last executing test programs: 10.556907268s ago: executing program 0 (id=80): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) setresuid(0x0, 0x0, 0xee00) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)="4da1f7bc0dc2d5", 0x7}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) 8.422202169s ago: executing program 2 (id=88): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 7.169177699s ago: executing program 2 (id=90): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRES64=0x0], 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="cd", 0x1}], 0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000900)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@nouser_xattr}, {@jqfmt_vfsold}, {@errors_remount}]}, 0xff, 0x444, &(0x7f00000009c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) r2 = dup(r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="0100000000000000000001000000000000000c41000000030014"], 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24004000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x2, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'bridge_slave_1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 6.869034946s ago: executing program 1 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 6.740428579s ago: executing program 1 (id=95): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 6.457697846s ago: executing program 2 (id=96): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b000100000005001900020000000800", @ANYRES32=r2], 0x84}}, 0x200088c2) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(r0, &(0x7f0000001140)) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzsz7ttAkEABNC5n33WSXYtTuiEJghpgEuICemBTqiDQhYtdwEVAMF7yY5WsyNteKsm2fU1dDUmU/KfZMhy95Pkt51O+2kzjGs/3bgc+U7y9Tw2z7n+1Y1SknPT57Y+qe3VsUt5hHJot5eXfhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPtQ9AAD//1WmC7M=") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0xfffffff9, 0x0, 0x10}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000006dc0)) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00000010000d042bbd70000200000000000000", @ANYRES32=r5, @ANYBLOB="00020600a08601006c00128009000100766c616e000000005c000280580003800c000100000000000a0000000c0001000008000002"], 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40804) sendto$packet(r4, &(0x7f0000000600)="00445552e82f647e2b3a64c0491b", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$IORING_OFF_SQES(0x0, 0xf7, 0x4, 0x8a656979b230adb5, 0xffffffffffffffff, 0x10000000) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x58000, 0x6, 0x1, 0x8, 0x0, [{0x1, 0xbb, 0xb, '\x00', 0x81}, {0x0, 0x4, 0x3, '\x00', 0x7}, {0x9, 0xc, 0x1, '\x00', 0x9d}, {0xff, 0x0, 0x9, '\x00', 0xb}, {0x78, 0x2e, 0x6, '\x00', 0x7f}, {0x3, 0x10, 0x0, '\x00', 0x6}, {0x7, 0x2, 0xbe, '\x00', 0xd2}, {0x0, 0x5, 0x3, '\x00', 0x4}, {0x45, 0xcf, 0x6, '\x00', 0x9}, {0x1, 0x7, 0x10, '\x00', 0x6}, {0x4, 0x80, 0x6, '\x00', 0xe3}, {0x68, 0xb9, 0x4, '\x00', 0xd}, {0x7, 0xa8, 0xdf, '\x00', 0x4}, {0x3, 0x3, 0x0, '\x00', 0x20}, {0xa6, 0xb3, 0x8, '\x00', 0x3}, {0x3, 0x4, 0x2, '\x00', 0x5}, {0x9, 0x3, 0x7f, '\x00', 0x3}, {0x40, 0x3, 0x4, '\x00', 0x1}, {0x3, 0x0, 0x29, '\x00', 0x9}, {0x6, 0x15, 0x4, '\x00', 0x6}, {0x9e, 0x5d, 0x29, '\x00', 0x7f}, {0x0, 0x1, 0x6, '\x00', 0x6}, {0xff, 0x8, 0x9, '\x00', 0x6}, {0x2c, 0xad, 0x5, '\x00', 0x7}]}}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x59c, &(0x7f0000005b00)="$eJzs3U9sm2cZAPDHdpq2WbauZZXWcUihE90fNclmKV3gQDnAgaFdhoSGxiFq3aTEaUKSiSVc0hsnhgSITRPTKg5IIJFIHIDDxEDigESREAgRoU0CceDPBojswCgQ9NmfEzf+khol8Tfi309y/X6v3+R5X7vPa/t9P8cBdK3TyT+FiP6IuBERx+qHtzY4Xb/6dnllYrm8MlGI9fUn/1qotbteXploNG383B0RsRQR90bEjy5HXDzUGnduYXFyrFqtzKbHQ/NTM0NzC4vnrkyNjVfGK1fL5cdGR0ZGz48M/w+jKex46ydm3jjx64knxl8e+NdT56e+/pdCXKiNO7aMYy9l9ainEHFhP4LloJSMJyL62mx/svLcK/vcJdr05ROrQ8ljd09E3F/L/2NRqj2aER986em/H4sP3NzuZ2+svvTHTvYVANg764nDO98MHEzFSN77F4qDEVEvF4uDg/X38PdEX7E6PTf/8OXpZ65eqq8R3B2HipevVCvD6VrB3XGokBw/UitvHj+65bgcEccj4vOlo7XjwYvT1UsdnemAhv6I17/zmYu9d2zJ/z+U6vkPHFxJ/v/yx9/7QVJ+q5R3b4BOSvL/m29NPR7yH7rO7fP/SMf7BHSG53/oXvIfDqRr7TRqzf+dz50FDg7P/9C95D90L/kP3Uv+Q/dqzv+lvDsDdFRz/nv6h+50fODV1ULyGuD9R2uXRG96W8af7QEOkPU7fcofupXX/tC9ejaLR/PsB9B53uMDtzv7f9tPA8/sfV+Azijm3QEgN2dPZe3/Pf9CeG8AB571f+hePXl3AMiN1/iA9X/oPhvr/5/Mtx9A5/Vv8/1fdzZ9d9dwRNwVET8tHTrc+K4v4P9Xf8TrL9747tMRxT8V0tf/yVww9sZrP2xu11v4R22LoDciPvvik199dmx+fvaRpP5vG/Xzz6f1j+Y1GqAdjTxt5DHQveYWFifHqtXKrILClkLEO6IbCvtYaMwD18srE41Lp+ae5x6KePND9ZMQkrjL6aV+a0+6NnmktkfZt1a45VyFwh7sXX7hXMTStYi4N2v8hfT7zus7H31rpZb470qvk8updP0kaXOyzfilu3YX/76m+ANN8d/dZvzVj7fZcJ8c/1a+8V/+zca2V0/W/d+zy4/EnrjN7Y9/Y1e/ftd+/7t8498/kG/8r0xHvJrMP8NZ+VdM0nJj57N5/vnSF+trJb27jP+5s5vz33LL/FfcmP9K28x/p9uM85OnKp/Kqi/9LOLNaxH3ZcZvxDtSi9W3VmyJf6Zp/nlgh/h//tgvJrPqL7wWsX494mxELB9rjd8ca2h+amZobmHx3JWpsfHKeOVqufzY6MjI6PmR4aHaGvVQY6W61RM3T344q/7M1+rj74udx7/d/b++w5ibLb7w6f73ZNT//FQ9/gNnsh//E2n8+v3f0xL/vel18v/k3+m5vEmbtyPicFr/YER8/5XjD2X166M36/EvbTP+4i3xW8f/cJvjj9/+55ms6mc/0u4vAAD20vZLA3n3DAAA2Gud2GnMe4xAtr613mjeBi4sNe0rLG3uKyT1b6f7C6WliH+mewxJ/YPpLllSztxoAN5xTi6+71d59wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg280tLE6OVauV2bm8ewJ02n8DAAD///lW/sA=") 6.455158535s ago: executing program 0 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180), 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x400, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x0, 0x5, 0x5, 0x2, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x8, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x10004, 0xb, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0xff7f, 0xfff, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x4, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x6c, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83d, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x83, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x100, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x4a, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0x5, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x401, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x1, 0x8, 0x3c0, 0x9, 0x0, 0x6d3, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0xfff, 0xf2, 0x0, 0x3, 0xffff, 0x0, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe01000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x40, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x6f3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x2, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9a1, 0x5, 0x1, 0x4, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 5.627308445s ago: executing program 3 (id=98): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r3, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b0001000000050019000200000008002200", @ANYRES32=r3], 0x84}}, 0x200088c2) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(r1, &(0x7f0000001140)) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzsz7ttAkEABNC5n33WSXYtTuiEJghpgEuICemBTqiDQhYtdwEVAMF7yY5WsyNteKsm2fU1dDUmU/KfZMhy95Pkt51O+2kzjGs/3bgc+U7y9Tw2z7n+1Y1SknPT57Y+qe3VsUt5hHJot5eXfhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPtQ9AAD//1WmC7M=") r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000013c0)) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000001100)={&(0x7f0000001080)='\x00', &(0x7f00000010c0)=']^^%\xa8\x00', 0xffffffffffffffff}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001380)={0x0, &(0x7f00000016c0)}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0xfffffff9, 0x0, 0x10}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r9, 0x80585414, &(0x7f0000006dc0)) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00000010000d042bbd70000200000000000000", @ANYRES32=r8, @ANYBLOB="00020600a08601006c00128009000100766c616e000000005c000280580003800c000100000000000a0000000c0001000008000002"], 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40804) sendto$packet(r7, &(0x7f0000000600)="00445552e82f647e2b3a64c049", 0xd, 0x0, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$IORING_OFF_SQES(0x0, 0xf7, 0x4, 0x8a656979b230adb5, 0xffffffffffffffff, 0x10000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f00000011c0)="f3440f092664f0fe47bb66b8cd000f00d0c422d59a6e00c744240058000000c744240200000000ff1c2466ba430066b8009866ef360f1b7506f30f1ef9f30f09440f21b4", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x58000, 0x6, 0x1, 0x8, 0x0, [{0x1, 0xbb, 0xb, '\x00', 0x81}, {0x0, 0x4, 0x3, '\x00', 0x7}, {0x9, 0xc, 0x1, '\x00', 0x9d}, {0xff, 0x0, 0x9, '\x00', 0xb}, {0x78, 0x2e, 0x6, '\x00', 0x7f}, {0x3, 0x10, 0x0, '\x00', 0x6}, {0x7, 0x2, 0xbe, '\x00', 0xd2}, {0x0, 0x5, 0x3, '\x00', 0x4}, {0x45, 0xcf, 0x6, '\x00', 0x9}, {0x1, 0x7, 0x10, '\x00', 