b75d56343baa54b8a57be36cc140ad8e2901cf573c8b359a6043bab92baa93c31d8d10e8bfb952e5a36c3ec10f7d635e36aaf84d7a35f93e7948a659019b31f77b08c0723750754abf47481ef0184c9ce0e07e42905eea9f2be48839f1a941e4370f9c541cd45ff0e71fb2bef4df13335fb22bb92a1a8eb4"}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000a40)=ANY=[@ANYBLOB="20026a00f3b8d4725919f2dfe30000b9b5a4cae45fc2c29beb5da08ffebf8aee44487b66c58971ba4ef3f07845522320a2013fe0c48edc6c669c5a654c7aa7624a1001ce55ea08cf32d2e9f8be5bc148ec5de77817f4187078b90eeb00dcba5ef4cc9d4515d9027da5511b2588062c9d29e89925d9fc4e392a11ee513f9bed45349163eb119011d9512a47a364d2df3cf8ca67fde3255fb6836d6d0878d931e93aa9e54218c520290a33b72f175e95165f420b4e8a7a5c2c595f1a5e56d4605486"], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000880)={0x20, 0x81, 0x1, "af"}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "0cc492"}, &(0x7f0000000900)={0x20, 0x83, 0x1, "d4"}, &(0x7f0000000940)={0x20, 0x84, 0x1, '+'}, &(0x7f0000000980)={0x20, 0x85, 0x3, "bdee74"}})
read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, <r3=>0x0}, 0x2058)
socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0x4})
write$FUSE_LSEEK(r1, &(0x7f00000021c0)={0x18, 0x0, r3, {0x7}}, 0x18)

3.73466659s ago: executing program 2 (id=70):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8, 0xffffffffffffffff, 0xb, 0x5, 0xceb, 0x1ea6, 0x7, 0x10, 0x10003, 0x8000000000000002, 0x1, 0xffffffffffff986a, 0x3, 0x2, 0x1, 0x4], 0x0, 0x154b93}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8, 0xffffffffffffffff, 0xb, 0x5, 0xceb, 0x1ea6, 0x7, 0x10, 0x10003, 0x8000000000000002, 0x1, 0xffffffffffff986a, 0x3, 0x2, 0x1, 0x4], 0x0, 0x154b93})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket(0x11, 0x2, 0x0)
bind$packet(r7, &(0x7f0000000080)={0x11, 0xf6, r6, 0x1, 0xe, 0x6, @multicast}, 0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)=@delqdisc={0x3cc, 0x25, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0xe}, {0xda71655276789b70, 0x6}, {0xd, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xce}}, @TCA_RATE={0x6, 0x5, {0x4}}, @TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf9, 0x9, 0x1000, 0x9, 0x0, 0x3, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x6, 0xf23, 0x31, 0x1, 0x8, 0x0, 0x1}}, {0x6, 0x2, [0x4d5f]}}, {{0x1c, 0x1, {0x8, 0xe6, 0x9, 0x3b63, 0x2, 0x0, 0x3, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x90, 0x1, 0x3, 0x0, 0x1, 0x8, 0xffff, 0x2}}, {0x8, 0x2, [0x9e, 0x6]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x5, 0x3edd, 0x0, 0x0, 0x9, 0x3, 0x1}}, {0x6, 0x2, [0x8]}}]}, @TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0xf, 0x7000, 0x9, 0x1, 0x6, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x51, 0x0, 0x5, 0x1ff, 0x2, 0x3, 0x6, 0xa}}, {0x18, 0x2, [0xfffc, 0x3, 0x10, 0x4, 0x7f, 0x800, 0x8, 0x4, 0x3, 0x6]}}, {{0x1c, 0x1, {0x8, 0x80, 0xb508, 0xe, 0x0, 0x3, 0xe52, 0x3}}, {0xa, 0x2, [0xd4, 0x7fc, 0xc80]}}, {{0x1c, 0x1, {0x9, 0x5a, 0xb68, 0x7ff, 0x0, 0x6e61, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x82, 0x4, 0x8, 0x3, 0x2, 0x5, 0x0, 0x6}}, {0x10, 0x2, [0x4, 0xc6, 0x7, 0x0, 0x8d, 0x40]}}, {{0x1c, 0x1, {0xa3, 0x5c, 0x0, 0x7, 0x2, 0x3, 0x7, 0x6}}, {0x10, 0x2, [0x3, 0x0, 0x7f, 0x5, 0xfff7, 0x3]}}, {{0x1c, 0x1, {0x3f, 0x1, 0xe, 0x3, 0x0, 0xd, 0x31, 0x3}}, {0xa, 0x2, [0x9, 0x400, 0x7]}}, {{0x1c, 0x1, {0x4, 0x81, 0x7f, 0x5, 0x1, 0x8, 0x4, 0x8}}, {0x14, 0x2, [0x1, 0x5567, 0x100, 0x7ff, 0x0, 0x216, 0x5, 0xfff]}}]}, @TCA_STAB={0x17c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x9, 0x5, 0xe1, 0x0, 0x2, 0x3, 0x3}}, {0xa, 0x2, [0x2, 0x8, 0xefe7]}}, {{0x1c, 0x1, {0x3, 0xe, 0x7, 0x7, 0x1, 0x1, 0x6, 0x9}}, {0x16, 0x2, [0x2, 0x1, 0x9, 0xb2cb, 0xfff8, 0x303d, 0x10, 0xe8de, 0xf3c]}}, {{0x1c, 0x1, {0x6, 0x8, 0x3b64, 0x8, 0x0, 0x3, 0x5, 0x7}}, {0x12, 0x2, [0x7, 0x8, 0x7f, 0xb, 0xffba, 0xdfe8, 0x1]}}, {{0x1c, 0x1, {0x4, 0x6, 0xfff9, 0x8, 0x2, 0x100, 0x5, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x5, 0x5, 0xffff, 0x0, 0x0, 0x7f, 0x7, 0x3}}, {0xa, 0x2, [0x8000, 0x5, 0xaed]}}, {{0x1c, 0x1, {0x9, 0x0, 0x8, 0x380, 0x0, 0x7fffffff, 0x100, 0x5}}, {0xe, 0x2, [0x9, 0x4, 0x3, 0x6, 0x5]}}, {{0x1c, 0x1, {0x7, 0xa, 0x4, 0x5f2, 0x2, 0x0, 0x4, 0x1}}, {0x6, 0x2, [0xf]}}, {{0x1c, 0x1, {0x3, 0x6, 0x3, 0x5, 0x1, 0x2, 0x2, 0x6}}, {0x10, 0x2, [0x1, 0xfffd, 0x1, 0xfffe, 0x7, 0x1d3]}}, {{0x1c, 0x1, {0x9, 0x7f, 0x2, 0xffffffff, 0x0, 0xfffffffe, 0x8000, 0x2}}, {0x8, 0x2, [0x2, 0x8a6]}}]}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x894}, 0x20000040)

3.70678122s ago: executing program 2 (id=71):
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000004b11200000b3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000100)={0x2, 0x100, 0x40000})
rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') (async)
rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00')

3.667427971s ago: executing program 32 (id=71):
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000004b11200000b3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000100)={0x2, 0x100, 0x40000})
rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') (async)
rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00')

3.665333481s ago: executing program 4 (id=73):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xe}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x60, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

3.606773182s ago: executing program 4 (id=74):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
r2 = socket$netlink(0x10, 0x3, 0x13)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=<r3=>0x0)
fstat(0xffffffffffffffff, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x20000880)
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="8b330000000005000000080003005dd518b8791c51a8f65d8498b6fdf1601037ff042daa3298003a42ff8e80da386d5b66c0418a61753489b8151a813166dc52aaa9dca46f208181b25491", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x24000000)
unshare(0x64000600)
r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00')
read(r10, &(0x7f0000001180)=""/4096, 0x1000)
socket$inet6_tcp(0xa, 0x1, 0x0)
getdents(r10, &(0x7f0000000040)=""/43, 0x2b)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xd, 0x19, {0x8, 0x1ff, 0xfffffff3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40018}, 0x20004000)

