last executing test programs:

22.801487314s ago: executing program 3 (id=31):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0xffffffffffff8000, 0x8})

22.359059895s ago: executing program 3 (id=34):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x0, 0x12, 0x3, 0x40, 0x4, 0x6b, 0x3, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x81ff, 0x9, 0x8, 0x10, 0x81, 0x4, 0x40, 0x5, 0x3c, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xe, 0xe, 0x9, 0xe, 0x6, 0x4}]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22.210695318s ago: executing program 3 (id=35):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x32040a7, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0)

21.991284514s ago: executing program 3 (id=36):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_usb_connect$uac2(0x5, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000201e04003040000102030109028f000301078004080b010241012004090400000001012000092401040005190010102402060104040e020400000201e07f090401"], 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x2020)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./file1\x00', 0x2000018, &(0x7f0000000280)=ANY=[], 0x1, 0x1505, &(0x7f0000002ac0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
getdents64(r1, &(0x7f0000003cc0)=""/4128, 0x9d5)

20.311225764s ago: executing program 3 (id=50):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001005dfd210401"], 0x48)
close(0x3)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x103200, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x86, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0xf, 0x40, 0xb0, "", [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0xfc, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0xa9f0d7d6ebcb610c, 0x8}, @obex={0x5, 0x24, 0x15, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x2, 0xfff9, [0x5, 0xded]}, @mdlm_detail={0x14, 0x24, 0x13, 0x9, "3f0937aa26c82cb200ed2c0e797571c0"}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xdc, 0xb15c}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x7, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x268, 0x3, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xe, 0xd, 0xf1}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0xf7, 0x1, 0x5, 0xff, 0x1}, 0x113, &(0x7f0000000a00)={0x5, 0xf, 0x113, 0x2, [@generic={0x103, 0x10, 0x2, "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"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x6, 0x8, 0x8, 0x28}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x21, 0x3, 0x40d}}, {0x0, &(0x7f0000000600)=@string={0x0, 0x3, "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"}}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.06099242s ago: executing program 3 (id=52):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r0, 0x0, 0x61000006, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000300))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000280)={[{@noload}, {}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x471, &(0x7f00000004c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x7a680000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x38, "5c83276f6cee07000500000000f0090000726e41e35502bea200f7cbec3ea02759de95720fb6370000000000a200000000000000c2d4055a"}})
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r5=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r7, 0x0, 0xf3a, 0x1)
tee(r6, r9, 0xf3a, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

19.66041025s ago: executing program 32 (id=52):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r0, 0x0, 0x61000006, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000300))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000280)={[{@noload}, {}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x471, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTn71d6LWH62tRitY/JE06c+Dl4qCBwVBDxVPMUlLbdpoE8GWQquHepSCd/Eo+Bd40ouoJ0HwpHcpFOnFKhRWZnYmu252Y7bZZhr384Fp39t52/e++97bmXmz0wB61mj6RyViW0T8GhGbatl/Fxit/XXr5qXpv25emq5EtfrGH5Ws3J83L00XRYv3ba1lqtU8P9Si3qtvR0zNzc2ez/Pji2ffG1+4cPH502enTs2emj03eezYoYN7B49MHu5KnMNpW4difs+uV9669tr0iWvv/PBV2t5t+f7GOLpltPbpLtfX7ZrKt70hXekvsSF0JB2KaXcNZPN/OPpi89K+4Xj541IbB9xV1Wq12ur4nLtSBf7HKlF2C4ByFAf69Pq32Nbp1OOecON4xPtHa/Hfyrfanv5I8jIDTde33TQaESeu/P15usVdWocAAGj0zfGIeK7V+V8SDzWU25HfQxmJiPsi4v6IeCAidkbEgxFZ2Ycj4pEO62++Q7L8/Ce5fkeBrVJ6/vdCfm9r6fzvdjWLPzfSl+e2Z/EPVE6enps9kH8m+2NgKM1PrFDHty/9/Gm7fY3nf+mW1l+cC9Yk1/ubFuhmphan1hj2khsfRezub4o/U4niNk4lInZFxO6O/uX6FcbpZ77c065UPf7NEdEq/hV04T5T9YuIp2v9fyWa4i+kqdst709OHD0yeXh8U8zNHhgvRsVyP/509fV29f93/99daf9vaR7/9d67nA75yqaIhQsXz2T3axc6r+Pqb5+0vKbZsobxP1h5M0sP5q99OLW4eH4iYrDy6vLXJ+vvLfJF+TT+/ftajf8k+46LrP8Px6MRkQ7ivRHxWEQ8nrf9iYh4MiL2rRD/9y8+9W67fe3jX2FVvovS+Gda9H/D+B9JU/X+7zzRd+a7rzuPv5D2/6EstT9/ZTXff6tt4Fo+OwAAANgokuw38JVkbCmdJGNjtd/w74wtydz8wuKzJ+c/ODdT+638SAwkxUrXcMN66ES+NlzkJ5vyB/N148/6Nmf5sen5uZmyg4cet7XN/E/9vvScyvqsRQIl8LwW9C7zH3qX+Q+9qz7/j5TaDmD9Of5D72o1/y+X0A5g/Tn+Q+8y/6F3mf/Qu8x/6Eltn41P1vTI/4ZN/LLjnmjGBkhE0vm7+qPMNg+WWvsdJ/pX/Z9Z3GFiqOWusr+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuuOfAAAA//9lPvLg")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x7a680000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x38, "5c83276f6cee07000500000000f0090000726e41e35502bea200f7cbec3ea02759de95720fb6370000000000a200000000000000c2d4055a"}})
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r5=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r7, 0x0, 0xf3a, 0x1)
tee(r6, r9, 0xf3a, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

12.507614071s ago: executing program 2 (id=95):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001005dfd210401"], 0x48)
close(0x3)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x103200, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x86, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0xf, 0x40, 0xb0, "", [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0xfc, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0xa9f0d7d6ebcb610c, 0x8}, @obex={0x5, 0x24, 0x15, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x2, 0xfff9, [0x5, 0xded]}, @mdlm_detail={0x14, 0x24, 0x13, 0x9, "3f0937aa26c82cb200ed2c0e797571c0"}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xdc, 0xb15c}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x7, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x268, 0x3, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xe, 0xd, 0xf1}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0xf7, 0x1, 0x5, 0xff, 0x1}, 0x113, &(0x7f0000000a00)={0x5, 0xf, 0x113, 0x2, [@generic={0x103, 0x10, 0x2, "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"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x6, 0x8, 0x8, 0x28}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x21, 0x3, 0x40d}}, {0x0, &(0x7f0000000600)=@string={0x0, 0x3, "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"}}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11.560958414s ago: executing program 5 (id=109):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00')
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
fstat(r0, 0x0)
getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00')
r2 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0)
write$P9_RUNLINKAT(r3, &(0x7f0000001080)={0x7, 0x4d, 0x1}, 0x7)
rmdir(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
pread64(r3, &(0x7f0000000080)=""/4, 0x4, 0x2)

11.560119923s ago: executing program 4 (id=111):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000700)={{0x6, 0x1, 0x6, 0x3, 0xa}, &(0x7f0000000780)=[{}, {}, {}]}) (async)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000700)={{0x6, 0x1, 0x6, 0x3, 0xa}, &(0x7f0000000780)=[{}, {}, {}]})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0xe, 0x7ffffffe}]})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0xa000, 0x108000, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x87)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, r5, 0x16, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0, r6}, 0x18)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11.396329847s ago: executing program 4 (id=112):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28242, 0x81)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x6, [@ptr={0x4, 0x0, 0x0, 0x2, 0x2}, @enum={0x1}, @func={0xf, 0x0, 0x0, 0xc, 0x4}, @typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @const={0xc, 0x0, 0x0, 0xa, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x1}, @fwd={0xc}, @enum={0x1, 0x8, 0x0, 0x6, 0x4, [{0x10, 0xc}, {0x0, 0x4}, {0x8, 0xe}, {0x10, 0xffffff66}, {0x8, 0x8}, {0x0, 0xf9de}, {0xf, 0x4}, {0x4, 0x4}]}]}, {0x0, [0x2e, 0x0, 0x1, 0x0]}}, &(0x7f0000000980)=""/4096, 0xce, 0x1000, 0x0, 0x10, 0x10000, @value=r0}, 0x28)
sendfile(r0, r0, 0x0, 0xe3aa6ea)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x80010, r1, 0xb79df000)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x8, 0x4000, 0x8000)

11.214347402s ago: executing program 2 (id=114):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x400000, 0x2a0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xfffffffffffffffb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e26}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d8)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
r3 = syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1839030, 0x0, 0x4, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
socket$inet(0x2, 0x6, 0x2)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(r3, &(0x7f0000000240)='./cgroup\x00', r3, &(0x7f00000007c0)='./file1\x00', 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random='\r\x00'})
syz_open_procfs(r0, &(0x7f0000000400)='net/raw6\x00')

10.596038437s ago: executing program 4 (id=115):
r0 = socket$netlink(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
bind$netlink(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1045000, 0x0, 0x0, 0x0, &(0x7f0000000140))
openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400), 0x401, &(0x7f0000000100)={[{@subsystem='cpu'}]})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getdents64(r2, &(0x7f0000000180)=""/4092, 0xffc)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

9.677356599s ago: executing program 5 (id=117):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffff79, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001d00070f000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="802cbd2373bc9871cde407f374fdcc00820001000800", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x20006, 0x20000000001})

9.676839579s ago: executing program 2 (id=118):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9.490313773s ago: executing program 5 (id=125):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c614fd8bb671361df3f6472d8"])
listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

9.477488824s ago: executing program 5 (id=126):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_usb_connect$uac2(0x5, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000201e04003040000102030109028f000301078004080b010241012004090400000001012000092401040005190010102402060104040e020400000201e07f090401"], 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x2020)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./file1\x00', 0x2000018, &(0x7f0000000280)=ANY=[], 0x1, 0x1505, &(0x7f0000002ac0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
getdents64(r1, &(0x7f0000003cc0)=""/4128, 0x9d5)

9.381177455s ago: executing program 4 (id=127):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x400000, 0x2a0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xfffffffffffffffb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e26}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d8)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1839030, 0x0, 0x4, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
socket$inet(0x2, 0x6, 0x2)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

5.548323527s ago: executing program 2 (id=128):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x20b, 0x6, 0x7, 0x5, 0xef, 0xfb, 0x100}, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf)
syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011047d962b508ab070118580d010203010902120001016a008f09048f00809f6e3d09bcebfcc9cea25797b3871a0064fe02a56de9e93e1a29d6e31f3e18d037d2aaadac4e322a560eec931d5a4de1f6131509d00513d608053957e58d"], 0x0)
ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00')
write$cgroup_pid(r3, &(0x7f0000000180)=0xffffffffffffffff, 0x12)
ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f00000002c0))

5.544215687s ago: executing program 4 (id=130):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x20b, 0x6, 0x7, 0x5, 0xef, 0xfb, 0x100}, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf)
syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011047d962b508ab070118580d010203010902120001016a008f09048f00809f6e3d09bcebfcc9cea25797b3871a0064fe02a56de9e93e1a29d6e31f3e18d037d2aaadac4e322a560eec931d5a4de1f6131509d00513d608053957e58d3a995448e5e8e8e890ee2f0a50867b2833f051fc1eb728ced95ddc88931d7e70aca7081e9eb2bd48d3825c1ba9c930"], 0x0)
ioctl$TCFLSH(r2, 0x400455c8, 0x1000000000)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00')
write$cgroup_pid(r3, &(0x7f0000000180)=0xffffffffffffffff, 0x12)
ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f00000002c0))

4.452148653s ago: executing program 5 (id=136):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001d00070f000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="802cbd2373bc9871cde407f374fdcc00820001000800", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x20006, 0x20000000001})

4.355420386s ago: executing program 1 (id=137):
r0 = socket$netlink(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
bind$netlink(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1045000, 0x0, 0x0, 0x0, &(0x7f0000000140))
openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getdents64(r2, &(0x7f0000000180)=""/4092, 0xffc)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

4.355077126s ago: executing program 5 (id=138):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r0, 0x0, 0x61000006, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000300))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x7a680000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x38, "5c83276f6cee07000500000000f0090000726e41e35502bea200f7cbec3ea02759de95720fb6370000000000a200000000000000c2d4055a"}})
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000500)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r6, 0x0, 0xf3a, 0x1)
tee(r5, r8, 0xf3a, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