0x6}, {0x4, 0x80, 0x6, '\x00', 0xe3}, {0x68, 0xb9, 0x4, '\x00', 0xd}, {0x7, 0xa8, 0xdf, '\x00', 0x4}, {0x3, 0x3, 0x0, '\x00', 0x20}, {0xa6, 0xb3, 0x8, '\x00', 0x3}, {0x3, 0x4, 0x2, '\x00', 0x5}, {0x9, 0x3, 0x7f, '\x00', 0x3}, {0x40, 0x3, 0x4, '\x00', 0x1}, {0x3, 0x0, 0x29, '\x00', 0x9}, {0x6, 0x15, 0x4, '\x00', 0x6}, {0x9e, 0x5d, 0x29, '\x00', 0x7f}, {0x0, 0x1, 0x6, '\x00', 0x6}, {0xff, 0x8, 0x9, '\x00', 0x6}, {0x2c, 0xad, 0x5, '\x00', 0x7}]}}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x59c, &(0x7f0000005b00)="$eJzs3U9sm2cZAPDHdpq2WbauZZXWcUihE90fNclmKV3gQDnAgaFdhoSGxiFq3aTEaUKSiSVc0hsnhgSITRPTKg5IIJFIHIDDxEDigESREAgRoU0CceDPBojswCgQ9NmfEzf+khol8Tfi309y/X6v3+R5X7vPa/t9P8cBdK3TyT+FiP6IuBERx+qHtzY4Xb/6dnllYrm8MlGI9fUn/1qotbteXploNG383B0RsRQR90bEjy5HXDzUGnduYXFyrFqtzKbHQ/NTM0NzC4vnrkyNjVfGK1fL5cdGR0ZGz48M/w+jKex46ydm3jjx64knxl8e+NdT56e+/pdCXKiNO7aMYy9l9ainEHFhP4LloJSMJyL62mx/svLcK/vcJdr05ROrQ8ljd09E3F/L/2NRqj2aER986em/H4sP3NzuZ2+svvTHTvYVANg764nDO98MHEzFSN77F4qDEVEvF4uDg/X38PdEX7E6PTf/8OXpZ65eqq8R3B2HipevVCvD6VrB3XGokBw/UitvHj+65bgcEccj4vOlo7XjwYvT1UsdnemAhv6I17/zmYu9d2zJ/z+U6vkPHFxJ/v/yx9/7QVJ+q5R3b4BOSvL/m29NPR7yH7rO7fP/SMf7BHSG53/oXvIfDqRr7TRqzf+dz50FDg7P/9C95D90L/kP3Uv+Q/dqzv+lvDsDdFRz/nv6h+50fODV1ULyGuD9R2uXRG96W8af7QEOkPU7fcofupXX/tC9ejaLR/PsB9B53uMDtzv7f9tPA8/sfV+Azijm3QEgN2dPZe3/Pf9CeG8AB571f+hePXl3AMiN1/iA9X/oPhvr/5/Mtx9A5/Vv8/1fdzZ9d9dwRNwVET8tHTrc+K4v4P9Xf8TrL9747tMRxT8V0tf/yVww9sZrP2xu11v4R22LoDciPvvik199dmx+fvaRpP5vG/Xzz6f1j+Y1GqAdjTxt5DHQveYWFifHqtXKrILClkLEO6IbCvtYaMwD18srE41Lp+ae5x6KePND9ZMQkrjL6aV+a0+6NnmktkfZt1a45VyFwh7sXX7hXMTStYi4N2v8hfT7zus7H31rpZb470qvk8updP0kaXOyzfilu3YX/76m+ANN8d/dZvzVj7fZcJ8c/1a+8V/+zca2V0/W/d+zy4/EnrjN7Y9/Y1e/ftd+/7t8498/kG/8r0xHvJrMP8NZ+VdM0nJj57N5/vnSF+trJb27jP+5s5vz33LL/FfcmP9K28x/p9uM85OnKp/Kqi/9LOLNaxH3ZcZvxDtSi9W3VmyJf6Zp/nlgh/h//tgvJrPqL7wWsX494mxELB9rjd8ca2h+amZobmHx3JWpsfHKeOVqufzY6MjI6PmR4aHaGvVQY6W61RM3T344q/7M1+rj74udx7/d/b++w5ibLb7w6f73ZNT//FQ9/gNnsh//E2n8+v3f0xL/vel18v/k3+m5vEmbtyPicFr/YER8/5XjD2X166M36/EvbTP+4i3xW8f/cJvjj9/+55ms6mc/0u4vAAD20vZLA3n3DAAA2Gud2GnMe4xAtr613mjeBi4sNe0rLG3uKyT1b6f7C6WliH+mewxJ/YPpLllSztxoAN5xTi6+71d59wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg280tLE6OVauV2bm8ewJ02n8DAAD///lW/sA=") ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.618949646s ago: executing program 1 (id=99): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000020000040800000000000000030000000000000000000000020000000000000000000000000000020000000000000000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syslog(0x3, &(0x7f0000000780)=""/88, 0x58) 5.485960769s ago: executing program 4 (id=100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 5.399592301s ago: executing program 0 (id=101): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r0 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) write(0xffffffffffffffff, &(0x7f0000000200)="58000000140001feffff7f00000000001e000000ffffffff00"/88, 0x58) 5.378099552s ago: executing program 4 (id=102): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b00010000000500", @ANYRES32=r2], 0x84}}, 0x200088c2) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(r0, &(0x7f0000001140)) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzsz7ttAkEABNC5n33WSXYtTuiEJghpgEuICemBTqiDQhYtdwEVAMF7yY5WsyNteKsm2fU1dDUmU/KfZMhy95Pkt51O+2kzjGs/3bgc+U7y9Tw2z7n+1Y1SknPT57Y+qe3VsUt5hHJot5eXfhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPtQ9AAD//1WmC7M=") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0xfffffff9, 0x0, 0x10}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000006dc0)) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00000010000d042bbd70000200000000000000", @ANYRES32=r5, @ANYBLOB="00020600a08601006c00128009000100766c616e000000005c000280580003800c000100000000000a0000000c0001000008000002"], 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40804) sendto$packet(r4, &(0x7f0000000600)="00445552e82f647e2b3a64c0491b", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$IORING_OFF_SQES(0x0, 0xf7, 0x4, 0x8a656979b230adb5, 0xffffffffffffffff, 0x10000000) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x58000, 0x6, 0x1, 0x8, 0x0, [{0x1, 0xbb, 0xb, '\x00', 0x81}, {0x0, 0x4, 0x3, '\x00', 0x7}, {0x9, 0xc, 0x1, '\x00', 0x9d}, {0xff, 0x0, 0x9, '\x00', 0xb}, {0x78, 0x2e, 0x6, '\x00', 0x7f}, {0x3, 0x10, 0x0, '\x00', 0x6}, {0x7, 0x2, 0xbe, '\x00', 0xd2}, {0x0, 0x5, 0x3, '\x00', 0x4}, {0x45, 0xcf, 0x6, '\x00', 0x9}, {0x1, 0x7, 0x10, '\x00', 0x6}, {0x4, 0x80, 0x6, '\x00', 0xe3}, {0x68, 0xb9, 0x4, '\x00', 0xd}, {0x7, 0xa8, 0xdf, '\x00', 0x4}, {0x3, 0x3, 0x0, '\x00', 0x20}, {0xa6, 0xb3, 0x8, '\x00', 0x3}, {0x3, 0x4, 0x2, '\x00', 0x5}, {0x9, 0x3, 0x7f, '\x00', 0x3}, {0x40, 0x3, 0x4, '\x00', 0x1}, {0x3, 0x0, 0x29, '\x00', 0x9}, {0x6, 0x15, 0x4, '\x00', 0x6}, {0x9e, 0x5d, 0x29, '\x00', 0x7f}, {0x0, 0x1, 0x6, '\x00', 0x6}, {0xff, 0x8, 0x9, '\x00', 0x6}, {0x2c, 0xad, 0x5, '\x00', 0x7}]}}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x59c, &(0x7f0000005b00)="$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") 5.360417842s ago: executing program 0 (id=103): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syslog(0x3, &(0x7f0000000780)=""/88, 0x58) 4.60533118s ago: executing program 1 (id=104): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b00010000000500", @ANYRES32=r2], 0x84}}, 0x200088c2) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(r0, &(0x7f0000001140)) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzsz7ttAkEABNC5n33WSXYtTuiEJghpgEuICemBTqiDQhYtdwEVAMF7yY5WsyNteKsm2fU1dDUmU/KfZMhy95Pkt51O+2kzjGs/3bgc+U7y9Tw2z7n+1Y1SknPT57Y+qe3VsUt5hHJot5eXfhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPtQ9AAD//1WmC7M=") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0xfffffff9, 0x0, 0x10}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000006dc0)) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00000010000d042bbd70000200000000000000", @ANYRES32=r5, @ANYBLOB="00020600a08601006c00128009000100766c616e000000005c000280580003800c000100000000000a0000000c0001000008000002"], 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40804) sendto$packet(r4, &(0x7f0000000600)="00445552e82f647e2b3a64c0491b", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$IORING_OFF_SQES(0x0, 0xf7, 0x4, 0x8a656979b230adb5, 0xffffffffffffffff, 0x10000000) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x58000, 0x6, 0x1, 0x8, 0x0, [{0x1, 0xbb, 0xb, '\x00', 0x81}, {0x0, 0x4, 0x3, '\x00', 0x7}, {0x9, 0xc, 0x1, '\x00', 0x9d}, {0xff, 0x0, 0x9, '\x00', 0xb}, {0x78, 0x2e, 0x6, '\x00', 0x7f}, {0x3, 0x10, 0x0, '\x00', 0x6}, {0x7, 0x2, 0xbe, '\x00', 0xd2}, {0x0, 0x5, 0x3, '\x00', 0x4}, {0x45, 0xcf, 0x6, '\x00', 0x9}, {0x1, 0x7, 0x10, '\x00', 0x6}, {0x4, 0x80, 0x6, '\x00', 0xe3}, {0x68, 0xb9, 0x4, '\x00', 0xd}, {0x7, 0xa8, 0xdf, '\x00', 0x4}, {0x3, 0x3, 0x0, '\x00', 0x20}, {0xa6, 0xb3, 0x8, '\x00', 0x3}, {0x3, 0x4, 0x2, '\x00', 0x5}, {0x9, 0x3, 0x7f, '\x00', 0x3}, {0x40, 0x3, 0x4, '\x00', 0x1}, {0x3, 0x0, 0x29, '\x00', 0x9}, {0x6, 0x15, 0x4, '\x00', 0x6}, {0x9e, 0x5d, 0x29, '\x00', 0x7f}, {0x0, 0x1, 0x6, '\x00', 0x6}, {0xff, 0x8, 0x9, '\x00', 0x6}, {0x2c, 0xad, 0x5, '\x00', 0x7}]}}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x59c, &(0x7f0000005b00)="$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") 4.566086291s ago: executing program 2 (id=105): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000020000040800000000000000030000000000000000000000020000000000000000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syslog(0x3, &(0x7f0000000780)=""/88, 0x58) 4.560024551s ago: executing program 3 (id=106): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRES64=0x0], 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="cd", 0x1}], 0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cc, &(0x7f00000006c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000900)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@nouser_xattr}, {@jqfmt_vfsold}, {@errors_remount}]}, 0xff, 0x444, &(0x7f00000009c0)="$eJzs20tvG0UcAPD/rp30TUIpjz6AQEFEPJImLdADQoBA4oKEBIdyDElalZoGNUGiVQQBIa6oEnfEEYlPwAkuCDghceUDoEoVyqWFk9Hau4ntOM86ccC/n7TxjHfsmb93xp7dyQbQs4ayP0nEwYj4IyIG6tnmAkP1h9uL85N/L85PJlGtvvVXUit3a3F+sihavO5AnhlOI9LPkzjept7Zq9cuTVQq01fyfDl/fObi+xMXpi9MXx4/e/bM6bHnnxt/tiNxZm26dezjmRNHX3/n+huT566/+8t3SRF/SxwdMvTiGjsfr1Y7XF13HWpIJ+UuNoRNKeVjr682/geiFMsHbyBe+6yrjQO2VbVarR5YffdCFfgfS6LbLQC6o/ihz85/i22Hph67ws2X6ydAWdy3862+pxxpXqav5fy2k4Yi4tzCP19nW2zPdQgAgCY/ZPOfp9vN/9K4r6HcXfna0GBE3B0RhyPinog4EhH3RtTK3h8RDzS9e/+69Q+15FfOf9IbWw5uA7L53wv52lbz/K+Y/cVgKc8dqsXfl5y/WJk+lX8mw9G3J8uPrVHHj6/+/uVq+xrnf9mW1V/MBfN23CjvaX7N1MTcxJ3E3OjmpxHHyu3iT5ZWApKIOBoRx7ZYx8Unvz2x2r71419DB9aZqt9EPFE//gvREn8hS43OpR+Mzl691mZ9cnRvVKZPjRa9YqVff/vizdXqv6P4OyA7/vvb9v+l+AeTxvXa2c29/5519m+s/x9sek3W//uTt2vp4hvmo4m5uStjEf2XmjtF7fnxlfmifBb/8Mn24/9wLH8SxyMi68QPRsRDEfFw3vZHIuLRiDi5Row/v/LYe1uPf3tl8U9t6vgvJ/qj9Zn2idKln76PvQ2VDm4m/uz4n6mlhvNnNvL9t5F2bb43AwAAwH9TGhEHI0lHltJpOjJS/3/5I7E/rczMzj11fubDy1P1ewQGoy8trnQNNFwPHctP64v8eEv+dH7d+KvSvlp+ZHKmMtXt4KHHHVhl/Gf+LHW7dcC2c78W9C7jH3qX8Q+9y/iH3tVm/O/rRjuAndfu9/+TLrQD2Hkt49+yH/QQ5//Qu4x/6F3GP/Sk2X2x/k3yEhIrEpHuimY0JV7q6Bsm5d0SVzcS3f5mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Ix/AwAA//9YZeCK") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) dup(r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 