3.044923225s ago: executing program 3 (id=77):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x10, 0x4)
syz_usb_connect$uac1(0x3, 0x8c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000010410e484240000102030109027a0003010128070904000000010100000a24010e000a0002010209c7010101fb0200000a24020200000000070609050109000403000607250100449f200904020000010200200904020101010200000924020100070001050724010bff0400090582091000080348"], 0x0)

2.753321081s ago: executing program 4 (id=79):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000200706edb708f81491080eabe04b7479b3717022c45c54f870b40c2c5a9816baa6e74f5838c00d0b001781a1a988e83c57b3cfd1bbeb2ebdc9922ca068f7ce4121ec58597da26e333650fec934275786f2738c5b0f0c1877bdd42d40830382f56c71b0367637b0cfd9ffc8d2e5d0c7a496db6d48c02", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r1=>0x0, 0x4, 0x2, 0x6, 0x4769, 0x3c, @local, @loopback, 0x80, 0x8, 0x7fffffff, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', r1, 0x700, 0x700, 0x7f, 0x1000, {{0x1c, 0x4, 0x3, 0x1d, 0x70, 0x65, 0x0, 0x8, 0x29, 0x0, @local, @local, {[@rr={0x7, 0x17, 0xc9, [@local, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @timestamp={0x44, 0xc, 0xb5, 0x0, 0x1, [0x73, 0x401]}, @timestamp_addr={0x44, 0x14, 0x60, 0x1, 0x8, [{@private=0xa010102, 0x1}, {@local, 0x3}]}, @rr={0x7, 0x23, 0x8b, [@local, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010101, @local, @rand_addr=0x1, @broadcast, @rand_addr=0x64010101]}]}}}}})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000200706edb708f81491080eabe04b7479b3717022c45c54f870b40c2c5a9816baa6e74f5838c00d0b001781a1a988e83c57b3cfd1bbeb2ebdc9922ca068f7ce4121ec58597da26e333650fec934275786f2738c5b0f0c1877bdd42d40830382f56c71b0367637b0cfd9ffc8d2e5d0c7a496db6d48c02", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x6, 0x4769, 0x3c, @local, @loopback, 0x80, 0x8, 0x7fffffff, 0x6}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', r1, 0x700, 0x700, 0x7f, 0x1000, {{0x1c, 0x4, 0x3, 0x1d, 0x70, 0x65, 0x0, 0x8, 0x29, 0x0, @local, @local, {[@rr={0x7, 0x17, 0xc9, [@local, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @timestamp={0x44, 0xc, 0xb5, 0x0, 0x1, [0x73, 0x401]}, @timestamp_addr={0x44, 0x14, 0x60, 0x1, 0x8, [{@private=0xa010102, 0x1}, {@local, 0x3}]}, @rr={0x7, 0x23, 0x8b, [@local, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010101, @local, @rand_addr=0x1, @broadcast, @rand_addr=0x64010101]}]}}}}}) (async)

2.737876701s ago: executing program 5 (id=72):
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[], 0x3, 0x246, &(0x7f0000000440)="$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")
truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000dc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1a, 0x50, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x6, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x57, 0x7, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0xf, 0x3, {0x8, 0x25, 0x1, 0x80, 0x3c, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0xa, 0x3d, {0x8, 0x25, 0x1, 0x1, 0x33, 0x2, 0x1}}}}}}}}]}}, &(0x7f0000001340)={0x0, 0x0, 0x5, &(0x7f0000000f40)=ANY=[@ANYBLOB="050f050004"]})

2.676853633s ago: executing program 4 (id=80):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x100010, 0xffffffffffffffff, 0x569b0000)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000000)={0x20, 0x18, 0x3, 'M\tI'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f00000001c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x9, 0x5})
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r6, &(0x7f0000000400)={0x2020}, 0x2020)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.420998438s ago: executing program 0 (id=81):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x10082, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0xffffffff, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x400, 0x5, 0x0, 0x7, 0x8, 0x7, 0x1c9, 0x1000000003, 0x2, 0x2, 0x80000001, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x6779, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffefffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe8, 0x200000000000101, 0x5, 0xfffffffffffffffc, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x800, 0x4, 0x4, 0xcdc, 0x7, 0x5, 0x3, 0x2, 0x5, 0xfff, 0x3, 0x4, 0x6, 0xab6, 0x5, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x8, 0x400000000008061f, 0x3, 0x8, 0x10000f6, 0x6986, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0x7, 0x2, 0x8, 0x2, 0x2, 0x7, 0x569f, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]})
r0 = openat(0xffffffffffffff9c, 0x0, 0xae400, 0x1a)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}], 0x18})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000600)={[0x10000, 0x5, 0x1, 0x0, 0x8a6, 0x6, 0x8bc5, 0x5, 0x1, 0x7, 0xffff, 0x6, 0x6, 0x5e, 0xbcd9, 0x9], 0x8000000})
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000540)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@debug}, {@data_journal}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@discard}]}, 0x9, 0x643, &(0x7f0000005e80)="$eJzs3ctvFEcaAPCv2+MH9oINWrHLZbG0WoG0i40NrNBqD6C9IsQ+bntysEEEgxF2lJggYSRySRTlkkOknHII+S8SpFxzyDWHXHKIIiQrijiECMJEPQ8zT3tsz8PYv5/U4+rqma5qW5+rpqZqOoA9azx7SCOORMStJGK04lguSgfHi8978tPdy9mWRD7/3x+TuHsvWak8V1L6OVJ68a+jkXydRhzqq3xWf+FxcfnO9Zn5+bnbpdzJpRu3JheX75y4dmPm6tzVuZvTf58+e+b0mbNTJ7d1fbmK9IUHr785+u7F/3/68bNk6rNvLyZxLl6U6pZdV+1rB7dVcvY7G4980dOXuWnh8ew2z71T/Dxa/TvOJLUZ7FhXIuJwKSr/EKPRV/HXHI13/t3TygEdlU+i3EYBe06ycfz312cNdaYyQBeV+wHl9/aN3gfXSzvcKwG6YfV8cZCsGPv9EVGO/1xxbDCGCmMDw0+SqnGeJCK2NzJXlJXx1ZcXH2RbNBmHAzpj5X55lLu2/U8KsTkWQ4W94SdpVfynFVuW/58tlj9esy/+oXtW7kfEH0vt/0BsOf5f22L54h8AAAAAAADa59H5iPhbo/l/6dr8n4EG839GIuJcG8rf+PO/9HEpkbShOKDC6vmIf+6vjf/nlbODx/pKn/PvL8wH6E+vXJufOxkRByLiePQPZvtT1aetmiB84v1DHzUrv3L+X7Zl5ZfnApZO9ThXsxB3dmZppj1XD3vb6v2Ip4X5v0dLOdXzf7L2P6lr/9/7Vxbgt1os49BfHl6qyvj+5b+HjeMf6JT8JxHHGq7/edndTtb/fo7JQn9gstwrqPentz/4vFn5m4j/fBsuF6iQtf/D68f/YFL5fT2Lmzv/QEScWs41jd26+E9inf7/88Jj1v8fSP7XVz5/5q2ZpaXbUxEDyYX6/OnN1Rl2q3I8lOMli//jf15//G+t/1/xPnxfRKy0WObhFyPfNTum/w+9k8X/7Prt/1h1+7/ZxFBMPxz7Yu2L/2pcamn873ShTT9eyjH+B5Xqv4+j1QDtSXUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BWXRsTvIkkn1tJpOjERMRIRv4/hdH5hcemvVxbeuDmbHau+//9ocT8p3/9/rGJ/umb/VEQcjIgP+/YV9icuL8zP9vriAQAAAAAAAAAAAAAAAAAAYIcYKaz5zw/Wrv/P/NDX69oBHZcr/RTvsPfktvzK/GBbKwJ03dbjH3jVtR7//R2tB9B9zeP/6bN8QVerA3SR/j/sXVuMfx8XwC6g/Ye9qsUxvaFO1wPohZbb/9XO1gMAAAAAAGiLg0cffZNExMo/9hW2zEDpmMn+sLulva4A0DPm8MLelVvodQ2AXvEeH0jWUr80XOzffPZ/0pkKAQAAAAAAAAAAAAB1jh3Z/Pr/FYsGYVdII9a5hbe5/bCbrdOUNwp+LT/sIs1v/dFK25/oIcArzPp/YKN2fPvr//P3NlUhAAAAAAAAAAAAAKDe0J3rM/Pzc7cXl7eVSLf38urE0IFi3bpaaLcSKzM7ohptTbzY6Dnl28xv7sz9EdHwUHnO+U649o4kBnp/gb34ZwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADTyWwAAAP//qwYo7Q==")
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x2, 0x12000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.463544839s ago: executing program 0 (id=82):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10)
write(r0, &(0x7f0000000040)='\"', 0x1) (async, rerun: 64)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) (async, rerun: 64)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f00000002c0)="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", 0xfd0c)

