000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x5)
setuid(r4)
r5 = getegid()
chown(&(0x7f0000000080)='./bus\x00', r4, r5)

[  300.054718][T13337] overlayfs: unrecognized mount option "" or missing value
14:45:33 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
bind$packet(r1, &(0x7f0000000200)={0x11, 0x1b, r3}, 0x14)
r4 = syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x1a241)
fstat(r4, &(0x7f0000000280))
getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10)
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  300.103847][T13348] overlayfs: unrecognized mount option "" or missing value
14:45:33 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
setuid(r2)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:33 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='trusted.overlay.opaque\x00', 0xfffffffffffffff8)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e34a2788e63d8532f66696c132a31038cc165312c75707065726469723d2e"])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
fcntl$setstatus(r1, 0x4, 0x0)
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x7)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r1, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e23, @rand_addr=0x64010101}})

14:45:33 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
bind$packet(r1, &(0x7f0000000200)={0x11, 0x1b, r3}, 0x14)
r4 = syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x1a241)
fstat(r4, &(0x7f0000000280))
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  300.379390][T13371] overlayfs: failed to resolve '.4¢xŽcØS/fil*1ŒÁe1': -2
[  300.399314][T13375] overlayfs: failed to resolve '.4¢xŽcØS/fil*1ŒÁe1': -2
14:45:33 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1405, 0x4, 0x70bd27, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x854)
r7 = getpid()
sched_setscheduler(r7, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x5, 0x0, 0xd9, 0xdb, 0x0, 0x8, 0x8000, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xfff, 0x3f}, 0x2000, 0x2, 0x101, 0x2, 0x6, 0x94, 0xc51}, r7, 0xa, 0xffffffffffffffff, 0x1)

14:45:33 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x6, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x16, @loopback, 0x4e22, 0x4, 'dh\x00', 0x0, 0x8, 0x43}, 0x2c)
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:33 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000080)=0xc)
socket$vsock_stream(0x28, 0x1, 0x0)
setuid(0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))
sched_yield()
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000000))
times(&(0x7f0000000100))
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
readahead(r0, 0xfff, 0x23)
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000140))
syncfs(r1)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f00000001c0)={{0xff, 0x40}, {0x40, 0x3}, 0x40, 0x0, 0x1})

14:45:33 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xdd908babec30e412}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltaction={0x60, 0x31, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
ioctl(r0, 0x8b32, &(0x7f0000000040))
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00')
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000000005}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4)

14:45:33 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
bind$packet(r1, &(0x7f0000000200)={0x11, 0x1b, r3}, 0x14)
syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x1a241)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:33 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x82440, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4, 0x1, 0xb, 0x0, "599e7b69bc89cda4bd82f19a95a40d192c2da7c135e713525c29daf15a6e2536b833e0c4343b55e3f470e4c7753a3c0d508e7ef3b33dc53b7b2d2426aee95dd8", "d6ee423b0e78ce12d97019ed12b3749a9a9df3258514d158d45df5f1c54088ca", [0x0, 0x9]})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x0, 0x10001, 0x3ff, 'syz0\x00', 0x1c000000}, 0x1, [0x8, 0xc, 0x5122, 0x0, 0x401, 0xffffffffffffffff, 0x5, 0x20, 0x0, 0x4, 0x473, 0x0, 0x401, 0xfff, 0x4, 0x401, 0x79, 0x5, 0x1, 0x8, 0xe6, 0x9, 0x200, 0x100000000, 0x1, 0x20, 0x6, 0x6, 0x155, 0x8, 0x3c, 0x5, 0x80, 0x6, 0x9, 0x8, 0x6, 0x6, 0x7, 0x40, 0xfbe1, 0x9, 0xa80, 0x2, 0x7, 0x3, 0xfffffffffffffff7, 0x5, 0x2, 0x3, 0x8, 0x0, 0x80000001, 0x3, 0x79, 0x3, 0x2, 0xfd8, 0x8, 0x2, 0x0, 0x100000001, 0x10000000000000, 0x7f, 0x0, 0x0, 0x80, 0x4, 0x7fff, 0x320dcc62, 0x80000001, 0x9, 0x800, 0x3, 0x1, 0x7, 0x2, 0x9, 0x7f, 0x2, 0x4, 0x0, 0x3, 0x6, 0x5, 0xf385, 0x3, 0xe0d3, 0x6f, 0x4, 0x0, 0xfffffffffffff0ff, 0x9, 0x0, 0x1, 0x3, 0x20, 0x1ff, 0xfff, 0x4, 0x4, 0x5, 0x9, 0x1, 0x1ff, 0x5, 0x1, 0x0, 0x9, 0xffffffffffffff06, 0x9, 0x0, 0xf9, 0x3b, 0x2, 0x5, 0x5, 0x10001, 0x7, 0xffffffff7fffffff, 0x7, 0x9, 0xaf, 0x7, 0x400, 0x8001, 0x10001, 0x1]})
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000001c0), 0x4)
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909dd, 0x66d, [], @p_u32=&(0x7f0000000000)=0x5}})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000240), 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000200)=0x5)
setuid(r5)
ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000140)={0x3, @bcast, r5})
fcntl$getflags(r2, 0x0)
ioctl(r2, 0x8b32, &(0x7f0000000040))

14:45:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
prctl$PR_CAPBSET_READ(0x17, 0xa)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x3ca80, 0x0)
r1 = fsopen(&(0x7f0000000180)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='virt_wifi0\x00', &(0x7f00000000c0)="545bcee9faad4b0ef86fccddd0a91d4b2c9c2c43bd9590c21f53ac6984ef330a785ce37c9d88bdf7dd76a3a33bf65a7858c10ac298c424fcdd9febf2a44e2f261d0bcc1080e72c5de9d6e64abe835b83da46a3cde589edd31c5cfc8411c8974550515477f45ef71a5b7bcf86bedbb2c9b2b0cbcdcf048aad54de1c5b9eac0dfe3fddb4ca3735bda241305c7e84452c541d", 0x91)

14:45:34 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
bind$packet(r1, &(0x7f0000000200)={0x11, 0x1b, r3}, 0x14)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'vlan1\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  300.813976][T13403] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2001, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x1a}, 0x7}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, @in6={0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x7}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x78)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x5)
setuid(r3)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:34 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776d726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c653062bf12e33925915d4aefb4f68a8e72152bb66cd1ee784895bc10094a20c7d450783b2175e7279641e5e3dbbb4a805ee26da091f30193dd56575ad066bd2bd0d97826ccbe28f06f7f2734840c6cfa5e8ef8d318858393106d3823faf8a8585f20112cff7497d92e250aac35654adb9bfdf5f62bc9e6c531697fb1e77fbeb3bbe0b86fc7cb6799d02ade7c45bde9f161eb51d5df5dd13933a2eb915547fbd7c57dbba6d5c4f8b3a4a6af3179a64ec361e1fa7d34aaf61f62b025b037227cccbf369ebee811f5f1d8e15712e6aa3940e2bf781770"])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:34 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:34 executing program 0:
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
accept4$netrom(r0, &(0x7f0000000080)={{0x3, @null}, [@null, @remote, @rose, @netrom, @rose, @default, @default, @netrom]}, &(0x7f0000000100)=0x48, 0x40800)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140))
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)="c09d1887d0d108513cfca5e62aac306a8746a2e9eee51f3a1204adf461ded6ae527ccd9c50a52b490e20769d11c0")

14:45:34 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1405, 0x4, 0x70bd27, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x854)
r7 = getpid()
sched_setscheduler(r7, 0x5, &(0x7f0000000380))

14:45:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140e, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc100}, 0x8)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x5)
setuid(r3)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x3, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x100}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffeffff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004011}, 0x4000)
ioctl(r0, 0x8b32, &(0x7f0000000040))
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x200240, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={<r3=>0x0, 0x5, 0x30}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, &(0x7f0000000280)=0x4)

[  301.182906][T13428] overlayfs: unrecognized mount option "wmrkdir=./file1" or missing value
14:45:34 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  301.251409][T13437] overlayfs: unrecognized mount option "wmrkdir=./file1" or missing value
14:45:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000))
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0)=0x7b, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x80000})
ioctl(r0, 0x8b32, &(0x7f0000000040))
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080))

14:45:34 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:34 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r1 = socket(0x8, 0x3, 0x81)
r2 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14)
fchmod(r2, 0x80)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000))
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:34 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200881, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
write$binfmt_aout(r4, &(0x7f0000000080)={{0x0, 0x41, 0x3f, 0x3c8, 0x195, 0x0, 0x283, 0x2}, "14fc6a1e374cfdde4035ac00a94becdf61c69af0d6be9bf08afb1992081c5e1c27fe0186c937529ee4f324382021d6356cdc276422312b0297d5c11e72f3e6f6fa232773f8a2e6dfea11bc19db223698fda84c07f4b5933fff9e533e8ef9b065379b936d7089233acc9444fc012103c93b47aeb4ed40fe211bb010722efd3ab600878deb0261127b39ed0777f6ea5159d0307511", [[], [], [], [], [], [], [], []]}, 0x8b4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl(r2, 0x8b32, &(0x7f0000000040))

[  301.577224][T13456] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:34 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:35 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
fchmodat(r0, &(0x7f0000000200)='./file1\x00', 0x80)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c7570708072646945f7d52d723d2e2f66696c6530"])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
futimesat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}})
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000080))

14:45:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5})
ioctl(r0, 0x8b32, &(0x7f0000000040))
set_tid_address(&(0x7f0000000000))

14:45:35 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1405, 0x4, 0x70bd27, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x854)
getpid()

