last executing test programs:

7.222347055s ago: executing program 3 (id=4):
r0 = syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000020532b2300400001020301090269000301074003080b0001010720090924010300060900400904010000010220000904010101010220000905010920"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="400a772000007721c025a83fdeb6c1ec1059b341e3ae0119e1a0b7d6802ae850adfd64c9a2ea4aa420581dae7d535021bd32104f5368c128e13388194592bb861d4f09414c1cd4693eba587382d9465a3eba6e29c1cf92f152896d4b7250e40b7df6942fb4f3439b7337004df278ecc6444dfe767c9fcfec16fd386351"], &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}, &(0x7f00000004c0)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x3, 0x2, 0x2, 0x6fe, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x6b, "5478b866281616562fed005a695268ae"}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x1, 0x0, 0x7, "bc4a9e97", "5a2f9f30"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x63, 0x80, 0x7, 0x5, 0x10, 0x1, 0xf}}}, &(0x7f0000001d00)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x43, "12b8a04f00c81ea73669c06369f62b2651984290f3bfd8e51a0ee7817efcafbbd9b9c059aa83418cafe5eb0be30c04df4d1558207fdb7b30c96c0044e1a078080ef9ad"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1e0, 0x80}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "ceec"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x13, 0x6}, &(0x7f0000000880)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "cd4f"}, &(0x7f0000000900)={0x40, 0x1a, 0x2}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000001c40)={0x40, 0x21, 0x1, 0xc6}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_pts(0xffffffffffffffff, 0x10000)
r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f00000003c0)={r2})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000001e40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000001e80)={0x30000014})
write(r5, &(0x7f0000001ec0), 0x11000)
write$P9_RREADDIR(r5, &(0x7f0000001f00)={0x8e, 0x29, 0x1, {0x6, [{{0x2, 0x1, 0x6}, 0x81, 0x81, 0xe, './proc/devices'}, {{0x2, 0x4, 0x6}, 0x9c9, 0x7, 0x7, './file2'}, {{0x2, 0x1, 0x6}, 0x8, 0x5, 0x7, './file1'}, {{0x30, 0x1, 0x4}, 0x40, 0x9, 0x7, './file1'}]}}, 0x8e)
vmsplice(r4, &(0x7f0000001fc0)=[{&(0x7f0000002000), 0x3528a9c0}], 0x1, 0x0)
r7 = dup(r3)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001c80)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001dc0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000001e00)={0x10000000000000cf, 0x0, [{}]})
finit_module(r7, 0x0, 0x3)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000980)='./file1\x00', 0x804800, &(0x7f00000009c0)=ANY=[], 0x10, 0x1218, &(0x7f0000000a00)="$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")
r11 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$bt_hci(r11, 0x0, 0x60, &(0x7f0000000240)=""/30, &(0x7f00000002c0)=0x44)
truncate(&(0x7f0000001cc0)='./file1\x00', 0xd)
r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
write$binfmt_script(r12, &(0x7f0000000080)={'#! ', './file1', [], 0xa, "6f37e150929edfc3fc65cdd89677f415d5e1a6d7169b4ba28d91c7c25cf40761a5a0572ed1eea03be065d381cef929cfb5bb54ef31cff98828e1c59374be08737176415030d90a61140b290c4050b4d99a6d95f72a4d9b58edcda59dc30e4629e1223bba74d41cc9723df738d0720c69eef6fd362c900ea4de54d64f5e80a6a8c2ef4a5df4767d02fb7292c910aa657cdecb24f9176234b7b172579d2d3e8d0988c053540665a984d9cc4d527f0a41cb44e0c188a345"}, 0xc1)
getuid()

7.195112266s ago: executing program 4 (id=5):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x1000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000000c0)='./dev/sda1\x00', 0x101e4c5, &(0x7f00000005c0)=ANY=[], 0x1, 0x3ac, &(0x7f00000005c0)="$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")
sched_setscheduler(r0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x400000000008d}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES32], 0x8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000980)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$msdos(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x10000, &(0x7f0000000e80)=ANY=[], 0x1, 0x1f5, &(0x7f0000001040)="$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")
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000e00)='./dev\x00', &(0x7f0000000e40)='devtmpfs\x00', 0x0, 0x0)

7.125783417s ago: executing program 2 (id=3):
prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8)
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r1, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x1000)
sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000e00)='./dev\x00', &(0x7f0000000e40)='devtmpfs\x00', 0x0, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000ec0)=@filename='./dev/sda1\x00', &(0x7f0000000f00)='./mnt\x00', &(0x7f0000000f40)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000f80)='./mnt\x00')
rename(&(0x7f0000000fc0)='./dev\x00', &(0x7f0000001000)='./mnt\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x80000001)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x1a1043, 0xc5)

5.466700927s ago: executing program 4 (id=6):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x60442, 0x0)
io_setup(0x2, &(0x7f0000000480)=<r1=>0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0x3, 0x1)
syz_clone3(&(0x7f0000000500)={0x23800000, &(0x7f0000000580)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}])
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000180)=0xa, 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000000)=0x7f, 0x4)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005a0001"], 0x1c}], 0x1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)={0x208004, 0x21fffc, 0xc, 0x4, 0xffffffff, 0xee})
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='proc\x00', 0x80, 0x0)
r7 = syz_open_procfs(r5, &(0x7f0000000300)='ns\x00')
readlinkat(r7, &(0x7f0000000340)='./mnt\x00', &(0x7f0000000380)=""/163, 0xa3)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xbd1979cc6aa052cc)