1.39479469s ago: executing program 0 (id=83):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffb69b0620bd6601f27effeeb61fffffffff69e7ee", 0x58}], 0x1)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x10000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x46}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) (async)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffb69b0620bd6601f27effeeb61fffffffff69e7ee", 0x58}], 0x1) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x10000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x46}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

1.394612521s ago: executing program 0 (id=84):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)="bc8bf96392ebf41c0b89f92d99d42e4e788b05bb8df6d2ea83ba098be5b7d80e439d0d17ff41e1e517ee1c36ce17629fc114ed7f212a90f9e46cd4fc2c2af28d667f38f05986217533459637dee1e1505525d08d05c8ec693a0f828110ebfacfd66b0e9abf76ed9f393ac4d2bdc718a423aa5440f1052aca36540225bd1537c5fc1bd49e3b85ff7a232e53165af259b60bc2ec8c716407fa2c1661cb", 0xfffffffffffffffd, 0xa7c, r0, 0x0, 0xfffe}, 0x38)

1.39438835s ago: executing program 0 (id=85):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x2}}, 0x10) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0xa014a0, 0x0, 0x1, 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) (async)
mount$overlay(0x0, 0x0, 0x0, 0x400, 0x0) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x1, 0x11, r7, 0x0) (async)
write$P9_RLERROR(r7, 0x0, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r8, &(0x7f0000000000)='3', 0x1, 0x4fed0) (async)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)
fallocate(r9, 0x8, 0x4000, 0x8000) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r6, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x24008004}, 0x2004c040)

1.39430919s ago: executing program 0 (id=86):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = fsopen(&(0x7f0000000440)='ramfs\x00', 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00')
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_NET_NS_FD={0x8, 0x1c, r4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timerfd_gettime(r6, 0x0)
epoll_create1(0x80000)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x7fffffff, 0x0)
syz_usb_connect$uac1(0x3, 0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="1201012200000020732b1700400001020301090272000301ee503f0904000000010100000a2401d2000a0002010209040106000102000009040101010102000009050109ff037808b207250108040300090402000001"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

1.384048001s ago: executing program 3 (id=87):
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000480)={[{@norecovery}, {@data_journal}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@nombcache}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@auto_da_alloc}, {@resgid={'resgid', 0x3d, r0}, 0x32}]}, 0x1, 0x4e1, &(0x7f0000000680)="$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")

1.184727905s ago: executing program 3 (id=88):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES16], 0x1, 0x242, &(0x7f0000000880)="$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")
lgetxattr(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80c00, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x3, 0x88)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x10000000004e20, 0x0, @loopback, 0x6}, 0x1c)
socket$inet6(0xa, 0x3, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r3, r5, 0xb, 0x0, @val=@uprobe_multi={&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=[0xfff, 0x7, 0x8, 0x2, 0x7fff, 0x7fffffffffffffff, 0x800], &(0x7f0000000480)=[0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x2, 0x400000005], 0x9000000000, 0x7}}, 0x40)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000600)=@rc={0x1f, @none}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, &(0x7f0000000240)=""/37, 0x25}, 0x3102)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0)
socket(0x10, 0x803, 0x0)

950.89992ms ago: executing program 3 (id=89):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x140341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB="79fecc"], 0x48)

942.98124ms ago: executing program 3 (id=90):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x12, 0x60a, 0x138, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "0b0500dd2f808bcbf5a552fd64a72ee561b24c479377004898fbe1cefa63"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x50)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
getsockopt$bt_hci(r2, 0x84, 0x3, 0x0, 0x0)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x5e05b166, 0x6afea5eb3245804d)
ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000100))
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x100000a, 0x12, r4, 0x0)
r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB='-pids'], 0x6)
socket$nl_route(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r9, 0x5407, &(0x7f00000001c0)={0xfff5, 0x10, 0x601, 0xfffe, 0x23, '\x00\b\x00'})

893.274491ms ago: executing program 5 (id=91):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) (async)
io_setup(0x20, &(0x7f0000001140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0d32818e2cede722", 0x8}]) (async)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x19)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x1, 0x14fe, &(0x7f0000001580)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x5823e, 0xa)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0) (async, rerun: 32)
r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv6_newroute={0x34, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x6}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @mcast1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5010}, 0x84054) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="050000000a0000000a0000000902000040000000", @ANYRES32, @ANYBLOB="0100000000000000000000000000000000000000b42d765dcd2d97ed43c1e5b23480cdd48982bce9b9d9f20c7423e2f8f77ac80b82206d5af5a6fb7fc977c959247410d4a08cf2774df93d7a148f19161c62bc69f300265f07b7456f80ee122c771f5d0de12f4714f2e48ce264cbfff947bd9a12b164254b608d67889d27218e7966a6ab1283c785fe322fce38eb207578ae6b9ac35150c7d2cd3fb6ac92769ddf14cf6effec9593d605be00f2b2d80b120c57481b49", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r3}, 0x38)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0)
syz_ublk_setup_io_uring(0x14f0, &(0x7f0000000240)={0x0, 0x96e4, 0x40, 0x0, 0x18f}, 0xfffffffffffffffc, 0x0, 0x0) (async, rerun: 64)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64)
ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000140)) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000) (async, rerun: 64)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x4) (async, rerun: 64)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240), &(0x7f0000000280)={'enc=', 'oaep', ' hash=', {'blake2s-128\x00'}}, 0x0, 0x0) (async, rerun: 32)
keyctl$session_to_parent(0x12) (rerun: 32)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) (async, rerun: 32)
creat(&(0x7f0000000000)='./file0\x00', 0x0) (rerun: 32)

506.91355ms ago: executing program 1 (id=92):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000000)={0x6})
sendmmsg$unix(r0, &(0x7f00000197c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x4008000)

497.42416ms ago: executing program 5 (id=93):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = eventfd2(0x1, 0x0)
read$eventfd(r1, &(0x7f00000000c0), 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r2=>0x0})
chdir(&(0x7f0000000100)='./file0\x00')
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10)