4.298884657s ago: executing program 33 (id=138):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, r0, 0x0, 0x61000006, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000300))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x7a680000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x38, "5c83276f6cee07000500000000f0090000726e41e35502bea200f7cbec3ea02759de95720fb6370000000000a200000000000000c2d4055a"}})
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000500)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r6, 0x0, 0xf3a, 0x1)
tee(r5, r8, 0xf3a, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

3.549353015s ago: executing program 1 (id=141):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x400000, 0x2a0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xfffffffffffffffb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e26}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d8)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1839030, 0x0, 0x4, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
socket$inet(0x2, 0x6, 0x2)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

2.166827058s ago: executing program 0 (id=145):
mmap$KVM_VCPU(&(0x7f0000ac4000/0x2000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00')
read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xb87ca4cf)
unshare(0x22020400)
r1 = socket(0x10, 0x803, 0x0)
pwritev(r1, 0x0, 0x0, 0x8, 0x2)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c3e000/0x3000)=nil, 0x3000, 0x3})

2.166143628s ago: executing program 0 (id=146):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x2d7, &(0x7f0000000380)="$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")
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0)

2.155546098s ago: executing program 0 (id=147):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_usb_connect$uac2(0x5, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000201e04003040000102030109028f000301078004080b010241012004090400000001012000092401040005190010102402060104040e020400000201e07f090401"], 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x2020)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./file1\x00', 0x2000018, &(0x7f0000000280)=ANY=[], 0x1, 0x1505, &(0x7f0000002ac0)="$eJzs3Qu4T9XWMPAx5pyLTeKf5D7HHIt/cpkkSSJJLkmSJEluCUmSIwmJTW5JSELuSe4huYXkfr/lniRHkiQhIcn8nl3nHOe8ne/tPd857+d9zx6/51nPmuNZa8w153+svdfl2c/+f9NxcNX61SrVZWb4p+Cvq1QASAGAfgCQDQAiACidvXT2tO2ZNKb+cwcR/1oPTbvSIxBXktQ/fZP6p29S//RN6p++Sf3TN6l/+ib1T9+k/kKkZ9um57lGlvS7/PPv/1N+Xcn7//+F5Pqfvkn9/92cyfSP7C31/3dyKYTwj2VI/dM3qX/6JvVP36T+6ZvUP32T+guRnl3p98+yXNnlSp9/QgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHSh/PhMgMAaevoSg9KCCGEEEIIIYQQ/1Ih45UegRBCCCGEEEIIIf77ISjQYCCCDJARUiATZIarIAtcDVkhGyTgGsgO10IOuA5yQi7IDXkgL+SD/GCBwAFDDAWgICTheigEN0BhKAJFoRh4KA4l4EYoCTdBKbgZSsMtUAZuhbJwG5SD8nA7VIA7oCLcCZXgLqgMVaAqVIO7oTrcAzXgXqgJ90EtuB9qwwNQBx6EuvAQ1IOHoT48Ag3gUWgIjaAxNIGm/0/5L0BXeBG6QXdIhR7QE16CXtAb+kBf6AcvQ394BQbAqzAQBsFgeA2GwOswFN6AYTAcRsCbMBJGwWgYA2NhHIyHt2ACvA0T4R2YBJNhCkyFaTAdZsC7MBNmwWx4D+bA+zAX5sF8WAAL4QNYBIthCXwIS+EjWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBh/DdtgBO2EX7IY9sBc+gX3wKeyHz+AAfP4P5p/7D/mdEBBQoUKDBjNgBkzBFMyMmTELZsGsmBUTmMDsmB1zYA7MiTkxN+bGvJgX82N+JCRkZCyABTCJSSyEhbAwFsaiWBQ9eiyBJbAk3oSlsBSWxtJYBkOWX8+58lgeK2AFrIgVsRJWwspYGatiVbwb78Z7sAbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbAhtgQG2NjbIpNsRk2w+bYHFtiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2JH7ISdsTO+gC/gi/gidsfKqgf2xJ7YC3thH+yLffFl7I+v4Cv4Kg7EQTgYX8PX8HUcimdxGA7HETgCK6hROBrHIKtxOB7H4wScgBNxIk7CyTgZp+I0nI4zcAbOxFk4C9/DOfg+vo/zcB4uwIW4EBfhYlyCS3ApnsNluBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34MX6MO3AH7sJduAf34Cf4CX6Kn+JAPIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfwJJ7C03gKz+AZPIvn8Dyexwt4AS/iRbyEl9J++FUao4zKoDKoFJWiMqvMKovKorKqrCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkCqsCquiqqjyyqsSqoQqqUqqUqqUKq1uUWXUraqsuk218OVVeVVBtfQV1Z2qkqqkKqsqqqqqpqqp6qq6qqFqqJqqpqqlaqna6gFVR/XAPviQSqtMfTUIG6jB2FA1Uo1VE/U6PqaaqaHYXLVQLdUTajgOw9aqmW+jnlZt1Whsp/6gxuCzqoMahx3V86qT6qy6qBdUV9Xcd1Pd1STsoXqqqdhL9VZ9VF81E6uotIpVVa+qgWqQGqxeUwvwdTVUvaGGqeFqhHpTjVSj1Gg1Ro1V49R49ZaaoN5WE9U7apKarKaoqWqamq5mpJ3mapaard5Tc9T7aq6ap+arBWqh+kAtUovVEvWhWqo+UsvUcrVCrVSr1Gq1Rq1V69R6tUFtVJsiUFvUVrVNfay2qx1qp9qldqs9aq/6RO1Tn6r96jN1QH2uDqo/qkPqC3VYfamOqK/UUfW1Oqa+UcfVt+qE+k6dVKfUafW9OqN+UGfVOXVe/aguqJ/URfWzuqSCAo1aaa2NjnQGnVGn6Ew6s75KZ9FX66w6m07oa3R2fa3Ooa/TOXUunVvn0Xl1Pp1fW03aadaxLqAL6qS+XhfSN+jCuoguqotpr4vrEvpGXVLfpEvpm3VpfYsuo2/VZfVtupwur2/XFfQduqK+U1fSd+nKuoquqqvpu3V1fY+uoe/VNfV9upa+X9fWD+g6+kFdVz+k6+mHdX39iG6gH9UNdSPdWDfRTfVjupl+XDfXLXRL/YRupZ/UrfVTuo1+WrfVz+h2+g+6vX5Wd9DP6Y76ed1Jd9Zd9M/6kg66m+6uU3UP3VO/pHvp3rqP7qv76Zd1f/2KHqBf1QP1ID1Yv6aH6Nf1UP2GHqaH6xH6TT1Sj9Kj9Rg9Vo/T4/VbeoJ+W0/U7+hJerKeoqfqaXq67vOnnmb/F/Lf/jv5A345+la9TX+st+sdeqfepXfrPXqv3qv36X16v96vD+gD+qA+qA/pQ/qwPqyP6CP6qD6qj+lj+rg+rk/oE/qkPqV/1N/rM/oHfVaf0+f0j/qCvqAv/ukzAINGGW2MiUwGk9GkmEwms7nKZDFXm6wmm0mYa0x2c63JYa4zOU0uk9vkMXlNPpPfWEPGGTaxKWAKmqS53hQyN5jCpogpaooZb4qbEubGfzr/98bX1DQ1zUwz09w0Ny1NS9PKtDKtTWvTxrQxbU1b0860M+1Ne9PBdDAdTUfTyXQyXUwX09V0NQEAUk2q6WleMr1Mb9PH9DX9zMumv+lvBpgBZqAZaAabwWaIGWKGmqFmmBlmRpgRZqQZaUab0WasGWvGm/FmgplgJpqJZpKZZKaYKWaamWZmmBlmpplpZpvZZo6ZY+aauWa+mW8WmoVmkVlklpglZqlZapaZ5Wa5WWlWmtVmtVlr1pr1Zr3ZaDaazWazWWb+/AeaO81Os9vsNnvNXrPP7DP7zX5zwBwwB81Bc8gcMofNYXPEHDFHzVFzzBwzx81xc8KcMCfNSXPanDZnzBlz1pw15815c8FcMBfNRXPJXEq77YtUpCITmShDlCFKiVKizFHmKEuUJcoaZY0SUSLKHmWPckTXRTmjXFHuKE+UN8oX5Y9sRJGLOIqjAlHBKBldHxWKbogKR0WiolGxyEfFoxLRjVHJ6KaoVHRzVDq6JSoT3RqVjW6LykXlo9ujCtEdUcXozqhSdFdUOaoSVY2qRXdH1aN7ohrRvVHN6L6oVnR/VDt6IKoTPRjVjR6K6kUPR/WjR6IG0aNRw6hR1DhqEjX9l/Yfwtlcj/tutrtNtT1sT/uS7WV72z62r+1nX7b97St2gH3VDrSD7GD7mh1iX7dD7Rt2mB1uR9g37Ug7yo62Y+xYO86Ot2/ZCfZtO9G+YyfZyXaKnWqn2el2hn3XzrSz7Gz7np1j37dz7Tw73y6wC+0HdpFdbJfYD+1S+5FdZpfbFXalXWVX2zV2rV1n19sNdqPdZDfbLXar3WY/ttvtDrvT7rK77R67135i99lP7X77mT1gP7cH7R/tIfuFPWy/tEfsV/ao/does9/Y4/Zbe8J+Z0/aU/a0/d6esT/Ys/acPW9/tBfsT/ai/dlesiHt5j7t8k6GDGWgDJRCKZSZMlMWykJZKSslKEHZKTvloByUk3JSbspNeSkv5af8lIaJqQAVoCQlqRAVosJUmIpSUfLkqQSVoJJUkkpRKSpNpakMlaGyVJbKUdpF83a6g+6gO+lOuovuoipUhapRNapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9qk/1qQE1oIbUkBpTY2pKTakZNaPm1JxaUktqRa2oNbWmNtSG2lJbakftqD21pw7UgTpSR+pEnagLdaGu1JW6UTdKpVTqST2pF/WiPtSH+lE/6k/9aQANoIE0kAbTYBpCQ2goDaVhNJxG0Js0kkbRaBpDY2kcjafxNIEm0ESaSJNoEk2hKTSNptEMmkEzaSbNptk0h+bQXJpL82k+LaSFtIgW0RJaQktpKS2jZbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaNttJ22007aSbtpN+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2kk3iaTtMZOkNn6Sydp/N0gX6ii/QzXaJAKS6Ty+yuclnc1S6ry+ZSXKbuAPCXOLfL4/K6fC6/sy6ny/U3MTnnCrsirqgr5rwr7kq4G38Tl+1xmyvnyrvbXQV3h6voyrq/jau7e1wNd6+r6e5z1dzdfxPXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/CZe5Ba7dW692+A2un3uU3fe/eiOuW/cBfeT6+a6u37uZdffveIGuFfdQDfoN/EI96Yb6Ua50W6MG+vG/Sae4qa6aW66m+HedTPdrN/EC90Hbo5b4ua6eW6+W/BLnDamJe5Dt9R95Ja55W6FW+lWudVujVv7l7GudJvdFrfV7XWfuO1uh9vpdrndbs8vcdo89rvP3AH3uTvqvnaH3BfusDvujrivfonT5nfcfetOuO/cSXfKnXbfuzPuB3fWnftl/mlz/9797C654ICRFWs2HHEGzsgpnIkz81Wcha/mrJyNE3wNZ+drOQdfxzk5F+fmPJyX83F+tkzsmDnmAlyQk3w9F+IbuDAX4aJcjD0X5xJ8I5fkm7gU38yl+RYuw7dyWb6Ny3F5vp0r8B1cke/kSnwXV+YqXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB3/gdvzs9yBn+OO/Dx34s7chV/grvwid+PunMo9uCe/xL24N/fhvtyPX+b+/AoP4Fd5IA/iwfwaD+HXeSi/wcN4OI/gN3kkj+LRPIbH8jgez2/xBH6bJ/I7PIkn8xSeytN4Os/gd3kmz+LZ/B7P4fd5Ls/j+byAF/IHvIgX8xL+kJfyR7yMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+GtvI0/5u28g3fyLt7Ne3gvf8L7+FPez5/xAf6cD/If+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE/wdn+RTfJq/5zP8A5/lc3yef+QL/BNf5J/5EgeGGGMV69jEUZwhzhinxJnizPFVcZb46jhrnC1OxNfE2eNr4xzxdXHOOFecO84T543zxfljG1PsYo7juEBcME7G18eF4hviwnGRuGhcLPZx8bhEfGNcMr4pLhXfHJeOb4nLxLfGZePb4nJx+fj2uEJ8R1wxvjOuFN8VV46rxFXjavHdcfX4nrhGfG9cM74vLhXfH9eOH4jrxA/GdeOH4nrxw3H9+JG4Qfxo3DBuFDeOm8RN48fiZvHjcfO4RdwyfiJuFT8Zt46fitvET8dt42d+d3tq3CPuGb8UvxSHcK+en1yQXJj8ILkouTi5JPlhcmnyo+Sy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObkluTWZAjVMoJHr7z2xkc+g8/oU3wmn9lf5bP4q31Wn80n/DU+u7/W5/DX+Zw+l8/t8/i8Pp/P760n7zz72BfwBX3SX+8L+Rt8YV/EF/XFvPfFfQnfxDf1TX0z/7hv7lv4lv4J/4R/0j/pn/JP+ad9W/+Mb+ch0d4/6zv45/xz/nnfyXf2XfwLvqt/0Xfz3X2qT/U9fU/fy/fyfXwf38/38/19fz/AD/AD/UA/2A/2Q/wQP9QP9cP8MD/Cj/Aj/Ug/2o/2Y/1YP96P9xP8BD/RT/ST/CQ/xU/x0/w0P8PP8DP9TD/bz/Zz/Bw/18/18/18v9Av9Iv8Ir/EL/FL/VK/zC/zK/wKv8qv8mv8Gr/Or/Mb/Aa/yW/yW/wWv81v89v9dr/T7/S7/W6/1+/1+/w+v9/v9wf8AX/QH/SH/CF/2H/pj/iv/FH/tT/mv/HH/bf+hP/On/Sn/Gn/vT/jf/Bn/Tl/3v/oL/if/EX/s7/kgx+feCsxIfF2YmLincSkxOTElMTUxLTE9MSMxLuJmYlZidmJ9xJzEu8n5ibmJeYnFiQWJj5ILEosTixJfJhYmvgosSyxPLEisTKxKrE6EUK+7XEoEAqGZLg+FAo3hMKhSCgaigUfiocS4cZQMtwUSoWbQ+lwSygTbg1lw22hXHg0NAyNQuPQJDQNj4Vm4fHQPLQILcMToVV4MrQOT4U24enQNjwT2oU/hPbh2dAhPBc6hudDp9A5dAkvhK7hxdAtdA+poUfoGV4KvULv0Cf0Df3Cy6F/eCUMCK+GgWFQGBxeC0PC62FoeCMMC8PDiPBmGBlGhdFhTBgbxoXx4a0wIbwdJoZ3wqQwOUwJU8O0MD3MCO+GmWFWmB3eC3PC+2FumBfmhwVhYfggLAqLw5LwYVgaPgrLwvKwIqwMq8LqsCasDevC+rAhbAybwuawJWwN28LHYXvYEXaGXWF32BP2hk/CvvBp2B8+CwfC5+Fg+GM4FL4Ih8OX4Uj4KhwNX4dj4ZtwPHwbToTvwslwKpwO34cz4YdwNpwL58OP4UL4KVwMP4dLIYQr+x5dCCGEEOJ/B/0723v8X3LUn9o9AeDqHXmO/Mftm3L+2u6dMW+rBAA83b3jQ39eKldOTU39077LNEQF5wFA4nJ+BrgcL4eW8CS0gRZQ8i/bU/7qWL1V5wv8n/UPECVvAcj8Vzlp+X+OL/d/09+df281as5/2r+GKDkPoHDByzmZ4HJ8uf9Sf7f/VJWr2e/0n+mL8QDN/yonC1yOL/dfAh6HZ6DN3+wphBBCCCGEEEL8qrcq1/73nm/Tns/zmss5GeFy/Peez4UQQgghhBBCCPE/y7Oduzz1WJs2LdpL47+jkQIAIduvH/X/hPFIQxr/xcaV/s0khBBCCCGE+Fe7fNN/pUcihBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKkX/8//p3Yn4/1e981KIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQvy7+j8BAAD//+49Mx0=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
getdents64(r1, &(0x7f0000003cc0)=""/4128, 0x9d5)