4.436093984s ago: executing program 0 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180), 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x400, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x0, 0x5, 0x5, 0x2, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x8, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x10004, 0xb, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0xff7f, 0xfff, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x4, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x6c, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83d, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x83, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x100, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x4a, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0x5, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x401, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x1, 0x8, 0x3c0, 0x9, 0x0, 0x6d3, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0xfff, 0xf2, 0x0, 0x3, 0xffff, 0x0, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe01000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x40, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x6f3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x2, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9a1, 0x5, 0x1, 0x4, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 4.369480225s ago: executing program 4 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0xfffffff0, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, 0x0) 4.366934776s ago: executing program 3 (id=109): pwritev2(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)="94c0bb455a7fa228d31092cea7b91ab86e3621efe6522384d12731f03790dbcdf4", 0x21}], 0x1, 0x6, 0x1, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b", 0x0, 0x40}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.906373376s ago: executing program 0 (id=110): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3.870675017s ago: executing program 3 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000005540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=wit']) 3.77629909s ago: executing program 4 (id=112): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3.640277543s ago: executing program 2 (id=113): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.09002438s ago: executing program 4 (id=114): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.0895981s ago: executing program 3 (id=115): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.031573832s ago: executing program 2 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000005540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=wit']) 2.029078642s ago: executing program 1 (id=117): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syslog(0x3, &(0x7f0000000780)=""/88, 0x58) 89.552778ms ago: executing program 3 (id=118): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x3, 0x1}, 0x50) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 88.456318ms ago: executing program 4 (id=119): syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8801}, 0x1800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in=@private=0xa010102, 0x4e24, 0xc9, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x9}, {0x6, 0x8000, 0x4e3b5e3c, 0xb, 0x358, 0x3, 0x0, 0x60b}, {0x6, 0xffffffffffffffff, 0x7ffffffffffffffd, 0x6}, 0x2, 0x6e6bae, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x3505, 0x1, 0x2, 0x8, 0xa, 0x2, 0xc58}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) madvise(0x0, 0x0, 0x11) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x6}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 0s ago: executing program 1 (id=120): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="916f0600c06a010064001280110001006272696467655f736c617665000000004c00058005001e00000000000500210000000000050009000000000005001b0001000000050019000200000008002200", @ANYRES32=r2], 0x84}}, 0x200088c2) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_gettime(r0, &(0x7f0000001140)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzsz7ttAkEABNC5n33WSXYtTuiEJghpgEuICemBTqiDQhYtdwEVAMF7yY5WsyNteKsm2fU1dDUmU/KfZMhy95Pkt51O+2kzjGs/3bgc+U7y9Tw2z7n+1Y1SknPT57Y+qe3VsUt5hHJot5eXfhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPtQ9AAD//1WmC7M=") r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000013c0)) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, &(0x7f0000001100)={&(0x7f0000001080)='\x00', &(0x7f00000010c0)=']^^%\xa8\x00', 0xffffffffffffffff}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001380)={0x0, &(0x7f00000016c0)}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0xfffffff9, 0x0, 0x10}}) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00000010000d042bbd70000200000000000000", @ANYRES32=r7, @ANYBLOB="00020600a08601006c00128009000100766c616e000000005c000280580003800c000100000000000a0000000c0001000008000002"], 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40804) sendto$packet(r6, &(0x7f0000000600)="00445552e82f647e2b3a64c0491b", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$IORING_OFF_SQES(0x0, 0xf7, 0x4, 0x8a656979b230adb5, 0xffffffffffffffff, 0x10000000) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x58000, 0x6, 0x1, 0x8, 0x0, [{0x1, 0xbb, 0xb, '\x00', 0x81}, {0x0, 0x4, 0x3, '\x00', 0x7}, {0x9, 0xc, 0x1, '\x00', 0x9d}, {0xff, 0x0, 0x9, '\x00', 0xb}, {0x78, 0x2e, 0x6, '\x00', 0x7f}, {0x3, 0x10, 0x0, '\x00', 0x6}, {0x7, 0x2, 0xbe, '\x00', 0xd2}, {0x0, 0x5, 0x3, '\x00', 0x4}, {0x45, 0xcf, 0x6, '\x00', 0x9}, {0x1, 0x7, 0x10, '\x00', 0x6}, {0x4, 0x80, 0x6, '\x00', 0xe3}, {0x68, 0xb9, 0x4, '\x00', 0xd}, {0x7, 0xa8, 0xdf, '\x00', 0x4}, {0x3, 0x3, 0x0, '\x00', 0x20}, {0xa6, 0xb3, 0x8, '\x00', 0x3}, {0x3, 0x4, 0x2, '\x00', 0x5}, {0x9, 0x3, 0x7f, '\x00', 0x3}, {0x40, 0x3, 0x4, '\x00', 0x1}, {0x3, 0x0, 0x29, '\x00', 0x9}, {0x6, 0x15, 0x4, '\x00', 0x6}, {0x9e, 0x5d, 0x29, '\x00', 0x7f}, {0x0, 0x1, 0x6, '\x00', 0x6}, {0xff, 0x8, 0x9, '\x00', 0x6}, {0x2c, 0xad, 0x5, '\x00', 0x7}]}}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x59c, &(0x7f0000005b00)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 21.578502][ T30] audit: type=1400 audit(1786450977.347:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.579557][ T277] cgroup: Unknown subsys name 'net' [ 21.601267][ T30] audit: type=1400 audit(1786450977.347:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.628614][ T30] audit: type=1400 audit(1786450977.377:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.628791][ T277] cgroup: Unknown subsys name 'devices' [ 21.746349][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.751954][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.888913][ T30] audit: type=1400 audit(1786450977.657:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.912200][ T30] audit: type=1400 audit(1786450977.657:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.923178][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.937031][ T30] audit: type=1400 audit(1786450977.657:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.968575][ T30] audit: type=1400 audit(1786450977.717:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.982390][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.994146][ T30] audit: type=1400 audit(1786450977.717:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.028308][ T30] audit: type=1400 audit(1786450977.747:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.053806][ T30] audit: type=1400 audit(1786450977.747:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.788566][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.795677][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.803116][ T285] device bridge_slave_0 entered promiscuous mode [ 22.811097][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.818277][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.825589][ T285] device bridge_slave_1 entered promiscuous mode [ 