489.9343ms ago: executing program 1 (id=94):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000f0e000/0x1000)=nil, 0x1000, 0x0, 0x11012, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
setresgid(0xee00, 0xee00, 0x0)
r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r4 = syz_open_procfs(r2, &(0x7f0000000040)='map_files\x00')
fchdir(r4)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)

440.120791ms ago: executing program 5 (id=95):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)="bc8bf96392ebf41c0b89f92d99d42e4e788b05bb8df6d2ea83ba098be5b7d80e439d0d17ff41e1e517ee1c36ce17629fc114ed7f212a90f9e46cd4fc2c2af28d667f38f05986217533459637dee1e1505525d08d05c8ec693a0f828110ebfacfd66b0e9abf76ed9f393ac4d2bdc718a423aa5440f1052aca36540225bd1537c5fc1bd49e3b85ff7a232e53165af259b60bc2ec8c716407fa2c1661cb", 0xfffffffffffffffd, 0xa7c, r0, 0x0, 0xfffe}, 0x38)

439.908781ms ago: executing program 1 (id=96):
r0 = socket$inet6(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c0000", 0xf1) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r1], 0x30}], 0x1}, 0x0) (async)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) (async)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = getpid()
fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x2, r4}) (async)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=<r5=>0x0)
fcntl$setown(r2, 0x8, r5) (async)
read$FUSE(r2, &(0x7f0000000b80)={0x2020}, 0x2020)

439.588641ms ago: executing program 5 (id=97):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x42, 0x1ff) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x42, 0x1ff)
inotify_init1(0x0) (async)
r1 = inotify_init1(0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x10, @desc3})
inotify_add_watch(r1, &(0x7f0000000240)='./file1\x00', 0x40001a2)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0) (async)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1804002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
unshare(0x40400) (async)
unshare(0x40400)
pread64(r4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
recvmmsg(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000140), 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/23, 0x17}], 0x1, &(0x7f0000000540)=""/75, 0x4b}, 0x1148}, {{&(0x7f00000005c0), 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/246, 0xf6}, {&(0x7f0000000a80)=""/155, 0x9b}, {&(0x7f0000000740)=""/96, 0x60}], 0x5, &(0x7f0000000c40)=""/126, 0x7e}, 0x7f}], 0x2, 0x20000040, &(0x7f0000000d40)={0x0, 0x989680}) (async)
recvmmsg(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000140), 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/23, 0x17}], 0x1, &(0x7f0000000540)=""/75, 0x4b}, 0x1148}, {{&(0x7f00000005c0), 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/246, 0xf6}, {&(0x7f0000000a80)=""/155, 0x9b}, {&(0x7f0000000740)=""/96, 0x60}], 0x5, &(0x7f0000000c40)=""/126, 0x7e}, 0x7f}], 0x2, 0x20000040, &(0x7f0000000d40)={0x0, 0x989680})
openat$cgroup_ro(r0, &(0x7f0000000280)='freezer.state\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002abd7000fddbdf2501000000580008805400008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2c00098028000080200001000a0000001400020000000000000000000000000000000001050003000200000008000100", @ANYRES32=r6, @ANYBLOB="93f698f442c19e00b3a77179a11406ed29289e5ce0673712955539653a49ecd7d0c9646536a857a1ee539cfafb62983a43302e4914a899bbba9db80d7b58c65cdfb624ecbb26596cda145996cd7b229ed52913fd56771bfd7b25906b443f1dd0b517f60d392d61c02ea8f185bb2e9672435c42dbfd6071d97e4b5fa2d0187e9b939af2fff6f9d139a01b33477981f629"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
chdir(&(0x7f00000003c0)='./bus\x00')
chmod(&(0x7f0000000100)='./file1\x00', 0x161)

437.930541ms ago: executing program 5 (id=98):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000000ae224676f818ada8aee801342c00000100000000007fef0000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50)
syz_emit_ethernet(0x146, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa380000000000059073ac72f29f1d1414000a01010000010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000000907800009d0ab38e590dbcb5101402392e82e24ffe2b683a022598c2896c8810019403bd8ed8cd950607df386210d41dea220c9949af8e10320e3fe23a038e8c84aba528db49461ec4383dd48afa0690486e5c12a2bcdde532f73429f2bcacbb22df8b2112fbacc807b71b672bcb8cb2104100d96f00ac7c456948d36271f1bcce12153c0c7279b517fdcabcb8d4e55cefb7a83073cd4a9bb03b8ab0a33031732140446cecbe18b906731cba3eceaba088d97df876fee2694d2e01166902d97023c89945fe6dd7d96e4df670dca9326a28fe9fa6fce1fbfa7675c2c06571c6b982019dd6149b1f000000000019a65d1e1630a01d8e4afab0de5b4564fa02db56d100"/280], 0x0)
mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1, 0x3032, 0xffffffffffffffff, 0x3000)
poll(&(0x7f0000000100)=[{r1, 0x200}, {r0, 0x4400}, {r0, 0x4}, {r1}], 0x4, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
close_range(r0, r1, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0x2}]}}, {{0x4e23, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