1.955614273s ago: executing program 6 (id=140):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', <r0=>0x0})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000500)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x59}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1fb2f}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x1, 0x3}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c00000007b501b343e9e3a8b69297250fd4c3e8ea24cf092a902f0dc109b12b30a9e3fc689d87647c87fd584634a4ab0c7a1edad81c4d708748f3b941f80bc042277fb32936a6d25858bed33ab7c0b865ccfb59410da8636c33f24e01306310b1a5b8681f40cdcf6000709e012f06a05dc296924afed77fd81efce45bef9ca174a5e27d4c3a31925a9c2de0fb0b729757bcf2dde8fc1edd3dc151826bad8e05d647b8788f33f374756174f0d10b882ba71ce282949809663819b8be4eab601b5070f904e228f47f062d780cc2ac4554e", @ANYRES16=r3, @ANYBLOB="020026bd7000fddbdf25090000002400068008000700", @ANYRES32, @ANYBLOB="0800060011000000060005004e2300000600010002000000080004000800000005000500080000000800020003000000080002000400000008000300010000000c00068008000700", @ANYRES32=r5, @ANYBLOB="54000180050002001000000014000400fe80000000000000000000000000001908000700", @ANYRES32=r6, @ANYBLOB="060005004e210000080006000400000014000400fe8000000000000000000000000000aa05000200d3000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6)
r8 = socket(0x10, 0x2, 0x0)
r9 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000000)={0xa0000001})
epoll_pwait(r11, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10)
r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000580), r4)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00022abd7000ffdbdf2101000000140002006272696467655f736c6176655f3000000900010073797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x4881}, 0x4)

1.954468303s ago: executing program 1 (id=148):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001d00070f000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="802cbd2373bc9871cde407f374fdcc00820001000800", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x20006, 0x20000000001})

1.833371466s ago: executing program 1 (id=149):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x400000, 0x2a0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xfffffffffffffffb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e26}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d8)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
r3 = syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1839030, 0x0, 0x4, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
socket$inet(0x2, 0x6, 0x2)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(r3, &(0x7f0000000240)='./cgroup\x00', r3, &(0x7f00000007c0)='./file1\x00', 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random='\r\x00'})
syz_open_procfs(r0, &(0x7f0000000400)='net/raw6\x00')

1.531406963s ago: executing program 0 (id=150):
r0 = socket$netlink(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
bind$netlink(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1045000, 0x0, 0x0, 0x0, &(0x7f0000000140))
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getdents64(r2, &(0x7f0000000180)=""/4092, 0xffc)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

352.450912ms ago: executing program 1 (id=151):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="b7020000000000007b2ac8ff000000007b2ac0ff00000000b702000002000000632ac8ff00000000180200000a0000010000000000000000632accff00000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b70400000000000085f3cdec8adde8a2a088e104d53122e74c000000450000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0xc3200, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8})
r1 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f000000ac40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20, 0x4000000}}], 0x1, 0x84)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d000100"], 0x54}}, 0x0)

351.216362ms ago: executing program 1 (id=152):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
process_madvise(0xffffffffffffffff, &(0x7f00000003c0)=[{0xffffffffffffffff}], 0x22, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
creat(&(0x7f00000002c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x102)

350.716931ms ago: executing program 2 (id=153):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/75}, {&(0x7f0000000740)=""/20}, {&(0x7f0000000780)=""/202}], 0x12, &(0x7f0000000280)=""/23}, 0x8001}], 0x1, 0x1822b, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @loopback}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x6}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076000100000000000000000007517f00", @ANYRES32=0x0, @ANYBLOB="07000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x80)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x50, 0x0, &(0x7f0000000180)="63eced8e46dc3f0adf33c9f7b986941dfd64ba54c238090d4d9c6cc3f0e3ab5fdf78e00f01cf1408f70395dd4b55ad8d567f3b59a37aee99f23532b15581c0c88aa56788de41b43f5c204fd37788068b", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f0000000340)}, 0x20)
r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xd, "0fc6acb1290a00"})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)

3.12596ms ago: executing program 0 (id=154):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3c, 0xfffffffffff7fffd, 0x50}, {0x5, 0x0, 0x100000001, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100})
pipe(0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_dellink={0x20, 0x13, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r5, 0x3000}}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x6, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r8, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffd, 0x6, "009d6fe067d8361965000000e100"})
write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
ioctl$TCSETS(r8, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r9 = syz_open_pts(r8, 0x0)
r10 = dup3(r9, r8, 0x0)
read$FUSE(r10, &(0x7f0000003f80)={0x2020}, 0x2020)
read$watch_queue(r10, &(0x7f0000000340)=""/133, 0x85)

2.70436ms ago: executing program 4 (id=155):
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000004dcc000000000000020000ea2f0000000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x38, r1, 0x7, 0x70bd26, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00')
getdents(r3, 0xffffffffffffffff, 0x5a)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8000, 0x0, 0x9, 0x1}, 0x20)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0x170, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0x4, {0x7ff}}}}, {{@ip={@multicast2, @local, 0xffffff00, 0xffffffff, 'sit0\x00', 'tunl0\x00', {0xff}, {}, 0x1, 0x2, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@multicast1, @private=0xa010102, 0xff, 0xffffffff, 'wlan1\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x33, 0x0, 0x4b}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xe601, 0xc, [0x2c, 0x37, 0x27, 0x10, 0x3c, 0x11, 0x12, 0x33, 0xe, 0xf, 0x15, 0x3e, 0x1e, 0x15, 0x37, 0x3], 0x1, 0x8, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r1, 0x20, 0x0, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r4, &(0x7f0000000c40)={0x2000201f})

2.19094ms ago: executing program 2 (id=156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x2d7, &(0x7f0000000380)="$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")
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0)

2.00983ms ago: executing program 6 (id=157):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$eJzs3M9vFFUcAPDvzHaLBLAV8Qc/1CoaG3+0FFA5eFCjiQdMTPSgx6YtBFmooTURQhSMwZMxJt6NR/8FT3oxxpOJV70bEmK4AJ7WzO4M3d3uLrDsstD9fJJp35sffe+7b97Om3m7DWBkTWU/koitEfFXREzUs807TNV/Xb18duHa5bMLSVSr7/2b1Pa7cvnsQrFrcdyWPDOdRqRfJrG7Tbkrp88cn69Ulk7l+dnVEx/Prpw+8+KxE/NHl44undx/6NDBA3OvvLz/pb7EmdXpyq7PlvfsfPvDb985/HVT/C1x9MlUt43PVKt9Lm64tjWkk7EhVoRbUoqIrLnKtf4/EaVYa7yJeOuLoVYOGKhqtVrd0nnzuSqwgSXRnNflYVQUF/rs/rdYWgcBrw1u+DF0l16v3wBlcV/Nl/qWsUjzfcot97f9NBURH5z77/tsicE8hwAAaPJzNv55od34L42HG/a7P58bmoyIByJie0Q8GBE7IuKhiNq+j0TEo7dYfuskyfrxT3qxp8BuUjb+ezWf22oe/xWjv5gs5blttfjLyZFjlaV9+WsyHeVNWX6uSxm/vPnnN522NY7/siUrvxgL5vW4OLap+ZjF+dX524m50aXzEbvG2sWfXJ8JSCJiZ0Ts6rGMY8/9uKfTthvH30Uf5pmqP0Q8W2//c9ESfyHpPj85e19UlvbNFmfFer//ceHdTuXfVvx9cOl8FGfXuvbPTSaN87Urt17Ghb+/6nhP0+v5P568X0uP5+s+nV9dPTUXMZ4crle6cf3+tWOLfLF/dv5P723f/7fH2iuxOyKyk/ixiHg8Ip7I6/5kRDwVEXu7xP/bG09/1Hv8g5XFv9j2/a9T+68lxqN1TftE6fivPzUVOrku/mvd2/9gLTWdr7mZ97+bqVdvZzMAAADce9KI2BpJOnM9naYzM/XPy++ISCvLK6vPH1n+5ORi/TsCk1FOiyddEw3PQ+fy2/p6/nxE1D9aUGw/kD83/q60uZafWViuLA47eBhxWzr0/8w/pWHXDhg439eC0aX/w+jS/2F06f8wutr0/83DqAdw57W7/n8+hHoAd15L/zftByOj7P4fRljH/r+R//MPUNPD9T8ZRD2AO2plc9z4S/JdE8Vf6vHwDZuI8l1RjdtPVJO2jRvpsCt240Rxlbpb6nMvJYb3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP/wcAAP//vQDabw==")
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x202000, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0xb00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0)