14:45:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'veth0_to_batadv\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:35 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  301.906405][T13480] overlayfs: unrecognized mount option "upp€rdiE÷Õ-r=./file0" or missing value
14:45:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000980)={[0x8, 0x66, 0xb9d0, 0x8, 0x7f, 0x7, 0x34, 0x6, 0x5, 0x7, 0x4b0c, 0xdaa, 0x7f, 0x1, 0x89, 0x40, 0x3, 0x400, 0x1, 0x1, 0x0, 0x8001, 0x3, 0x1, 0x1, 0x4, 0x2, 0x3, 0x1de7, 0x354000, 0x0, 0x6, 0x7, 0x0, 0x9d9, 0x3ff, 0x400, 0x3, 0x7, 0x0, 0x80000001, 0x2, 0x7, 0x9, 0x7, 0x1, 0x5, 0x0, 0x0, 0x0, 0x5, 0x4f9, 0x7fffffff, 0x0, 0x6, 0x8, 0xdd, 0x400, 0x10001, 0x40, 0x5, 0x8, 0xffffffff, 0x800, 0xffffffe0, 0x1, 0x3, 0x2, 0x6, 0xfffffffb, 0x4, 0x7, 0x40, 0x1, 0x0, 0x10000, 0x7, 0x9, 0x7, 0x45, 0x7fff800, 0x2, 0x3, 0x7fffffff, 0x3ff, 0x1ff, 0x1, 0x9, 0x7, 0xfffffff7, 0x3, 0x6, 0xbab, 0x3, 0x83e, 0x1, 0xe4, 0x6, 0x0, 0x7fff, 0x9, 0x4, 0xba, 0x7f, 0x1, 0x5, 0x3, 0x100, 0x8, 0x3, 0x7fff, 0x5, 0xacd2, 0x85, 0x50, 0x200, 0x10000, 0x3f, 0x100, 0x1e3f, 0x10001, 0xfffff000, 0x0, 0xd767, 0xff, 0x10001, 0x2, 0x4, 0x200, 0x1, 0x80000001, 0x3, 0x2, 0x20, 0x1, 0x2, 0x3, 0x80000000, 0x5, 0x10000, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x1ff, 0x4, 0x7, 0xfff, 0x9, 0x243c, 0x1ff, 0xff, 0x5, 0x0, 0x401, 0x7ff, 0x101, 0x3, 0xa0eec88, 0x5, 0x2, 0x3, 0x0, 0x8, 0x7, 0x1, 0x1a92, 0x8, 0xa50, 0x3, 0x0, 0x1, 0x6, 0x401, 0x0, 0x6, 0x4, 0x3, 0x3, 0x8, 0x8001, 0x2c19, 0x3, 0x3, 0x0, 0x9, 0x23, 0xc38, 0x0, 0x3, 0x5, 0xfff, 0x12, 0x0, 0x2, 0x1000, 0x4, 0x9, 0x3, 0x5a, 0x8001, 0xa41, 0x8000, 0x80000000, 0xffffde79, 0x2, 0x0, 0x6, 0x0, 0x0, 0x3c2, 0x3, 0xb9d, 0x2, 0xe77b, 0x0, 0xf2, 0x1d, 0x80, 0xd16, 0x4, 0x8e, 0x81, 0x5, 0x20, 0x38, 0x4, 0x9, 0x4, 0x80000001, 0x21, 0x9, 0x7, 0x401, 0x6, 0x8, 0x2, 0x9fc00000, 0x9, 0x101, 0x6, 0x3f, 0x1eaa, 0xe770, 0x7, 0x1, 0x6, 0x0, 0x1f, 0x5, 0x3, 0x8, 0x3, 0x5d, 0x3, 0x157b, 0x4, 0xce6, 0x1, 0xfff, 0x2, 0x10001, 0x10000, 0x400, 0x5, 0x3, 0x800, 0x6, 0x83, 0x0, 0x2, 0x8, 0x0, 0x1f, 0x7e, 0x6, 0x0, 0xffffffc1, 0x8, 0x45e, 0xff, 0x4, 0x401, 0x7, 0xc304, 0x4c, 0xfffffff7, 0x23, 0x80, 0x3, 0x9, 0x4, 0x8, 0x6, 0xffff8000, 0x2, 0x101, 0xffffffe1, 0x3, 0x8, 0x6, 0x7, 0x0, 0x80000000, 0x4fdd, 0x5, 0x9, 0x7, 0x0, 0x2, 0xa91, 0x8, 0x80, 0x8fa4, 0x200, 0x0, 0x6, 0x80, 0x3, 0x80000000, 0x800, 0x30b4, 0x3, 0x1224, 0x8001, 0x400, 0x8, 0x2, 0x30, 0xa2, 0x9, 0x8, 0x3, 0xfffffff9, 0xff, 0x100, 0x4, 0x7fff, 0x1a, 0x1000, 0x800, 0x2bfc, 0x1000, 0x200, 0x384a, 0x3f, 0x5, 0x4395, 0x9, 0x6, 0x7, 0xfffffff9, 0xff, 0x985e, 0x2, 0x800, 0x1, 0x7, 0x2, 0xfbe0, 0x7, 0x8, 0x400, 0x9, 0xfffffffb, 0xfffffe00, 0x7fffffff, 0xb96d, 0x252f, 0x1, 0x9, 0x10001, 0x8, 0x20000000, 0xfff, 0x3, 0x7fff, 0x7, 0x1, 0x9, 0x5, 0x7, 0xfff, 0x7, 0x4, 0x5be, 0x59e4, 0x5, 0x2, 0x2, 0x1, 0x100, 0x4, 0xffffffff, 0x10000, 0x9, 0x1832, 0x40, 0x57d, 0x53a, 0x5d, 0x43c, 0xffffabbf, 0xfffffffd, 0xa7, 0x0, 0xd01, 0x3c, 0x3f, 0x2, 0xfffffff8, 0x2, 0x0, 0x2, 0x0, 0x5, 0x5, 0x0, 0x8, 0x6, 0x8, 0x66c9, 0x1, 0x200, 0x7, 0x37, 0x2, 0x7ff, 0xffffffc0, 0xffffffff, 0x7ff, 0x8, 0x5aaf4446, 0xb1, 0x2, 0x3, 0x9, 0x349, 0x1, 0x3, 0xf24, 0x9, 0x5, 0xfffffff9, 0x2, 0x1, 0x80, 0x3, 0x8, 0x8000, 0x4, 0x9, 0x7, 0x80000000, 0x4, 0x6, 0x9, 0xf4c6, 0x19, 0xc693, 0x80000000, 0x10000, 0x0, 0x1f, 0xa7, 0x3, 0x4, 0xec, 0x2, 0x7, 0x1a, 0x4, 0x80000000, 0x9, 0x1, 0xfffffffe, 0x6, 0x0, 0xffff, 0xccf9, 0x1, 0x5, 0x9, 0x40, 0xfffffffc, 0x7, 0x6, 0x5, 0x0, 0x5, 0x8, 0x6, 0x4, 0x80000000, 0x80000000, 0xff, 0x4, 0xbe0, 0x2, 0x27af, 0x0, 0x0, 0x1946, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7, 0x685, 0x6, 0xc6d0, 0x0, 0xdd, 0x374d, 0x4, 0x94e9, 0x8000, 0x200, 0x7fffffff, 0xf54c, 0x3f, 0x4, 0x40, 0x7, 0xfffffffe, 0x6, 0xfff, 0xffffff9d, 0x2, 0x0, 0x6, 0x4, 0x7, 0x7, 0x1000, 0x80000000, 0xb1, 0x249, 0x9c, 0x80000001, 0x9, 0x3, 0x81, 0x0, 0x8, 0x4, 0xffff, 0x2, 0x10001, 0x9, 0x2, 0xfffffffa, 0x0, 0x224cd72e, 0x101, 0x7c17, 0x40, 0xc846, 0x200, 0x7fff, 0x80000001, 0x6, 0x3, 0x5, 0x7712, 0x100, 0x0, 0x40, 0x0, 0x3, 0x1, 0xc4, 0x200, 0x10000, 0x401, 0x1, 0x100, 0x3, 0xfffffffb, 0x85, 0xfffff6a9, 0x6, 0x1, 0x6, 0x3, 0x1000, 0x1ff, 0xdf00000, 0xfff, 0x80, 0x7, 0xc1, 0x1b90, 0x38e0, 0x3f, 0x10001, 0x100, 0x7ff, 0x847, 0x9, 0x2, 0x101, 0xb9, 0x2, 0x3ff, 0x7, 0x4, 0x1ee, 0x9, 0x3ff, 0x2, 0x3, 0x6a, 0x6d6e, 0x9, 0xffff, 0x800, 0x7fffffff, 0x1, 0x7, 0x20, 0x3, 0x6, 0xfffffffc, 0x0, 0x400, 0x4, 0x1, 0x7fff, 0x4, 0x6, 0x400, 0x4, 0x1, 0x200, 0xe09, 0x7, 0x3, 0x6, 0xffff, 0x4, 0x7a, 0x0, 0x1, 0x5, 0x66, 0x1, 0x1, 0xfffffff8, 0x3, 0x6, 0x6, 0x1, 0xe3, 0x3, 0x623e08b6, 0x0, 0x6, 0xc3, 0x3, 0x5, 0x20, 0x8000, 0xdda6, 0x40, 0x0, 0xfffffffd, 0x3f, 0x5, 0x800, 0xffff, 0xb9a, 0x7, 0xfffffffc, 0x7, 0xd1b, 0x25, 0x7, 0x7fffffff, 0x2, 0x0, 0x45, 0x21f5, 0x7, 0xc2463deb, 0x5, 0x2b1, 0x3, 0x8, 0x3ff, 0x8, 0x1, 0x0, 0x2, 0x8, 0xfffffffc, 0x9, 0x4, 0x1ff, 0x70, 0x2800000, 0x8, 0x8, 0x7fffffff, 0x7ff, 0x8, 0x400, 0xa0000, 0x3, 0x5, 0x1ff, 0xfffffffd, 0x80000000, 0x1800, 0x400, 0x0, 0x8, 0x1, 0x28d, 0x1f, 0x3, 0x80000001, 0x30000, 0x0, 0x8a1d, 0x1ff, 0x9, 0x8, 0x200, 0x4, 0x1000, 0x5, 0x80, 0x8, 0xffffffff, 0x26, 0xfffffff9, 0xb17, 0x80, 0x0, 0x9, 0xffffff55, 0x4, 0xff, 0x7, 0x6, 0x6, 0x8, 0x8000, 0x8, 0x4, 0x3, 0x1, 0x6, 0x6, 0x5, 0x27600, 0x6, 0x7, 0x5ea75b95, 0x5, 0x1, 0x2, 0x828e, 0x0, 0x0, 0x3ff, 0x7, 0x9a, 0x400, 0x8, 0x3, 0x4, 0x7, 0x7d, 0x0, 0x29d7, 0xa93, 0x1, 0x5, 0x4, 0x5, 0x10000, 0x7, 0x5, 0x7fffffff, 0x0, 0xc0000000, 0x9, 0xd449, 0x0, 0xb6b1, 0xff, 0x1ff, 0x6d, 0x7ff, 0x1, 0x3, 0x8, 0xffff, 0xeb1f, 0x9, 0x7, 0x7fffffff, 0x80000001, 0x72d, 0xfff, 0x1, 0x56dc5863, 0x5, 0x1, 0xfff, 0x7, 0x7, 0x3ff, 0x0, 0x9, 0x3, 0x664, 0x5, 0x2, 0x0, 0xff, 0x100, 0x3, 0x0, 0x4, 0x0, 0x81, 0x9, 0x88, 0x8, 0xfb0, 0x7, 0xfe7, 0x0, 0xbe62, 0x2, 0x8, 0x5, 0xde75, 0x80000001, 0x40, 0x0, 0x3, 0x30, 0x2, 0x1, 0xb21, 0x8000, 0x3, 0x40, 0x31fd48a1, 0x1, 0x6, 0x1, 0x8, 0x4000000, 0xd842, 0x4, 0x8, 0xfffffff9, 0x5, 0x9, 0x7, 0x22, 0x200, 0x80, 0x9b1, 0xffffff7f, 0x100, 0x7, 0x79f4, 0x1, 0xcfc, 0x3ff, 0xfffffff9, 0x9, 0x9, 0x936, 0x4, 0x3, 0x5, 0x400, 0x7, 0x24, 0x4, 0x9, 0x2, 0x1, 0x80000000, 0x9, 0x3, 0x6, 0x8, 0x4, 0x1, 0x2, 0x2, 0x7, 0x9b, 0x4, 0x9, 0x6, 0x7, 0x8001, 0xe181, 0x7fff, 0x2, 0x200, 0x0, 0x8000, 0x0, 0x8, 0x4, 0xff, 0x3149, 0x80000001, 0x6, 0x41, 0x3, 0x2, 0x1, 0x4, 0x4, 0x1f65, 0x0, 0xfffff001, 0x1, 0x6, 0x1f, 0x1, 0x2, 0x2, 0x1ff, 0xffff, 0x7, 0x6, 0x2, 0x3ff, 0xdf, 0x4, 0x6, 0x8000, 0x400, 0x81, 0x9, 0xffffffc0, 0x0, 0x1, 0x5, 0xea, 0x7c2b, 0x6, 0x1000, 0xffffffff, 0x0, 0x400, 0x40, 0x1, 0x7b3b, 0x80000, 0x7a11, 0x8001, 0x7ff, 0xffffffc0, 0x415, 0x82, 0xfff, 0x4e3, 0x3, 0x80000000, 0x3, 0x6, 0x2, 0x33, 0xe8, 0x1f, 0x10001, 0xfffff800, 0x80000001, 0x80, 0x1, 0x2, 0x72f4, 0x1, 0xffffffe1, 0x8, 0x3, 0x1000, 0x6, 0x1000, 0x80000000, 0x81, 0x7c, 0xffff, 0x101, 0x9180, 0x7, 0x8, 0x1, 0x5, 0x6, 0x9, 0x5, 0xc7b, 0x2, 0x80, 0xd88, 0x3, 0x5, 0x5597, 0x4799, 0x401, 0x6, 0x1, 0xfffffffc, 0x5, 0x2, 0x9, 0x8, 0xff]})
getsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0xd1}, 0x5)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="476c64fd", @ANYRES16=r5, @ANYBLOB="00042bbd7000ffdbdf251a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x7df31b676bb70f7d)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'gretap0\x00', 0x3})
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2b8, r7, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xefe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6bbd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2dc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4f4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31ca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x666a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f74}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe97}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x229}]}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb235}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4040800}, 0x10884)
ioctl(r0, 0x5, &(0x7f0000000080)="3380ad5314f687a29fdf38090000006f6b01638add3e719f19e4b435e366dbdcb500f83166e314a2b8f47ea5db778e7a7d50cd24c6")

[  301.980666][T13484] overlayfs: unrecognized mount option "upp€rdiE÷Õ-r=./file0" or missing value
14:45:35 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1405, 0x4, 0x70bd27, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x854)

14:45:35 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:35 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x82000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200), &(0x7f00000002c0)=0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x56}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x80, @mcast1, 0x8}, @in6={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00', 0x80000000}, @in6={0xa, 0x4e22, 0x80, @ipv4={[], [], @multicast2}, 0xab}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x10f, @loopback, 0x1}], 0xdc)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x200)

14:45:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2)

14:45:35 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:35 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)

14:45:35 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'ip6gretap0\x00', 0xffff0001})
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000065000000f579616fc2ad6296cb83d9269c4e3d81646f265bc5cc8408f67e8c6deae4cf4d4c7973e737867fee20f80725f5c1b911aba594fe7e9d2877ffd19786ae70cb4c70cb163dce65b10aca9e11e3a27438026c04000000d07526e45dfffec79259928112"], &(0x7f0000000000)=0x89)
ioctl(r0, 0x8b33, &(0x7f0000000100)="9de78331348b12e0c03afe67d6ceae4bf05b0389b4cbf434aa4109e7a454880a960faf147aee201f77fa6ed08a75da89aded82a1195abbf9bd43f30b643c48d5f4ec85d88f1e1ac2b405cb69121b29ff51940761bbd813dc6aeb8cf7a5")