22.895236][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.902291][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.909843][ T286] device bridge_slave_0 entered promiscuous mode [ 22.919155][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.926371][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.933857][ T286] device bridge_slave_1 entered promiscuous mode [ 22.957198][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.964231][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.971682][ T290] device bridge_slave_0 entered promiscuous mode [ 22.978762][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.985845][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.993274][ T290] device bridge_slave_1 entered promiscuous mode [ 23.027871][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.035029][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.042461][ T288] device bridge_slave_0 entered promiscuous mode [ 23.065134][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.072305][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.079943][ T288] device bridge_slave_1 entered promiscuous mode [ 23.103349][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.110423][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.117910][ T291] device bridge_slave_0 entered promiscuous mode [ 23.127360][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.134395][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.141811][ T291] device bridge_slave_1 entered promiscuous mode [ 23.259077][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.266150][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.273477][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.280549][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.299124][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.306192][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.313476][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.320529][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.348761][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.355832][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.363090][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.370223][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.397726][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.404800][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.412083][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.419149][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.428795][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.435856][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.443086][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.450106][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.473233][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.480584][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.488087][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.495596][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.502823][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.510049][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.517371][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.524669][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.531798][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.539057][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.546212][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.557569][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.577404][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.584942][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.593066][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.600102][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.616104][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.624223][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.631306][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.639107][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.646654][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.653989][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.662205][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.669263][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.676661][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.685041][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.692070][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.699618][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.707769][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.714809][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.726320][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.734421][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.741477][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.748965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.757257][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.764358][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.783685][ T290] device veth0_vlan entered promiscuous mode [ 23.795315][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.803312][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.811906][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.820697][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.828421][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.836034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.844008][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.852101][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.860568][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.867872][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.875303][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.899773][ T291] device veth0_vlan entered promiscuous mode [ 23.906142][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.914214][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.921834][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.929449][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.937659][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.945748][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.953690][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.961672][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.970261][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.978472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.986906][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.998390][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.006773][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.014820][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.022815][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.042138][ T291] device veth1_macvtap entered promiscuous mode [ 24.056445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.064773][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.073166][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.081386][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.088613][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.096095][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.104368][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.112660][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.119705][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.127171][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.135590][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.143769][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.152077][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.160329][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.168475][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.176585][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.184387][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.192950][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.200504][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.209168][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.217418][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.237287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.245735][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.254024][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.262541][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.271082][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.279583][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.288835][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.296824][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.306210][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.314311][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.321941][ T286] device veth0_vlan entered promiscuous mode [ 24.329835][ T285] device veth0_vlan entered promiscuous mode [ 24.342122][ T290] device veth1_macvtap entered promiscuous mode [ 24.349229][ T291] request_module fs-gadgetfs succeeded, but still no fs? [ 24.356074][ T286] device veth1_macvtap entered promiscuous mode [ 24.368607][ T288] device veth0_vlan entered promiscuous mode [ 24.375669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.384209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.392628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.400617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.408171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.415728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.426236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.434379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.451567][ T288] device veth1_macvtap entered promiscuous mode [ 24.460871][ T309] ======================================================= [ 24.460871][ T309] WARNING: The mand mount option has been deprecated and [ 24.460871][ T309] and is ignored by this kernel. Remove the mand [ 24.460871][ T309] option from the mount to silence this warning. [ 24.460871][ T309] ======================================================= [ 24.465520][ T285] device veth1_macvtap entered promiscuous mode [ 24.505257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.513640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.521335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.530368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.603472][ T312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.620037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.632429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.633532][ T315] loop0: detected capacity change from 0 to 1024 [ 24.641756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.656396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.665154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.674482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.683583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.692644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.701781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.711366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.721006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.739603][ T315] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 24.744802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.797073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.866094][ T315] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 24.875072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.622583][ T329] loop3: detected capacity change from 0 to 1024 [ 25.804223][ T329] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 25.814894][ T329] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 25.838108][ T329] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.961554][ T329] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,min_batch_time=0x0000000000000009,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 26.009373][ T329] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.215242][ T351] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz.0.1: corrupted in-inode xattr [ 26.294587][ T345] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 26.370834][ T345] EXT4-fs (loop3): Remounting filesystem read-only [ 26.424617][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.582354][ T356] loop0: detected capacity change from 0 to 1024 [ 26.654646][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.655328][ T356] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 26.673655][ T356] EXT4-fs (loop0): group descriptors corrupted! [ 26.759766][ T354] syz.0.11 (354) used greatest stack depth: 21928 bytes left [ 26.893331][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.893401][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.893438][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.893644][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.893701][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.128740][ T364] loop0: detected capacity change from 0 to 512 [ 28.708282][ T39] usb 5-1: config 0 descriptor?? [ 28.715362][ T364] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 28.875740][ T367] loop1: detected capacity change from 0 to 4096 [ 28.890274][ T364] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz.0.13: corrupted in-inode xattr [ 28.902774][ T364] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.13: couldn't read orphan inode 15 (err -117) [ 28.915785][ T364] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 28.931793][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 28.931806][ T30] audit: type=1400 audit(1786450984.697:122): avc: denied { create } for pid=370 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.995468][ T6] usb 4-1: device descriptor read/all, error -71 [ 29.006974][ T30] audit: type=1400 audit(1786450984.747:123): avc: denied { ioctl } for pid=370 comm="syz.2.16" path="socket:[15255]" dev="sockfs" ino=15255 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.033674][ T30] audit: type=1400 audit(1786450984.777:124): avc: denied { ioctl } for pid=359 comm="syz.0.13" path="/dev/input/event2" dev="devtmpfs" ino=270 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.059719][ T30] audit: type=1400 audit(1786450984.777:125): avc: denied { create } for pid=359 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.100440][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 29.106981][ T30] audit: type=1400 audit(1786450984.847:126): avc: denied { prog_run } for pid=359 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.114750][ T367] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 29.126140][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 29.147013][ T39] usb 5-1: USB disconnect, device number 2 [ 29.158006][ T30] audit: type=1400 audit(1786450984.867:127): avc: denied { append } for pid=376 comm="syz.4.18" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.187768][ T382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17'. [ 29.204763][ T30] audit: type=1400 audit(1786450984.867:128): avc: denied { write } for pid=359 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.225402][ T30] audit: type=1400 audit(1786450984.867:129): avc: denied { read } for pid=359 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.246164][ T30] audit: type=1400 audit(1786450984.867:130): avc: denied { read } for pid=376 comm="syz.4.18" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.269279][ T30] audit: type=1400 audit(1786450984.867:131): avc: denied { open } for pid=376 comm="syz.4.18" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.475992][ T367] overlayfs: empty lowerdir [ 30.621601][ T400] loop3: detected capacity change from 0 to 2048 [ 30.628441][ T398] overlayfs: missing 'lowerdir' [ 30.750681][ T400] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 30.761603][ T400] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.382111][ T400] fs-verity: sha512 using implementation "sha512-avx2" [ 31.593641][ T413] netlink: 204 bytes leftover after parsing attributes in process `syz.1.26'. [ 31.754141][ T400] syz.3.22 (400) used greatest stack depth: 21000 bytes left [ 32.187538][ T428] device syzkaller0 entered promiscuous mode [ 32.188157][ T430] loop2: detected capacity change from 0 to 1024 [ 32.198605][ T428] tipc: Started in network mode [ 32.205173][ T428] tipc: Node identity 268317db9aad, cluster identity 4711 [ 32.213483][ T430] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 32.224209][ T428] tipc: Enabled bearer , priority 0 [ 32.234763][ T427] tipc: Resetting bearer [ 32.241884][ T427] tipc: Disabling bearer [ 32.259505][ T430] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 32.260744][ T433] device syzkaller0 entered promiscuous mode [ 33.238270][ T446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36'. [ 33.272640][ T450] netlink: 100 bytes leftover after parsing attributes in process `syz.4.38'. [ 33.346664][ T429] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 33.389284][ T442] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 33.389751][ T445] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 33.398747][ T442] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2028: comm syz.0.35: mark_inode_dirty error [ 33.408556][ T445] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2030: comm syz.1.36: mark_inode_dirty