0s ago: executing program 0 (id=158):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x400000, 0x2a0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xfffffffffffffffb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e26}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d8)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1839030, 0x0, 0x4, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
socket$inet(0x2, 0x6, 0x2)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts.
[   22.507263][   T28] audit: type=1400 audit(1786691904.266:64): avc:  denied  { mounton } for  pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.510687][  T278] cgroup: Unknown subsys name 'net'
[   22.530121][   T28] audit: type=1400 audit(1786691904.266:65): avc:  denied  { mount } for  pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.557446][   T28] audit: type=1400 audit(1786691904.296:66): avc:  denied  { unmount } for  pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.557931][  T278] cgroup: Unknown subsys name 'devices'
[   22.674158][  T278] cgroup: Unknown subsys name 'hugetlb'
[   22.679802][  T278] cgroup: Unknown subsys name 'rlimit'
[   22.815183][   T28] audit: type=1400 audit(1786691904.576:67): avc:  denied  { setattr } for  pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.838848][   T28] audit: type=1400 audit(1786691904.576:68): avc:  denied  { mounton } for  pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.863619][   T28] audit: type=1400 audit(1786691904.576:69): avc:  denied  { mount } for  pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.894016][  T280] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   22.902855][   T28] audit: type=1400 audit(1786691904.666:70): avc:  denied  { relabelto } for  pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.928317][   T28] audit: type=1400 audit(1786691904.666:71): avc:  denied  { write } for  pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.954727][   T28] audit: type=1400 audit(1786691904.716:72): avc:  denied  { read } for  pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.954942][  T278] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.980857][   T28] audit: type=1400 audit(1786691904.716:73): avc:  denied  { open } for  pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.994265][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.001525][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.009152][  T286] device bridge_slave_0 entered promiscuous mode
[   24.018165][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.025576][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.033244][  T286] device bridge_slave_1 entered promiscuous mode
[   24.075647][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.082908][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.090324][  T289] device bridge_slave_0 entered promiscuous mode
[   24.108752][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.115878][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.123469][  T289] device bridge_slave_1 entered promiscuous mode
[   24.183006][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.190093][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.197758][  T288] device bridge_slave_0 entered promiscuous mode
[   24.207871][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.215106][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.222586][  T288] device bridge_slave_1 entered promiscuous mode
[   24.251626][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.258886][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.266419][  T287] device bridge_slave_0 entered promiscuous mode
[   24.274955][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.282082][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.289580][  T287] device bridge_slave_1 entered promiscuous mode
[   24.330082][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.337231][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.344817][  T290] device bridge_slave_0 entered promiscuous mode
[   24.373158][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.380247][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.387766][  T290] device bridge_slave_1 entered promiscuous mode
[   24.486085][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.493193][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.500518][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.507694][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.558210][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.565307][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.572641][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.579693][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.595359][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.602630][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.610024][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.617116][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.629808][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.636927][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.644280][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.651434][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.683796][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.691419][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.699147][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.706701][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.714213][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.721803][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.729323][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.736667][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.744255][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.783989][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.792497][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.799530][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.807175][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.815778][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.822887][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.830281][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.838347][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.862606][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.870367][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.878986][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.886170][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.894396][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.902251][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.910472][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.917570][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.925230][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.933925][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.940960][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.948649][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.956965][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.964062][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.983252][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.012598][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   25.020319][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.028290][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.037108][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.045608][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.052808][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.060554][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.069231][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.077583][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.084774][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.092429][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.100581][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.108845][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.117126][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.125223][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.133406][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.141328][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   25.149056][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.156724][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.165070][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.179900][  T288] device veth0_vlan entered promiscuous mode
[   25.199715][  T287] device veth0_vlan entered promiscuous mode
[   25.207413][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.215949][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.223629][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.231468][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.240813][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.249111][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.257494][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.265757][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.273925][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.281910][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   25.290465][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.298950][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.306392][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.313904][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.322517][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.331145][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.338248][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.345965][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.354471][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.362968][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.370503][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.378226][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   25.398275][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.406608][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.420824][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.429843][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.438411][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.449463][  T288] device veth1_macvtap entered promiscuous mode
[   25.458696][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.466776][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.475012][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.491620][  T287] device veth1_macvtap entered promiscuous mode
[   25.501681][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.510026][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.518206][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.526712][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.535545][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.544136][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.556631][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.565420][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.588648][  T286] device veth0_vlan entered promiscuous mode
[   25.595603][  T288] request_module fs-gadgetfs succeeded, but still no fs?
[   25.604763][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.614322][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.622809][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.631144][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.639712][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.648553][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.656523][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.664787][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.672439][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.681300][  T289] device veth0_vlan entered promiscuous mode
[   25.708353][  T289] device veth1_macvtap entered promiscuous mode
[   25.717615][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.728538][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.737987][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.746492][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.760175][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.767946][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.775658][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.783578][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.791502][  T290] device veth0_vlan entered promiscuous mode
[   25.801746][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.810303][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.828527][  T286] device veth1_macvtap entered promiscuous mode
[   25.837739][  T318] loop0: detected capacity change from 0 to 1024
[   25.849770][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.858763][  T318] =======================================================
[   25.858763][  T318] WARNING: The mand mount option has been deprecated and
[   25.858763][  T318]          and is ignored by this kernel. Remove the mand
[   25.858763][  T318]          option from the mount to silence this warning.
[   25.858763][  T318] =======================================================
[   25.894181][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.906525][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.916125][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.927746][  T290] device veth1_macvtap entered promiscuous mode
[   25.937662][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.947528][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.980310][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.989126][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.998707][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.007351][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.016326][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.025101][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.033942][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.043115][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.151908][  T291] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   26.217957][  T318] loop0: detected capacity change from 0 to 40427
[   26.234849][  T318] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288)
[   26.288200][  T326] loop3: detected capacity change from 0 to 2048
[   26.419941][  T318] F2FS-fs (loop0): invalid crc value
[   26.427783][  T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   26.511204][  T318] F2FS-fs (loop0): invalid crc value
[   26.587718][  T291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.608626][  T318] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[   26.643158][  T326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   26.703316][  T326] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   26.760966][  T291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   27.211955][    C0] sched: RT throttling activated
[   27.238067][  T329] loop2: detected capacity change from 0 to 512
[   27.244563][  T291] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   27.257172][  T329] EXT4-fs: Ignoring removed nomblk_io_submit option
[   27.263945][  T291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.283952][  T329] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   27.296332][  T291] usb 2-1: config 0 descriptor??
[   27.335020][  T329] EXT4-fs (loop2): 1 truncate cleaned up
[   27.350990][  T329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   27.369445][  T338] fs-verity: sha512 using implementation "sha512-avx2"