5.044513258s ago: executing program 2 (id=7):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001340), 0x20c00, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x4d)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000f00)={{<r4=>r0, &(0x7f0000000000)='\x00', 0x402b00, &(0x7f0000000040)={@_ha_fsid={[0xe, 0x6]}, {0x9, 0xffff, 0x10000, 0xffffffffffffffff}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000400)=0x7f}, 0xa, &(0x7f0000000dc0)=[{0x1, 0x5, &(0x7f0000000440)=']-}\\\x00', &(0x7f0000000480)="db90bae4e772e23fb9966de28876dd446556dac381511844a4374881fef6f04142c08ad0426140042ce809974a5ea1d92ca23c2b7c610da1760414290b1b800898019ff1d84599bd0281c73cc3a4612ebfd292066653b4e6604d3813c3cfd1e13968e790de235fa9f957eff73c048f4057b70da933ad7e79c48b730a3dcacb188d5843932239cbc50789a560049f2aceaf5683002d3bce02ec369275cf3b8f319c742d60692f468d3638e4e5c6a6d3e64670232b424ba201e3862810be7d2421", 0xc0, 0xa}, {0x2, 0x8000, &(0x7f0000000540)='GPL\x00', &(0x7f0000000580)="9f1bcfdb3c3e9314b7a084faf46b17334e493e723b1949504c2b278ebd4d7ea34a385ca0ae5afc3a8f4f8a6fae0b23db6c3a5fc7e8a5e913e5b813a421b922dd12fd4eb4adfba6098c881868d31478903f02e12afbcd1c7d8d56edf322417a4a89077878249a212fb9e21ada5a270226f0dc32777ff7424e60ae6d07d9f3c10a2dc7b7b2b4795f3a6f88eb01", 0x8c, 0x10}, {0x3, 0x0, &(0x7f0000000640)='{-:\x00', &(0x7f0000000680)="7d92a0b2791d0bcb11d55c2a47054fd12b3a22f25e5d001a996703f99bc5562612ea3a0c72e9de569317a1eb2086eee806551bb98f604fc4f8075b37b8a09a802d0f5865a354acf3336567a38772b6c01b4bb8b3428cfa97e444bbcb7cf66659", 0x60, 0x20}, {0x1, 0x48c7, &(0x7f0000000700)='GPL\x00', &(0x7f0000000740)="2cd2726bcfbbce110641b80a90b18de7cfac0d3f7197831a2c0f0611432b6dd971e645b908f62d0c0502d201526b846f68c36fabde996f66db3b261ac25c60977d60e9504ffd63d104478c46b6f5f9d10f86f397f6ef05cfe3034ded5288f516b964675891824b3f8b44b6770e6f020ac824d45d59b911ddc8682faa09be99105e20d88968d3c07c017456afd17058ad73254e1a1c8d66d7a7ef9ae57930909c7db4c569c554664c949028e248cb260bdc7adf24db0e3765906eb36b2dce2eacb5a45d1cbd02f0bfb0bd985cd81be6ca2e52b12f99d106f42fcb1ca23cb9cfd39a3a296c49", 0xe5, 0x8}, {0x0, 0x1, &(0x7f0000000840)='\x00', &(0x7f0000000880)="f91a87fb6f7c9a42be8e99d48e9351fe80cdb429a2e50de46cbd97588e2e26fc07ae89d62824204633332aeda2812b5050a6cb2bd6ec806a01ee2986c9b3fc614540544b10738d85cdbfb4ee973a9ce6ed0a267382bb70b65cd20db073bffe0986ac7181ec0e9e9be3e5f43f063c18a927adf5009ba100839b1f46ec7fc06596c3cfcb4797a10a3c1f88", 0x8a, 0x8}, {0x3, 0x1, &(0x7f0000000940)='\x00', &(0x7f0000000980)="f264c3", 0x3, 0x8}, {0x3, 0xfffffffe, &(0x7f00000009c0)='\x00', &(0x7f0000000a00)="d7ed3cb06aa63ed1d66a626c69f286a96935be6f2b9c5697fc39d9802cf9939181bc45f41995a236568dfc024f32da25b8fc362bd1a0a61555ac5ebd54b5d7da9eac1086979051b9ff72d7287ecd41f6a8c8637e640892e0202d71367bee84211422b1757ab3d7ed69d409445b746e3431b69fb4c5e7c79688dc982f8dc875f226678f5445089e0711c117e3892f0d6499d26d429530f2c79eaf8687247d6d2844230ff2e378e08576fd876acecb56e22e44787f2e8e100fc8647b129d9b856b8ff234b09ec032d537b30644c70fd9f58265fff475ee729cc5a2cc99032579a4e2f702595bc0e2d7c74e6c320483c5d6", 0xf0}, {0x3, 0x2, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="21ef6bcaab28c6642a2fc20ada8d4463553e45ce33b5e6ca168de170dc6cfc4fce3e9318293d791fff2ce3e23ec509f1b25945adc7da12a4aaad3cce72a7e04d4a071652b837784d04ef92d7ede552548f6416d5dafddce64a285420f4a4d81e7087ed3e8d9c6d224fd3989f05aa9a3ac5723e6e786a", 0x76, 0x8}, {0x3, 0x3, &(0x7f0000000bc0)='\x00', &(0x7f0000000c00)="62a57ed5e85d9c102d50d3d8a1af36e4a4174d86c77fbd3c61143dd90f1f2a0d4f9a1f0222663bfbc219b2a343e2f8ae39a09f6d77b237147a87d2a7a52b96bf989f8ca032e4cfb9957d94b5dcef10d9a16289f3c53111c81e082fb2f1d633b2f111b33f2688f33859d08e3cf542aeedfd3bd127a3bbdf98e3cb9c2852f94e41708c1b46a51a03086b60f5a7e25450735a2bca640b5e2864a941bd0534ca79b5955d25837b198b85a54900e59424caa17170d40611977f4909b64ca970c29db596fb366320d941dc211ec33948395e5922bc412a0597d62941cc15817c19cfb251ac95be127a4d42542ff718dbe3336a5c2854c49898", 0xf6, 0x12}, {0x1, 0x3, &(0x7f0000000d00)='#,.^\x00', &(0x7f0000000d40)="7c40cb5309766605c493a2e2a1ff4a3ac1d19bf1a788501d738f2c561bcf628342e4fbe2e6e669ca193c988f6dc11e9b31cf1a69a8d6f52024d2dabd7bf6229bb8451323d296aa9a8c4bc4e2e39ed1617799d7bd94b1", 0x56}]})
r5 = syz_open_procfs(0x0, &(0x7f0000000f80)='map_files\x00')
fchdir(r5)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000012c0), 0x129c00, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000001300)={0x1, 0x0, [{0x40000108}]})
syz_clone3(&(0x7f00000011c0)={0x120040800, &(0x7f0000000fc0)=<r9=>0xffffffffffffffff, &(0x7f0000001000), &(0x7f0000001040), {0x13}, &(0x7f0000001080)=""/37, 0x25, &(0x7f00000010c0)=""/169, &(0x7f0000001180)=[0xffffffffffffffff], 0x1}, 0x58)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001280)={r4, r5, 0x22, 0x0, @val=@iter={&(0x7f0000001240)=@task={0xffffffffffffffff, 0xffffffffffffffff, r9}, 0x10}}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000018000000000000000061180000000000007a0af8ff0000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.044325218s ago: executing program 4 (id=8):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000200), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xa)
mkdir(&(0x7f0000000240)='./file0\x00', 0x97)
mkdir(&(0x7f0000000280)='./file1\x00', 0x13b)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x4)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000500), 0x7f03)