error [ 33.431953][ T445] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 33.441345][ T445] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2030: comm syz.1.36: mark_inode_dirty error [ 33.468168][ T429] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2032: comm syz.2.30: mark_inode_dirty error [ 33.479976][ T442] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 33.489320][ T442] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2028: comm syz.0.35: mark_inode_dirty error [ 33.545603][ T450] loop4: detected capacity change from 0 to 8192 [ 33.580079][ T455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.38'. [ 33.594891][ T307] loop4: p1 p2 < > p4 < p5 > [ 33.608692][ T307] loop4: partition table partially beyond EOD, truncated [ 33.677097][ T307] loop4: p1 size 16777216 extends beyond EOD, truncated [ 33.717095][ T64] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 271). There's a risk of filesystem corruption in case of system crash. [ 33.800319][ T64] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 272). There's a risk of filesystem corruption in case of system crash. [ 33.803192][ T307] loop4: p2 start 16776960 is beyond EOD, truncated [ 33.875206][ T307] loop4: p5 size 16777216 extends beyond EOD, truncated [ 33.942317][ T64] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 272). There's a risk of filesystem corruption in case of system crash. [ 34.493145][ T64] JBD2: Spotted dirty metadata buffer (dev = sda1, blocknr = 271). There's a risk of filesystem corruption in case of system crash. [ 34.537232][ T450] loop4: p1 p2 < > p4 < p5 > [ 34.541956][ T450] loop4: partition table partially beyond EOD, truncated [ 34.574958][ T450] loop4: p1 size 16777216 extends beyond EOD, truncated [ 34.582804][ T450] loop4: p2 start 16776960 is beyond EOD, truncated [ 34.591487][ T450] loop4: p5 size 16777216 extends beyond EOD, truncated [ 34.643454][ T462] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #15: comm syz.2.30: corrupted in-inode xattr [ 34.659297][ T463] loop1: detected capacity change from 0 to 256 [ 34.737985][ T374] udevd[374]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 34.744987][ T373] udevd[373]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 34.759577][ T468] overlayfs: failed to resolve './file1': -2 [ 34.785308][ T463] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.800578][ T307] udevd[307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 34.845132][ T463] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.856322][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 34.856334][ T30] audit: type=1400 audit(1786450990.627:178): avc: denied { mount } for pid=461 comm="syz.1.41" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.862771][ T333] udevd[333]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 34.886329][ T321] udevd[321]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 35.202766][ T307] udevd[307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 35.340641][ T30] audit: type=1400 audit(1786450991.107:179): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 35.371976][ T473] netlink: 100 bytes leftover after parsing attributes in process `syz.2.44'. [ 35.418836][ T473] loop2: detected capacity change from 0 to 8192 [ 35.469937][ T307] loop2: p1 p2 < > p4 < p5 > [ 35.474742][ T307] loop2: partition table partially beyond EOD, truncated [ 35.482834][ T477] loop0: detected capacity change from 0 to 512 [ 35.487439][ T307] loop2: p1 size 16777216 extends beyond EOD, truncated [ 35.496525][ T307] loop2: p2 start 16776960 is beyond EOD, truncated [ 35.503582][ T307] loop2: p5 size 16777216 extends beyond EOD, truncated [ 35.512381][ T473] loop2: p1 p2 < > p4 < p5 > [ 35.516831][ T477] EXT4-fs (loop0): Unrecognized mount option "smackfsfloor=" or missing value [ 35.517165][ T473] loop2: partition table partially beyond EOD, truncated [ 35.534002][ T473] loop2: p1 size 16777216 extends beyond EOD, truncated [ 35.541737][ T473] loop2: p2 start 16776960 is beyond EOD, truncated [ 35.548905][ T473] loop2: p5 size 16777216 extends beyond EOD, truncated [ 35.589999][ T30] audit: type=1400 audit(1786450991.357:180): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.606394][ T477] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 35.627343][ T477] loop0: detected capacity change from 0 to 1024 [ 35.640125][ T30] audit: type=1400 audit(1786450991.377:181): avc: denied { mount } for pid=476 comm="syz.0.46" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.649764][ T481] device syzkaller0 entered promiscuous mode [ 35.666862][ T101] loop2: p1 p2 < > p4 < p5 > [ 35.678213][ T101] loop2: partition table partially beyond EOD, truncated [ 35.694506][ T30] audit: type=1400 audit(1786450991.377:182): avc: denied { read write } for pid=476 comm="syz.0.46" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.699922][ T101] loop2: p1 size 16777216 extends beyond EOD, [ 35.720400][ T477] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 35.756031][ T473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.44'. [ 35.769663][ T30] audit: type=1400 audit(1786450991.377:183): avc: denied { open } for pid=476 comm="syz.0.46" path="/9/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.770660][ T101] truncated [ 35.818330][ T30] audit: type=1400 audit(1786450991.377:184): avc: denied { ioctl } for pid=476 comm="syz.0.46" path="/9/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.827509][ T101] loop2: p2 start 16776960 is beyond EOD, truncated [ 35.851509][ T101] loop2: p5 size 16777216 extends beyond EOD, truncated [ 35.859651][ T489] loop3: detected capacity change from 0 to 1024 [ 35.861533][ T30] audit: type=1400 audit(1786450991.407:185): avc: denied { unlink } for pid=286 comm="syz-executor" name="#1b" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.888434][ T30] audit: type=1400 audit(1786450991.467:186): avc: denied { mount } for pid=483 comm="syz.4.48" name="/" dev="overlay" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.005259][ T489] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 36.044234][ T489] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 36.044234][ T489] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 36.044234][ T489] [ 36.128350][ T489] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 36.139532][ T30] audit: type=1400 audit(1786450991.487:187): avc: denied { create } for pid=483 comm="syz.4.48" name="#21" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.162011][ T489] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 36.171680][ T489] EXT4-fs error (device loop3): ext4_get_journal_inode:5178: comm syz.3.49: inode #1: comm syz.3.49: iget: illegal inode # [ 36.184815][ T489] EXT4-fs (loop3): no journal found [ 36.192372][ T307] udevd[307]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.205495][ T321] udevd[321]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.216604][ T333] udevd[333]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 36.292678][ T497] device syzkaller0 entered promiscuous mode [ 36.590255][ T307] udevd[307]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.844638][ T39] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 37.364725][ T368] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 37.384869][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.396134][ T519] loop2: detected capacity change from 0 to 512 [ 37.402991][ T39] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 37.447219][ T523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28561 sclass=netlink_route_socket pid=523 comm=syz.0.58 [ 37.447455][ T519] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,. Quota mode: writeback. [ 37.472610][ T519] ext4 filesystem being mounted at /8/file0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.484567][ T523] loop0: detected capacity change from 0 to 8192 [ 37.505159][ T523] loop0: p1 p2 < > p4 < p5 > [ 37.509867][ T523] loop0: partition table partially beyond EOD, truncated [ 37.517198][ T523] loop0: p1 size 16777216 extends beyond EOD, truncated [ 37.524655][ T523] loop0: p2 start 16776960 is beyond EOD, truncated [ 37.524764][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.532139][ T523] loop0: p5 size 16777216 extends beyond EOD, truncated [ 37.540554][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.555539][ T39] usb 2-1: SerialNumber: syz [ 37.580077][ T523] netlink: 60 bytes leftover after parsing attributes in process `syz.0.58'. [ 37.617809][ T39] rndis_host: probe of 2-1:1.0 failed with error -22 [ 37.653693][ T527] loop0: detected capacity change from 0 to 256 [ 