[  302.398994][T13519] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
fchdir(r1)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000006240)={&(0x7f00000000c0)=@newtaction={0x6174, 0x30, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{0x6160, 0x1, [@m_pedit={0x3d4c, 0x15, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x3cf8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x9, 0x1, 0xfffffffffffffff5, 0x3f, 0x3}, 0x3, 0x0, [{0x6, 0xffffffff, 0x1, 0x0, 0x3, 0x6}, {0x5, 0x1, 0x2e, 0x8, 0x0, 0x8}, {0x81, 0x80000000, 0x12000000, 0xc7, 0x5, 0xfe000000}, {0xb203, 0x6, 0x7400000, 0xffff, 0x1, 0x2}, {0xac4, 0xffffffff, 0x80000001, 0x7fff, 0x20, 0x10001}, {0x5, 0x1, 0x0, 0x2, 0x1, 0x6}, {0x0, 0xfffffff6, 0x3, 0x10001, 0x40, 0x1}, {0x940, 0x20, 0x9, 0x70be, 0x1ee, 0xc1}]}, [{0x8, 0x5, 0x1000, 0x6, 0xff, 0x81}, {0x6356, 0x3f, 0x7, 0x7, 0x80, 0x8}, {0x0, 0x7, 0x401, 0x8000, 0x3ff, 0xffff}, {0x8001, 0x9, 0x8, 0x3, 0xf955, 0xc}, {0x2, 0x6, 0x0, 0x6, 0x54, 0x5e4}, {0x0, 0xfff, 0x8, 0x3, 0x7, 0x80000000}, {0x5, 0x1, 0x0, 0x918a, 0x2, 0xffff58da}, {0xfffffffe, 0x6, 0xbe, 0xe2e, 0xbe92, 0x6}, {0x1, 0x1ff, 0x8, 0x20, 0xb9, 0x39}, {0x4, 0x4, 0x8001, 0x9, 0x7, 0x20000000}, {0x5, 0x3, 0x3, 0x2, 0x3, 0x7}, {0x0, 0x1, 0x0, 0x7ff, 0x3, 0x10000}, {0xfffffff8, 0x1, 0x3ef2, 0x6e, 0x1f, 0x729}, {0xfff, 0x1400, 0x1000, 0xf5db, 0x5, 0x8}, {0x3, 0x4, 0x5, 0x1, 0x3, 0x9}, {0x10001, 0x8, 0x133, 0x7ff, 0x3, 0x8}, {0x3, 0x0, 0x1, 0x0, 0x5, 0x2}, {0xd6, 0x9, 0x7, 0x3, 0x0, 0x8}, {0x2, 0xfffff1e8, 0x80000001, 0x7, 0x80000001, 0x2}, {0x4, 0x7fff, 0x7, 0x49, 0x20, 0x6}, {0x0, 0xfffffffe, 0x3ff, 0x5, 0x1, 0x7}, {0x6, 0x80000000, 0xff, 0x400, 0x0, 0x7ff}, {0xff, 0x9, 0x0, 0x8000, 0x7, 0x5eb9607e}, {0x94f, 0x78e1, 0x2, 0x2a, 0x4, 0x380}, {0xffff, 0x401, 0x80000000, 0x7, 0x8, 0x31a0}, {0x6, 0x40000, 0x7411, 0x20, 0x6, 0xffffffb9}, {0x8, 0xb61, 0x9, 0x2, 0x40, 0x7a}, {0x9, 0x4, 0xfff, 0x3, 0x80000001, 0x6}, {0x3f, 0x7, 0x10000, 0x3, 0x5, 0xff}, {0x8, 0x7, 0x5, 0x0, 0x7, 0x80000000}, {0x0, 0x369, 0x40, 0x2, 0x9, 0x1}, {0x3, 0x5, 0x7, 0x8, 0x800, 0xffff}, {0xd90, 0x81, 0xfc, 0x274, 0x12f, 0x101}, {0x9, 0x101, 0x5, 0xa0c, 0x1, 0x2}, {0x81, 0x5, 0x5, 0x5, 0x6, 0x4}, {0x3, 0x7, 0x7f, 0x0, 0x10000, 0xfffffd91}, {0x5, 0x24000, 0x1, 0x4, 0x5}, {0x2, 0xff, 0x7, 0x6, 0x1, 0x1c6}, {0x10000, 0x9, 0x5, 0x3, 0x3, 0x8881}, {0x80000001, 0x4, 0x80, 0x20, 0x0, 0xbe}, {0x8001, 0x1, 0x0, 0x9, 0x0, 0x3ae}, {0x8, 0x9, 0x3, 0x3}, {0xfffffffc, 0xfffffff9, 0x9, 0x7, 0x7, 0x5}, {0x6, 0xd4d, 0x0, 0x4, 0x200, 0xff}, {0x3, 0x4, 0x7, 0x1000, 0x2, 0x8e}, {0x8001, 0xfff, 0x7, 0x7f, 0x4, 0x6}, {0x20, 0x5, 0x101, 0xffffffff, 0x3, 0x1}, {0xd9, 0x7, 0x9, 0x7c, 0x5, 0xffff}, {0x5, 0x3, 0x2, 0x0, 0x9, 0x20}, {0x4, 0x7ff, 0x6, 0x8000, 0x2}, {0xcf2e, 0xa90, 0x1ff, 0xffffffff, 0x0, 0x18}, {0x7f, 0x200, 0x4, 0x3, 0x5, 0x8}, {0x9, 0x8b, 0x700000, 0x10001, 0x401, 0x5}, {0x10000, 0x16, 0x31, 0x98000000, 0x3, 0x10000}, {0xfffffffd, 0x4, 0x6, 0x8, 0x1f, 0x2}, {0x1f, 0x7, 0xff, 0xffffffff, 0x0, 0x3ff}, {0x101, 0xe44, 0x5, 0x7ff, 0x2, 0x4}, {0x10000, 0x7, 0xfd, 0x20, 0xb3, 0x9}, {0x7fff, 0x80000001, 0x4, 0x44f9, 0x5, 0x1}, {0x9, 0x0, 0x6, 0x101, 0x3, 0x6}, {0x40, 0x20, 0x0, 0xff, 0x81, 0x8}, {0x100, 0x4, 0xffffffff, 0x7, 0x8, 0x20}, {0x7fffffff, 0x2, 0x7fffffff, 0xffffffff, 0x7f, 0x4}, {0x200, 0x3, 0x81, 0x309a, 0x8, 0xffff}, {0x69487e17, 0x1, 0x8, 0x81, 0x5, 0xdf7d}, {0x3025fe9a, 0x6, 0x8001, 0x3, 0x7, 0x7b2}, {0x9, 0x7, 0x3, 0xcfa, 0x92, 0x5}, {0x5, 0x80000000, 0x15e, 0x1, 0xd1fc, 0x5}, {0x1, 0x76, 0x80, 0x0, 0x4, 0x8}, {0x566a, 0x9, 0x20, 0x3, 0xffffffff, 0x2}, {0x6, 0x9, 0x800, 0x2, 0x6, 0x3}, {0x6, 0x80000001, 0xffffffe1, 0x9, 0xea, 0x9}, {0x2, 0x0, 0x5, 0xfffffff8, 0x5, 0x81}, {0x3, 0x8, 0x9e, 0x7, 0x7fffffff, 0x7f0}, {0xa34, 0x4, 0x59, 0xbc68, 0xb52, 0x6}, {0x4, 0x6, 0x1, 0x6, 0xfff}, {0x8, 0x401, 0x800, 0x3, 0x1, 0x4}, {0x6, 0x8, 0x7, 0x379, 0xff}, {0x8, 0xe9, 0x1000, 0x9, 0x101, 0x78d9}, {0x8001, 0x20, 0x8, 0x6, 0x7fffffff, 0x7}, {0x401, 0x101, 0x80000000, 0xc8, 0x5, 0x4}, {0x5, 0xed8, 0xfff, 0x1ff, 0x1, 0xd43c}, {0xfffffff8, 0x0, 0x6, 0x8, 0x9, 0x4}, {0xffff, 0x2, 0x1, 0x8, 0x7f, 0x1000}, {0x8000, 0x7, 0x9, 0x6, 0x0, 0x4}, {0x7fffffff, 0x4, 0x0, 0x1f6c, 0x3a, 0xffffffff}, {0xfff, 0x4, 0x7, 0x0, 0x0, 0x3}, {0xff, 0xe0000000, 0x92a, 0x0, 0x9}, {0x9, 0x1, 0xfffff5a0, 0x2, 0x0, 0x6}, {0x2, 0x1, 0x7, 0x5, 0x4, 0x1}, {0x40, 0x7, 0x7, 0xad41, 0x1, 0x5}, {0x0, 0x4, 0x0, 0x3, 0x3, 0x80000001}, {0xe0000000, 0x4, 0x80000001, 0x8, 0x7, 0x81}, {0x4, 0x0, 0x0, 0x0, 0x3f, 0xa200}, {0x9, 0x9, 0x2, 0xeb, 0xc387, 0x101}, {0x4, 0x3, 0xd7e, 0xffffffff, 0x10000, 0x9}, {0x9, 0x2, 0x1000, 0x200000, 0x9, 0x20}, {0x100, 0x1, 0x9, 0x6, 0x1, 0x20}, {0x73f0, 0x0, 0x3, 0x0, 0x1, 0x3}, {0x7c1f, 0x100, 0x3, 0x4, 0xffffd0a9, 0xfa6}, {0xff, 0xfff, 0x7, 0x7fffffff, 0x81, 0x2}, {0xfffffffc, 0x0, 0x3, 0x3, 0x1, 0xe6}, {0xb03, 0x4, 0xffffffff, 0x101, 0xc2d8, 0x9}, {0x81, 0x7, 0x5, 0x101, 0x9, 0x36}, {0xff00000, 0x1, 0x3, 0x7, 0x8}, {0x0, 0x7, 0xffffffff, 0x3, 0x8, 0x4}, {0x6, 0x2, 0xffffff96, 0x51, 0x8, 0x8}, {0x6, 0x10000, 0x3f, 0x8, 0xfffffe00, 0xd9}, {0x5, 0x2, 0x8001, 0x40, 0x0, 0x5}, {0x6, 0xb600, 0x0, 0xa5db, 0x8, 0x1}, {0x4, 0x8, 0x401, 0x8, 0x4, 0xffff28de}, {0x7, 0x10001, 0x8, 0xfffffffa, 0xa25, 0x1}, {0x101, 0x4, 0x5, 0x6, 0x200, 0x6}, {0x8, 0x1, 0x8000, 0x0, 0x81, 0x1}, {0x3, 0x9, 0xdd, 0x0, 0x67, 0x2b5c}, {0x3fc, 0xd4a, 0x4, 0x9016, 0x1, 0x3}, {0x6, 0x79da, 0x8, 0x6, 0x800, 0x9d8d}, {0x7d0, 0x8, 0x101, 0x69, 0xfffffffb, 0x7e1}, {0x3, 0x5576cb9c, 0xe3ca, 0x5, 0x9, 0x8}, {0x6, 0x80, 0x9, 0x20, 0x4a, 0x200}, {0x6, 0x80000001, 0x3, 0x8, 0x1ff, 0x6}, {0x7, 0x3, 0x3ff, 0x33a, 0xe4c5, 0x9}, {0x7ff, 0x2, 0x1, 0x100, 0x800, 0xb5}, {0x80000000, 0x396cc4c3, 0x7, 0x7fff, 0x8}, {0xe0, 0x4f41, 0x7, 0x8, 0x4, 0x3f}, {0x8, 0x8, 0x2, 0x8, 0x8, 0x10000}, {0x100, 0x753c8234, 0x92f0, 0x4, 0xfffffff7, 0x8001}, {0x20, 0x2, 0x6, 0xae55, 0x20, 0x8}], [{0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0xffdaa780ff7d2908, 0x1}, {0x2}, {0x3}, {0x0, 0xd95c1f21713e06a}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x6}, {0x3}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x95c9c682441d80ea}, {0x3, 0x1}, {}, {0x2}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x836942c60a4fddb1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x0, 0xe8a7, 0xffffffffdffffffb, 0x3, 0xfffffbff}, 0x0, 0x3, [{0x6, 0x4, 0xf5, 0xdc5, 0x5, 0x20}, {0x4953, 0xfffffe01, 0x8001, 0x80, 0x4, 0x3}, {0x8000, 0x4, 0x80, 0x96, 0x2, 0x800}, {0x5f6f, 0x8000, 0x28d8, 0x8, 0x8, 0x3ff}, {0x8, 0x5, 0x0, 0x1e28, 0x5, 0x7fffffff}, {0x1, 0x20, 0x5, 0x1, 0x7, 0xffff69b0}]}, [{0x2, 0x100, 0x847f, 0x8, 0x4, 0x5}, {0x9, 0x4, 0x0, 0x2, 0x1ff, 0x1ff}, {0x472b, 0x4, 0xffffffff, 0x2, 0x3f, 0x2}, {0x6b, 0x399, 0x58, 0x2, 0x5, 0xc0e}, {0x80000001, 0x8, 0x9, 0x4cb8b8c7, 0x10001, 0xbd6}, {0x1, 0x7, 0x5, 0x1, 0x89c4, 0x3}, {0xffff8000, 0xf563, 0x0, 0xfffffff7, 0x9}, {0x100, 0x10001, 0x3, 0x401, 0x8, 0x7f}, {0x20, 0x6, 0x9, 0x4d, 0x200, 0x8}, {0x1f, 0x3, 0x3, 0x0, 0x0, 0xffffff81}, {0x3, 0x3ff, 0x400, 0x3f, 0x81, 0x7}, {0x80000001, 0x8, 0x5, 0x7f, 0x4, 0x7fff}, {0x9, 0x3, 0xd7, 0x2, 0x8001, 0x1}, {0x1, 0x401, 0x7f, 0xda, 0x531b, 0x100}, {0x80000000, 0x0, 0x20, 0x6, 0x4, 0x5e2e}, {0x315, 0x0, 0x3, 0x1f, 0x2800000, 0x3}, {0x6cb, 0x51e7, 0x5, 0x8001, 0x101, 0x8}, {0x1, 0x69, 0x1, 0x8000, 0x7fffffff, 0xf2a7}, {0x9, 0x9, 0x80000000, 0x8, 0x6, 0x8}, {0x0, 0xcfc7, 0xe, 0x101, 0x1, 0x3}, {0x81, 0x0, 0x4, 0x1, 0x80000001, 0x800000}, {0xa6, 0x3, 0x100, 0x0, 0x5, 0x7fff}, {0x2f, 0x6, 0x3, 0x3, 0x3, 0x7}, {0x20000, 0x1, 0x3d28, 0x3b1abd9, 0xa3, 0x101}, {0xd6, 0x401, 0x18ad5712, 0x5, 0x2, 0x5a65}, {0xf6, 0x2, 0x1, 0x8, 0x10001, 0xfffffff9}, {0x9914f9e, 0x3, 0x5, 0x3, 0x3f, 0x3}, {0xa02, 0x48, 0x8000, 0x1ee8, 0x80000001, 0x70cc}, {0xc6c, 0x0, 0x7, 0x7c, 0x8, 0xe7}, {0x8, 0x4, 0xcc6, 0x4, 0x5, 0x100}, {0x0, 0x10000, 0x4, 0x6, 0x7b, 0x2}, {0xfffffffd, 0x3, 0xf141, 0x9, 0x25, 0x1}, {0x4, 0xfffff36c, 0xb8, 0x0, 0xd6, 0x3}, {0x1ff, 0x7b8c, 0xffffffff, 0x4, 0x7, 0x800}, {0x3, 0x55, 0x0, 0x100, 0x8, 0x9}, {0x2, 0x401, 0x6a4b, 0xfffffff8, 0x0, 0x81}, {0x9, 0x1, 0x2f, 0x6, 0x1, 0x5a8c4088}, {0x9, 0x1, 0x2, 0x52e, 0x4b18, 0x7fffffff}, {0xa84c, 0x86e, 0x7f, 0x800, 0x8, 0x5b}, {0x3, 0x5, 0x3, 0x85, 0x20, 0x7}, {0x0, 0x33, 0x0, 0x6837156c, 0x0, 0x1000}, {0x3, 0x8, 0xe291, 0x3978, 0x35a5, 0x40}, {0x1, 0x1, 0xfff, 0x80, 0x20, 0x2c7}, {0x6, 0x6, 0x101, 0x4f4, 0x29, 