5.032353388s ago: executing program 32 (id=8):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000200), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xa)
mkdir(&(0x7f0000000240)='./file0\x00', 0x97)
mkdir(&(0x7f0000000280)='./file1\x00', 0x13b)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x4)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000500), 0x7f03)

4.844853873s ago: executing program 2 (id=11):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000280)=0x8, 0x4)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x6)
sendmmsg$inet(r2, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
ioctl$KVM_CREATE_VM(r1, 0x4008ae06, 0x1c)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000000026})
socket(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000640), 0x591c01, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./bus\x00', 0x1218088, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x4a, 0x2e0, &(0x7f0000000d00)="$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")
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000340)={{r3}, 0x6, &(0x7f0000000300)=[0xb9, 0x7, 0xff00000000000000, 0x7, 0x8, 0x8], 0x100, 0x0, 0x1})
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r3)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001040))
r6 = gettid()
syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r4)
timer_create(0x0, &(0x7f00000010c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000001100)=<r7=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
ftruncate(0xffffffffffffffff, 0x200004)
r8 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2001000400, 0x40c00)
ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000400)={0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE_V2(r8, 0x80104592, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"})
timer_settime(r7, 0x1, &(0x7f0000000480)={{}, {0x77359400}}, 0x0)
pipe(&(0x7f0000001180))

4.741021065s ago: executing program 33 (id=11):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000280)=0x8, 0x4)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x6)
sendmmsg$inet(r2, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
ioctl$KVM_CREATE_VM(r1, 0x4008ae06, 0x1c)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000000026})
socket(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000640), 0x591c01, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./bus\x00', 0x1218088, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x4a, 0x2e0, &(0x7f0000000d00)="$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")
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000340)={{r3}, 0x6, &(0x7f0000000300)=[0xb9, 0x7, 0xff00000000000000, 0x7, 0x8, 0x8], 0x100, 0x0, 0x1})
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r3)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001040))
r6 = gettid()
syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r4)
timer_create(0x0, &(0x7f00000010c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000001100)=<r7=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
ftruncate(0xffffffffffffffff, 0x200004)
r8 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2001000400, 0x40c00)
ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000400)={0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE_V2(r8, 0x80104592, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"})
timer_settime(r7, 0x1, &(0x7f0000000480)={{}, {0x77359400}}, 0x0)
pipe(&(0x7f0000001180))

4.086886231s ago: executing program 1 (id=14):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000380)={[{@errors_remount}, {}]}, 0x4, 0x50a, &(0x7f0000000a00)="$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")
syz_mount_image$vfat(&(0x7f0000000f40), &(0x7f0000000f80)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f0000000fc0))
renameat2(0xffffffffffffff9c, &(0x7f0000001000)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0)
open(&(0x7f0000001080)='.\x00', 0x518282, 0x78e22799f4a46e8e)
close(r0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x200008, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000004c0)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=")
close(0xffffffffffffffff)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000880)='}#\x00\x14\xef\x10\x87\x9a\xc1\xb9G\xf8\xa3!/\xaf\"\x11\xce\xc7\xb9\xbf\x06\xf4\x8e.9\"\"\x9a\x89\xdf\xf2}\xf7|s\b8\xbf\xce?\xf4U\x9f\xf4\xe2\xe3p\xa4\xca\x9bfM\x8f\x10f\x19\x82\x88\x02\xe7<k\x81\x12\xa3Ga\xb0\x924NH\x14~\fOr\x8bA[\xc9E\x1e\xa9\xf1\x97\xa3q\x8a>\xf2\x1c\xe6\xcc\\\xbc\xc8\x8eD\x9f\xa6S&L\x94\xdb\x8eL\xb2\xe5G\xc1\xb2\x1a\xc8\x8e.\xfa\"\xfb\x0e\xc9V9Q\xb1Q\xb2\xe0\x1a\xa3\xf0\xfdS\xfc\xef\xd7*\x16\x19\x9c\xb1@\xca\xf8\x1f\xd5\xac#\x99\rN\xad\xd5\xebK\xef\x9a\x9a(\xaa\xc8\x82\xba\bW\xd7\xdf\x9bn\xe0np\xf0\xfa\xbfxC\xc4\x94\x7fQ\x93\xf3\b\x0f\xc3\x9c\x18J\x9fki\x1bN\xc3c\xf5\xc2\xd6\x135\xab\xb2\x14\xa8\x97\xf4\xb2\xe2\xa5UW\x93\x94\xdc\x83d\"Q\xe9!yG w\x8a\b\x85\xc9\xbc2\xe0\xacQ\xa0\xa4\v!\xce\xac\x9b-7\xdai3f\x80\xbf~\x1b\x9f\xba=\x180K\x9d#\xcf\xfb\xc8\tiyV\xc6\xa9\x10U\xf4rb~F\x9d\x8e\x04\xef\xda\x18V\r\xc0\x9cW\xe5\xc56\xb4r\xae\xadZ\x9d-\xd9P[\xbd\xf9(\xe9\x1f\xfft\x9557\x92\x7f]Ti\xe4\xcf\xaa\x98\x9d\xa2.\x98\x18\xb3\x0e\xeaV\xca\xceG\r\xaf\xc2y\x98\xec\f\x19\xdf>B\x10)\xce\x18\xa7,\xafv@\xc5\xa6c\xbe\xd0\xd6\x8e\x89\x03\x9b\xbb\x0f\r\x838\xf8(\x81', 0x100, &(0x7f0000000180)={@_ha_fsid={[0x4, 0x5]}, {0x4, 0xc000, 0xaf}}, 0xffff7fff, 0x0, &(0x7f0000000200)=0x1})
pselect6(0x40, &(0x7f00000003c0)={0x0, 0x0, 0x200000000002, 0x4, 0x800, 0x0, 0x4}, 0x0, &(0x7f0000000400)={0x1f, 0xfffffffffffffffe, 0x200, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20040086, &(0x7f0000000440)={0xa, 0x4e20, 0x5, @loopback, 0x200}, 0x1c)