0s ago: executing program 3 (id=99):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xaf8, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/140}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x18607, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)})
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000040)=0x3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
fsetxattr$security_selinux(r3, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b, 0x2)
syz_usb_connect(0x0, 0x5d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00000524133d7b"], 0x0)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x401)
r4 = inotify_init1(0x800)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r4}, 0x9, 0x1, 0x100000001})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a'], 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.40' (ED25519) to the list of known hosts.
[   22.183464][   T24] audit: type=1400 audit(1784101306.960:64): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.184546][  T271] cgroup: Unknown subsys name 'net'
[   22.206147][   T24] audit: type=1400 audit(1784101306.960:65): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.233411][   T24] audit: type=1400 audit(1784101307.000:66): avc:  denied  { unmount } for  pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.233611][  T271] cgroup: Unknown subsys name 'devices'
[   22.348725][  T271] cgroup: Unknown subsys name 'hugetlb'
[   22.354348][  T271] cgroup: Unknown subsys name 'rlimit'
[   22.491958][   T24] audit: type=1400 audit(1784101307.270:67): avc:  denied  { setattr } for  pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.515122][   T24] audit: type=1400 audit(1784101307.270:68): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   22.524380][  T273] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   22.539991][   T24] audit: type=1400 audit(1784101307.270:69): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.571500][   T24] audit: type=1400 audit(1784101307.330:70): avc:  denied  { relabelto } for  pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.597557][   T24] audit: type=1400 audit(1784101307.330:71): avc:  denied  { write } for  pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.597618][  T271] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.623129][   T24] audit: type=1400 audit(1784101307.360:72): avc:  denied  { read } for  pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.623143][   T24] audit: type=1400 audit(1784101307.360:73): avc:  denied  { open } for  pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.160669][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.167804][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.175251][  T279] device bridge_slave_0 entered promiscuous mode
[   23.183116][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.190198][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.197649][  T279] device bridge_slave_1 entered promiscuous mode
[   23.286891][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.294046][  T281] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.301443][  T281] device bridge_slave_0 entered promiscuous mode
[   23.309717][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.316776][  T281] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.324171][  T281] device bridge_slave_1 entered promiscuous mode
[   23.345139][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.352301][  T280] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.359672][  T280] device bridge_slave_0 entered promiscuous mode
[   23.367711][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.374747][  T280] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.382153][  T280] device bridge_slave_1 entered promiscuous mode
[   23.397590][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.404648][  T279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.411972][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.419025][  T279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.460723][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.467858][  T284] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.475107][  T284] device bridge_slave_0 entered promiscuous mode
[   23.481982][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.489109][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.496494][  T285] device bridge_slave_0 entered promiscuous mode
[   23.514841][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.521963][  T284] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.529344][  T284] device bridge_slave_1 entered promiscuous mode
[   23.535837][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.542897][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.550491][  T285] device bridge_slave_1 entered promiscuous mode
[   23.643176][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.650620][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.658660][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   23.666048][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.689951][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.698230][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.705365][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.720654][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.728820][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.735827][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.763459][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   23.779776][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   23.810103][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.825344][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.833002][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.841517][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.848582][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.856199][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   23.873931][  T279] device veth0_vlan entered promiscuous mode
[   23.888249][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   23.896675][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   23.905221][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   23.913418][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   23.921123][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   23.929460][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   23.937793][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.944804][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.952464][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.960972][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.968014][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.975348][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   23.983521][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.990587][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.998029][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.005430][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.013474][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.021414][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.029540][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.043389][  T279] device veth1_macvtap entered promiscuous mode
[   24.052939][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.061141][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.068189][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.076226][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.084922][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.093137][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.100163][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.107640][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.115732][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.123970][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.131143][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.138772][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.146389][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.159917][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   24.168482][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.176642][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.183891][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.201804][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.210033][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.218676][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.226866][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.235731][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.244023][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.252128][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.260427][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.279928][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.288408][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.289254][  T279] request_module fs-gadgetfs succeeded, but still no fs?
[   24.296774][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.312349][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.325717][  T285] device veth0_vlan entered promiscuous mode
[   24.332551][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.332672][  T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   24.340176][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.357647][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.368146][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.376563][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.384650][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.392976][  T280] device veth0_vlan entered promiscuous mode
[   24.405641][  T280] device veth1_macvtap entered promiscuous mode
[   24.440895][  T281] device veth0_vlan entered promiscuous mode
[   24.459928][  T284] device veth0_vlan entered promiscuous mode
[   24.470956][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.480033][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.487703][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.495824][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.504172][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   24.506879][  T305] EXT4-fs (loop1): Ignoring removed bh option
[   24.512695][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   24.526304][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   24.537089][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   24.546998][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   24.556664][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.566221][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.575773][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.606284][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.616306][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   24.625731][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.635169][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   24.647893][  T305] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,journal_ioprio=0x0000000000000004,