37.660528][ T527] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.673024][ T527] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.854797][ T368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.984749][ T368] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 38.021816][ T531] device syzkaller0 entered promiscuous mode [ 38.046818][ T368] usb 5-1: config 1 has no interface number 0 [ 38.053976][ T368] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.055964][ T324] usb 2-1: USB disconnect, device number 2 [ 38.065087][ T368] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 38.081674][ T368] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 38.101056][ T533] netlink: 100 bytes leftover after parsing attributes in process `syz.3.63'. [ 38.133509][ T533] loop3: detected capacity change from 0 to 8192 [ 38.174978][ T533] loop3: p1 p2 < > p4 < p5 > [ 38.179755][ T533] loop3: partition table partially beyond EOD, truncated [ 38.187203][ T533] loop3: p1 size 16777216 extends beyond EOD, truncated [ 38.194956][ T533] loop3: p2 start 16776960 is beyond EOD, truncated [ 38.201967][ T533] loop3: p5 size 16777216 extends beyond EOD, truncated [ 38.244834][ T368] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.255212][ T368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.263430][ T368] usb 5-1: Product: syz [ 38.282717][ T533] netlink: 60 bytes leftover after parsing attributes in process `syz.3.63'. [ 38.292122][ T368] usb 5-1: Manufacturer: syz [ 38.316131][ T368] usb 5-1: SerialNumber: syz [ 38.345116][ T511] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 38.367281][ T368] usb 5-1: selecting invalid altsetting 1 [ 38.467129][ T533] loop3: detected capacity change from 0 to 512 [ 38.475254][ T532] EXT4-fs error: 350 callbacks suppressed [ 38.475269][ T532] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 38.483821][ T524] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 38.490558][ T532] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2035: comm syz.3.63: mark_inode_dirty error [ 38.499623][ T524] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2032: comm syz.2.59: mark_inode_dirty error [ 38.526389][ T504] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 38.534207][ T277] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 38.543478][ T504] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2030: comm syz.1.53: mark_inode_dirty error [ 38.547725][ T277] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2032: comm syz-executor: mark_inode_dirty error [ 38.557202][ T504] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 38.571696][ T541] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 38.587187][ T368] cdc_ncm 5-1:1.1: bind() failure [ 38.596127][ T368] usb 5-1: USB disconnect, device number 3 [ 38.984259][ T556] netlink: 100 bytes leftover after parsing attributes in process `syz.3.70'. [ 39.049445][ T558] device syzkaller0 entered promiscuous mode [ 39.054380][ T556] loop3: detected capacity change from 0 to 8192 [ 39.257464][ T561] netlink: 60 bytes leftover after parsing attributes in process `syz.3.70'. [ 39.277998][ T563] loop0: detected capacity change from 0 to 256 [ 39.285567][ T556] loop3: p1 p2 < > p4 < p5 > [ 39.288951][ T563] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.297545][ T556] loop3: partition table partially beyond EOD, truncated [ 39.309612][ T563] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.321217][ T556] loop3: p1 size 16777216 extends beyond EOD, truncated [ 39.329209][ T556] loop3: p2 start 16776960 is beyond EOD, truncated [ 39.339753][ T556] loop3: p5 size 16777216 extends beyond EOD, truncated [ 39.383322][ T565] loop0: detected capacity change from 0 to 256 [ 39.395341][ T567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28561 sclass=netlink_route_socket pid=567 comm=syz.3.74 [ 39.405025][ T565] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.454412][ T565] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.495773][ T567] loop3: p1 p2 < > p4 < p5 > [ 39.501230][ T567] loop3: partition table partially beyond EOD, truncated [ 39.504718][ T571] overlayfs: failed to resolve './file1': -2 [ 39.509176][ T567] loop3: p1 size 16777216 extends beyond EOD, truncated [ 39.522205][ T567] loop3: p2 start 16776960 is beyond EOD, truncated [ 39.529927][ T567] loop3: p5 size 16777216 extends beyond EOD, truncated [ 39.603346][ T567] netlink: 60 bytes leftover after parsing attributes in process `syz.3.74'. [ 40.254834][ T333] udevd[333]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 40.255157][ T321] udevd[321]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 40.280558][ T307] udevd[307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.890740][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 40.890754][ T30] audit: type=1400 audit(1786450996.657:200): avc: denied { create } for pid=587 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.839367][ T30] audit: type=1400 audit(1786450997.607:201): avc: denied { mount } for pid=605 comm="syz.2.85" name="/" dev="configfs" ino=13729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 41.846286][ T606] UDC core: couldn't find an available UDC or it's busy: -19 [ 41.863010][ T30] audit: type=1400 audit(1786450997.607:202): avc: denied { search } for pid=605 comm="syz.2.85" name="/" dev="configfs" ino=13729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.939581][ T610] Zero length message leads to an empty skb [ 42.013340][ T30] audit: type=1400 audit(1786450997.607:203): avc: denied { write } for pid=605 comm="syz.2.85" name="usb_gadget" dev="configfs" ino=13730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.758404][ T30] audit: type=1400 audit(1786450997.607:204): avc: denied { add_name } for pid=605 comm="syz.2.85" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.029375][ T30] audit: type=1400 audit(1786450997.607:205): avc: denied { create } for pid=605 comm="syz.2.85" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 43.694690][ T613] EXT4-fs error: 248 callbacks suppressed [ 43.694708][ T613] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 43.709840][ T613] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2030: comm syz.1.87: mark_inode_dirty error [ 43.722004][ T613] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 43.731467][ T613] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2030: comm syz.1.87: mark_inode_dirty error [ 43.742812][ T613] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 43.752117][ T613] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2030: comm syz.1.87: mark_inode_dirty error [ 43.763921][ T613] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 43.773276][ T613] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2030: comm syz.1.87: mark_inode_dirty error [ 43.784811][ T613] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 43.794143][ T613] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2030: comm syz.1.87: mark_inode_dirty error [ 44.191486][ T624] 9pnet: Insufficient options for proto=fd [ 44.383753][ T30] audit: type=1400 audit(1786450997.607:206): avc: denied { write } for pid=605 comm="syz.2.85" name="UDC" dev="configfs" ino=16919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 44.407942][ T629] set_capacity_and_notify: 1 callbacks suppressed [ 44.407957][ T629] loop2: detected capacity change from 0 to 256 [ 44.565009][ T30] audit: type=1400 audit(1786450997.607:207): avc: denied { open } for pid=605 comm="syz.2.85" path="/13/config/usb_gadget/g1/UDC" dev="configfs" ino=16919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 44.591027][ T629] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.616023][ T636] loop4: detected capacity change from 0 to 256 [ 44.644619][ T629] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.806881][ T30] audit: type=1400 audit(1786450998.677:208): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 44.815414][ T636] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.832420][ T30] audit: type=1400 audit(1786450999.907:209): avc: denied { read } for pid=619 comm="syz.3.89" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 44.862835][ T636] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.677800][ T646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.96'. [ 45.829292][ T650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.98'. [ 45.874219][ T646] loop2: detected capacity change from 0 to 8192 [ 45.921249][ T650] loop3: detected capacity change from 0 to 8192 [ 45.945171][ T307] loop2: p1 p2 < > p4 < p5 > [ 45.949888][ T307] loop2: partition table partially beyond