[   27.566147][   T28] kauditd_printk_skb: 53 callbacks suppressed
[   27.566164][   T28] audit: type=1400 audit(1786691909.326:127): avc:  denied  { create } for  pid=339 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   27.592002][   T39] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   27.624727][   T28] audit: type=1400 audit(1786691909.326:128): avc:  denied  { connect } for  pid=339 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   27.676334][  T338] fs-verity (loop3, inode 13): Error -4 building Merkle tree
[   27.706503][  T291] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   27.726726][  T291] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   27.745459][  T286] EXT4-fs (loop3): unmounting filesystem.
[   27.783438][   T39] usb 1-1: not running at top speed; connect to a high speed hub
[   27.794923][   T39] usb 1-1: config 13 has an invalid interface number: 5 but max is 0
[   27.803420][   T28] audit: type=1400 audit(1786691909.556:129): avc:  denied  { create } for  pid=361 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   27.833724][   T39] usb 1-1: config 13 contains an unexpected descriptor of type 0x1, skipping
[   27.850781][  T362] loop3: detected capacity change from 0 to 2048
[   27.858093][   T28] audit: type=1400 audit(1786691909.586:130): avc:  denied  { setopt } for  pid=361 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   27.887304][   T39] usb 1-1: config 13 has no interface number 0
[   27.904338][  T362] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   27.922245][  T362] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   27.932210][   T39] usb 1-1: config 13 interface 5 altsetting 1 endpoint 0xE has invalid maxpacket 3020, setting to 64
[   27.944057][   T39] usb 1-1: config 13 interface 5 altsetting 1 endpoint 0x6 has invalid maxpacket 1048, setting to 64
[   27.970975][   T39] usb 1-1: config 13 interface 5 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[   27.991824][   T39] usb 1-1: config 13 interface 5 altsetting 1 has a duplicate endpoint with address 0x1, skipping
[   28.004068][  T314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   28.013060][   T39] usb 1-1: config 13 interface 5 altsetting 1 has an invalid endpoint with address 0x0, skipping
[   28.025767][  T314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   28.041993][   T39] usb 1-1: config 13 interface 5 altsetting 1 has an invalid endpoint with address 0x91, skipping
[   28.051348][  T321] usb 2-1: USB disconnect, device number 2
[   28.059749][   T39] usb 1-1: config 13 interface 5 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[   28.072949][   T39] usb 1-1: config 13 interface 5 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[   28.084937][   T39] usb 1-1: config 13 interface 5 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[   28.106980][   T39] usb 1-1: config 13 interface 5 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[   28.128222][   T39] usb 1-1: config 13 interface 5 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   28.139772][   T39] usb 1-1: config 13 interface 5 altsetting 1 has 17 endpoint descriptors, different from the interface descriptor's value: 16
[   28.172775][   T39] usb 1-1: config 13 interface 5 has no altsetting 0
[   28.194348][   T39] usb 1-1: New USB device found, idVendor=1435, idProduct=d181, bcdDevice= 0.7a
[   28.211508][   T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.229943][   T39] usb 1-1: Product: ྕ菱ᤨ䞟钖ഹ楊⧽ࢊꆛ肨ꀽꈔ�ᅡ䡒勘�鞕輦��塟Ā褣翚☃�頴הּꉹܩ㬤㭲ퟵ㮗廔瓰盵怬ꆪ橩派㋹ꋎ汿�Ꮃ嘃
[   28.271984][   T39] usb 1-1: Manufacturer: 蠞납ະ穋镩듾꘢ᨭ걫ஸ�ᜉ汖憉NJ棫ᔗ똬䑴⥔ੀ�Ϭ�䃮畨⎩
[   28.293793][   T39] usb 1-1: SerialNumber: 奜�ᯤ鉶﫭䤖�̖嚾牂ႅ辜僂롞㿱�뷋ધ戚断䕲濌깳↷抲귴�ꎦ啀筬຤�Ć꫚��쵧�哧▰乲콨੸쳓촥얢�기톾湰凟렜༯퉳�謮⿱莢ֳ㴜䨡蓵铄葹ヴꤩ젅鿳ᓱ⮆킋䙶裴�멋羙꘷装ꚺ薞ꥰ�豈兜�㖌�㊖
[   28.328200][  T367] loop4: detected capacity change from 0 to 512
[   28.360502][  T318] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   28.381438][  T367] FAT-fs (loop4): bogus number of FAT sectors
[   28.399048][  T367] FAT-fs (loop4): Can't find a valid FAT filesystem
[   28.440354][   T28] audit: type=1400 audit(1786691910.196:131): avc:  denied  { create } for  pid=368 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   28.482197][   T28] audit: type=1400 audit(1786691910.226:132): avc:  denied  { bind } for  pid=368 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   28.512495][   T28] audit: type=1400 audit(1786691910.226:133): avc:  denied  { setopt } for  pid=368 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   28.533032][   T28] audit: type=1400 audit(1786691910.236:134): avc:  denied  { ioctl } for  pid=368 comm="syz.4.11" path="socket:[15667]" dev="sockfs" ino=15667 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   28.594294][   T28] audit: type=1400 audit(1786691910.356:135): avc:  denied  { create } for  pid=372 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.910329][  T290] EXT4-fs (loop2): unmounting filesystem.
[   30.051786][   T39] usb 1-1: USB disconnect, device number 2
[   30.095222][  T383] loop2: detected capacity change from 0 to 512
[   30.119283][  T383] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.13: missing EA_INODE flag
[   30.141042][  T383] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.13: error while reading EA inode 2 err=-117
[   30.160246][   T28] audit: type=1400 audit(1786691911.916:136): avc:  denied  { create } for  pid=385 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   30.163088][  T386] loop0: detected capacity change from 0 to 256
[   30.207398][  T383] EXT4-fs (loop2): 1 orphan inode deleted
[   30.251712][  T383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   30.383065][  T389] loop1: detected capacity change from 0 to 256
[   30.472035][  T389] SELinux: avtab: truncated entry
[   30.525409][  T389] SELinux: failed to load policy
[   30.542171][  T369] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   30.548700][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[   30.566355][  T362] overlayfs: failed to resolve './bus': -117
[   30.581165][  T362] netlink: 'syz.3.9': attribute type 9 has an invalid length.
[   30.588977][  T362] netlink: 'syz.3.9': attribute type 6 has an invalid length.
[   30.600828][  T290] EXT4-fs (loop2): unmounting filesystem.
[   30.604415][  T362] netlink: 'syz.3.9': attribute type 7 has an invalid length.
[   30.614547][  T362] netlink: 'syz.3.9': attribute type 8 has an invalid length.
[   30.636679][  T391] loop1: detected capacity change from 0 to 256
[   30.646624][  T393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   30.668340][  T391] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   30.684244][  T286] EXT4-fs (loop3): unmounting filesystem.
[   30.722504][  T393] xt_hashlimit: max too large, truncated to 1048576
[   30.729236][  T393] xt_hashlimit: overflow, try lower: 0/0
[   31.110123][  T405] loop0: detected capacity change from 0 to 512
[   31.133836][  T405] EXT4-fs: Ignoring removed nomblk_io_submit option
[   31.146883][  T405] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   31.181272][  T405] EXT4-fs (loop0): 1 truncate cleaned up
[   31.188673][  T405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   31.271509][  T396] loop3: detected capacity change from 0 to 131072
[   31.283834][  T396] F2FS-fs (loop3): Test dummy encryption mode enabled
[   31.292498][  T396] F2FS-fs (loop3): invalid crc value
[   31.341481][  T396] F2FS-fs (loop3): Found nat_bits in checkpoint
[   31.439973][  T396] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   31.452055][   T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   31.621733][  T396] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   31.664724][   T39] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   31.699320][   T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   31.724456][  T428] input: syz0 as /devices/virtual/input/input4
[   31.767411][   T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   31.796674][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.831558][   T39] usb 3-1: config 0 descriptor??
[   31.848610][  T412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   31.862940][   T39] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   32.019132][  T430] xt_hashlimit: size too large, truncated to 1048576
[   32.117875][  T396] syz.3.19 (396) used greatest stack depth: 21024 bytes left
[   32.361732][  T287] EXT4-fs (loop0): unmounting filesystem.
[   32.483267][  T441] loop3: detected capacity change from 0 to 256
[   32.490435][  T441] exfat: Deprecated parameter 'utf8'
[   32.500536][  T441] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[   32.586586][   T28] kauditd_printk_skb: 46 callbacks suppressed
[   32.586600][   T28] audit: type=1400 audit(1786691914.346:183): avc:  denied  { mount } for  pid=446 comm="syz.3.31" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   32.616407][   T28] audit: type=1400 audit(1786691914.376:184): avc:  denied  { read } for  pid=446 comm="syz.3.31" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   32.639233][  T370] Bluetooth: hci0: command 0x0c1a tx timeout
[   32.642548][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   32.652226][  T370] Bluetooth: hci0: sending frame failed (-49)
[   32.670230][  T450] sd 0:0:1:0: PR command failed: 1026
[   32.672878][   T28] audit: type=1400 audit(1786691914.376:185): avc:  denied  { open } for  pid=446 comm="syz.3.31" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   32.686479][  T450] sd 0:0:1:0: Sense Key : 0x5 [current] 
[   32.732328][  T450] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 
[   32.772046][  T426] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   32.953332][  T426] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   32.964887][  T426] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   32.975158][  T426] usb 1-1: config 0 interface 0 has no altsetting 0
[   32.981807][  T426] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[   32.991102][  T426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.012342][   T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   33.023609][  T426] usb 1-1: config 0 descriptor??
[   33.178127][  T460] loop3: detected capacity change from 0 to 1024
[   33.187715][  T460] EXT4-fs: Ignoring removed bh option
[   33.193235][  T460] EXT4-fs: Ignoring removed bh option
[   33.204399][  T460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   33.213068][   T19] usb 5-1: Using ep0 maxpacket: 8
[   33.221350][   T28] audit: type=1400 audit(1786691914.976:186): avc:  denied  { create } for  pid=459 comm="syz.3.35" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.243907][  T460] EXT4-fs (loop3): re-mounted. Quota mode: none.
[   33.247578][   T28] audit: type=1400 audit(1786691914.976:187): avc:  denied  { write } for  pid=459 comm="syz.3.35" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.272167][   T28] audit: type=1400 audit(1786691914.976:188): avc:  denied  { add_name } for  pid=459 comm="syz.3.35" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.272731][   T19] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   33.295479][   T28] audit: type=1400 audit(1786691914.976:189): avc:  denied  { setattr } for  pid=459 comm="syz.3.35" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.322136][   T19] usb 5-1: config 0 interface 0 has no altsetting 0
[   33.327374][   T28] audit: type=1400 audit(1786691914.976:190): avc:  denied  { remove_name } for  pid=459 comm="syz.3.35" name="#6" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   33.344085][   T19] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[   33.355613][   T28] audit: type=1400 audit(1786691914.976:191): avc:  denied  { rename } for  pid=459 comm="syz.3.35" name="#6" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   33.385957][   T28] audit: type=1400 audit(1786691914.976:192): avc:  denied  { unlink } for  pid=459 comm="syz.3.35" name="#6" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   33.394027][   T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.416438][  T286] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /8/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   33.439230][  T286] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /8/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   33.449618][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0xe
[   33.469429][   T19] usb 5-1: config 0 descriptor??
[   33.474911][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.483774][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.491376][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.499200][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.506526][  T286] EXT4-fs (loop3): unmounting filesystem.
[   33.514214][  T466] loop1: detected capacity change from 0 to 128
[   33.514560][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.531099][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.538480][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.545194][  T466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   33.546120][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.554824][  T466] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   33.563585][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.586473][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.593899][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.601321][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.603585][  T288] EXT4-fs (loop1): unmounting filesystem.
[   33.610263][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.621476][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.629331][  T426] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0
[   33.650709][  T470] loop1: detected capacity change from 0 to 512
[   33.659461][  T470] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 1025)!
[   33.670206][  T426] hid-led: probe of 0003:0FC5:B080.0002 failed with error -71
[   33.692545][  T426] usb 1-1: USB disconnect, device number 3
[   33.704856][  T470] EXT4-fs (loop1): group descriptors corrupted!
[   33.889599][   T19] isku 0003:1E7D:319C.0003: unknown main item tag 0x4
[   33.896827][   T19] isku 0003:1E7D:319C.0003: unknown main item tag 0x5
[   33.906700][   T19] isku 0003:1E7D:319C.0003: unknown main item tag 0x2
[   33.913624][   T19] isku 0003:1E7D:319C.0003: unexpected long global item
[   33.920807][   T19] isku 0003:1E7D:319C.0003: parse failed
[   33.926593][   T19] isku: probe of 0003:1E7D:319C.0003 failed with error -22
[   33.932054][  T308] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   34.116462][   T19] usb 5-1: USB disconnect, device number 2
[   34.142229][  T308] usb 4-1: Using ep0 maxpacket: 32
[   34.148682][  T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   34.159184][  T308] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   34.170185][  T308] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   34.192701][  T426] usb 3-1: USB disconnect, device number 2
[   34.199696][  T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.220725][  T484] loop2: detected capacity change from 0 to 512
[   34.227903][  T308] usb 4-1: Product: syz
[   34.232252][  T308] usb 4-1: Manufacturer: syz
[   34.236880][  T308] usb 4-1: SerialNumber: syz
[   34.254619][  T486] loop0: detected capacity change from 0 to 1024