[   24.674426][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.684532][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   24.694376][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.704209][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   24.713488][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.723367][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   24.733449][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.743104][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.751852][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.825734][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.864864][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.894727][  T305] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   24.953144][  T305] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure
[   25.156608][  T285] device veth1_macvtap entered promiscuous mode
[   25.179554][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.191822][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.205036][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.213710][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.234370][  T281] device veth1_macvtap entered promiscuous mode
[   25.273612][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.282051][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.304765][  T323] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   25.306543][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.329949][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.336308][  T322] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   25.354859][  T322] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   25.364386][  T322] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[   25.373463][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.381812][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.390098][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.398529][  T322] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   25.409267][  T322] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   25.426505][  T284] device veth1_macvtap entered promiscuous mode
[   25.433373][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.442278][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.455973][  T322] System zones: 0-2, 18-18, 34-35
[   25.466077][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.474071][  T322] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,,errors=continue
[   25.496292][  T332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8'.
[   25.516250][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.526745][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.535769][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.544638][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.557470][  T332] netlink: 67 bytes leftover after parsing attributes in process `syz.3.8'.
[   25.569291][  T322] netlink: 'syz.0.1': attribute type 298 has an invalid length.
[   26.017974][  T350] netlink: 'syz.1.12': attribute type 2 has an invalid length.
[   26.048639][  T355] process 'syz.4.13' launched '/dev/fd/-1/./file0' with NULL argv: empty string added
[   26.117263][   T15] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   26.257339][  T287] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.377264][   T15] usb 4-1: Using ep0 maxpacket: 16
[   26.517258][  T287] usb 1-1: Using ep0 maxpacket: 16
[   26.647344][  T287] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping
[   26.661782][  T287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   26.672263][   T15] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   26.684622][   T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.699188][  T287] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024
[   26.712653][   T15] usb 4-1: Product: syz
[   26.717310][   T15] usb 4-1: Manufacturer: syz
[   26.722045][   T15] usb 4-1: SerialNumber: syz
[   26.726712][  T287] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[   26.740962][  T287] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   26.957361][  T287] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[   26.980997][  T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.990659][  T287] usb 1-1: Product: syz
[   26.994833][  T287] usb 1-1: Manufacturer: syz
[   26.999686][  T287] usb 1-1: SerialNumber: syz
[   27.017521][  T346] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   27.112896][  T371] F2FS-fs (loop4): invalid crc value
[   27.179869][  T377] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   27.532983][  T371] F2FS-fs (loop4): Found nat_bits in checkpoint
[   27.734815][  T371] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   27.742966][  T371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   27.937258][   T24] kauditd_printk_skb: 73 callbacks suppressed
[   27.937273][   T24] audit: type=1400 audit(1784101312.680:147): avc:  denied  { create } for  pid=370 comm="syz.4.18" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   27.986834][   T24] audit: type=1400 audit(1784101312.680:148): avc:  denied  { write open } for  pid=370 comm="syz.4.18" path="/2/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   28.037002][   T24] audit: type=1400 audit(1784101312.690:149): avc:  denied  { map } for  pid=370 comm="syz.4.18" path="/2/file1/file1" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   28.108995][   T24] audit: type=1400 audit(1784101312.890:150): avc:  denied  { create } for  pid=392 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   28.129470][   T24] audit: type=1400 audit(1784101312.890:151): avc:  denied  { connect } for  pid=392 comm="syz.0.23" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   28.130752][  T390] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET)
[   28.149933][  T287] usb 1-1: MIDIStreaming interface descriptor not found
[   28.159337][   T24] audit: type=1400 audit(1784101312.890:152): avc:  denied  { write } for  pid=392 comm="syz.0.23" laddr=fe80::13 lport=256 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   28.168490][  T287] usb 1-1: USB disconnect, device number 2
[   28.201164][  T397] fuse: Unknown parameter 'default_permissionsol'
[   28.204309][   T24] audit: type=1400 audit(1784101312.910:153): avc:  denied  { create } for  pid=389 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   28.215156][  T377] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   28.232386][   T24] audit: type=1400 audit(1784101312.980:154): avc:  denied  { read write } for  pid=396 comm="syz.0.24" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   28.259507][   T24] audit: type=1400 audit(1784101312.980:155): avc:  denied  { open } for  pid=396 comm="syz.0.24" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   28.283161][   T24] audit: type=1400 audit(1784101312.980:156): avc:  denied  { ioctl } for  pid=389 comm="syz.1.21" path="socket:[15618]" dev="sockfs" ino=15618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.337366][   T15] snd-usb-audio: probe of 4-1:1.0 failed with error -71
[   28.348118][  T377] overlayfs: unrecognized mount option "uuid=on" or missing value
[   28.351124][  T397] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24'.
[   28.365606][   T15] usb 4-1: USB disconnect, device number 2
[   28.380713][  T377] overlayfs: './file1' not a directory
[   28.387411][  T377] overlayfs: './file1' not a directory
[   28.418679][  T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   28.587452][  T406] ======================================================
[   28.587452][  T406] WARNING: the mand mount option is being deprecated and
[   28.587452][  T406]          will be removed in v5.15!
[   28.587452][  T406] ======================================================
[   28.597252][  T353] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   28.844781][  T437] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[   28.861921][  T437] EXT4-fs (loop4): Test dummy encryption mode enabled
[   28.869693][  T437] EXT4-fs (loop4): can't mount with commit=7, fs mounted w/o journal
[   28.974346][  T451] netlink: 'syz.4.38': attribute type 1 has an invalid length.
[   29.017277][  T353] usb 2-1: unable to get BOS descriptor or descriptor too short
[   29.017783][  T446] exfat: Unknown parameter 'fi'
[   29.036086][  T446] cgroup: syz.0.36 (446) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   29.052467][  T446] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   29.067674][  T448] exfat: Deprecated parameter 'namecase'
[   29.073539][  T448] exfat: Deprecated parameter 'namecase'
[   29.079593][  T448] exfat: Deprecated parameter 'namecase'
[   29.123461][  T448] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   29.137873][  T353] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   29.157006][  T448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37'.
[   29.187241][  T353] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   29.197757][  T448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.37'.
[   29.447288][  T353] usb 2-1: string descriptor 0 read error: -22
[   29.453688][  T353] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[   29.462989][  T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.477293][  T347] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   29.508266][  T353] usb 2-1: unknown interface protocol 0x24, assuming v1
[   29.515393][  T353] usb 2-1: cannot find UAC_HEADER
[   29.521374][  T353] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   29.649366][  T470] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   29.712383][   T54] usb 2-1: USB disconnect, device number 2
[   29.717259][  T347] usb 4-1: Using ep0 maxpacket: 8
[   29.837417][  T347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   29.863394][  T347] usb 4-1: New USB device found, idVendor=0421, idProduct=033e, bcdDevice=5f.0e
[   29.881545][  T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.904043][  T347] usb 4-1: config 0 descriptor??
[   29.912775][  T488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'.
[   29.933979][  T488] device syz_tun entered promiscuous mode
[   29.940312][  T488] device macsec1 entered promiscuous mode
[   29.957959][  T347] usb 4-1: bad CDC descriptors
[   30.009540][  T492] capability: warning: `syz.4.49' uses 32-bit capabilities (legacy support in use)
[   30.078345][  T499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'.
[   30.165922][  T311] usb 4-1: USB disconnect, device number 3
[   30.297322][   T54] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   30.367235][  T347] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   30.411501][  T513] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.418768][  T513] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.537280][   T54] usb 1-1: Using ep0 maxpacket: 8
[   30.667272][   T54] usb 1-1: config 3 has an invalid interface number: 45 but max is 0
[   30.685361][   T54] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[   30.694670][   T54] usb 1-1: config 3 has no interface number 0
[   30.701270][   T54] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   30.714591][   T54] usb 1-1: config 3 interface 45 has no altsetting 0
[   30.727277][  T347] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   30.736246][  T347] usb 5-1: config 1 has no interface number 0
[   30.742642][  T347] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   30.751928][  T347] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7