3.208330542s ago: executing program 1 (id=15):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
unshare(0x24020400)
setxattr$system_posix_acl(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000d7153854b5363f72040000000000000010000600000000002000000000000000"], 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
rmdir(&(0x7f0000000180)='./file0\x00')
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x79, 0x4)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(0xffffffffffffffff, 0x3)

3.085911885s ago: executing program 1 (id=16):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000f600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x200003, 0x200003, 0x801, 0x80000001, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000f10000000095"], &(0x7f0000000840)='GPL\x00', 0x7, 0x1000, &(0x7f0000001840)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.644846346s ago: executing program 6 (id=12):
unshare(0x20000)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f6b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x5, 0x0, 0x8, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e24, @remote}}]}, 0x60}, 0x1, 0x7}, 0x100)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x4008840)
mmap(0x0, 0x0, 0x3, 0x110, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_TDX_CAPABILITIES(r2, 0xc008aeba, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x3, 0x0, [{}, {}, {}]}}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_nanosleep(0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))

2.522215689s ago: executing program 1 (id=17):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x1000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000000c0)='./dev/sda1\x00', 0x101e4c5, &(0x7f00000005c0)=ANY=[], 0x1, 0x3ac, &(0x7f00000005c0)="$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")
sched_setscheduler(r0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x400000000008d}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES32], 0x8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000980)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$msdos(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x10000, &(0x7f0000000e80)=ANY=[], 0x1, 0x1f5, &(0x7f0000001040)="$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")
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000e00)='./dev\x00', &(0x7f0000000e40)='devtmpfs\x00', 0x0, 0x0)

2.320119994s ago: executing program 6 (id=12):
unshare(0x20000)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f6b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x5, 0x0, 0x8, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e24, @remote}}]}, 0x60}, 0x1, 0x7}, 0x100)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x4008840)
mmap(0x0, 0x0, 0x3, 0x110, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_TDX_CAPABILITIES(r2, 0xc008aeba, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x3, 0x0, [{}, {}, {}]}}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_nanosleep(0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))

1.887619834s ago: executing program 3 (id=18):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x2a0471a, &(0x7f0000000740)={[{@test_dummy_encryption}]}, 0x82, 0x4a8, &(0x7f0000000880)="$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")
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/11)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000380)={{0x1, 0x1, 0x10000}})
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000001a80)=""/4101, 0xb}], 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x7f, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28)
truncate(&(0x7f0000001a40)='./file1\x00', 0x2fffffd)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x103402, 0x49)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x4, &(0x7f00000004c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xaa, 0x63, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000500)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000540)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x3ff}}, 0x18)

1.307508699s ago: executing program 5 (id=9):
prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8)
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r1, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x1000)
sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000e00)='./dev\x00', &(0x7f0000000e40)='devtmpfs\x00', 0x0, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
mount(&(0x7f0000000ec0)=@filename='./dev/sda1\x00', &(0x7f0000000f00)='./mnt\x00', &(0x7f0000000f40)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000f80)='./mnt\x00')
rename(&(0x7f0000000fc0)='./dev\x00', &(0x7f0000001000)='./mnt\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x80000001)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x1a1043, 0xc5)

1.170926422s ago: executing program 1 (id=19):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b50900000000000a7baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.170574422s ago: executing program 6 (id=12):
unshare(0x20000)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f6b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x5, 0x0, 0x8, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e24, @remote}}]}, 0x60}, 0x1, 0x7}, 0x100)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x4008840)
mmap(0x0, 0x0, 0x3, 0x110, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_TDX_CAPABILITIES(r2, 0xc008aeba, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x3, 0x0, [{}, {}, {}]}}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_nanosleep(0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))

1.126615793s ago: executing program 0 (id=1):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0xa2f01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xa)
mkdir(&(0x7f0000000240)='./file0\x00', 0x97)
mkdir(&(0x7f0000000280)='./file1\x00', 0x13b)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x4)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000500), 0x7f03)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
write$tun(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="aaaaaaaaaa35bbbb03000088a848008128eb96c676"], 0x16)