[   34.256297][  T484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   34.271732][  T484] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.293850][  T486] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   34.302645][  T486] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.316811][  T486] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.42: Freeing blocks not in datazone - block = 0, count = 16
[   34.385038][  T492] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.42: bg 0: block 112: padding at end of block bitmap is not set
[   34.402011][  T492] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28
[   34.414364][  T492] EXT4-fs (loop0): This should not happen!! Data will be lost
[   34.414364][  T492] 
[   34.424086][  T492] EXT4-fs (loop0): Total free blocks count 0
[   34.430100][  T492] EXT4-fs (loop0): Free/Dirty block details
[   34.436097][  T492] EXT4-fs (loop0): free_blocks=0
[   34.441270][  T492] EXT4-fs (loop0): dirty_blocks=4096
[   34.446624][  T492] EXT4-fs (loop0): Block reservation details
[   34.452674][  T492] EXT4-fs (loop0): i_reserved_data_blocks=256
[   34.466478][  T432] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28
[   34.468793][  T471] loop3: detected capacity change from 0 to 256
[   34.513276][  T471] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d)
[   34.550822][  T308] usb 4-1: Audio class v2/v3 interfaces need an interface association
[   34.563015][  T308] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[   34.571535][  T308] usb 4-1: USB disconnect, device number 2
[   34.618640][  T495] loop0: detected capacity change from 0 to 256
[   34.628202][  T495] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   34.675413][  T497] erofs: (device loop4): mounted with root inode @ nid 36.
[   34.814456][  T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   34.985376][  T512] xt_hashlimit: size too large, truncated to 1048576
[   35.026363][  T513] EXT4-fs (loop4): Test dummy encryption mode enabled
[   35.045423][  T513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   35.171727][  T290] EXT4-fs (loop2): unmounting filesystem.
[   35.454545][  T519] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   35.953929][  T432] device bridge_slave_1 left promiscuous mode
[   35.970434][  T432] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.980633][  T432] device bridge_slave_0 left promiscuous mode
[   35.990618][  T432] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.009532][  T432] device veth1_macvtap left promiscuous mode
[   36.022179][  T432] device veth0_vlan left promiscuous mode
[   36.235939][  T538] overlayfs: failed to clone upperpath
[   36.988997][  T524] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.012001][  T524] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.035083][  T524] device bridge_slave_0 entered promiscuous mode
[   37.059720][  T524] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.085513][  T524] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.109787][  T524] device bridge_slave_1 entered promiscuous mode
[   37.241487][  T524] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.248998][  T524] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.256439][  T524] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.263540][  T524] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.275327][  T432] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.284933][  T432] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.298278][  T517] set_capacity_and_notify: 3 callbacks suppressed
[   37.298297][  T517] loop2: detected capacity change from 0 to 131072
[   37.318440][  T517] F2FS-fs (loop2): Test dummy encryption mode enabled
[   37.327480][  T517] F2FS-fs (loop2): invalid crc value
[   37.343939][  T517] F2FS-fs (loop2): Found nat_bits in checkpoint
[   37.387844][  T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   37.403823][  T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   37.416044][  T517] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   37.426426][  T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   37.443627][  T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   37.460400][  T432] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.467505][  T432] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.475304][  T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   37.487359][  T555] loop1: detected capacity change from 0 to 1024
[   37.494154][  T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   37.502992][  T432] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.510050][  T432] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.526499][  T555] EXT4-fs: Ignoring removed nomblk_io_submit option
[   37.541035][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   37.549278][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   37.563547][  T555] EXT4-fs: Ignoring removed nomblk_io_submit option
[   37.570811][  T555] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   37.587056][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   37.595657][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   37.613902][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   37.622843][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   37.631812][  T555] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   37.641109][  T555] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.671141][  T559] input: syz0 as /devices/virtual/input/input5
[   37.677936][   T28] kauditd_printk_skb: 21 callbacks suppressed
[   37.677954][   T28] audit: type=1400 audit(1786691919.436:214): avc:  denied  { rename } for  pid=554 comm="syz.1.59" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   37.681318][  T524] device veth0_vlan entered promiscuous mode
[   37.690765][   T28] audit: type=1400 audit(1786691919.436:215): avc:  denied  { unlink } for  pid=554 comm="syz.1.59" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   37.707510][  T560] EXT4-fs error (device loop1): ext4_get_first_dir_block:3605: inode #12: comm syz.1.59: directory missing '..'
[   37.746146][   T28] audit: type=1400 audit(1786691919.436:216): avc:  denied  { rename } for  pid=554 comm="syz.1.59" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   37.754663][  T560] EXT4-fs (loop1): Remounting filesystem read-only
[   37.769344][   T28] audit: type=1400 audit(1786691919.436:217): avc:  denied  { rmdir } for  pid=554 comm="syz.1.59" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   37.783452][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   37.817272][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   37.830288][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   37.838411][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   37.846639][  T288] EXT4-fs (loop1): unmounting filesystem.
[   37.872446][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   37.892827][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   37.904824][  T564] loop1: detected capacity change from 0 to 512
[   37.924470][  T524] device veth1_macvtap entered promiscuous mode
[   37.937282][  T564] ext4: Unknown parameter 'fowner<00000000000000000000'
[   37.945266][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   37.962593][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   37.971280][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   37.987628][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   38.040049][  T289] EXT4-fs (loop4): unmounting filesystem.
[   38.040966][  T564] overlayfs: unrecognized mount option "obj_type=-}\%Â¡ÈBoë¶�œ7iGòçN†4FíÐn¯S;:ßÂéÓ´e�oD»+7fçgS‘™fm¢‘;ºë" or missing value
[   38.088396][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   38.115707][   T28] audit: type=1400 audit(1786691919.876:218): avc:  denied  { mounton } for  pid=524 comm="syz-executor" path="/root/syzkaller.7vyAel/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   38.143805][  T567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.61'.
[   38.172194][  T567] IPv6: Can't replace route, no match found
[   38.308725][   T28] audit: type=1400 audit(1786691920.066:219): avc:  denied  { write } for  pid=572 comm="syz.4.63" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   38.351507][   T28] audit: type=1400 audit(1786691920.096:220): avc:  denied  { ioctl } for  pid=572 comm="syz.4.63" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   40.289642][   T28] audit: type=1400 audit(1786691922.046:221): avc:  denied  { mount } for  pid=592 comm="syz.0.67" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   40.341007][  T426] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   40.348726][   T28] audit: type=1400 audit(1786691922.076:222): avc:  denied  { mount } for  pid=592 comm="syz.0.67" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   40.405408][  T595] loop4: detected capacity change from 0 to 128
[   40.435524][  T595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   40.451370][  T595] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   40.515327][  T289] EXT4-fs (loop4): unmounting filesystem.
[   40.542068][  T426] usb 2-1: Using ep0 maxpacket: 32
[   40.552885][  T426] usb 2-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 616
[   40.563966][  T426] usb 2-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024
[   40.577327][  T610] xt_connbytes: Forcing CT accounting to be enabled
[   40.579712][  T426] usb 2-1: config 1 interface 0 has no altsetting 0
[   40.590962][  T610] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   40.602979][  T426] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   40.622041][  T426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.638852][   T28] audit: type=1400 audit(1786691922.396:223): avc:  denied  { write } for  pid=614 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   40.640443][  T426] usb 2-1: Product: syz
[   40.662244][  T615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73'.
[   40.681977][  T426] usb 2-1: Manufacturer: syz
[   40.690849][  T617] 9pnet_fd: Insufficient options for proto=fd
[   40.696878][  T426] usb 2-1: SerialNumber: syz
[   40.701926][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.711267][  T569] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   40.719075][  T569] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   40.791463][  T612] loop4: detected capacity change from 0 to 40427
[   40.801033][  T612] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   40.809175][  T612] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   40.819938][  T612] F2FS-fs (loop4): Found nat_bits in checkpoint
[   40.852087][  T298] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   40.869160][  T612] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   40.876326][  T612] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   40.922523][  T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[   40.922545][  T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[   40.930698][  T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[   40.938541][  T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[   40.946427][  T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[   40.949557][  T426] cdc_ether: probe of 2-1:1.0 failed with error -71
[   40.955544][  T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[   40.968897][  T289] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[   40.976824][  T426] usb 2-1: USB disconnect, device number 3
[   41.012058][  T298] usb 6-1: device descriptor read/64, error -71
[   41.282024][  T298] usb 6-1: device descriptor read/64, error -71
[   41.342017][   T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   41.488476][  T659] mmap: syz.0.85 (659) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   41.522014][   T39] usb 5-1: Using ep0 maxpacket: 32
[   41.529803][   T39] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[   41.572174][   T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   41.581343][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.624262][  T664] loop2: detected capacity change from 0 to 1024
[   41.679834][   T39] usb 5-1: Product: ꗀ伇㡊儰擷�䎫ᧅস茂頻♉婊㹼蔠䪛⚫燸ᓤ䊎厘䟦볙賋撆嗓ꛦ鈔�棿⩲뇭⦩ꪸ푈᜽쉛ഋ��왫飀⻲즟癧�薱赽ꦼ䫒腑曵蛠鳂횃Ȁ᧬뇲↘鎴붹
[   41.827518][  T664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   41.910681][  T669] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[   41.945703][  T669] process 'syz.2.83' launched './file1' with NULL argv: empty string added
[   42.077020][   T39] usb 5-1: Manufacturer: у
[   42.119941][   T39] usb 5-1: SerialNumber: syz
[   42.216065][   T39] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[   42.363694][   T39] cdc_ncm 5-1:1.0: bind() failure
[   42.384295][   T39] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[   42.391124][   T39] cdc_ncm 5-1:1.1: bind() failure
[   42.442212][   T39] usb 5-1: USB disconnect, device number 3
[   42.470553][  T674] loop4: detected capacity change from 0 to 512
[   42.519607][  T674] EXT4-fs: Invalid want_extra_isize 105
[   42.629741][  T298] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   42.640596][  T290] EXT4-fs (loop2): unmounting filesystem.
[   42.672019][  T663] loop1: detected capacity change from 0 to 40427
[   42.698595][  T678] overlayfs: unrecognized mount option "fsname=overlay" or missing value
[   42.710576][  T680] loop4: detected capacity change from 0 to 512
[   42.728250][  T474] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   42.780146][  T680] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.92: missing EA_INODE flag
[   42.802047][  T298] usb 6-1: device descriptor read/64, error -71
[   42.835286][  T680] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.92: error while reading EA inode 2 err=-117
[   42.848500][  T680] EXT4-fs (loop4): 1 orphan inode deleted
[   42.854459][  T680] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   42.877918][  T289] EXT4-fs (loop4): unmounting filesystem.
[   42.879706][  T663] overlayfs: missing 'workdir'
[   42.893520][  T663] loop1: detected capacity change from 0 to 128
[   42.933179][  T474] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   42.942783][   T28] kauditd_printk_skb: 25 callbacks suppressed
[   42.942800][   T28] audit: type=1400 audit(1786691924.696:249): avc:  denied  { watch watch_reads } for  pid=661 comm="syz.1.87" path="/21/file1" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   43.071988][  T298] usb 6-1: device descriptor read/64, error -71
[   43.162027][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   43.192074][  T298] usb usb6-port1: attempt power cycle
[   43.235602][   T28] audit: type=1400 audit(1786691924.996:250): avc:  denied  { bind } for  pid=717 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   43.254870][   T28] audit: type=1400 audit(1786691924.996:251): avc:  denied  { ioctl } for  pid=717 comm="syz.0.101" path="socket:[16261]" dev="sockfs" ino=16261 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   43.279682][   T28] audit: type=1400 audit(1786691924.996:252): avc:  denied  { write } for  pid=717 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   43.352004][   T24] usb 3-1: Using ep0 maxpacket: 32
[   43.359187][   T24] usb 3-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 616
[   43.369431][   T24] usb 3-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024
[   43.379621][   T24] usb 3-1: config 1 interface 0 has no altsetting 0
[   43.386379][  T670] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   43.395500][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   43.404695][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.412748][   T24] usb 3-1: Product: syz