0xffff}, {0x3, 0xb0, 0xff80, 0x200, 0x3, 0x9}, {0x10000, 0x2, 0x3f, 0x9, 0xffff, 0x6}, {0xfffffc01, 0x1, 0x75d9cf4e, 0x800, 0x8}, {0x3ff, 0x2b86, 0x1000, 0x8, 0x8, 0xd55c}, {0x3f, 0xfffeffff, 0x5, 0x4, 0xe073}, {0x10001, 0x9, 0x4, 0x100000, 0x7fff, 0xfffffff9}, {0x3ff, 0x101, 0x7fffffff, 0x401, 0x6, 0x3f}, {0x45ca4c48, 0x4, 0x2000000, 0x7fffffff, 0x154b, 0x4}, {0x7, 0x1, 0x4048cd9c, 0x4, 0x240000, 0xfffffe01}, {0xff, 0x8, 0x8, 0x7fffffff, 0x3, 0x6}, {0x4, 0xffffffff, 0x2, 0xb54b, 0xaa49, 0xfffffffa}, {0x3, 0x0, 0x40, 0xfffffffd}, {0x0, 0x8, 0x13f5, 0x2d4, 0x7dc, 0xff}, {0x1f, 0x7, 0x0, 0xfffffff9, 0x4, 0xffff}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x40ec}, {0xf08, 0x3, 0x1, 0x6, 0x2, 0x3}, {0x400, 0x615f, 0x839, 0x5, 0xb9c, 0x2}, {0x1f0e, 0x3, 0x6, 0x6, 0xffffffff, 0xffff2584}, {0xed9c, 0x1f, 0x5, 0x101, 0x0, 0x2}, {0x5, 0x1, 0x80000001, 0x9, 0x9, 0x6}, {0x1ff, 0x0, 0x3, 0xa60, 0x5, 0x6c0}, {0x3, 0x8, 0x10000, 0x9, 0x2, 0x2}, {0x0, 0x5a58b111, 0x81, 0x1f, 0x4, 0x5}, {0x10001, 0x7, 0x1, 0x9, 0x5, 0xff800000}, {0x8, 0x5, 0x10001, 0x1, 0x0, 0x7a82}, {0x9, 0x2, 0x7, 0xd1e, 0xfffffff7, 0xffff}, {0x2, 0x10001, 0x95da, 0x800, 0x20, 0x4}, {0x7, 0x8000, 0x400, 0xff, 0xed, 0x1}, {0x2, 0x101, 0x7, 0x6, 0x81, 0x8001}, {0x40, 0x20, 0xe92a, 0x6, 0x8, 0x7}, {0x9, 0x8, 0x6, 0x4, 0x8, 0x3}, {0xfffffbaf, 0x3ff, 0x7, 0x5ff, 0x9, 0x3}, {0x10001, 0x400, 0x7, 0xfffffffa, 0x5, 0x5edd}, {0xffffa21d, 0x6, 0x9, 0x2, 0x3, 0x1}, {0x0, 0x2, 0x4, 0x7, 0x2}, {0x8, 0xfffffffb, 0x8, 0x1000, 0x7f, 0x9}, {0x5, 0x10000, 0x4, 0x9, 0x9, 0x7}, {0x5, 0x7, 0xfcf6, 0x80, 0x9, 0xa48}, {0x3, 0xfffffffd, 0x4, 0x10000, 0x507, 0x9}, {0x400, 0x5, 0x71, 0xfff, 0xfffffffa, 0x80000001}, {0xe0000000, 0x7f, 0x2, 0x6, 0x9, 0x2}, {0xff, 0x6, 0x2, 0x2, 0x9d4, 0x2}, {0x3f, 0x1, 0x800, 0x5, 0x3, 0x1}, {0x3, 0x4, 0x20, 0x537, 0xe7, 0x8001}, {0x800, 0x3, 0x80000000, 0x1, 0x932, 0x1000}, {0x401, 0x8000, 0xb690, 0x50000, 0x1, 0x5}, {0x6, 0xbb20, 0x8, 0x6, 0x8, 0x4f1a}, {0xff, 0x80000000, 0x80000000, 0x1000, 0x0, 0xfff}, {0x7ff8a71f, 0x3f, 0x0, 0x74, 0x5, 0x3}, {0x101, 0x8001, 0x7, 0x8, 0xffffffff, 0x3}, {0xb1, 0x7, 0x0, 0x5, 0xcf, 0x9}, {0x2, 0xffffffc0, 0x8001, 0xb31b, 0x200, 0x3}, {0x420, 0x0, 0x3f8, 0x72d9, 0x2, 0xbea}, {0x5, 0xaad9, 0xffffffff, 0x200, 0xfffe0000, 0x1ff}, {0x7, 0x4, 0x1c, 0xffffffff, 0x80000000, 0x8}, {0x5, 0x401, 0x6, 0x6, 0x8}, {0x9, 0x0, 0xffffffa8, 0x1, 0x2, 0x1}, {0x80, 0x3, 0x9, 0x4e6a, 0x4, 0x7ff}, {0x7, 0x9694, 0x5, 0x6da1, 0x9d, 0x2}, {0x10001, 0x1c0, 0x8de3, 0x9, 0xffff, 0x6}, {0x2, 0xa1, 0x1, 0x7, 0x4, 0xa1af}, {0xff, 0x3ff, 0x3, 0x2, 0x64ac, 0x9}, {0x6, 0x6, 0x400, 0x3f, 0x3f, 0x3f}, {0x2173, 0xffffff60, 0x859, 0x4, 0x6fed, 0x40}, {0x51c, 0x0, 0xff, 0xfd6, 0xb877, 0x8001}, {0x1, 0x0, 0x1e6, 0xfffffffb, 0x9, 0x80000000}, {0x0, 0x1, 0x6, 0x3, 0x728f2717, 0x1ff}, {0xeab0, 0x0, 0x2, 0x7, 0x7ad1, 0xfffffffb}, {0x9, 0x0, 0x8, 0x3, 0xffff, 0xc9}, {0x1, 0x8000, 0x7, 0x1f, 0x7, 0x100}, {0xc0c1, 0x7ff, 0x6, 0x80000001, 0x3, 0x20}, {0x7, 0x10000, 0xfffffffd, 0x5, 0x0, 0x3}, {0x6, 0xc2, 0x80000001, 0x7fff, 0x1, 0x1}, {0x40000, 0x7, 0x1, 0x2e, 0x1}, {0x1000, 0x4d, 0x4, 0xe0000000, 0x1df, 0xe8}, {0x4, 0x2, 0x568, 0xfffffff8, 0x7f, 0x5}, {0x0, 0xffffff08, 0x1ff, 0x1, 0x240000, 0x6}, {0x4, 0x3, 0x4, 0x200, 0xfffffff7, 0x8000}, {0x3f, 0xfffffd65, 0xfffffffe, 0x10001, 0x81, 0x9}, {0x1, 0x7, 0x7d6, 0x80000001, 0x2, 0x42fa}, {0x2, 0x6, 0x4, 0xfffffff8, 0x7aa, 0x407d}, {0x9, 0x841, 0x9, 0x6, 0xffffffff, 0x7ff}, {0x9, 0xffff, 0x1000, 0x200, 0x5, 0x5}, {0x8, 0x10000, 0x7fff, 0xffffff81, 0x9, 0x8001}], [{0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x9994d5a554b56e45}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x6}, {0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3}, {0x3}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x3}, {0x2}, {0x2}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0xe8, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x0, 0x7, 0x2, 0x7fffffff, 0x6}, 0x8, 0x7, [{0x3, 0x4, 0x1000, 0x9, 0x7fffffff, 0x9}, {0x80000000, 0x0, 0x5, 0x4, 0x5, 0xffffffff}, {0x2, 0x5, 0x3, 0x5, 0x4, 0x1}]}, [{0x0, 0xfffffff9, 0x9, 0x1b, 0x1000, 0x400}, {0x8, 0x5, 0xd618, 0x66d157b7, 0x81, 0x82}, {0x9, 0xa69f, 0x3, 0x2, 0x8, 0x3}, {0x1, 0x29, 0x40, 0xada2, 0x0, 0x100}, {0xffffffff, 0xffff, 0x4, 0x2, 0xfffffffb, 0xbf}, {0xffffff81, 0xffffffff, 0xfffffffd, 0x9, 0x7, 0x80}, {0x5, 0x9, 0x8, 0x8, 0x9, 0x1}, {0x2, 0x7fffffff, 0xfffffffc, 0x5e, 0x4, 0xd5bf}, {0x1, 0xb6d, 0x3, 0x834, 0x101, 0x9}, {0x39b, 0x40, 0x6, 0x101, 0x2, 0x1ff}, {0x5, 0x1, 0x400, 0x0, 0xc5a, 0x6}, {0x10001, 0x81, 0x0, 0x3, 0xa9f, 0x7}, {0x3, 0xfffffff9, 0x39a, 0x65f, 0x0, 0x2}, {0xd15, 0x97, 0x80000001, 0x400, 0x7fffffff, 0x7fffffff}, {0xfffffffa, 0x1, 0x3, 0x0, 0x84a5, 0x7}, {0x1, 0x81, 0x4, 0x80, 0x8, 0x4}, {0x9, 0x10000, 0x80, 0x8, 0x50000000, 0xa7c}, {0x9, 0xb291, 0xe0000000, 0xe3, 0x2, 0xfffffffe}, {0x5, 0x9, 0xb4b, 0x9, 0x1, 0x80000000}, {0xfffffffd, 0xfffffff9, 0x3, 0x7, 0x0, 0x1}, {0xfffffffa, 0x8, 0x3ff, 0x1, 0x8, 0x5}, {0xaf79f800, 0x7ff, 0x6, 0x75, 0x4, 0x7}, {0x8, 0x7, 0x80000000, 0x81, 0xe0000000, 0x10001}, {0x4fe1, 0x2699, 0x3f, 0x4, 0x8001, 0x3}, {0x10000, 0x6, 0x6, 0x3, 0x6, 0xbe}, {0xffffffff, 0x7, 0x0, 0x10000, 0x7, 0x5}, {0x0, 0x81, 0xd13, 0x7, 0x5, 0x6}, {0x4, 0x4b5, 0x2, 0x0, 0xff}, {0x9, 0x4, 0x7, 0x10000, 0x0, 0x8}, {0x6e5ddfcd, 0x7f, 0x3, 0xffffff45, 0x3, 0x1a85}, {0x2, 0x4, 0x3, 0x0, 0x0, 0x8000}, {0x3, 0x10001, 0x9, 0x3, 0x930, 0x20}, {0x3, 0x5, 0x4, 0x8a49, 0x7, 0x9}, {0x9, 0x2e, 0x0, 0x95e5, 0x55, 0x4}, {0x0, 0x3, 0x3e, 0x80000001, 0xffffffb7, 0x6}, {0x8, 0x7f, 0x7, 0xbcb00, 0x9, 0x5}, {0x7ff, 0x4, 0x1f, 0x3}, {0x6, 0xffffffff, 0x9, 0x1ff, 0xffffffff, 0x6}, {0x80, 0x3, 0x3, 0x3, 0x57e, 0x1ff}, {0x7, 0x6, 0x40000000, 0x57, 0xdf, 0x1}, {0x7, 0x80000000, 0x8, 0x8, 0x7, 0x1}, {0x9, 0xf12, 0x5, 0x2, 0x0, 0xe9fa}, {0x1ff, 0x1, 0x8000, 0x3, 0x6, 0x101}, {0x1, 0xad, 0x5, 0x6, 0x5, 0x1000}, {0xa6a3, 0x8, 0x40, 0x3f, 0x7, 0x1f}, {0x1, 0xffff, 0x6, 0xff, 0x8001, 0x5}, {0x8, 0xfffffffd, 0x4, 0x7fffffff, 0x401, 0xc25}, {0x5, 0x80, 0xff, 0xffffffc1, 0x5c, 0x4}, {0x8f, 0x1, 0x28, 0xcfd1, 0x7fff, 0x6}, {0x3, 0x8, 0x2, 0xa6, 0x5, 0x992}, {0x3, 0x9, 0xc00, 0x28, 0x8, 0x88}, {0x2, 0x0, 0x0, 0x8001, 0x9, 0x200000}, {0x3320000, 0x1, 0x7fffffff, 0x7ff, 0x6, 0x1}, {0xffffffff, 0x7, 0x8, 0xffff, 0x200, 0x4}, {0x7, 0x3, 0x81, 0x3ff, 0xfffffffe, 0x33b381ba}, {0x626c, 0x7ff, 0xfffffffa, 0x3c, 0x800, 0x3}, {0x2, 0x5, 0x8, 0x1, 0x8, 0x80}, {0x3, 0x4, 0x1, 0x8, 0x2, 0x6}, {0x3ff, 0x72cb, 0x6, 0x6c9534b6, 0x10000, 0x6}, {0x1, 0x4, 0x6f7b, 0xa8e, 0xc312, 0x80000001}, {0x3ff, 0x65b, 0x1, 0x6, 0x80000000, 0x2}, {0x7, 0x0, 0x80000001, 0x6, 0x2, 0x10000}, {0x4, 0x8, 0x9b, 0x68, 0x64, 0x1}, {0x1, 0x9, 0x7, 0x2700000, 0x200, 0xc5}, {0x6, 0x400, 0xfffffffa, 0x200, 0x7, 0x1}, {0x4, 0x3, 0x986, 0x7, 0x7ff, 0x2}, {0x1, 0x5, 0xff, 0x600, 0x1e, 0xe18}, {0x9, 0x3, 0x3, 0x0, 0x7, 0x2}, {0x200, 0x800, 0xc049, 0x0, 0x800, 0x1}, {0xfffffff8, 0x8, 0x80, 0xcbfb, 0x1, 0x6a}, {0xd5c, 0x3, 0x8000, 0x1f33, 0x8, 0x4}, {0x10001, 0x9, 0x7, 0x8000, 0xfffff000, 0x9}, {0x3ff, 0x2, 0x3, 0x6, 0x5, 0x1}, {0xfff, 0x1, 0x3, 0x6, 0xfb}, {0x3, 0x80000000, 0x1ff, 0xff, 0x3, 0x1}, {0x8, 0x1, 0xfffffbff, 0x0, 0x7e, 0x7}, {0x1f, 0x100, 0x1f, 0x1, 0x4684, 0xf4c}, {0x0, 0x10000, 0x1f, 0x6, 0x800, 0x7f}, {0x7f, 0x0, 0x5, 0x6, 0x8, 0x7fff}, {0x13, 0x8, 0x4, 0x0, 0x7e1c, 0x1000}, {0x6, 0x8, 0x3ff, 0x2, 0x0, 0x5}, {0x3, 0xffffffff, 0x400, 0x7fff, 0xa42, 0x40}, {0x77, 0x4, 0xffffffc1, 0xffffff00, 0xfd, 0x7}, {0x7, 0x3, 0x3f, 0x7d, 0x7, 0x1}, {0x3, 0xc00000, 0x401, 0x1, 0x7}, {0xd51, 0x800, 0xfffffff7, 0xd3, 0x40, 0x10000}, {0x443, 0x800, 0x8, 0x9, 0x8b, 0x3ff}, {0x4, 0x0, 0x800, 0x1, 0x9, 0x63}, {0x5, 0x40, 0x100, 0x3f80000, 0x5, 0x3}, {0xffffffc1, 0x6, 0x5, 0x3, 0x9, 0x2}, {0x40, 0x6, 0x5, 0x1f, 0x8, 0x1}, {0x7f, 0xfffffff7, 0x20, 0x7, 0x81, 0x6}, {0x2d, 0x2, 0x4, 0x7, 0x7, 0x8}, {0x401, 0x67d5, 0x98, 0x3f, 0x7, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x4, 0xea28}, {0x836b, 0x2, 0x3f, 0xa45c, 0xbe4, 0x9}, {0x5, 0x4, 0x80, 0x3997, 0xdcb, 0x9}, {0x86c4, 0x7, 0x3f, 0x80000001, 0x1dd, 0x2}, {0x5, 0x81, 0x635c, 0x7, 0xe00e, 0x7fffffff}, {0xffffffe1, 0x5, 0x4, 0x3, 0x3, 0x7fff}, {0x18000000, 0x0, 0x3ff, 0x401, 0xb9a}, {0x7, 0x6, 0xbf1, 0x8, 0x81, 0xf2}, {0x2, 0x9, 0x0, 0x8, 0x4, 0x2}, {0x2, 0x2, 0xe2d9, 0x1, 0x0, 0x4}, {0xfffffff8, 0x3, 0x3f, 0x3, 0xf7d, 0x3}, {0x1, 0x8, 