1.113914313s ago: executing program 1 (id=20):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000400)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f00000007c0)=ANY=[], 0x540)
r2 = socket$inet(0x2, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './tracing', [{0x20, '}+(*%&+'}]}, 0x15)
r4 = geteuid()
ioprio_set$uid(0x3, r4, 0x2004)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc)
r5 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder_logs/state_hashed\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000280))
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00')
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/213, 0xd5}], 0x2, 0x5a, 0x0)
shutdown(r0, 0x1)

1.113677883s ago: executing program 34 (id=20):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000400)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f00000007c0)=ANY=[], 0x540)
r2 = socket$inet(0x2, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './tracing', [{0x20, '}+(*%&+'}]}, 0x15)
r4 = geteuid()
ioprio_set$uid(0x3, r4, 0x2004)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc)
r5 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder_logs/state_hashed\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000280))
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00')
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/213, 0xd5}], 0x2, 0x5a, 0x0)
shutdown(r0, 0x1)

1.112510963s ago: executing program 3 (id=21):
unshare(0x40000000)
nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x48)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140))
unshare(0x40000000)
clock_gettime(0x0, &(0x7f0000000240))
nanosleep(&(0x7f00000001c0)={0x77359400}, 0x0)
epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x3ff]}, 0x8)
unshare(0x40000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
r2 = add_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000000400)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232383531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0)
ioctl$BLKDISCARD(r3, 0x1277, 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0)
unshare(0x40000000)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x8220}], 0x1, 0x9)
nanosleep(&(0x7f0000000000)={0x77359400}, 0x0)
unshare(0x40000000)
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)=0x3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000980)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e002800028024000500a3c9be97be0d6c453b8607ce43a03bf26e6fd78ac162b914c202ccb29c00b320", 0x60)
sendfile(r4, r5, 0x0, 0x8000)
syz_open_dev$evdev(0x0, 0x0, 0x800)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0)
nanosleep(&(0x7f0000000280)={0x77359400}, 0x0)

1.112212303s ago: executing program 5 (id=9):
prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8)
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r1, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x1000)
sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000e00)='./dev\x00', &(0x7f0000000e40)='devtmpfs\x00', 0x0, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
mount(&(0x7f0000000ec0)=@filename='./dev/sda1\x00', &(0x7f0000000f00)='./mnt\x00', &(0x7f0000000f40)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000f80)='./mnt\x00')
rename(&(0x7f0000000fc0)='./dev\x00', &(0x7f0000001000)='./mnt\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x80000001)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x1a1043, 0xc5)

1.001734576s ago: executing program 6 (id=12):
unshare(0x20000)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f6b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x5, 0x0, 0x8, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e24, @remote}}]}, 0x60}, 0x1, 0x7}, 0x100)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x4008840)
mmap(0x0, 0x0, 0x3, 0x110, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_TDX_CAPABILITIES(r2, 0xc008aeba, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x3, 0x0, [{}, {}, {}]}}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_nanosleep(0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))

904.026808ms ago: executing program 5 (id=9):
prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8)
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r1, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x1000)
sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000e00)='./dev\x00', &(0x7f0000000e40)='devtmpfs\x00', 0x0, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
mount(&(0x7f0000000ec0)=@filename='./dev/sda1\x00', &(0x7f0000000f00)='./mnt\x00', &(0x7f0000000f40)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000f80)='./mnt\x00')
rename(&(0x7f0000000fc0)='./dev\x00', &(0x7f0000001000)='./mnt\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x80000001)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x1a1043, 0xc5)

877.142909ms ago: executing program 0 (id=1):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0xa2f01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xa)
mkdir(&(0x7f0000000240)='./file0\x00', 0x97)
mkdir(&(0x7f0000000280)='./file1\x00', 0x13b)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x4)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000500), 0x7f03)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
write$tun(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="aaaaaaaaaa35bbbb03000088a848008128eb96c676"], 0x16)

790.701691ms ago: executing program 7 (id=22):
r0 = socket(0x840000000002, 0x3, 0x100)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'gretap0\x00', @ifru_data=&(0x7f0000000140)="3ca3e24f1995038ee0f14ad9c28915faac318e46298cc5a3c8cc4b46d673e0bb"}})

773.875132ms ago: executing program 6 (id=12):
unshare(0x20000)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f6b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x5, 0x0, 0x8, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e24, @remote}}]}, 0x60}, 0x1, 0x7}, 0x100)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x4008840)
mmap(0x0, 0x0, 0x3, 0x110, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_TDX_CAPABILITIES(r2, 0xc008aeba, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x3, 0x0, [{}, {}, {}]}}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_nanosleep(0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))

721.060542ms ago: executing program 5 (id=9):
prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8)
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r1, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x1000)
sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000e00)='./dev\x00', &(0x7f0000000e40)='devtmpfs\x00', 0x0, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
mount(&(0x7f0000000ec0)=@filename='./dev/sda1\x00', &(0x7f0000000f00)='./mnt\x00', &(0x7f0000000f40)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000f80)='./mnt\x00')
rename(&(0x7f0000000fc0)='./dev\x00', &(0x7f0000001000)='./mnt\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x80000001)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x1a1043, 0xc5)

648.688904ms ago: executing program 7 (id=22):
r0 = socket(0x840000000002, 0x3, 0x100)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'gretap0\x00', @ifru_data=&(0x7f0000000140)="3ca3e24f1995038ee0f14ad9c28915faac318e46298cc5a3c8cc4b46d673e0bb"}})

625.700005ms ago: executing program 0 (id=1):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0xa2f01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xa)
mkdir(&(0x7f0000000240)='./file0\x00', 0x97)
mkdir(&(0x7f0000000280)='./file1\x00', 0x13b)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x4)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000500), 0x7f03)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
write$tun(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="aaaaaaaaaa35bbbb03000088a848008128eb96c676"], 0x16)