[   30.917272][  T347] usb 5-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40
[   30.926331][  T347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.934499][  T347] usb 5-1: Product: syz
[   30.937281][   T54] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[   30.942043][  T347] usb 5-1: Manufacturer: syz
[   30.952333][  T347] usb 5-1: SerialNumber: syz
[   30.954286][   T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.975506][   T54] usb 1-1: Product: syz
[   30.983653][   T54] usb 1-1: Manufacturer: syz
[   30.992604][   T54] usb 1-1: SerialNumber: syz
[   31.198024][  T504] 9pnet: Insufficient options for proto=fd
[   31.208738][  T527] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue
[   31.220043][  T527] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   31.317301][  T347] usb 5-1: 1:0 : does not exist
[   31.322265][  T347] usb 5-1: BAAD MICROPHONE c_chmask mismatch
[   31.328669][  T347] snd-usb-audio: probe of 5-1:1.1 failed with error -22
[   31.337132][  T347] usb 5-1: USB disconnect, device number 2
[   31.428348][   T54] usb 1-1: USB disconnect, device number 3
[   31.747463][  T541] exfat: Deprecated parameter 'utf8'
[   31.752823][  T541] exfat: Deprecated parameter 'utf8'
[   31.758311][  T541] exfat: Deprecated parameter 'namecase'
[   31.764005][  T541] exfat: Deprecated parameter 'namecase'
[   31.772209][  T541] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   31.908937][  T548] EXT4-fs (loop0): Test dummy encryption mode enabled
[   31.930545][  T548] EXT4-fs (loop0): Test dummy encryption mode enabled
[   31.952773][  T548] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue
[   31.981733][  T548] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   32.090491][  T548] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)"
[   32.471375][   T54] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   32.606573][  T564] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.614608][  T564] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.622289][  T564] device bridge_slave_0 entered promiscuous mode
[   32.631615][  T564] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.638885][  T564] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.646408][  T564] device bridge_slave_1 entered promiscuous mode
[   32.709294][  T564] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.716398][  T564] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.723731][  T564] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.730790][  T564] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.756602][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   32.765222][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.773567][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.781015][  T577] FAT-fs (loop3): Unrecognized mount option "sys_immutaºže" or missing value
[   32.787254][   T54] usb 2-1: device descriptor read/64, error -71
[   32.800041][  T579] device batadv_slave_1 entered promiscuous mode
[   32.807132][  T576] device batadv_slave_1 left promiscuous mode
[   32.816370][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   32.825526][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.832616][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.848941][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   32.857469][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.864502][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.882899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   32.890984][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   32.907911][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   32.919746][  T564] device veth0_vlan entered promiscuous mode
[   32.926574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   32.935150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   32.943040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   32.958471][  T564] device veth1_macvtap entered promiscuous mode
[   32.965495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   32.972962][   T24] kauditd_printk_skb: 47 callbacks suppressed
[   32.972972][   T24] audit: type=1400 audit(1784101317.740:204): avc:  denied  { write } for  pid=547 comm="syz.0.67" name="bus" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   32.978046][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   32.980578][   T24] audit: type=1400 audit(1784101317.760:205): avc:  denied  { add_name } for  pid=547 comm="syz.0.67" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.029373][   T24] audit: type=1400 audit(1784101317.760:206): avc:  denied  { remove_name } for  pid=547 comm="syz.0.67" name="file0" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.051387][   T24] audit: type=1400 audit(1784101317.760:207): avc:  denied  { rename } for  pid=547 comm="syz.0.67" name="file0" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.073426][   T24] audit: type=1400 audit(1784101317.760:208): avc:  denied  { reparent } for  pid=547 comm="syz.0.67" name="file0" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.074276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.096487][   T24] audit: type=1400 audit(1784101317.790:209): avc:  denied  { remove_name } for  pid=547 comm="syz.0.67" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   33.117442][  T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   33.132948][   T24] audit: type=1400 audit(1784101317.790:210): avc:  denied  { rmdir } for  pid=547 comm="syz.0.67" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.176318][  T586] EXT4-fs (loop0): Test dummy encryption mode enabled
[   33.183986][  T303] device bridge_slave_1 left promiscuous mode
[   33.194582][  T303] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.197013][  T586] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   33.212280][  T303] device bridge_slave_0 left promiscuous mode
[   33.213121][  T586] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   33.219163][  T303] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.228534][   T54] usb 2-1: device descriptor read/64, error -71
[   33.241608][  T593] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[   33.250831][  T593] FAT-fs (loop5): Filesystem has been set read-only
[   33.263852][  T303] device veth1_macvtap left promiscuous mode
[   33.270015][  T303] device veth0_vlan left promiscuous mode
[   33.399126][  T598] F2FS-fs (loop0): invalid crc value
[   33.405704][  T598] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   33.407265][  T311] usb 4-1: Using ep0 maxpacket: 16
[   33.432007][  T598] F2FS-fs (loop0): Start checkpoint disabled!
[   33.438832][  T598] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   33.450224][   T24] audit: type=1400 audit(1784101318.230:211): avc:  denied  { ioctl } for  pid=585 comm="syz.0.78" path="/17/bus/file0" dev="loop0" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.474174][   T24] audit: type=1400 audit(1784101318.250:212): avc:  denied  { create } for  pid=585 comm="syz.0.78" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   33.496265][    T9] attempt to access beyond end of device
[   33.496265][    T9] loop0: rw=2049, want=40984, limit=40427
[   33.508114][   T54] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   33.524646][  T508] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   33.537371][  T353] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   33.547359][  T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   33.559747][  T311] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   33.569358][  T311] usb 4-1: config 1 has no interface number 1
[   33.575466][  T311] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   33.637870][  T604] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52061!=20869)
[   33.647557][  T604] EXT4-fs (loop0): external journal device major/minor numbers have changed
[   33.656236][  T604] EXT4-fs (loop0): filesystem has both journal inode and journal device!
[   33.747306][  T311] usb 4-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[   33.756596][  T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.768510][  T311] usb 4-1: Product: syz
[   33.772711][  T311] usb 4-1: Manufacturer: syz
[   33.777377][  T311] usb 4-1: SerialNumber: syz
[   33.797382][  T508] usb 5-1: device descriptor read/64, error -71
[   33.803704][   T54] usb 2-1: device descriptor read/64, error -71
[   34.137322][  T311] usb 4-1: 0:1 : does not exist
[   34.142451][  T311] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[   34.150588][  T311] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[   34.156825][  T311] usb 4-1: 2:1 : invalid channels 0
[   34.187251][  T508] usb 5-1: device descriptor read/64, error -71
[   34.187295][  T353] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[   34.202635][   T54] usb 2-1: device descriptor read/64, error -71
[   34.217254][  T353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.225415][  T353] usb 6-1: Product: syz
[   34.229863][  T311] usb 4-1: USB disconnect, device number 4
[   34.240474][  T353] usb 6-1: Manufacturer: syz
[   34.246920][  T382] udevd[382]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.262923][  T353] usb 6-1: SerialNumber: syz
[   34.327338][   T54] usb usb2-port1: attempt power cycle
[   34.459605][  T611] netlink: 'syz.0.82': attribute type 12 has an invalid length.
[   34.477710][  T508] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   34.510134][   T24] audit: type=1400 audit(1784101319.290:213): avc:  denied  { mount } for  pid=624 comm="syz.0.86" name="/" dev="ramfs" ino=16244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   34.629009][  T627] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   34.647496][  T353] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   34.647825][  T627] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[   34.672764][  T353] usb 6-1: USB disconnect, device number 2
[   34.737242][   T54] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   34.747352][  T508] usb 5-1: device descriptor read/64, error -71
[   34.837288][  T347] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   34.907321][   T54] usb 2-1: device descriptor read/8, error -71
[   34.980110][  T637] xt_ecn: cannot match TCP bits for non-tcp packets
[   35.167564][  T508] usb 5-1: device descriptor read/64, error -71
[   35.287555][  T508] usb usb5-port1: attempt power cycle
[   35.337349][   T54] usb 2-1: device descriptor read/8, error -71
[   35.411914][  T347] usb 1-1: Using ep0 maxpacket: 32
[   35.434011][  T650] device batadv_slave_1 entered promiscuous mode
[   35.440733][  T649] device batadv_slave_1 left promiscuous mode
[   35.476719][  T564] ------------[ cut here ]------------
[   35.482573][  T564] WARNING: CPU: 0 PID: 564 at fs/inode.c:304 drop_nlink+0xc5/0x110
[   35.490640][  T564] Modules linked in:
[   35.494544][  T564] CPU: 0 PID: 564 Comm: syz-executor Not tainted syzkaller #0
[   35.502055][  T564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[   35.512186][  T564] RIP: 0010:drop_nlink+0xc5/0x110
[   35.517253][  T564] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 33 fd f1 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fb 85 b7 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[   35.537019][  T564] RSP: 0018:ffffc90000b37cf8 EFLAGS: 00010293