0xffffffff, 0x200, 0xfffffffa, 0x2}, {0x8, 0xf5, 0x8, 0x0, 0x7, 0xe0000000}, {0x0, 0x4, 0x401, 0x3, 0x0, 0x8000}, {0x10000, 0x80000001, 0x81, 0x0, 0x4, 0x44fb}, {0x74, 0x1, 0x7, 0xffffffff, 0x100, 0x20000000}, {0x9, 0x6, 0x5225, 0x7, 0x0, 0x8}, {0x2, 0x1000, 0x200, 0x80, 0x7, 0x8}, {0x2, 0x8001, 0x3, 0xf7, 0x9, 0x7}, {0x9, 0x7ff, 0x1, 0x2, 0x9}, {0x2, 0x800, 0x2, 0x8, 0x7, 0x896}, {0x6, 0x3ff, 0x8, 0x7fffffff, 0x8, 0xffffffc1}, {0x7, 0x0, 0xc3, 0x3, 0x3f, 0x1}, {0xe4b, 0x5, 0x7fffffff, 0xff5fe96, 0x8, 0x7fff}, {0x800, 0xffffffff, 0x101, 0x2b, 0x9, 0x1ff}, {0x1, 0x973, 0x7fff, 0x1, 0x2, 0x7f}, {0xfff, 0xfa4, 0x5, 0x4, 0x5, 0x8001}, {0x4, 0x96, 0x7, 0x0, 0x0, 0x800}, {0x7, 0x1000, 0x4, 0x800, 0x40, 0x2}, {0x7, 0x7, 0xffffff90, 0x1, 0x8f91, 0x5}, {0x1, 0x4, 0xffff, 0x100, 0x0, 0x395a}, {0x4, 0x9, 0x0, 0x6, 0x1, 0x6}, {0x5c, 0x9fc, 0x10001, 0x8, 0x7fffffff, 0x4}, {0x2, 0x5, 0x0, 0x80, 0x7ff, 0xfe}], [{0x0, 0x1}, {0x5}, {}, {0x3}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x6, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x4}, {0x3}, {0x2}, {0x4}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {}, {0x1}, {0x5}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x6}, {0x2, 0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x2}, {0x3}, {}, {0x2}, {0x5}, {0x3}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x3}, {0x1, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x6}, {0x4}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xac, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x1f, 0x9, 0x5, 0x9, 0x9}, 0x60, 0x2, [{0x8001, 0xfffff91c, 0x3, 0x1a, 0x7, 0xfffff546}, {0x3, 0x10000, 0x3ff, 0x3, 0x9, 0x8}, {0x8, 0xf70, 0x8, 0x5, 0x7}, {0xfffffffe, 0xfffffffe, 0x4, 0x5, 0x7, 0x8}, {0x2, 0x40, 0x81, 0x80000000, 0xfff, 0xffffff01}, {0x6, 0x2, 0x5, 0x3, 0xfffffffb, 0x9}, {0x3, 0x7, 0x5, 0x200, 0x3, 0xba8e}]}, [{0x3, 0x7, 0x66, 0x400, 0xfffffffe, 0xb6}, {0x80000000, 0x6, 0x5, 0x2, 0x4, 0x8000}, {0x0, 0x40, 0x4, 0x8000, 0x7, 0x69}, {0x8, 0x1ff, 0x5, 0xffff, 0x9, 0x10000}, {0x6, 0xc7ec, 0x5, 0x3, 0x80, 0x401}, {0x6, 0x9, 0xcec, 0x4, 0x3, 0x80000000}, {0x80000001, 0x6, 0x5d, 0x6, 0x7, 0x8a4c}, {0x0, 0x0, 0x6, 0x7, 0x8, 0x7fffffff}, {0x6, 0x6, 0x10001, 0x23c1, 0x1, 0x3}, {0x8, 0xa1, 0x401, 0xfffffffa, 0x10000, 0x1}, {0x2, 0x6, 0x4, 0x0, 0x3, 0x8}, {0x1, 0xcf2, 0x4, 0x0, 0x3, 0xdb8}, {0xed, 0x9, 0x4, 0x401, 0xae9d, 0x8}, {0x1, 0x81, 0xde7, 0x6095, 0x1000, 0x532}, {0x8, 0x3f, 0x8, 0x200, 0xcd, 0x40}, {0x1121, 0x7, 0x2, 0x5, 0x7, 0xfffffff8}, {0x9d2d, 0x2, 0x2, 0x3f, 0x1, 0x5}, {0xffffffff, 0x3, 0x1ff, 0x0, 0x8ca, 0x3ff}, {0xe2ae, 0x5, 0x3, 0x7652b322, 0xf08, 0xffffffff}, {0x80000000, 0x3, 0x2, 0x8, 0x1, 0xaf2}, {0x28c00000, 0x8000, 0x9a35, 0x7fffffff, 0x7d6, 0x9}, {0x8, 0xffff, 0x7f, 0x20, 0x7, 0xf44e}, {0x7ff, 0x10000, 0x800, 0x5, 0xade2, 0x8000}, {0x4, 0x7, 0x100, 0x3, 0x80000000, 0x9}, {0x7ee, 0x8982, 0x2, 0x5e, 0x0, 0x100}, {0x400, 0x9db, 0x10001, 0x3, 0x8000, 0xffffff81}, {0xc67, 0x3191bbe2, 0x2, 0x7118, 0xffffffff}, {0x8, 0xbed, 0x2, 0x0, 0x1, 0xffff0000}, {0x2, 0x8001, 0x4, 0x800, 0x4, 0x6}, {0x6, 0x40, 0x7ff, 0xffff, 0x1, 0x5}, {0x0, 0x7fffffff, 0x6, 0x0, 0x0, 0x3b}, {0x101, 0x9, 0xffffffff, 0xd1c, 0x6, 0x2}, {0x6, 0x6, 0x81, 0x3, 0x100, 0xfffffffd}, {0x7, 0x7, 0x9, 0x6, 0xd1, 0xd01f}, {0x5, 0x101, 0x2, 0x8001, 0x8, 0x6}, {0x6000, 0x4000, 0x80000001, 0x7, 0xfffffffa, 0x8}, {0x7, 0x6c, 0x1, 0xffffffc0, 0xfffffff8, 0x7fff}, {0x3, 0x1, 0x5, 0x1ff, 0x441f, 0x3f}, {0xfff, 0x7fffffff, 0x593, 0x1, 0xf2c4, 0xb1c}, {0x80, 0x9, 0x400, 0x5, 0xffff}, {0x5, 0x2, 0xc73a, 0x1, 0x2, 0xffff}, {0x4, 0x3b, 0x7, 0x4, 0x9, 0x8001}, {0x554, 0x2, 0x800, 0x8000, 0x2, 0x7}, {0x3, 0x6, 0x4, 0x4, 0x200}, {0x32, 0x8, 0x3, 0xf23d, 0x8, 0x8000}, {0x400, 0xffffffc1, 0xfffffffa, 0x62, 0x77fd, 0x9}, {0x7, 0x9, 0xfff, 0x20a4, 0x7, 0x10000}, {0x0, 0x6639, 0x5eea, 0x6, 0x8001, 0x80000000}, {0x1, 0x45c, 0x3, 0xfffffffa, 0x9, 0x1}, {0x3f, 0x80000000, 0x1, 0x7, 0x200, 0x8}, {0x2, 0x7fffffff, 0x8, 0x0, 0x25688, 0x2}, {0x6999e033, 0x8, 0x3ff, 0xffffff9f, 0xa1, 0x1}, {0x9, 0x0, 0x7fffffff, 0x8ad48bf, 0xa03f, 0x200}, {0x4, 0x1, 0x3, 0xa8, 0x2, 0x6bcf0}, {0x8, 0x4, 0x3, 0x401, 0x5, 0x6}, {0x0, 0x4, 0x101, 0x1, 0x20, 0x2}, {0x8, 0x7ff, 0xfce, 0x6c, 0x401, 0xd39}, {0x0, 0x1, 0x4, 0x7, 0x1f, 0x5}, {0x9, 0x71c4, 0x57e, 0x3, 0x9, 0xfff}, {0xe299, 0x2, 0x6, 0x1f, 0x1, 0x9ee}, {0x1000, 0x3f, 0xed8, 0x742d, 0x18000}, {0x0, 0x0, 0x7e6, 0x7fff, 0x0, 0xffff075a}, {0x3f, 0x8, 0x3cd, 0x0, 0x80000000, 0x7fff}, {0x7, 0x8, 0x7, 0x8f1, 0x200, 0x6}, {0x3ff, 0xfffffffc, 0x5, 0xcb, 0xfffff7be}, {0x10001, 0x0, 0x8, 0x2, 0x10001, 0x7}, {0x5, 0x80000001, 0x0, 0x0, 0x2, 0xfff}, {0x8, 0x1, 0x100, 0x6, 0x7f, 0x1000}, {0x1, 0x48c, 0x6, 0xfff8, 0x9, 0x539}, {0xfffffff7, 0x6f, 0x6, 0x1, 0x7fffffff, 0x80000001}, {0x9, 0x40, 0x3ff, 0x4, 0xfff, 0x3}, {0x0, 0x2, 0xffffff66, 0x67e0, 0x14000, 0x5}, {0x8, 0x9, 0x5, 0x5, 0x1f, 0x7}, {0xffffffff, 0x4b84, 0x1, 0x2, 0x10000, 0x948}, {0x7, 0x74, 0x8, 0x26ba, 0x8, 0x44}, {0x7ff, 0x2, 0x400000, 0x140ce2b9, 0x40, 0x6}, {0x1, 0x5, 0x0, 0xffffff38, 0x20, 0x1}, {0x3, 0x2, 0x9, 0x6, 0x100, 0x3}, {0x6, 0x1, 0x1, 0x7, 0x3, 0x7e}, {0x4, 0x9, 0x2550, 0x1f, 0x80, 0xc742}, {0xfffffff7, 0x3f, 0x9, 0x6, 0x404c, 0x1}, {0xc69, 0x2, 0x3, 0x5, 0x2, 0x3}, {0x4, 0x4, 0xc5, 0x5, 0x3f, 0xaa}, {0x1, 0x68a, 0x1, 0x989, 0x0, 0x9}, {0x7, 0x8d0, 0x8000, 0xfffffffc, 0x3ff, 0x4}, {0x18, 0x0, 0x5, 0x3, 0x5, 0x3}, {0x8b3a, 0x20, 0xad0, 0x80, 0x4, 0x1f}, {0x0, 0x1, 0x2, 0x6, 0x1, 0x10000}, {0x7, 0x9, 0x7, 0x10000, 0x40, 0x1}, {0x2, 0x7fffffff, 0x2221, 0x2, 0x100, 0x1ff}, {0xb2, 0x81, 0xb88c, 0x101, 0x8a85, 0xffffff5b}, {0x7, 0x884c, 0x6fd1ce5f, 0x9, 0x4, 0x100}, {0x9c, 0x5, 0x3f, 0x8, 0x5, 0x1ff}, {0x5, 0x7f, 0x8, 0xfffffff7, 0x3ff8000, 0x505198fd}, {0x3ff, 0x6, 0x8, 0x9, 0x9, 0x5}, {0x20, 0x1, 0x7b, 0x6, 0xffff0000, 0x562}, {0x3, 0x10000, 0x81, 0x8000, 0x200, 0x4}, {0xffffff48, 0x4, 0x80000000, 0xffffff15, 0x40, 0x4}, {0x400000, 0xfffffffc, 0x40, 0x10000, 0x5, 0xb990}, {0x2, 0x7, 0x1, 0x9, 0x2, 0x400}, {0xdf8793d, 0x7, 0x0, 0x1, 0x8000, 0x101}, {0x3, 0x8b, 0x2, 0x7ff, 0x1f, 0x5}, {0x5, 0x2, 0x4, 0x7, 0x9, 0x1}, {0x40, 0x80000001, 0x3, 0x6, 0xafe, 0xdb3}, {0x8, 0x0, 0x0, 0x8, 0x101, 0x101}, {0x5, 0x100, 0x6, 0x6, 0xffff, 0x8000}, {0x3, 0x300000, 0x4, 0x9, 0x7, 0x3c}, {0x44, 0xfffffffe, 0x10000, 0x2, 0x80000000, 0x7}, {0x61d9, 0x3, 0x8, 0x238, 0x641f, 0x1}, {0x345, 0x1f, 0x6, 0x9, 0x6, 0x5}, {0x4, 0x9, 0x7, 0x1ff, 0x101, 0xfff}, {0x0, 0xa80, 0xffffffff, 0x9, 0x5, 0x6}, {0x2, 0x5, 0x6, 0x5, 0x7}, {0x1000, 0x0, 0x1290, 0x9, 0x40, 0x3}, {0x7fffffff, 0xba04, 0x0, 0xb15, 0x800}, {0xfffffff8, 0x4, 0x1000, 0x3, 0x2, 0x39c8}, {0x2, 0x8, 0x6, 0xffff, 0x4, 0xff}, {0x3f, 0x6, 0x20, 0x100, 0x9, 0x400}, {0x6, 0xfffffbc6, 0x200, 0x2, 0x8, 0x2}, {0x3, 0x100, 0x1000, 0x0, 0x3f, 0x7}, {0xe00000, 0x5, 0x0, 0x7fff, 0x0, 0x8}, {0xffffffff, 0xa689, 0x200, 0xc447, 0x7301, 0x104}, {0x4, 0x8000, 0x7, 0x7fff, 0x0, 0x9}, {0x7, 0x1, 0x5, 0xfffffffe, 0x9, 0x9}, {0x6, 0x8, 0x9, 0x1ff, 0x1, 0x7ff}, {0xff800000, 0x72, 0x6f, 0x5, 0x2ea, 0xe6}, {0x8001, 0x9, 0x1, 0x6, 0x89d, 0xa83}, {0x1, 0x4, 0x80000000, 0x1, 0x8001, 0x3}], [{0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x6, 0x1}, {0x4}, {0x2}, {0x1}, {0x6, 0x1}, {}, {0x7}, {0x2}, {0x0, 0x1}, {0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x2}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x2}, {}, {0x4}, {0x3}, {0x4}, {0x2, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {}, {0x3}, {0x3}, {0x5}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3}, {}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0xbc8fc6df8581de3d}, {0x2, 0x1}, {0x2}, {}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2}], 0x1}}]}, {0x43, 0x6, "e1d39d365356224fb5f8f2ec4d8038e84f7eced3b7166f732903485346a09f26074b964c77e1743507e1386f366e13b9948ae41e6843b2d42c8738111eed58"}}}, @m_pedit={0x105c, 0x1d, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x1010, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb8, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x10000, 0x8, 0x5, 0x8, 0x40}, 0x3, 0x5, [{0x7, 0x5, 0x2, 0xffffffff, 0x0, 0x1}, {0x8000, 0x3, 0x76, 0xfffffe01, 0x8000, 0x3ba8}, {0x17, 0x6, 0x2, 0xee, 0x8001, 0x7}]}, [{0x2c7, 0x3f, 0x3f5, 0x8, 0x3, 0x8}, {0x4, 0x7, 0x0, 0x8, 0x8000, 0x3}, {0x0, 0x7ff, 0x1ff, 0x0, 0x1, 0x7}, {0x1ad2, 0x3, 0x9, 0x1000, 0x401}, {0x20, 0x2, 0x0, 0x3, 0x43b, 0x5}, {0x80000001, 