[   43.416935][   T24] usb 3-1: Manufacturer: syz
[   43.421556][   T24] usb 3-1: SerialNumber: syz
[   43.431767][  T694] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   43.440045][  T694] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   43.457147][  T724] overlayfs: missing 'workdir'
[   43.464299][  T724] loop4: detected capacity change from 0 to 256
[   43.473792][   T28] audit: type=1400 audit(1786691925.236:253): avc:  denied  { ioctl } for  pid=723 comm="syz.4.103" path="cgroup:[4026532390]" dev="nsfs" ino=4026532390 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   43.586392][  T737] loop4: detected capacity change from 0 to 512
[   43.594999][  T670] usb 2-1: Using ep0 maxpacket: 8
[   43.602230][  T298] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   43.610682][  T737] ext4: Unknown parameter '"'
[   43.612519][  T670] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[   43.630989][  T670] usb 2-1: config 179 has no interface number 0
[   43.637525][  T670] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   43.649613][  T670] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   43.661026][  T670] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   43.665958][  T474] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   43.680484][  T670] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   43.692992][   T24] cdc_ether: probe of 3-1:1.0 failed with error -71
[   43.699855][  T670] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   43.726289][   T24] usb 3-1: USB disconnect, device number 3
[   43.743185][  T670] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   43.752787][  T670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   43.762939][  T709] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   43.780107][  T670] xpad: probe of 2-1:179.65 failed with error -5
[   43.910306][  T755] loop5: detected capacity change from 0 to 40427
[   43.920093][  T755] F2FS-fs (loop5): invalid crc value
[   43.926665][  T755] F2FS-fs (loop5): Found nat_bits in checkpoint
[   43.959302][  T755] F2FS-fs (loop5): Start checkpoint disabled!
[   43.966426][  T755] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[   43.975213][    T6] usb 2-1: USB disconnect, device number 4
[   43.992561][  T767] loop4: detected capacity change from 0 to 1024
[   43.999075][  T755] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[   44.016512][   T28] audit: type=1400 audit(1786691925.776:254): avc:  denied  { write } for  pid=754 comm="syz.5.109" name="dev_mcast" dev="proc" ino=4026532946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   44.053461][  T767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   44.062137][  T298] usb 6-1: device not accepting address 4, error -71
[   44.088975][  T767] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.102339][  T772] overlayfs: failed to clone upperpath
[   44.110312][  T767] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.112: Freeing blocks not in datazone - block = 0, count = 16
[   44.234205][  T776] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.112: bg 0: block 112: padding at end of block bitmap is not set
[   44.249060][  T776] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28
[   44.261474][  T776] EXT4-fs (loop4): This should not happen!! Data will be lost
[   44.261474][  T776] 
[   44.271178][  T776] EXT4-fs (loop4): Total free blocks count 0
[   44.277415][  T776] EXT4-fs (loop4): Free/Dirty block details
[   44.283453][  T776] EXT4-fs (loop4): free_blocks=0
[   44.288530][  T776] EXT4-fs (loop4): dirty_blocks=2432
[   44.293902][  T776] EXT4-fs (loop4): Block reservation details
[   44.299918][  T776] EXT4-fs (loop4): i_reserved_data_blocks=152
[   44.307595][  T432] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28
[   44.320260][   T28] audit: type=1400 audit(1786691926.076:255): avc:  denied  { map } for  pid=754 comm="syz.5.109" path=2F352F66696C65302F49559DE3038BED16057C33BCE7A8899E dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   44.378379][  T777] syz.5.109: attempt to access beyond end of device
[   44.378379][  T777] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   45.128029][  T781] loop4: detected capacity change from 0 to 256
[   45.149719][   T28] audit: type=1400 audit(1786691926.906:256): avc:  denied  { map } for  pid=782 comm="syz.0.116" path="socket:[17790]" dev="sockfs" ino=17790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   45.324678][  T334] kworker/u4:4: attempt to access beyond end of device
[   45.324678][  T334] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427
[   45.600794][   T28] audit: type=1400 audit(1786691927.356:257): avc:  denied  { ioctl } for  pid=788 comm="syz.1.119" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17870 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   45.647120][  T334] kworker/u4:4: attempt to access beyond end of device
[   45.647120][  T334] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   45.753259][  T796] device batadv_slave_1 entered promiscuous mode
[   45.809412][   T28] audit: type=1400 audit(1786691927.566:258): avc:  denied  { mount } for  pid=799 comm="syz.5.117" name="/" dev="ramfs" ino=17883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   46.213185][  T298] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   49.780815][  T817] loop5: detected capacity change from 0 to 256
[   49.809756][  T817] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d)
[   49.834670][  T298] usb 6-1: device descriptor read/8, error -71
[   49.925048][  T833] loop1: detected capacity change from 0 to 256
[   49.936478][  T833] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   50.039711][  T834] overlayfs: failed to clone upperpath
[   50.072044][  T670] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   50.184714][  T833] exFAT-fs (loop1): invalid start cluster (4278190088)
[   50.607864][  T837] loop1: detected capacity change from 0 to 512
[   50.657174][  T837] FAT-fs (loop1): bogus number of FAT sectors
[   50.797957][  T837] FAT-fs (loop1): Can't find a valid FAT filesystem
[   50.942823][  T849] loop1: detected capacity change from 0 to 256
[   51.024563][  T298] usb 6-1: device descriptor read/8, error -71
[   51.152868][  T298] usb usb6-port1: unable to enumerate USB device
[   51.318769][    T6] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   51.859327][  T309] Bluetooth: hci1: Frame reassembly failed (-84)
[   51.882139][  T309] Bluetooth: hci1: Frame reassembly failed (-84)
[   52.096104][  T858] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.103469][  T858] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.105802][   T28] kauditd_printk_skb: 4 callbacks suppressed
[   52.105865][   T28] audit: type=1400 audit(1786691933.866:263): avc:  denied  { nlmsg_read } for  pid=867 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   52.113929][  T858] device bridge_slave_0 entered promiscuous mode
[   52.121799][   T28] audit: type=1400 audit(1786691933.876:264): avc:  denied  { ioctl } for  pid=867 comm="syz.0.143" path="socket:[18464]" dev="sockfs" ino=18464 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   52.140117][  T858] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.173309][  T869] netlink: 64 bytes leftover after parsing attributes in process `syz.0.143'.
[   52.176096][  T858] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.209588][  T858] device bridge_slave_1 entered promiscuous mode
[   52.303589][    T8] device bridge_slave_1 left promiscuous mode
[   52.312107][  T819] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   52.320178][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.333924][  T670] usb 3-1: unable to get BOS descriptor or descriptor too short
[   52.345732][    T8] device bridge_slave_0 left promiscuous mode
[   52.353407][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.361489][  T670] usb 3-1: unable to read config index 0 descriptor/start: -71
[   52.372523][  T670] usb 3-1: can't read configurations, error -71
[   52.384954][    T8] device veth1_macvtap left promiscuous mode
[   52.391542][    T8] device veth0_vlan left promiscuous mode
[   52.939155][  T858] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.946458][  T858] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.953973][  T858] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.961196][  T858] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.013155][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.022317][  T334] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.040683][  T334] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.082325][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.094441][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.109875][  T580] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.117041][  T580] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.125848][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.134334][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.143216][  T580] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.150276][  T580] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.158274][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.170735][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.179076][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.187501][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.210140][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.225711][  T882] overlayfs: failed to clone upperpath
[   53.231679][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.247746][  T858] device veth0_vlan entered promiscuous mode
[   53.255128][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.264144][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.279783][  T858] device veth1_macvtap entered promiscuous mode
[   53.287101][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.295738][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.303551][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.311839][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.321248][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.336785][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.345933][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.355097][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.363858][  T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.568007][   T28] audit: type=1400 audit(1786691935.326:265): avc:  denied  { block_suspend } for  pid=883 comm="syz.6.140" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   53.646387][  T884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.140'.
[   53.655737][  T884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=884 comm=syz.6.140
[   53.953437][  T370] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   53.953470][  T857] Bluetooth: hci1: command 0x1003 tx timeout
[   54.860398][  T371] Bluetooth: hci0: command 0x0c1a tx timeout
[   54.903341][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   54.942904][  T899] capability: warning: `syz.1.151' uses deprecated v2 capabilities in a way that may be insecure
[   54.989804][  T823] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   55.002135][   T28] audit: type=1400 audit(1786691936.746:266): avc:  denied  { mmap_zero } for  pid=902 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   55.034389][    T6] usb 5-1: unable to get BOS descriptor or descriptor too short
[   55.056302][    T6] usb 5-1: unable to read config index 0 descriptor/start: -71
[   55.077406][  T907] Zero length message leads to an empty skb
[   55.077553][    T6] usb 5-1: can't read configurations, error -71
[   55.171119][  T910] loop4: detected capacity change from 0 to 512
[   55.223794][  T910] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   55.264683][  T910] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   55.273823][  T914] loop6: detected capacity change from 0 to 512
[   55.289675][  T912] loop2: detected capacity change from 0 to 512
[   55.300302][  T912] FAT-fs (loop2): bogus number of FAT sectors
[   55.308987][  T910] EXT4-fs (loop4): 1 truncate cleaned up
[   55.309012][  T910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   55.327314][  T914] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   55.340221][  T912] FAT-fs (loop2): Can't find a valid FAT filesystem
[   55.481268][  T914] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   55.628841][  T920] overlayfs: failed to clone upperpath
[   55.982000][    C1] ==================================================================
[   55.990143][    C1] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480
[   55.997233][    C1] Write of size 8 at addr ffff888117ba4a00 by task syz.0.158/917
[   56.005084][    C1] 
[   56.007464][    C1] CPU: 1 PID: 917 Comm: syz.0.158 Not tainted syzkaller #0
[   56.014687][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   56.024815][    C1] Call Trace:
[   56.028123][    C1]  <IRQ>
[   56.030995][    C1]  __dump_stack+0x21/0x24
[   56.035392][    C1]  dump_stack_lvl+0x110/0x170
[   56.040287][    C1]  ? __cfi_dump_stack_lvl+0x8/0x8
[   56.045344][    C1]  ? __cfi__printk+0x8/0x8
[   56.049790][    C1]  ? sched_put_rd+0x12/0x30
[   56.054336][    C1]  ? enqueue_timer+0xae/0x480
[   56.059054][    C1]  print_address_description+0x71/0x200
[   56.064640][    C1]  print_report+0x4a/0x60
[   56.069018][    C1]  kasan_report+0x122/0x150
[   56.073655][    C1]  ? enqueue_timer+0xae/0x480
[   56.078465][    C1]  __asan_report_store8_noabort+0x17/0x20
[   56.084298][    C1]  enqueue_timer+0xae/0x480
[   56.088834][    C1]  ? detach_if_pending+0xf5/0x300
[   56.093889][    C1]  __mod_timer+0x859/0xc00
[   56.098345][    C1]  mod_timer+0x1f/0x30
[   56.102623][    C1]  can_stat_update+0xb1c/0xbb0
[   56.107504][    C1]  ? __cfi_can_stat_update+0x10/0x10
[   56.112828][    C1]  call_timer_fn+0x46/0x2a0
[   56.117370][    C1]  ? __cfi_can_stat_update+0x10/0x10
[   56.122682][    C1]  __run_timers+0x646/0x9b0
[   56.127216][    C1]  ? calc_index+0x200/0x200
[   56.131752][    C1]  ? __kasan_check_read+0x11/0x20
[   56.136812][    C1]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[   56.142514][    C1]  run_timer_softirq+0x6a/0xf0
[   56.147341][    C1]  handle_softirqs+0x1d7/0x600
[   56.152495][    C1]  __irq_exit_rcu+0x52/0xf0
[   56.157036][    C1]  irq_exit_rcu+0x9/0x10
[   56.161316][    C1]  sysvec_call_function_single+0xa6/0xc0
[   56.167079][    C1]  </IRQ>
[   56.170042][    C1]  <TASK>
[   56.173013][    C1]  asm_sysvec_call_function_single+0x1b/0x20
[   56.179035][    C1] RIP: 0010:finish_task_switch+0x173/0x7c0
[   56.184881][    C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 99 8a 69 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 55 98 b3 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28
[   56.204520][    C1] RSP: 0018:ffffc9000b6cfa68 EFLAGS: 00000282
[   56.210639][    C1] RAX: 0000000080000001 RBX: ffff88811a281f88 RCX: 0000000000000000
[   56.218639][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000ffffffff
[   56.226641][    C1] RBP: ffffc9000b6cfab0 R08: ffff88811a87d12b R09: 1ffff1102350fa25
[   56.234645][    C1] R10: dffffc0000000000 R11: ffffed102350fa26 R12: ffff8881f6f37d80
[   56.242827][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88811a281440
[   56.251141][    C1]  ? finish_task_switch+0x16b/0x7c0
[   56.256504][    C1]  ? switch_mm_irqs_off+0x730/0x960