504.844538ms ago: executing program 7 (id=22):
r0 = socket(0x840000000002, 0x3, 0x100)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'gretap0\x00', @ifru_data=&(0x7f0000000140)="3ca3e24f1995038ee0f14ad9c28915faac318e46298cc5a3c8cc4b46d673e0bb"}})

402.1824ms ago: executing program 5 (id=9):
prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8)
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r1, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x1000)
sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000e00)='./dev\x00', &(0x7f0000000e40)='devtmpfs\x00', 0x0, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
mount(&(0x7f0000000ec0)=@filename='./dev/sda1\x00', &(0x7f0000000f00)='./mnt\x00', &(0x7f0000000f40)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000f80)='./mnt\x00')
rename(&(0x7f0000000fc0)='./dev\x00', &(0x7f0000001000)='./mnt\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x80000001)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x1a1043, 0xc5)

387.193831ms ago: executing program 0 (id=1):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0xa2f01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xa)
mkdir(&(0x7f0000000240)='./file0\x00', 0x97)
mkdir(&(0x7f0000000280)='./file1\x00', 0x13b)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x4)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000500), 0x7f03)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
write$tun(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="aaaaaaaaaa35bbbb03000088a848008128eb96c676"], 0x16)

281.378183ms ago: executing program 7 (id=22):
r0 = socket(0x840000000002, 0x3, 0x100)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'gretap0\x00', @ifru_data=&(0x7f0000000140)="3ca3e24f1995038ee0f14ad9c28915faac318e46298cc5a3c8cc4b46d673e0bb"}})

202.210125ms ago: executing program 0 (id=1):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0xa2f01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xa)
mkdir(&(0x7f0000000240)='./file0\x00', 0x97)
mkdir(&(0x7f0000000280)='./file1\x00', 0x13b)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x4)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000500), 0x7f03)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
write$tun(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="aaaaaaaaaa35bbbb03000088a848008128eb96c676"], 0x16)

110.792747ms ago: executing program 6 (id=12):
unshare(0x20000)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f6b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x5, 0x0, 0x8, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e24, @remote}}]}, 0x60}, 0x1, 0x7}, 0x100)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x4008840)
mmap(0x0, 0x0, 0x3, 0x110, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_TDX_CAPABILITIES(r2, 0xc008aeba, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x3, 0x0, [{}, {}, {}]}}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_nanosleep(0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))

57.183879ms ago: executing program 3 (id=23):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r0, 0x5)
ppoll(&(0x7f0000000000)=[{r0, 0x104}], 0x1, &(0x7f0000000040), &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)

56.986119ms ago: executing program 5 (id=9):
prlimit64(0x0, 0xe, &(0x7f00000018c0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001900)=0x8)
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r1, 0x400, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x1000)
sched_setaffinity(0x0, 0x8, &(0x7f0000001940)=0x2)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4c, &(0x7f00000005c0)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000600)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000001980)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001a00)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001a80), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001ac0), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000e00)='./dev\x00', &(0x7f0000000e40)='devtmpfs\x00', 0x0, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
mount(&(0x7f0000000ec0)=@filename='./dev/sda1\x00', &(0x7f0000000f00)='./mnt\x00', &(0x7f0000000f40)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000f80)='./mnt\x00')
rename(&(0x7f0000000fc0)='./dev\x00', &(0x7f0000001000)='./mnt\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x80000001)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x1a1043, 0xc5)