0x200, 0x9, 0xfff, 0x3a0, 0x101}, {0x2, 0x8, 0x7, 0x101, 0x4, 0xffffffe2}, {0x7d89, 0xdcc, 0x200, 0x1, 0x9a7f, 0x1f}, {0x8, 0x4, 0x2, 0x80000001, 0x3, 0x7}, {0x1, 0x9, 0x1, 0x8, 0x9cf, 0x4dbc}, {0x401, 0xf9, 0xdbe7, 0xffffffdd, 0x0, 0x3}, {0xfffffff9, 0x4, 0x8, 0x2, 0x4000000, 0x1}, {0x0, 0x80, 0x2, 0x3f, 0x3, 0x6}, {0xffffffff, 0x1, 0x2, 0x5, 0x7ff, 0x9}, {0x1, 0x8, 0x0, 0xff, 0x8000, 0x3}, {0x736, 0x80000000, 0x9, 0x5, 0x1c0}, {0x8, 0x1, 0xfff, 0x10000, 0x1, 0x2}, {0x7, 0xe5, 0xfffff800, 0x5, 0x4}, {0xfff, 0xea, 0x9, 0x1f, 0x7ff, 0x8}, {0x5, 0x2, 0x0, 0xcbcd, 0x8001, 0x100}, {0x8, 0x6, 0x8, 0x3ff, 0x4, 0x4}, {0x5, 0x4f5, 0xab, 0x8, 0xfffffff8, 0x9211}, {0x401, 0x7, 0x7fffffff, 0x9, 0xfffffffd, 0x401}, {0x9, 0x0, 0x0, 0x3, 0x800, 0x6}, {0x80, 0x0, 0x0, 0x2, 0x2}, {0x2ec, 0x8, 0x81, 0x101, 0x401, 0x8}, {0x6, 0x8, 0x6, 0x80000000, 0x2}, {0x87ca, 0x3, 0x0, 0x0, 0x10000, 0x81}, {0x800, 0xfff, 0x8, 0x2, 0x26, 0x33c8}, {0xffff75d4, 0x4, 0x4, 0x3ff, 0x0, 0x9b6c}, {0xbf1c, 0xffffff64, 0x8, 0x0, 0x5, 0x800}, {0x8000, 0x10000, 0x7, 0x4, 0x57b, 0x6}, {0x2, 0x4, 0x0, 0xb6, 0x9, 0x1f}, {0xe42, 0x8, 0x200, 0x81, 0x4, 0xb9}, {0x1, 0x4, 0x7, 0x4a, 0xbe5, 0x100}, {0x9, 0x9, 0x3, 0x3, 0x400, 0x7}, {0x7bb, 0xffff, 0x564d, 0x9, 0xfff, 0x4}, {0x100, 0x5, 0xda, 0x7fff, 0x7, 0x4}, {0x20, 0x6, 0x10000, 0x1, 0x1f, 0xff}, {0x0, 0x0, 0x80000000, 0x9, 0x7}, {0x1, 0x1, 0x401, 0x7fffffff, 0x9, 0x3}, {0xe069, 0x2, 0x0, 0x80000001, 0x401, 0x10}, {0x2, 0xfffffffd, 0x2, 0x4, 0x7af, 0x8}, {0x0, 0x1, 0xa505, 0x1f, 0x20, 0x3}, {0xfffffe01, 0xa4, 0x7ff, 0xffff, 0x3, 0x7}, {0x40, 0x3, 0x643, 0x6, 0x8001, 0x79d}, {0x10001, 0x7, 0x7f, 0x1, 0x7f, 0x9}, {0x81, 0x4, 0xf90, 0x4, 0xffffba5a, 0x8}, {0x0, 0x0, 0x1, 0x0, 0x8de, 0x3}, {0x9, 0x3, 0x7ff, 0x5a106456, 0x4, 0x3}, {0x7, 0x4, 0x200, 0x1, 0x4, 0xfffff001}, {0x8, 0x5, 0x6, 0x0, 0x1, 0x7}, {0x9, 0x3, 0x1ea, 0x4, 0xcce, 0x7}, {0x9, 0x7, 0xc00, 0x2, 0x3, 0x9fdd}, {0xaab, 0x8e48, 0x1, 0xfffffffe, 0x2fe0, 0xa1cb}, {0x2, 0x5, 0x9, 0x8, 0xfffffffb, 0x101}, {0x126b, 0x5, 0x1f, 0x101, 0x3, 0x4}, {0x6, 0x6, 0x7, 0x4, 0x2, 0x6}, {0xffffffc0, 0x1, 0x800, 0x3f, 0x80000000, 0x8}, {0x2, 0x6, 0x101, 0xfffffffb, 0x5, 0x10000}, {0x4, 0x1000, 0x80000001, 0x8, 0x5, 0x5}, {0x5c, 0x0, 0x196, 0x0, 0x20, 0x9}, {0x6, 0x6, 0x7ff, 0x80000001, 0x84fb, 0x6fa}, {0x4, 0x6, 0x80000001, 0x1000, 0x9, 0x5}, {0x2, 0x5, 0x7, 0x9, 0x1ff, 0x1}, {0xffffffff, 0xfffffc8a, 0x1, 0x3, 0xfffff000, 0x5}, {0x2, 0x6, 0x7, 0x4, 0x3, 0x3}, {0x6, 0x3, 0x10000, 0x1f, 0x8, 0x8}, {0x80000000, 0x9, 0x3, 0x81, 0x0, 0x9b7d}, {0xcd9, 0x2, 0xfff, 0x80, 0x3, 0x1}, {0x1, 0x5, 0x5, 0x7fffffff, 0xfffffffc, 0x4ea}, {0x9, 0x95, 0xfffff0ee, 0x3ff, 0x46a2, 0x3ff}, {0x4, 0x2, 0xffff24f5, 0x80, 0x8a8, 0x7fff}, {0x1, 0x8001, 0x200, 0x2, 0x7ff, 0xde}, {0x8, 0x2, 0xff, 0x7, 0x101, 0x3}, {0xff, 0x1, 0x3, 0x8, 0x6, 0x8}, {0x9, 0x8, 0x9, 0xd3, 0x5, 0x4}, {0x80000000, 0x800, 0x5, 0x7fff, 0x7, 0x101}, {0x0, 0x6, 0x10001, 0x7fff, 0xc5, 0x2}, {0xfffffffb, 0x6, 0x0, 0x5, 0x80, 0x5}, {0x8, 0x6, 0x3f, 0x1ff, 0x8, 0x8a}, {0x3, 0x1, 0x9, 0x2, 0x81, 0x5}, {0x1a280c78, 0x1, 0x80000000, 0xed, 0x8, 0x400}, {0xffff4245, 0x6, 0x4, 0x200, 0x9, 0x2}, {0xe52, 0x5, 0x20, 0x7, 0x8001, 0x2}, {0x40, 0x2, 0x1, 0x3, 0x0, 0x5}, {0x6, 0x2, 0x4, 0x401, 0xae, 0x4}, {0x4, 0xfffffff8, 0xfffffff7, 0x62c, 0xe571}, {0xd33, 0x4, 0x9, 0x7b0d, 0x10000, 0x7ff}, {0x1, 0x8, 0x8, 0x80, 0x8, 0x961}, {0x0, 0x7, 0x8, 0x8, 0x96e, 0x3}, {0x6, 0x3, 0x1, 0x9, 0xef6, 0x6}, {0x400, 0x9, 0x401, 0x5cae0c12, 0x3, 0x7fffffff}, {0x6, 0x9, 0x7, 0x4, 0x10001, 0x58}, {0x5, 0x28, 0x4, 0x8, 0x9, 0x5}, {0xfffffffe, 0x7, 0x9, 0x9, 0x6}, {0x0, 0x2, 0x6e0, 0x0, 0x6, 0x5}, {0xfffffffe, 0x8, 0x1000, 0x9, 0xfffffff9, 0x3}, {0x5, 0x62a, 0x1531, 0x9, 0x200, 0x7fffffff}, {0x41, 0xd5b6, 0x7, 0x3, 0x3, 0x8}, {0x0, 0x3f, 0x100, 0x1, 0x65, 0x7fff}, {0xf17, 0x42d8, 0x0, 0x9, 0x0, 0x3}, {0x9, 0x7fffffff, 0xffffff1a, 0x3, 0x7, 0x4}, {0x7, 0x100, 0x5, 0x4, 0x8, 0x3f}, {0xc6e, 0x1000, 0x2, 0x200, 0x5, 0x800}, {0x5, 0x4, 0x1, 0x8, 0x20, 0x7fff}, {0x200, 0x2, 0x7, 0x2, 0xaa2, 0x9}, {0x80000001, 0x0, 0x3, 0xfff00, 0x7fff, 0x4}, {0x8, 0x7, 0x40, 0x9, 0x3, 0xf}, {0xfffffffe, 0x2, 0x69, 0x200, 0x800, 0x7}, {0x5, 0xffffffff, 0x1, 0x7, 0x80000001, 0x64}, {0x21f, 0x400, 0x800, 0x36d, 0x1000, 0x7}, {0xff, 0x1, 0xfffffffe, 0x3, 0xed5, 0x3}, {0x2, 0x2, 0x6, 0x0, 0x400, 0x550d}, {0xc000000, 0x1, 0x3ff, 0x4, 0x2b9a, 0x10001}, {0xa31e0000, 0x1, 0x6, 0x3, 0x0, 0xfffffe00}, {0x2, 0x80000000, 0x7ff, 0x7, 0x8}, {0x5, 0x80000000, 0x7fff, 0x1, 0x101, 0x861}, {0x0, 0xfffffffd, 0x3, 0x4, 0x7, 0x3}, {0x1ff, 0x6, 0x99c, 0x3, 0x7, 0x1f}, {0x395, 0xfff, 0x1, 0x6, 0x5, 0x8001}, {0x0, 0x0, 0x7fff, 0x3, 0x1000, 0x8}, {0x9, 0x10000, 0xff, 0x3, 0xcf, 0x6}, {0x4, 0x7, 0x3, 0x1, 0x7f, 0x8}, {0x401, 0x6, 0x0, 0x9, 0x81, 0x100000}, {0x3ff, 0x96a, 0x5, 0x2, 0x9, 0x10001}, {0x1f, 0x0, 0x7fff, 0x20, 0xf7f, 0x200}, {0x8, 0x81, 0x3, 0x1, 0x1f, 0x9}], [{0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x3}, {}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x3}, {0x1}, {0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4}, {}, {0x6, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0xf29f451271f58887}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}, @TCA_PEDIT_KEYS_EX={0xec, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x3a, 0x6, "afd05a0358600bb652098c7a28697980f59bdd9ef8aa3de720c7402d1dddf49bfee2d8a6b2c62361fa8dec2aeb89f11406e516d43bba"}}}, @m_ife={0xec, 0x3, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x7, 0x7, 0x101}}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xd4c5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x80}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x98}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1f}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="c4629282bb34"}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x40}, @TCA_IFE_SMAC={0xa, 0x4, @dev={[], 0x13}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xaae5}]}]}, {0x27, 0x6, "035d5c5dcbf77aed765a40d7de88aff5f7587f14710a1925a93ec7e5d956f44afc8403"}}}, @m_gact={0x16c, 0x6, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1ca8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x44e, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x0, 0x3, 0x0, 0xb5e}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x1, 0x7, 0x7, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x69, 0x8001, 0x8, 0x0, 0x1}}]}, {0xf7, 0x6, "c1001ba638f96dbc5881eeef1099061077971d604910fc98727e00c6fc9d187f64620bca6b6d64e3442220927f130e7bd52f30eba25d5171abe627639bce7b7174e2695c3e574e72e775299b4708faa43ef100bc2274156923e561dda5ea9078a062ac0a1132e1e11000aeab89a0ec32839e2a3463c3784f9e88e4a4cb8f851e22dfc1e33f0383c69f50ce58584fa1e679e3b4fc9b3ab57fa4f9c6d32442f1e69e4abefc1a429d6a6152207980da5a5ad67a7f679c3fc4db234b3a5b363094d08207489ef20bd690d08844d05938a5a27580814ee80816118299fb40417489aa7767fdce1f535c50b719a081b852ef31eb1846"}}}, @m_skbmod={0x84, 0x10, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="7e9acf5fc874"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffb}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7ff}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="cf2cfdef1f17"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x35, 0x6, "3a98c1ff3777a5ccbd9fa509268e449ce4a17d6c0bdf2ef604b1a0ae99078a7200513e20b6c3d3d5675d4da7addac32a79"}}}, @m_simple={0x10d8, 0x12, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0xc4, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x23, 0x3, '/proc/thread-self/attr/current\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x6, 0x8000, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xba, 0x0, 0x4, 0x10000, 0xff00000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x6, 0x0, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x0, 0x10000000, 0xffff7fff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x20000000, 0x2, 0x3}}, @TCA_DEF_DATA={0x23, 0x3, '/proc/thread-self/attr/current\x00'}]}, {0x1004, 0x6, "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"}}}]}]}, 0x6174}, 0x1, 0x0, 0x0, 0xc801}, 0x40000)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:35 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:35 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:35 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8)
syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')