[   56.261765][    C1]  __schedule+0xbea/0x14b0
[   56.266252][    C1]  ? release_firmware_map_entry+0x190/0x190
[   56.272191][    C1]  ? hrtimer_start_range_ns+0xa79/0xb90
[   56.277785][    C1]  schedule+0xbd/0x170
[   56.281891][    C1]  do_nanosleep+0x15a/0x540
[   56.286421][    C1]  ? usleep_range_state+0x130/0x130
[   56.291652][    C1]  ? memset+0x35/0x40
[   56.295670][    C1]  ? hrtimer_init_sleeper+0x10c/0x370
[   56.301166][    C1]  hrtimer_nanosleep+0x151/0x340
[   56.306138][    C1]  ? __kasan_check_write+0x14/0x20
[   56.311282][    C1]  ? __cfi_hrtimer_nanosleep+0x10/0x10
[   56.316959][    C1]  ? __cfi_hrtimer_wakeup+0x10/0x10
[   56.322212][    C1]  ? get_timespec64+0x116/0x1b0
[   56.327254][    C1]  ? __cfi_get_timespec64+0x10/0x10
[   56.332593][    C1]  ? __schedule+0xbea/0x14b0
[   56.337228][    C1]  common_nsleep+0x8f/0xb0
[   56.341731][    C1]  __se_sys_clock_nanosleep+0x31c/0x3b0
[   56.347314][    C1]  ? __x64_sys_clock_nanosleep+0xb0/0xb0
[   56.352985][    C1]  ? __kasan_check_write+0x14/0x20
[   56.358132][    C1]  __x64_sys_clock_nanosleep+0x9b/0xb0
[   56.363631][    C1]  x64_sys_call+0x186/0x9a0
[   56.368280][    C1]  do_syscall_64+0x4c/0xa0
[   56.372951][    C1]  ? clear_bhb_loop+0x30/0x80
[   56.377843][    C1]  ? clear_bhb_loop+0x30/0x80
[   56.382561][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   56.388756][    C1] RIP: 0033:0x7f0a6db5e90e
[   56.393477][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   56.413233][    C1] RSP: 002b:00007ffc2ffb2018 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[   56.421700][    C1] RAX: ffffffffffffffda RBX: 000055557c42f500 RCX: 00007f0a6db5e90e
[   56.429708][    C1] RDX: 00007ffc2ffb2070 RSI: 0000000000000000 RDI: 0000000000000000
[   56.437715][    C1] RBP: 00007f0a6de27da0 R08: 0000000000000000 R09: 0000000000000000
[   56.445838][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000db02
[   56.453861][    C1] R13: 00007f0a6de2627c R14: 000000000000d9b4 R15: 00007f0a6de26270
[   56.461902][    C1]  </TASK>
[   56.464952][    C1] 
[   56.467315][    C1] Allocated by task 819:
[   56.471613][    C1]  kasan_set_track+0x4b/0x70
[   56.476243][    C1]  kasan_save_alloc_info+0x1f/0x30
[   56.481382][    C1]  __kasan_kmalloc+0x95/0xb0
[   56.486002][    C1]  __kmalloc+0xb4/0x1e0
[   56.490271][    C1]  hci_alloc_dev_priv+0x27/0x1bd0
[   56.495332][    C1]  hci_uart_tty_ioctl+0x3c4/0xa40
[   56.500489][    C1]  tty_ioctl+0x8ef/0xc60
[   56.504773][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   56.509480][    C1]  __x64_sys_ioctl+0x7b/0x90
[   56.514096][    C1]  x64_sys_call+0x58b/0x9a0
[   56.518624][    C1]  do_syscall_64+0x4c/0xa0
[   56.523091][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   56.529022][    C1] 
[   56.531368][    C1] Freed by task 823:
[   56.535281][    C1]  kasan_set_track+0x4b/0x70
[   56.539925][    C1]  kasan_save_free_info+0x2b/0x40
[   56.544963][    C1]  ____kasan_slab_free+0x132/0x180
[   56.550080][    C1]  __kasan_slab_free+0x11/0x20
[   56.554841][    C1]  slab_free_freelist_hook+0xc2/0x190
[   56.560207][    C1]  __kmem_cache_free+0xb7/0x1b0
[   56.565060][    C1]  kfree+0x6f/0xf0
[   56.568779][    C1]  hci_release_dev+0x12a3/0x13b0
[   56.573718][    C1]  bt_host_release+0x82/0x90
[   56.578310][    C1]  device_release+0xa4/0x1d0
[   56.582903][    C1]  kobject_put+0x19d/0x280
[   56.587323][    C1]  put_device+0x1f/0x30
[   56.591469][    C1]  hci_dev_cmd+0x279/0x740
[   56.595924][    C1]  hci_sock_ioctl+0x41e/0x7f0
[   56.600632][    C1]  sock_do_ioctl+0x114/0x330
[   56.605234][    C1]  sock_ioctl+0x475/0x700
[   56.609664][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   56.614371][    C1]  __x64_sys_ioctl+0x7b/0x90
[   56.619093][    C1]  x64_sys_call+0x58b/0x9a0
[   56.623730][    C1]  do_syscall_64+0x4c/0xa0
[   56.628210][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   56.634114][    C1] 
[   56.636462][    C1] Last potentially related work creation:
[   56.642168][    C1]  kasan_save_stack+0x3a/0x60
[   56.646847][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[   56.652319][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[   56.658212][    C1]  insert_work+0x51/0x300
[   56.662567][    C1]  __queue_work+0x9d0/0xd50
[   56.667091][    C1]  queue_work_on+0xde/0x150
[   56.671633][    C1]  __hci_cmd_sync_sk+0xaa8/0xd80
[   56.676598][    C1]  hci_cmd_sync_status+0x53/0x120
[   56.681629][    C1]  hci_dev_cmd+0x357/0x740
[   56.686044][    C1]  hci_sock_ioctl+0x41e/0x7f0
[   56.690834][    C1]  sock_do_ioctl+0x114/0x330
[   56.695591][    C1]  sock_ioctl+0x475/0x700
[   56.699943][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   56.704651][    C1]  __x64_sys_ioctl+0x7b/0x90
[   56.709239][    C1]  x64_sys_call+0x58b/0x9a0
[   56.713741][    C1]  do_syscall_64+0x4c/0xa0
[   56.718161][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   56.724065][    C1] 
[   56.726513][    C1] Second to last potentially related work creation:
[   56.733184][    C1]  kasan_save_stack+0x3a/0x60
[   56.737889][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[   56.743264][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[   56.749085][    C1]  insert_work+0x51/0x300
[   56.753507][    C1]  __queue_work+0x9d0/0xd50
[   56.758028][    C1]  queue_work_on+0xde/0x150
[   56.762649][    C1]  hci_cmd_timeout+0x191/0x200
[   56.767420][    C1]  process_one_work+0x717/0xc30
[   56.772270][    C1]  worker_thread+0xa4d/0x11d0
[   56.777032][    C1]  kthread+0x281/0x320
[   56.781120][    C1]  ret_from_fork+0x1f/0x30
[   56.785556][    C1] 
[   56.787886][    C1] The buggy address belongs to the object at ffff888117ba4000
[   56.787886][    C1]  which belongs to the cache kmalloc-8k of size 8192
[   56.802071][    C1] The buggy address is located 2560 bytes inside of
[   56.802071][    C1]  8192-byte region [ffff888117ba4000, ffff888117ba6000)
[   56.815524][    C1] 
[   56.817865][    C1] The buggy address belongs to the physical page:
[   56.824278][    C1] page:ffffea00045ee800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117ba0
[   56.834546][    C1] head:ffffea00045ee800 order:3 compound_mapcount:0 compound_pincount:0
[   56.842868][    C1] flags: 0x4000000000010200(slab|head|zone=1)
[   56.848994][    C1] raw: 4000000000010200 ffffea00045ca800 dead000000000002 ffff888100043500
[   56.857705][    C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[   56.866291][    C1] page dumped because: kasan: bad access detected
[   56.872696][    C1] page_owner tracks the page as allocated
[   56.878499][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 382, tgid 381 (syz.2.13), ts 30421259189, free_ts 30400584071
[   56.898734][    C1]  post_alloc_hook+0x1f5/0x210
[   56.903514][    C1]  prep_new_page+0x1c/0x110
[   56.908017][    C1]  get_page_from_freelist+0x2ca9/0x2d20
[   56.913568][    C1]  __alloc_pages+0x1fa/0x610
[   56.918446][    C1]  alloc_slab_page+0x6e/0xf0
[   56.923034][    C1]  new_slab+0x98/0x3e0
[   56.927183][    C1]  ___slab_alloc+0x70f/0xb70
[   56.931871][    C1]  __slab_alloc+0x5e/0xa0
[   56.936208][    C1]  __kmem_cache_alloc_node+0x204/0x2d0
[   56.941930][    C1]  kmalloc_trace+0x29/0xb0
[   56.946434][    C1]  audit_log_d_path+0xc6/0x240
[   56.951218][    C1]  common_lsm_audit+0x330/0x1730
[   56.956169][    C1]  slow_avc_audit+0x1c4/0x240
[   56.960844][    C1]  avc_has_perm+0x1fb/0x250
[   56.965343][    C1]  selinux_file_open+0x47c/0x640
[   56.970304][    C1]  security_file_open+0x73/0xb0
[   56.975163][    C1] page last free stack trace:
[   56.980104][    C1]  free_unref_page_prepare+0x80c/0x820
[   56.985568][    C1]  free_unref_page+0x93/0x530
[   56.990598][    C1]  __free_pages+0x67/0x100
[   56.995024][    C1]  __free_slab+0xc7/0x1a0
[   56.999346][    C1]  __unfreeze_partials+0x15a/0x190
[   57.004456][    C1]  put_cpu_partial+0xa9/0x100
[   57.009136][    C1]  __slab_free+0x1c4/0x280
[   57.013555][    C1]  ___cache_free+0xbf/0xd0
[   57.017990][    C1]  qlist_free_all+0xc6/0x140
[   57.022711][    C1]  kasan_quarantine_reduce+0x14a/0x170
[   57.028189][    C1]  __kasan_slab_alloc+0x24/0x80
[   57.033050][    C1]  slab_post_alloc_hook+0x4f/0x2d0
[   57.038180][    C1]  kmem_cache_alloc+0x166/0x320
[   57.043062][    C1]  getname_flags+0xba/0x510
[   57.047576][    C1]  user_path_at_empty+0x2f/0x1c0
[   57.052546][    C1]  do_readlinkat+0xd9/0x490
[   57.057082][    C1] 
[   57.059414][    C1] Memory state around the buggy address:
[   57.065136][    C1]  ffff888117ba4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.073198][    C1]  ffff888117ba4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.081273][    C1] >ffff888117ba4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.089331][    C1]                    ^
[   57.093474][    C1]  ffff888117ba4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.101551][    C1]  ffff888117ba4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.109705][    C1] ==================================================================
[   57.117851][    C1] Disabling lock debugging due to kernel taint
[   57.125322][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[   57.137257][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   57.145692][    C1] CPU: 1 PID: 917 Comm: syz.0.158 Tainted: G    B              syzkaller #0
[   57.154416][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   57.164597][    C1] RIP: 0010:__queue_work+0x582/0xd50
[   57.169925][    C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e5 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e1 b8 03
[   57.189734][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[   57.196008][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811a281440
[   57.204028][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   57.212080][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[   57.220084][    C1] R10: dffffc0000000000 R11: ffffed1022f74939 R12: ffff888117ba49c8
[   57.228263][    C1] R13: ffff888115cc3c00 R14: 0000000000000000 R15: 000000007fffffff
[   57.236260][    C1] FS:  000055557c42f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   57.245213][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   57.251844][    C1] CR2: 000020000013d030 CR3: 0000000112a4c000 CR4: 00000000003506a0
[   57.259845][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   57.268012][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   57.276209][    C1] Call Trace:
[   57.279512][    C1]  <IRQ>
[   57.282381][    C1]  delayed_work_timer_fn+0x61/0x80
[   57.287567][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   57.293603][    C1]  call_timer_fn+0x46/0x2a0
[   57.298147][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   57.303987][    C1]  __run_timers+0x672/0x9b0
[   57.308532][    C1]  ? calc_index+0x200/0x200
[   57.313078][    C1]  ? __kasan_check_read+0x11/0x20
[   57.318145][    C1]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[   57.323937][    C1]  run_timer_softirq+0x6a/0xf0
[   57.328740][    C1]  handle_softirqs+0x1d7/0x600
[   57.333623][    C1]  __irq_exit_rcu+0x52/0xf0
[   57.338155][    C1]  irq_exit_rcu+0x9/0x10
[   57.342424][    C1]  sysvec_call_function_single+0xa6/0xc0
[   57.348208][    C1]  </IRQ>
[   57.351159][    C1]  <TASK>
[   57.354113][    C1]  asm_sysvec_call_function_single+0x1b/0x20
[   57.360125][    C1] RIP: 0010:finish_task_switch+0x173/0x7c0
[   57.365962][    C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 99 8a 69 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 55 98 b3 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28
[   57.385594][    C1] RSP: 0018:ffffc9000b6cfa68 EFLAGS: 00000282
[   57.391761][    C1] RAX: 0000000080000001 RBX: ffff88811a281f88 RCX: 0000000000000000
[   57.399746][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000ffffffff
[   57.407762][    C1] RBP: ffffc9000b6cfab0 R08: ffff88811a87d12b R09: 1ffff1102350fa25
[   57.415752][    C1] R10: dffffc0000000000 R11: ffffed102350fa26 R12: ffff8881f6f37d80
[   57.423741][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88811a281440
[   57.431730][    C1]  ? finish_task_switch+0x16b/0x7c0
[   57.436958][    C1]  ? switch_mm_irqs_off+0x730/0x960
[   57.442186][    C1]  __schedule+0xbea/0x14b0
[   57.446713][    C1]  ? release_firmware_map_entry+0x190/0x190
[   57.452770][    C1]  ? hrtimer_start_range_ns+0xa79/0xb90
[   57.458455][    C1]  schedule+0xbd/0x170
[   57.462723][    C1]  do_nanosleep+0x15a/0x540
[   57.467256][    C1]  ? usleep_range_state+0x130/0x130
[   57.472478][    C1]  ? memset+0x35/0x40
[   57.476473][    C1]  ? hrtimer_init_sleeper+0x10c/0x370
[   57.481865][    C1]  hrtimer_nanosleep+0x151/0x340
[   57.486825][    C1]  ? __kasan_check_write+0x14/0x20
[   57.492049][    C1]  ? __cfi_hrtimer_nanosleep+0x10/0x10
[   57.497533][    C1]  ? __cfi_hrtimer_wakeup+0x10/0x10
[   57.502754][    C1]  ? get_timespec64+0x116/0x1b0
[   57.507634][    C1]  ? __cfi_get_timespec64+0x10/0x10
[   57.512847][    C1]  ? __schedule+0xbea/0x14b0
[   57.517457][    C1]  common_nsleep+0x8f/0xb0
[   57.521982][    C1]  __se_sys_clock_nanosleep+0x31c/0x3b0
[   57.527551][    C1]  ? __x64_sys_clock_nanosleep+0xb0/0xb0
[   57.533207][    C1]  ? __kasan_check_write+0x14/0x20
[   57.538337][    C1]  __x64_sys_clock_nanosleep+0x9b/0xb0
[   57.543898][    C1]  x64_sys_call+0x186/0x9a0
[   57.548417][    C1]  do_syscall_64+0x4c/0xa0
[   57.552852][    C1]  ? clear_bhb_loop+0x30/0x80
[   57.557602][    C1]  ? clear_bhb_loop+0x30/0x80
[   57.562320][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   57.568425][    C1] RIP: 0033:0x7f0a6db5e90e
[   57.572861][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   57.592589][    C1] RSP: 002b:00007ffc2ffb2018 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[   57.601034][    C1] RAX: ffffffffffffffda RBX: 000055557c42f500 RCX: 00007f0a6db5e90e
[   57.609151][    C1] RDX: 00007ffc2ffb2070 RSI: 0000000000000000 RDI: 0000000000000000
[   57.617171][    C1] RBP: 00007f0a6de27da0 R08: 0000000000000000 R09: 0000000000000000
[   57.625169][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000db02
[   57.633156][    C1] R13: 00007f0a6de2627c R14: 000000000000d9b4 R15: 00007f0a6de26270
[   57.641242][    C1]  </TASK>
[   57.644300][    C1] Modules linked in:
[   57.648224][    C1] ---[ end trace 0000000000000000 ]---
[   57.653870][    C1] RIP: 0010:__queue_work+0x582/0xd50
[   57.659194][    C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e5 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e1 b8 03
[   57.679085][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[   57.685183][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811a281440
[   57.693343][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   57.701337][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[   57.709324][    C1] R10: dffffc0000000000 R11: ffffed1022f74939 R12: ffff888117ba49c8
[   57.717401][    C1] R13: ffff888115cc3c00 R14: 0000000000000000 R15: 000000007fffffff
[   57.725389][    C1] FS:  000055557c42f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   57.734335][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   57.740933][    C1] CR2: 000020000013d030 CR3: 0000000112a4c000 CR4: 00000000003506a0
[   57.748924][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   57.756912][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   57.765164][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[   57.772919][    C1] Kernel Offset: disabled
[   57.777290][    C1] Rebooting in 86400 seconds..