EOD, truncated [ 45.960348][ T307] loop2: p1 size 16777216 extends beyond EOD, truncated [ 45.965966][ T658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.102'. [ 45.975361][ T333] loop3: p1 p2 < > p4 < p5 > [ 45.981327][ T307] loop2: p2 start 16776960 is beyond EOD, truncated [ 45.984375][ T333] loop3: partition table partially beyond EOD, truncated [ 45.990500][ T307] loop2: p5 size 16777216 extends beyond EOD, truncated [ 46.280371][ T333] loop3: p1 size 16777216 extends beyond EOD, truncated [ 46.298594][ T651] netlink: 60 bytes leftover after parsing attributes in process `syz.2.96'. [ 46.329119][ T333] loop3: p2 start 16776960 is beyond EOD, truncated [ 46.330358][ T662] netlink: 60 bytes leftover after parsing attributes in process `syz.3.98'. [ 46.341549][ T658] loop4: detected capacity change from 0 to 8192 [ 46.589548][ T333] loop3: p5 size 16777216 extends beyond EOD, truncated [ 46.597728][ T665] netlink: 60 bytes leftover after parsing attributes in process `syz.4.102'. [ 46.619551][ T646] loop2: p1 p2 < > p4 < p5 > [ 46.630431][ T646] loop2: partition table partially beyond EOD, truncated [ 46.638255][ T646] loop2: p1 size 16777216 extends beyond EOD, truncated [ 46.641853][ T650] loop3: p1 p2 < > p4 < p5 > [ 46.646006][ T646] loop2: p2 start 16776960 is beyond EOD, [ 46.649967][ T650] loop3: partition table partially beyond EOD, truncated [ 46.663821][ T650] loop3: p1 size 16777216 extends beyond EOD, truncated [ 46.671393][ T646] truncated [ 46.675346][ T646] loop2: p5 size 16777216 extends beyond EOD, truncated [ 46.679416][ T650] loop3: p2 start 16776960 is beyond EOD, truncated [ 46.682667][ T665] loop4: p1 p2 < > p4 < p5 > [ 46.694104][ T665] loop4: partition table partially beyond EOD, truncated [ 46.702274][ T665] loop4: p1 size 16777216 extends beyond EOD, truncated [ 46.713277][ T650] loop3: p5 size 16777216 extends beyond EOD, truncated [ 46.733570][ T665] loop4: p2 start 16776960 is beyond EOD, truncated [ 46.743350][ T667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.104'. [ 46.752781][ T665] loop4: p5 size 16777216 extends beyond EOD, truncated [ 46.770460][ T101] loop4: p1 p2 < > p4 < p5 > [ 46.775560][ T101] loop4: partition table partially beyond EOD, truncated [ 46.782716][ T101] loop4: p1 size 16777216 extends beyond EOD, truncated [ 46.804783][ T669] loop3: detected capacity change from 0 to 256 [ 46.804828][ T101] loop4: p2 start 16776960 is beyond EOD, truncated [ 46.812003][ T667] loop1: detected capacity change from 0 to 8192 [ 46.820356][ T101] loop4: p5 size 16777216 extends beyond EOD, truncated [ 46.834191][ T658] loop4: p1 p2 < > p4 < p5 > [ 46.839116][ T658] loop4: partition table partially beyond EOD, truncated [ 46.846542][ T658] loop4: p1 size 16777216 extends beyond EOD, truncated [ 46.854322][ T658] loop4: p2 start 16776960 is beyond EOD, truncated [ 46.861612][ T658] loop4: p5 size 16777216 extends beyond EOD, truncated [ 46.915171][ T669] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.929622][ T669] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.959932][ T667] loop1: p1 p2 < > p4 < p5 > [ 46.964730][ T667] loop1: partition table partially beyond EOD, truncated [ 46.972532][ T667] loop1: p1 size 16777216 extends beyond EOD, truncated [ 46.986552][ T667] loop1: p2 start 16776960 is beyond EOD, truncated [ 46.990375][ T675] device syzkaller0 entered promiscuous mode [ 46.993558][ T667] loop1: p5 size 16777216 extends beyond EOD, truncated [ 47.308793][ T307] udevd[307]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 47.325807][ T321] udevd[321]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 47.336917][ T333] udevd[333]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 47.349414][ T372] udevd[372]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 47.363174][ T681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.104'. [ 47.376758][ T374] udevd[374]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 47.386914][ T373] udevd[373]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 47.412686][ T685] udevd[685]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 47.436608][ T687] udevd[687]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 47.446824][ T675] tipc: Enabled bearer , priority 0 [ 47.465222][ T674] tipc: Resetting bearer [ 47.478768][ T674] tipc: Disabling bearer [ 47.554576][ T321] udevd[321]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.558593][ T667] loop1: detected capacity change from 0 to 512 [ 47.569741][ T307] udevd[307]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 47.601989][ T693] tmpfs: Bad value for 'huge' [ 48.756122][ T695] EXT4-fs error: 274 callbacks suppressed [ 48.756150][ T695] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 48.771375][ T695] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2038: comm syz.4.112: mark_inode_dirty error [ 48.783726][ T697] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 48.793046][ T697] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2032: comm syz.2.113: mark_inode_dirty error [ 48.804472][ T697] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 48.813789][ T697] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2032: comm syz.2.113: mark_inode_dirty error [ 48.825372][ T697] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 48.835193][ T697] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2032: comm syz.2.113: mark_inode_dirty error [ 48.855214][ T697] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 48.864601][ T697] EXT4-fs error (device sda1): ext4_dirty_inode:6108: inode #2032: comm syz.2.113: mark_inode_dirty error [ 51.219813][ T320] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1144 with error 117 [ 51.266122][ T721] tmpfs: Bad value for 'huge' [ 51.334043][ T320] EXT4-fs (sda1): This should not happen!! Data will be lost [ 51.334043][ T320] SYZFAIL: SIGSEGV pc-offset:0xfffffffffffe9ba8 pc:0x7f15071c8988 addr:0x1 code=1 (errno 11: Resource temporarily unavailable) [ 51.494233][ T277] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 51.505019][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 51.505035][ T30] audit: type=1400 audit(1786451007.257:211): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14560]" dev="pipefs" ino=14560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 51.535961][ T277] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 51.562785][ T320] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 51.594576][ T320] EXT4-fs (sda1): This should not happen!! Data will be lost [ 51.594576][ T320] [ 51.612390][ T281] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 51.623024][ T281] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 51.633918][ T284] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 51.644781][ T284] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 51.650419][ T283] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 51.668658][ T280] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 51.671931][ T283] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 51.679285][ T280] EXT4-fs warning (device sda1): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 52.075217][ T45] device bridge_slave_1 left promiscuous mode [ 52.081349][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.088859][ T45] device bridge_slave_0 left promiscuous mode [ 52.095038][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.102653][ T45] device veth1_macvtap left promiscuous mode [ 52.108679][ T45] device veth0_vlan left promiscuous mode [ 53.215302][ T45] device bridge_slave_1 left promiscuous mode [ 53.221458][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.228901][ T45] device bridge_slave_0 left promiscuous mode [ 53.235177][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.242930][ T45] device bridge_slave_1 left promiscuous mode [ 53.249127][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.256595][ T45] device bridge_slave_0 left promiscuous mode [ 53.262705][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.270596][ T45] device bridge_slave_1 left promiscuous mode [ 53.276854][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.285194][ T45] device bridge_slave_0 left promiscuous mode [ 53.291288][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.299430][ T45] device veth1_macvtap left promiscuous mode [ 53.305586][ T45] device veth0_vlan left promiscuous mode [ 53.311843][ T45] device veth1_macvtap left promiscuous mode [ 53.317894][ T45] device veth0_vlan left promiscuous mode [ 53.323845][ T45] device veth1_macvtap left promiscuous mode [ 53.329859][ T45] device veth0_vlan left promiscuous mode