14:45:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r1, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'bond0\x00', 0xffffffff})
ioctl(r0, 0x8b32, &(0x7f0000000040))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)

[  302.813014][T13542] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:36 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8)

14:45:36 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffffc})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1f)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r5=>0x0}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x83, @loopback, 0x80000001}}}, 0x84)

14:45:36 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

14:45:36 executing program 3:
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x2, &(0x7f0000000040))

14:45:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x34})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000100))
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000000))
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x4c, 0xee, 0x0, 0x9, 0x6, 0x8, 0x40, 0x1, 0x3f, 0x24, 0x1, 0x2a}, {0x800, 0x0, 0x8, 0xff, 0x1f, 0x3, 0x6, 0x7, 0xd2, 0x50, 0x5, 0x7, 0x3}, {0x2400000, 0x2, 0x6, 0x2e, 0x7, 0x0, 0x8, 0x20, 0xc5, 0xfb, 0x40, 0x80, 0x9}], 0x4})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:36 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x80001, 0x84)

14:45:36 executing program 3:
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:36 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r0, 0x540, &(0x7f0000000000))

14:45:36 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x5, 0x84)

14:45:36 executing program 3:
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:36 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x204040, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@private=0xa010101, @multicast2, 0x0, 0x1, [@loopback]}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r1, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl(r1, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x842, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0x7fff)
ioctl(r0, 0x8b32, &(0x7f0000000040))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x5)
setuid(r4)
fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x6, 0x6}, {0x0, 0x7}], r4}, 0x18, 0x2)
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000440)={0x2, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x2, 0x2, 0x5, 0x81, 0x1, 0x0, "26f0c7e9"}, 0x51bb, 0x1, @userptr=0x9, 0x3ff, 0x0, <r5=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000840)={0x6, &(0x7f00000004c0)=[{@fixed}, {@none}, {}, {@fixed}, {}, {@none}]})

14:45:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl(r1, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000200)=""/222, 0xde}], 0x4, 0x1200)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x0, 0x9f}, 'port1\x00', 0x66, 0x9, 0xfffffc01, 0x3, 0xffffff00, 0x0, 0xad7, 0x0, 0x7, 0x8})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'bond0\x00'})
syz_extract_tcp_res(&(0x7f0000000380), 0x81, 0x7)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f00000003c0))
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000340))
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ftruncate(r5, 0x5d)
socket$kcm(0x29, 0x4, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe2b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl(r1, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r1 = gettid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x5c, &(0x7f0000000400)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffd55)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r2}, 0x30)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r4=>0x0, r0, 0x0, 0x6, &(0x7f0000000100)='eth0-\x00', r2}, 0x30)
pidfd_open(r4, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x80000)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c6f77ffffff7f723d2e2f6275732c776f727e6469723d2e2f66696c65312c75707065827b47b2cf709bc8e5e9160c4e362f2678ab3e56b259e937dd7a45504f9048679c2964c552d2e64eb07ff8343e5e686195cf782877474999b7d1f0112474d2ce1fc519e4ed3861c9d6f1ddaf224cab4d3893694d8dca09ca21d1f3a5d801545ac262cf12cae7e630acd75474ea188de01da83470a3b2931bb8c26df7703d1b8142d9a0b4c826b20a03d3c228abb18c2390630654641b403f0b683706a18ef93c3eef6c2f3e7d19304cf359874d5d9623ad388d899fee0ef4505de98d"])
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$KIOCSOUND(r5, 0x4b2f, 0x4)
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080))

14:45:37 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r1, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000))
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r1, 0x8b32, &(0x7f0000000040))

14:45:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  304.636730][T13657] overlayfs: unrecognized mount option "lowÿÿÿr=./bus" or missing value
[  304.703159][T13665] overlayfs: unrecognized mount option "lowÿÿÿr=./bus" or missing value
14:45:38 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80000)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'virt_wifi0\x00', 0xfffffff8})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:38 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200800, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

14:45:38 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:38 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:38 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:38 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x80, 0x3f, 0x3, 0x1, 0x2b, 0x80, 0x4, 0x63, 0x9, 0x92, 0x81, 0x1f, 0x1f}, 0xe)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

[  305.033595][T13682] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:38 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:38 executing program 2:
mkdir(&(0x7f0000000240)='./file2\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x4, 0x4)
chroot(&(0x7f0000000080)='./file1\x00')

14:45:38 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:38 executing program 5:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:38 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(r0, 0x0, &(0x7f0000000040))

[  305.344981][T13694] overlayfs: failed to resolve './file1': -2
[  305.382947][T13694] overlayfs: failed to resolve './file1': -2
14:45:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:38 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00')

14:45:38 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(r0, 0x0, &(0x7f0000000040))

14:45:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  305.611694][T13706] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(r0, 0x0, &(0x7f0000000040))

14:45:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:39 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x8010, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65060075707065726469723d2e2f66696c6530"])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
recvfrom$unix(r0, &(0x7f0000000100)=""/192, 0xc0, 0x0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)

14:45:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(r0, 0x8b32, 0x0)

14:45:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(r0, 0x8b32, 0x0)

14:45:39 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
ptrace$getenv(0x4201, 0x0, 0x3ff, &(0x7f0000000000))
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c6531f897707000000000723d2e2f66696c6530e336e8951cba40e6fdb2814a843ad0f40ca4bed898ae699603000000000000002d8243d97e547a0c33fd6625c8eafaf5c1bed78a181227ad0bd135b09130d6e0e6a1ca968116f47edd26353ace4a31cb703153e2a1220900000031870ffe5a088891c08af66211ea54d70a5460b56bf6398332f9e47a24bcf5e181f600000080000000008a1b67631d2490ac1a80b1540900"/204])
chdir(&(0x7f0000000200)='./bus/file0\x00')
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00')

14:45:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3})
ioctl(r0, 0x8b32, 0x0)

[  306.186924][T13734] overlayfs: option "workdir=./file1ø—pp" is useless in a non-upper mount, ignore
[  306.207945][T13734] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
14:45:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  306.244662][T13736] overlayfs: option "workdir=./file1ø—pp" is useless in a non-upper mount, ignore
[  306.272100][T13736] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
14:45:39 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x5)
setuid(r3)
mount$9p_tcp(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2004, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@nodevmap='nodevmap'}, {@afid={'afid', 0x3d, 0x9af1}}, {@debug={'debug', 0x3d, 0x3f}}, {@aname={'aname', 0x3d, 'veth1_to_bond\x00'}}, {@mmap='mmap'}, {@noextend='noextend'}, {@aname={'aname', 0x3d, 'GPL,'}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@aname={'aname'}}], [{@uid_lt={'uid<', r3}}, {@seclabel='seclabel'}]}})
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000002c0)={0x0, [0x1], 0x2}, 0x10)
fcntl$getflags(r0, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000080)={'veth1_to_bond\x00', 0x7})
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f7765727069723d5ce609ca1fe6a772a1063bfc8a94722e2f6275732c776f726b6469723d2e2f66690000000075"])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:39 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  306.519179][T13749] overlayfs: unrecognized mount option "lowerpir=\æ	Êæ§r¡;üŠ”r./bus" or missing value
14:45:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:40 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:40 executing program 5:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:40 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = syz_open_procfs(r0, &(0x7f0000000100)='attr/exec\x00')
write$dsp(r1, &(0x7f0000000140)="0f48e32e5f0e86cd5788eafebdec74097869bbda6a94f9741f84548a34c7dd079b", 0x21)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000180)={0x1})
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
clock_getres(0x5, &(0x7f0000000080))
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0)

14:45:40 executing program 5:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:40 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:40 executing program 5:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r0, 0x0, &(0x7f0000000040))

14:45:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r1=>0x0)
fcntl$setown(r0, 0x8, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r5, 0x100, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2c048095)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1}, 0x14}}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000140))
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0x40, 0x6, 0x2, 0x10000}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001200)={&(0x7f00000014c0)="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", &(0x7f0000001300)=""/70, &(0x7f0000001380)="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", &(0x7f0000000080)="20521acaa276a6e845cfa21064dc774885bbc669bf8bcfa84ed430451b8f75c1a5c0eadc412dfd0c0a6c4e3bd09842dc32980dfbe83d19e708917927ad8bb019312d8ca9827dfe5518ea3a50b160a10a3f15b2bea59222668ab677d58d98798860ebcd27358a6e6e22624b00c593e1da9a3c986373c6702e137be0b2be42abfce403d0d939da5a4cdee294082c152ab6c4fc2d2cd2821fd88dd105ed", 0x0, r1, 0x4}, 0x38)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000001240)={{0x33, @loopback, 0x4e21, 0x3, 'sed\x00', 0x40, 0x3, 0x25}, {@rand_addr=0x64010102, 0x4e23, 0x3, 0xc0, 0x3ff, 0x4}}, 0x44)