0s ago: executing program 0 (id=1):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0xa2f01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xa)
mkdir(&(0x7f0000000240)='./file0\x00', 0x97)
mkdir(&(0x7f0000000280)='./file1\x00', 0x13b)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x4)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000500), 0x7f03)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
write$tun(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="aaaaaaaaaa35bbbb03000088a848008128eb96c676"], 0x16)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   10.974170][   T30] kauditd_printk_skb: 48 callbacks suppressed
[   10.974183][   T30] audit: type=1400 audit(1792267606.893:59): avc:  denied  { transition } for  pid=220 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   10.980144][   T30] audit: type=1400 audit(1792267606.893:60): avc:  denied  { noatsecure } for  pid=220 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   10.983625][   T30] audit: type=1400 audit(1792267606.893:61): avc:  denied  { write } for  pid=220 comm="sh" path="pipe:[14793]" dev="pipefs" ino=14793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   10.986953][   T30] audit: type=1400 audit(1792267606.893:62): avc:  denied  { rlimitinh } for  pid=220 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   10.990348][   T30] audit: type=1400 audit(1792267606.893:63): avc:  denied  { siginh } for  pid=220 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts.
[   17.606545][   T30] audit: type=1400 audit(1792267613.523:64): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   17.607689][  T277] cgroup: Unknown subsys name 'net'
[   17.610510][   T30] audit: type=1400 audit(1792267613.523:65): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   17.614512][   T30] audit: type=1400 audit(1792267613.533:66): avc:  denied  { unmount } for  pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   17.614675][  T277] cgroup: Unknown subsys name 'devices'
[   17.702796][  T277] cgroup: Unknown subsys name 'hugetlb'
[   17.709679][  T277] cgroup: Unknown subsys name 'rlimit'
[   17.815480][   T30] audit: type=1400 audit(1792267613.733:67): avc:  denied  { setattr } for  pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   17.838813][   T30] audit: type=1400 audit(1792267613.733:68): avc:  denied  { mounton } for  pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   17.848964][  T279] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   17.863803][   T30] audit: type=1400 audit(1792267613.733:69): avc:  denied  { mount } for  pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   17.880572][  T277] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   17.895441][   T30] audit: type=1400 audit(1792267613.793:70): avc:  denied  { relabelto } for  pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   17.929465][   T30] audit: type=1400 audit(1792267613.793:71): avc:  denied  { write } for  pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   17.955235][   T30] audit: type=1400 audit(1792267613.793:72): avc:  denied  { read } for  pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   17.980881][   T30] audit: type=1400 audit(1792267613.793:73): avc:  denied  { open } for  pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   18.588061][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.595151][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.603106][  T285] device bridge_slave_0 entered promiscuous mode
[   18.610026][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.617193][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.624570][  T285] device bridge_slave_1 entered promiscuous mode
[   18.639877][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.647038][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.654459][  T288] device bridge_slave_0 entered promiscuous mode
[   18.662800][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.669828][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.677295][  T288] device bridge_slave_1 entered promiscuous mode
[   18.684076][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.691338][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.698652][  T286] device bridge_slave_0 entered promiscuous mode
[   18.705579][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.712653][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.720083][  T286] device bridge_slave_1 entered promiscuous mode
[   18.759990][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.767080][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.774516][  T287] device bridge_slave_0 entered promiscuous mode
[   18.781320][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.788343][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.795753][  T287] device bridge_slave_1 entered promiscuous mode
[   18.823493][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.830539][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.837986][  T289] device bridge_slave_0 entered promiscuous mode
[   18.844804][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.851954][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.859247][  T289] device bridge_slave_1 entered promiscuous mode
[   18.982220][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.989272][  T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   18.996585][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.003613][  T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.032030][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.039079][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.046356][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.053404][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.078645][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.085711][  T286] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.093009][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.100021][  T286] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.125115][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.132180][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.139448][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.146488][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.163796][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.171309][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.178538][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.186189][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.193382][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.201015][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.208241][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.215541][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.222845][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.244404][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.252956][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.261280][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.268295][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.275802][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.284252][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.291294][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.313798][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.321737][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.329848][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.336882][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.345000][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.353163][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.363896][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.384136][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.392328][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.399356][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.407019][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.415366][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.422423][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.429762][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   19.437200][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.444624][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.452843][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.459850][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.467488][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.487648][  T288] device veth0_vlan entered promiscuous mode
[   19.498308][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   19.506495][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   19.514094][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   19.522066][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.529960][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.538171][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   19.546611][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.554868][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.561920][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.569297][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.577531][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.584567][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.591935][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.599860][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   19.623419][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   19.631877][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.639801][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   19.648135][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.656336][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   19.665146][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.673463][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   19.681644][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   19.699388][  T289] device veth0_vlan entered promiscuous mode
[   19.712052][  T287] device veth0_vlan entered promiscuous mode
[   19.719066][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   19.727094][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.734595][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   19.743043][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.751510][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.758525][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.765993][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   19.774431][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.783107][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.790115][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.797595][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   19.806020][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.814460][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   19.822378][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   19.830226][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   19.838698][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.847090][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   19.855003][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   19.862972][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   19.871189][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   19.879361][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   19.886969][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   19.894486][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   19.901974][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   19.910550][  T288] device veth1_macvtap entered promiscuous mode
[   19.920583][  T289] device veth1_macvtap entered promiscuous mode
[   19.928014][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   19.935686][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   19.943507][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   19.951581][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   19.964566][  T287] device veth1_macvtap entered promiscuous mode
[   19.973596][  T285] device veth0_vlan entered promiscuous mode