[   35.543172][  T564] RAX: ffffffff81ad1d65 RBX: ffff88811e7a6be0 RCX: ffff888118e73b40
[   35.551837][  T564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   35.559871][  T564] RBP: ffffc90000b37d20 R08: 0000000000000003 R09: 0000000000000004
[   35.567933][  T347] usb 1-1: unable to get BOS descriptor or descriptor too short
[   35.567953][  T564] R10: dffffc0000000000 R11: fffff52000166f90 R12: dffffc0000000000
[   35.583662][  T564] R13: 1ffff11023cf4d85 R14: ffff88811e7a6c28 R15: 0000000000000000
[   35.591836][  T564] FS:  0000555582b81500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   35.601084][  T564] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   35.607935][  T564] CR2: 0000555582ba4948 CR3: 000000011697e000 CR4: 00000000003526b0
[   35.616015][  T564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   35.624233][  T564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   35.632325][  T564] Call Trace:
[   35.635616][  T564]  shmem_rmdir+0x5b/0x90
[   35.639897][  T564]  vfs_rmdir+0x1ab/0x3c0
[   35.644143][  T564]  incfs_kill_sb+0xf7/0x200
[   35.648742][  T347] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   35.648805][  T564]  deactivate_locked_super+0xa0/0x100
[   35.659024][  T347] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[   35.659039][  T347] usb 1-1: config 1 interface 1 has no altsetting 0
[   35.664759][  T564]  deactivate_super+0xaf/0xe0
[   35.686714][  T564]  cleanup_mnt+0x44f/0x500
[   35.691240][  T564]  __cleanup_mnt+0x19/0x20
[   35.695651][  T564]  task_work_run+0x127/0x190
[   35.700328][  T564]  exit_to_user_mode_loop+0xcb/0xe0
[   35.705526][  T564]  exit_to_user_mode_prepare+0x76/0xa0
[   35.711162][  T564]  syscall_exit_to_user_mode+0x1d/0x40
[   35.716682][  T564]  do_syscall_64+0x3d/0x40
[   35.721178][  T564]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   35.727317][  T564] RIP: 0033:0x7f11be937097
[   35.731775][  T564] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   35.751466][  T508] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   35.751734][  T564] RSP: 002b:00007ffe6c88fe48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   35.768265][  T564] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f11be937097
[   35.776306][  T564] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6c88ff00
[   35.784463][  T564] RBP: 00007ffe6c88ff00 R08: 00007ffe6c890f00 R09: 00000000ffffffff
[   35.792508][  T564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6c890f90
[   35.800546][  T564] R13: 00007f11be9cb2ca R14: 0000000000008a7d R15: 00007ffe6c890fd0
[   35.809033][  T564] ---[ end trace 3b237ce985334b1d ]---
[   35.814732][  T564] ------------[ cut here ]------------
[   35.820419][  T564] WARNING: CPU: 0 PID: 564 at fs/inode.c:304 drop_nlink+0xc5/0x110
[   35.828442][  T347] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40
[   35.829094][  T564] Modules linked in:
[   35.838028][   T54] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   35.849598][  T564] 
[   35.851943][  T564] CPU: 1 PID: 564 Comm: syz-executor Tainted: G        W         syzkaller #0
[   35.861263][  T564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[   35.871806][  T564] RIP: 0010:drop_nlink+0xc5/0x110
[   35.878274][  T564] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 33 fd f1 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fb 85 b7 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[   35.878417][  T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.898975][  T564] RSP: 0018:ffffc90000b37cf8 EFLAGS: 00010293
[   35.906529][  T347] usb 1-1: Product: syz
[   35.913409][  T564] RAX: ffffffff81ad1d65 RBX: ffff88811e7a7320 RCX: ffff888118e73b40
[   35.916483][  T347] usb 1-1: Manufacturer: syz
[   35.916492][  T347] usb 1-1: SerialNumber: syz
[   35.934425][  T564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   35.942549][  T564] RBP: ffffc90000b37d20 R08: 0000000000000003 R09: 0000000000000004
[   35.950676][  T564] R10: dffffc0000000000 R11: fffff52000166f90 R12: dffffc0000000000
[   35.959171][  T564] R13: 1ffff11023cf4e6d R14: ffff88811e7a7368 R15: 0000000000000000
[   35.967155][  T564] FS:  0000555582b81500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   35.976136][  T564] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   35.977291][  T508] usb 5-1: device descriptor read/8, error -71
[   35.982855][  T564] CR2: 00007f78caf21540 CR3: 000000011697e000 CR4: 00000000003526b0
[   35.996938][  T564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   36.004985][  T564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   36.013175][  T564] Call Trace:
[   36.016475][  T564]  shmem_rmdir+0x5b/0x90
[   36.020821][  T564]  vfs_rmdir+0x1ab/0x3c0
[   36.025069][  T564]  incfs_kill_sb+0x181/0x200
[   36.029677][  T564]  deactivate_locked_super+0xa0/0x100
[   36.035043][  T564]  deactivate_super+0xaf/0xe0
[   36.039756][  T564]  cleanup_mnt+0x44f/0x500
[   36.044195][  T564]  __cleanup_mnt+0x19/0x20
[   36.048634][  T564]  task_work_run+0x127/0x190
[   36.053247][  T564]  exit_to_user_mode_loop+0xcb/0xe0
[   36.058617][  T564]  exit_to_user_mode_prepare+0x76/0xa0
[   36.064189][  T564]  syscall_exit_to_user_mode+0x1d/0x40
[   36.069732][  T564]  do_syscall_64+0x3d/0x40
[   36.074135][  T564]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   36.080063][  T564] RIP: 0033:0x7f11be937097
[   36.084474][  T564] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   36.104122][  T564] RSP: 002b:00007ffe6c88fe48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   36.107273][   T54] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[   36.112586][  T564] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f11be937097
[   36.121143][   T54] usb 2-1: config 220 has an invalid descriptor of length 172, skipping remainder of the config
[   36.128945][  T564] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6c88ff00
[   36.139627][   T54] usb 2-1: config 220 has no interface number 2
[   36.147521][  T564] RBP: 00007ffe6c88ff00 R08: 00007ffe6c890f00 R09: 00000000ffffffff
[   36.153938][   T54] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   36.167910][  T564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6c890f90
[   36.175060][   T54] usb 2-1: config 220 interface 0 has no altsetting 0
[   36.182764][  T564] R13: 00007f11be9cb2ca R14: 0000000000008a7d R15: 00007ffe6c890fd0
[   36.189712][   T54] usb 2-1: config 220 interface 76 has no altsetting 0
[   36.197662][  T564] ---[ end trace 3b237ce985334b1e ]---
[   36.204508][   T54] usb 2-1: config 220 interface 1 has no altsetting 0
[   36.217281][  T353] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   36.217336][  T564] list_del corruption. prev->next should be ffff8881327fef70, but was ffff8881327fec40
[   36.234521][  T564] ------------[ cut here ]------------
[   36.240038][  T564] kernel BUG at lib/list_debug.c:61!
[   36.245344][  T564] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   36.251418][  T564] CPU: 1 PID: 564 Comm: syz-executor Tainted: G        W         syzkaller #0
[   36.260284][  T564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[   36.270360][  T564] RIP: 0010:__list_del_entry_valid+0x10c/0x120
[   36.276513][  T564] Code: 48 89 de e8 86 f4 37 02 0f 0b 48 c7 c7 60 66 40 85 48 89 de e8 75 f4 37 02 0f 0b 48 c7 c7 c0 66 40 85 48 89 de e8 64 f4 37 02 <0f> 0b 48 c7 c7 20 67 40 85 48 89 de e8 53 f4 37 02 0f 0b 00 55 48
[   36.296117][  T564] RSP: 0018:ffffc90000b37c80 EFLAGS: 00010246
[   36.302173][  T564] RAX: 0000000000000054 RBX: ffff8881327fef70 RCX: f890a55f58a1d300
[   36.310139][  T564] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[   36.318103][  T564] RBP: ffffc90000b37ca0 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7
[   36.326062][  T564] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: dffffc0000000000
[   36.335947][  T564] R13: dffffc0000000000 R14: ffff8881327fec40 R15: ffff8881327fe6f0
[   36.343914][  T564] FS:  0000555582b81500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   36.352856][  T564] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   36.359430][  T564] CR2: 00007f97be2756b4 CR3: 000000011697e000 CR4: 00000000003526a0
[   36.367400][  T564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   36.375358][  T564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   36.383313][  T564] Call Trace:
[   36.386592][  T564]  __dentry_kill+0x248/0x660
[   36.391165][  T564]  dentry_kill+0xc0/0x2a0
[   36.395482][  T564]  dput+0x42/0x80
[   36.399100][  T564]  incfs_free_mount_info+0x60/0x200
[   36.404280][  T564]  incfs_kill_sb+0x1a1/0x200
[   36.408892][  T564]  deactivate_locked_super+0xa0/0x100
[   36.414250][  T564]  deactivate_super+0xaf/0xe0
[   36.418912][  T564]  cleanup_mnt+0x44f/0x500
[   36.423313][  T564]  __cleanup_mnt+0x19/0x20
[   36.427749][  T564]  task_work_run+0x127/0x190
[   36.432327][  T564]  exit_to_user_mode_loop+0xcb/0xe0
[   36.437509][  T564]  exit_to_user_mode_prepare+0x76/0xa0
[   36.442954][  T564]  syscall_exit_to_user_mode+0x1d/0x40
[   36.448399][  T564]  do_syscall_64+0x3d/0x40
[   36.452799][  T564]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   36.458673][  T564] RIP: 0033:0x7f11be937097
[   36.463077][  T564] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   36.482673][  T564] RSP: 002b:00007ffe6c88fe48 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[   36.491085][  T564] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f11be937097
[   36.499047][  T564] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6c88ff00
[   36.507003][  T564] RBP: 00007ffe6c88ff00 R08: 00007ffe6c890f00 R09: 00000000ffffffff
[   36.514962][  T564] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe6c890f90
[   36.522924][  T564] R13: 00007f11be9cb2ca R14: 0000000000008a7d R15: 00007ffe6c890fd0
[   36.530895][  T564] Modules linked in:
[   36.535499][  T564] ---[ end trace 3b237ce985334b1f ]---
[   36.541251][  T564] RIP: 0010:__list_del_entry_valid+0x10c/0x120
[   36.547442][  T564] Code: 48 89 de e8 86 f4 37 02 0f 0b 48 c7 c7 60 66 40 85 48 89 de e8 75 f4 37 02 0f 0b 48 c7 c7 c0 66 40 85 48 89 de e8 64 f4 37 02 <0f> 0b 48 c7 c7 20 67 40 85 48 89 de e8 53 f4 37 02 0f 0b 00 55 48
[   36.567245][  T564] RSP: 0018:ffffc90000b37c80 EFLAGS: 00010246
[   36.573332][  T564] RAX: 0000000000000054 RBX: ffff8881327fef70 RCX: f890a55f58a1d300
[   36.581329][  T564] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[   36.589331][  T564] RBP: ffffc90000b37ca0 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7
[   36.597356][  T564] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: dffffc0000000000
[   36.605341][  T564] R13: dffffc0000000000 R14: ffff8881327fec40 R15: ffff8881327fe6f0
[   36.613352][  T564] FS:  0000555582b81500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   36.622306][  T564] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   36.629100][  T564] CR2: 00007f97be2756b4 CR3: 000000011697e000 CR4: 00000000003526a0
[   36.637226][  T564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   36.645195][  T564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   36.647246][  T353] usb 4-1: Using ep0 maxpacket: 32
[   36.653219][  T564] Kernel panic - not syncing: Fatal exception
[   36.664662][  T564] Kernel Offset: disabled
[   36.668984][  T564] Rebooting in 86400 seconds..