[   19.980978][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   19.988449][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   19.996089][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   20.004335][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   20.012935][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   20.021129][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   20.028991][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.037181][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.045467][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.067699][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.076209][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.084829][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.093415][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.102342][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.110520][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.118955][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.127214][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.135643][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.143972][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.152350][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.160497][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.171228][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.179454][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.195895][  T288] request_module fs-gadgetfs succeeded, but still no fs?
[   20.212985][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   20.222507][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.234747][  T286] device veth0_vlan entered promiscuous mode
[   20.244498][  T285] device veth1_macvtap entered promiscuous mode
[   20.254255][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.258353][  T314] loop4: detected capacity change from 0 to 512
[   20.262206][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.276070][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.290011][  T286] device veth1_macvtap entered promiscuous mode
[   20.331387][  T317] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.338624][  T317] bridge0: port 1(bridge_slave_0) entered disabled state
[   20.360703][  T318] loop2: detected capacity change from 0 to 512
[   20.372145][  T317] device bridge_slave_1 left promiscuous mode
[   20.378455][  T317] bridge0: port 2(bridge_slave_1) entered disabled state
[   20.387358][  T318] =======================================================
[   20.387358][  T318] WARNING: The mand mount option has been deprecated and
[   20.387358][  T318]          and is ignored by this kernel. Remove the mand
[   20.387358][  T318]          option from the mount to silence this warning.
[   20.387358][  T318] =======================================================
[   20.392782][  T317] device bridge_slave_0 left promiscuous mode
[   20.431669][  T317] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.294280][  T320] loop4: detected capacity change from 0 to 256
[   21.690785][    C0] sched: RT throttling activated
[   21.705827][  T308] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   21.713477][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.721855][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.729338][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   21.964681][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.983380][  T324] udevd[324]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[   22.000258][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   22.074830][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.095519][  T312] udevd[312]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[   22.135266][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.174968][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.200516][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   22.208981][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.217270][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.225839][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.234482][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   22.281335][  T319] loop1: detected capacity change from 0 to 40427
[   22.289069][  T312] udevd[312]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   22.291912][  T285] syz-executor (285) used greatest stack depth: 22024 bytes left
[   22.309584][  T312] udevd[312]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   22.319391][  T319] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   22.327323][  T319] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   22.338075][  T319] F2FS-fs (loop1): invalid crc value
[   22.345143][  T319] F2FS-fs (loop1): Found nat_bits in checkpoint
[   22.389174][  T287] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   22.401798][  T312] udevd[312]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[   22.413790][  T287] FAT-fs (loop2): Filesystem has been set read-only
[   22.421029][  T287] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   22.422790][  T312] udevd[312]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[   22.444080][  T319] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   22.451333][  T319] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   22.480917][  T308] usb 4-1: not running at top speed; connect to a high speed hub
[   22.560882][  T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   22.580849][  T308] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   22.592082][  T287] syz-executor (287) used greatest stack depth: 21472 bytes left
[   22.602367][  T312] udevd[312]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[   22.612706][  T324] udevd[324]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   22.616096][  T308] usb 4-1: config 1 has no interface number 0
[   22.632529][  T324] udevd[324]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[   22.651304][  T308] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[   22.651601][  T312] udevd[312]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[   22.850915][  T308] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40
[   22.874233][  T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   22.889354][  T340] loop1: detected capacity change from 0 to 40427
[   22.901664][  T308] usb 4-1: Product: syz
[   22.911195][  T308] usb 4-1: Manufacturer: syz
[   22.917136][  T308] usb 4-1: SerialNumber: syz
[   22.931957][  T340] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   22.938311][  T340] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   22.952432][  T307] device bridge_slave_1 left promiscuous mode
[   22.958585][  T307] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.966449][  T307] device bridge_slave_0 left promiscuous mode
[   22.966589][  T340] F2FS-fs (loop1): invalid crc value
[   22.972689][  T307] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.979648][  T340] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   22.996791][  T307] device veth1_macvtap left promiscuous mode
[   23.003095][  T307] device veth0_vlan left promiscuous mode
[   23.013706][  T340] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   23.020758][  T340] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   23.051513][   T30] kauditd_printk_skb: 37 callbacks suppressed
[   23.051526][   T30] audit: type=1400 audit(1792267618.973:111): avc:  denied  { write } for  pid=339 comm="syz.1.10" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   23.081891][   T30] audit: type=1400 audit(1792267618.973:112): avc:  denied  { add_name } for  pid=339 comm="syz.1.10" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   23.102517][   T30] audit: type=1400 audit(1792267618.973:113): avc:  denied  { create } for  pid=339 comm="syz.1.10" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   23.122611][   T30] audit: type=1400 audit(1792267618.973:114): avc:  denied  { write open } for  pid=339 comm="syz.1.10" path="/1/file1/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   23.145439][   T30] audit: type=1400 audit(1792267618.973:115): avc:  denied  { create } for  pid=339 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   23.145864][  T286] attempt to access beyond end of device
[   23.145864][  T286] loop1: rw=2049, want=45104, limit=40427
[   23.167284][   T30] audit: type=1400 audit(1792267618.973:116): avc:  denied  { connect } for  pid=339 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   23.195262][   T30] audit: type=1400 audit(1792267618.973:117): avc:  denied  { write } for  pid=339 comm="syz.1.10" path="socket:[16697]" dev="sockfs" ino=16697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   23.222614][   T30] audit: type=1400 audit(1792267619.033:118): avc:  denied  { getopt } for  pid=339 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   23.246498][   T30] audit: type=1400 audit(1792267619.043:119): avc:  denied  { ioctl } for  pid=339 comm="syz.1.10" path="/1/file1/file1" dev="loop1" ino=10 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   23.338551][   T30] audit: type=1400 audit(1792267619.253:120): avc:  denied  { create } for  pid=357 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   23.375837][  T360] loop1: detected capacity change from 0 to 512
[   23.471360][  T360] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback.
[   23.484665][  T369] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.501644][  T360] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   23.568150][  T360] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #12: comm syz.1.14: invalid size
[   23.600925][  T360] EXT4-fs (loop1): Remounting filesystem read-only
[   23.615679][  T370] loop3: detected capacity change from 0 to 8192
[   23.691714][  T370] FAT-fs (loop3): Unrecognized mount option "@
" or missing value
[   24.374449][  T408] capability: warning: `syz.1.16' uses 32-bit capabilities (legacy support in use)
[   24.549289][  T307] device bridge_slave_1 left promiscuous mode
[   24.565683][  T307] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.573300][  T307] device bridge_slave_0 left promiscuous mode
[   24.579426][  T307] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.597432][  T307] device bridge_slave_1 left promiscuous mode
[   24.603644][  T307] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.611420][  T307] device bridge_slave_0 left promiscuous mode
[   24.617556][  T307] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.626014][  T307] device veth1_macvtap left promiscuous mode
[   24.632114][  T307] device veth0_vlan left promiscuous mode
[   24.638076][  T307] device veth1_macvtap left promiscuous mode
[   24.645693][  T307] device veth0_vlan left promiscuous mode
[   24.873569][  T308] usb 4-1: USB disconnect, device number 2
[   24.928641][  T420] loop1: detected capacity change from 0 to 512
[   25.199396][  T426] loop1: detected capacity change from 0 to 256
[   25.604031][  T430] loop3: detected capacity change from 0 to 512
[   25.708495][  T430] EXT4-fs (loop3): Test dummy encryption mode enabled
[   25.737083][  T430] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   26.137075][  T430] EXT4-fs (loop3): 1 truncate cleaned up
[   26.142903][  T430] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[   26.197494][  T430] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.18: bg 0: block 465: padding at end of block bitmap is not set
[   26.212225][  T430] EXT4-fs error (device loop3) in ext4_setattr:5676: Corrupt filesystem
SYZFAIL: mount(dev) failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: tun: can't open /dev/net/tun
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=0 req=1 state=3 status=67 (errno 32: Broken pipe)
[   28.323201][  T307] device veth1_macvtap left promiscuous mode
[   28.329208][  T307] device veth0_vlan left promiscuous mode
[   29.471785][  T307] device bridge_slave_1 left promiscuous mode
[   29.477893][  T307] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.485294][  T307] device bridge_slave_0 left promiscuous mode
[   29.491488][  T307] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.499181][  T307] device veth1_macvtap left promiscuous mode
[   29.505226][  T307] device veth0_vlan left promiscuous mode