14:45:40 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r0, 0x0, &(0x7f0000000040))

14:45:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="4a17bd2a5a4bc80cb0d0f9acb8c1e2fdb78c124e3741370e08bb8489c4633c2fd70a4d8d9c4dd523e2da1e0000ef42ac8a0e95bb02fc80bea9378189d2ea51e8f02158122adf67aa83d92262d4cf20330c1d0a9a4d51c9b1b8db5724f403d322c179c6a3c00ce9b2f40eb2f43eb3b87f0bb21cec11d6dcace3f083704d12b41def521fbe60c088a766492ad3fe0d4084350cbb7e56b333", 0x97}], 0x1}, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x9}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000380)=[{0x18, 0x84, 0x0, "ed"}], 0x18}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))
rt_sigreturn()

14:45:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r0, 0x0, &(0x7f0000000040))

14:45:40 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  308.631524][T13759] overlayfs: unrecognized mount option "lowe†dir=./bus" or missing value
[  309.093109][T13759] overlayfs: unrecognized mount option "lowe†dir=./bus" or missing value
14:45:43 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r0, 0x8b32, 0x0)

14:45:43 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000090}, 0x4040)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b12, &(0x7f0000000080)="b68a55751f5e263f8edb78588e9410da9543f879f9739d36f1d85cbc80e0a6730032e3553a1b92e1cb3c00174175742625ef899c0c6d300cde9f6ee705d3296c41d527ff254cd391ee5ba0e80cd828685abce43b6f022b256bcd9e75742bcc43c38ccd676d81223dac3bb360ba031c06f8f0f048e7569f0f5213852f62c81625ad66a5b719e2c5c3094ca81cb258ad385ac5f3415d0ae2e99ee10949f9cc196ceb4e755731c8f3b8916d1af1fc968b0a")

14:45:43 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r0, 0x8b32, 0x0)

14:45:43 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  310.561565][T13816] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r0, 0x8b32, 0x0)

14:45:44 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
setsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f0000000080)=0x80000001, 0x4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="07cd2a44e7a61266bdd819fdad86de961a8045da457757f9710fcf3d8834b43a3adb3c095942a19d3fafc44ccdd4c603ec7c6f8e7777538dd7c6107c7e261c671d8074781959a93f2276e9c8a8376f8a36b6d249488268bec35d94cfac86abef892b884c69dca6c160bb2f10a94cd399e03f675dabdac620c5be2ff122257009", @ANYRES16=r5, @ANYBLOB="000229bd7000fedbdf25040000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x4)
setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r4, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8001)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
setuid(r3)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000000))
ioctl(r0, 0x8b32, &(0x7f0000000040))
remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x2)

14:45:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x7)
ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000000))

14:45:44 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x300, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0), 0x4)
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

[  310.735548][T13835] overlayfs: failed to resolve './file0': -2
14:45:44 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:44 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'bridge_slave_0\x00'})
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x288441, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x4000, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x9, 0x40000)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000200))
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000240)=0x1)
r6 = socket$inet(0x2, 0x80000, 0x4002084)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x76, &(0x7f0000000080)={r7}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYBLOB="1700070000006a6f06000d3f93d3e6f77d0524398cd4c72522a593a86f16cb30d8855db7cb01f62a2d54b5174c75bd34de9841ca52971abed73df7f95ebb207777a5de64fafa98943ec408b035c78e8ef4ce2e823e4bbde011bc29d285701fb8c3629a32bb474f7fd52d72855095000000004068a70c24859ce1c91c4a7115d5799241e5f931bce9cb5c4b51cffe7ed4500125270f17e740a4c427d0c10f220dc9b3da13b7c82287142c63453ad4e6cc494c965a9baeb85c110cd75887667d72751f1424"], 0xe)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000080)={0x7})
ioctl(r0, 0x8b32, &(0x7f0000000040))
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000000c0))

[  311.024858][T13850] overlayfs: invalid origin (0000)
[  311.036947][T13854] overlayfs: failed to resolve './file0': -2
14:45:44 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x6c002)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000040)={[{0x9, 0x4, 0x81, 0x0, 0x7, 0x40, 0x1, 0x6, 0x1, 0x5, 0x6, 0xff, 0x3}, {0x0, 0x9, 0xff, 0x2, 0x0, 0x80, 0x4, 0x80, 0x81, 0xf1, 0x6, 0x7f, 0x5}, {0x4, 0xfffe, 0x8, 0xaa, 0x2, 0x7f, 0x4, 0x2, 0x21, 0xff, 0xda, 0x81, 0xb3}], 0x8})
setuid(r2)
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  311.114005][T13859] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:44 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:44 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:44 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,wordir=./file1,upperdir=./file0\x00'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={<r2=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000140)={r2, 0x2})

14:45:44 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
getcwd(&(0x7f0000000200)=""/93, 0x5d)
r3 = syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280))
ioctl(r3, 0x4, &(0x7f0000000300)="0f937cf8e88841f0ae9989927f01fd862e1ce3fcd93aa1f5ad95dba47fbfa1bbc00b17c3c8c90ac3f634a1cdb452ef7c849415e9794644db39688e3b56edc5a6113589aa56ed65f231cf205a1e342a1515faf1518b9073f0b1afaf57b52aa8f09d29155b4a4b8d2fdea1353ca96d649f5c27df37c7311fe302d132e2b5f821b585f682b10649b7ea596dc3bdb5a745b9c737574a18d97f2f5fc40f9901de49f75b2e08fd7975b3d8fda1f76fb4da7056c509f7f3f626e5a91816fc9b5a98dcd302ceafb31abe4e3d5aabb6995147dcd065d84cbe5190547681e4f3af1488af3a5af5a73f632894d07cf25e38cab539c5000000")
setuid(r2)
ioctl(r0, 0x8b32, &(0x7f0000000000)="ab715ff8d1582c2f6313cfd23741a3792d440ff4c3da08c30000c71ca486eb")

[  311.390667][T13875] overlayfs: failed to resolve './file0': -2
14:45:44 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xffff})
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000080)={r4, r1, 0x20d3568c})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:44 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  311.558507][T13882] overlayfs: unrecognized mount option "wordir=./file1" or missing value
[  311.638893][T13882] overlayfs: unrecognized mount option "wordir=./file1" or missing value
14:45:45 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:45 executing program 2:
mkdir(&(0x7f0000000080)='./file1\x00', 0x44)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:45 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000200)=0xfffffffffffffd81)
setuid(r2)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:45 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:45 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  311.997759][T13902] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:45 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1])
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000980)=""/4096, &(0x7f0000000140)=0x1000)
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockname$netlink(r3, &(0x7f0000000080), &(0x7f0000000100)=0xc)

14:45:45 executing program 3:
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:45 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x100001, 0x0)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x64, 0x8, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000)
pidfd_getfd(r3, r1, 0x0)
setuid(r2)
ioctl(r0, 0x8b32, &(0x7f0000000040))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r5, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r6, 0x0)
getpeername(r6, &(0x7f00000002c0)=@caif=@dbg, &(0x7f0000000340)=0x80)

14:45:45 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  312.375472][T13921] overlayfs: failed to resolve './file1': -2
[  312.424185][T13923] overlayfs: unrecognized mount option "00000000000000000004" or missing value
14:45:45 executing program 3:
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  312.523735][T13931] overlayfs: unrecognized mount option "00000000000000000004" or missing value
[  312.663477][T13942] overlayfs: failed to resolve './file1': -2
14:45:46 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r1, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'veth1_macvtap\x00', 0xffffffff})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:46 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x101100, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x5)
setuid(r3)
ioctl(r0, 0x8b32, &(0x7f0000000040))
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r5)
setgid(r5)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000})

14:45:46 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:46 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:46 executing program 3:
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000400)={0x3, 0x80})
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x148, r3, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, "113f972d"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x9}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xf4, 0xbe, "d1df174b71ebb96dae61879cea344b1a58981ba0ca67558800aaf10f54fc7a7336a3155b429906801e0466d0efca94004c3a3ec7eb91d600adb3aaa276dda4bc976bda6aef31c4d5b46f247813e65c1863c9b0471db7cea36b08647b54b30e6864eef54804a81073bb12d2c589bd06e672b5010075ca6136f154d67aebd87efc6eac8ebea8f57e7d478d6eea1d4b942161be32b77d9070df791a7fa3cdb2b93d0d6fb42e73621bf858e42a0578c645cb4022ce2f270bdaa81648d91b00372a409e0b85baf06fa7ceb67c8d1a61da3a90ff3410acf33c943604a5f78d21a8927911ad4ae88f0724a1704d41f17dbe42e6"}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x20}, @NL80211_STA_WME_MAX_SP={0x53, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x0, 0x19, 0x1}]}, 0x148}, 0x1, 0x0, 0x0, 0x41}, 0x8040)
ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000000)={0x0, 0xd22})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x86})
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  313.405032][T13958] overlayfs: failed to resolve './file1': -2
[  313.430486][T13961] overlayfs: unrecognized mount option "lowerdi	Ž‡Ã.8ûºworkdir=.0file1" or missing value
14:45:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'bridge0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:46 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x101001, 0x0)
accept4$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x10, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:46 executing program 3:
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  313.496284][T13969] overlayfs: unrecognized mount option "lowerdi	Ž‡Ã.8ûºworkdir=.0file1" or missing value
14:45:46 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setuid(r2)
ioctl(r0, 0x8b32, &(0x7f0000000040))
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200540, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x28, 0x32, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4008004)

14:45:47 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r1, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r2, 0x0)
connect(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @empty}, 0x1, 0x0, 0x4, 0x2}}, 0x80)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:47 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x6, &(0x7f0000000000), 0x4)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/317])
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8800, 0x0)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:47 executing program 4:
socket$isdn(0x22, 0x3, 0x23)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'gre0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:47 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setuid(r2)
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3ff, 0x2080)
ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000040)=0x8)
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  313.751892][T13989] overlayfs: failed to resolve './file1': -2
14:45:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r1, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'wg1\x00', 0xffff8000})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000240), 0x10)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000200)=0x4)
fcntl$getflags(r4, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
waitid$P_PIDFD(0x3, r5, 0x0, 0x1, &(0x7f0000000080))
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001340)=""/197, 0xc5}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000280)=""/163, 0xa3}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x4)

14:45:47 executing program 3:
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'bond_slave_0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  313.883756][T14000] overlayfs: unrecognized mount option "C„/ê>2«dž�õÒ¹†workdir=./file1" or missing value
[  313.919505][T14000] Unknown ioctl 8706
14:45:47 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setuid(r2)
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fff, 0x101800)
write$eventfd(r3, &(0x7f0000000040)=0x7fff, 0x8)
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  313.949843][T14000] overlayfs: unrecognized mount option "C„/ê>2«dž�õÒ¹†workdir=./file1" or missing value
[  313.976705][T14009] Unknown ioctl 8706
14:45:47 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b6469323d2e2f66696c65312c75707065726469723d2e2f66696c6530bf7a608e13c000120263fcc095d748f2cd010f1d840534cf795ac7cc8b714036c4cc7e2f13290900000000000000467a11d47cbbecef9014688510f2939ae3cfb1000c82221aa2a04593d827de1900236c7a0e4a"])
removexattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="01736d7d2e5e00"])
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setuid(r1)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
setuid(r3)
r4 = getuid()
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r6)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010006000000000002000000", @ANYRES32=r1, @ANYBLOB="02001800", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="040001000000000008000000", @ANYRES32=r6, @ANYBLOB='\x00'/16], 0x4c, 0x1)

[  314.049290][T14019] overlayfs: failed to resolve './file1': -2
14:45:47 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:47 executing program 3:
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:47 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0xc)
setuid(r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000080))
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:47 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x8})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r6 = openat(r5, &(0x7f0000000140)='./file0\x00', 0x109040, 0x54)
ioctl$KVM_GET_TSC_KHZ(r6, 0xaea3)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000280)="263ed0fcb811018ec00fc7b19300660f38f6c00fc76ab0bad10466b80828000066ef0f01ca66b9c303000066b83207000066ba000000000f3067de2266b8010000000f01d9", 0x45}], 0x1, 0xc, &(0x7f0000000080)=[@dstype3={0x7, 0x5}, @dstype3={0x7, 0xf}], 0x2)
ioctl(r1, 0x8b30, &(0x7f0000000040))

[  314.256967][T14032] overlayfs: unrecognized mount option "workdi2=./file1" or missing value
[  314.309112][T14037] overlayfs: failed to resolve './file1': -2
14:45:47 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:47 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r1, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
mount$overlay(0x400000, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='scalable\x00', 0x9)

14:45:47 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = getpid()
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000005c0)={0x4, 0x4, 0xfff, 0x9}, 0x10)
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
r5 = clone3(&(0x7f0000000480)={0x80, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x31}, &(0x7f0000000340)=""/87, 0x57, &(0x7f00000003c0)=""/113, &(0x7f0000000440)=[r0, 0x0, r1, r2, r3, 0x0, 0x0, 0x0, r4], 0x9}, 0x50)
migrate_pages(r5, 0x3, &(0x7f0000000500)=0x8001, &(0x7f0000000540)=0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000200)=0x5)
setsockopt$sock_int(r6, 0x1, 0x4, &(0x7f0000000000)=0x6, 0x4)
setuid(r8)
ioctl(r6, 0x6, &(0x7f0000000600)="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")
connect$rose(0xffffffffffffffff, &(0x7f0000000580)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)

[  314.641841][T14059] overlayfs: unrecognized mount option "0x0000000000000008" or missing value
14:45:48 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x400080)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @local, 0x79}, 0x1c)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:48 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:48 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_NEWNSID={0x24, 0x58, 0x200, 0x97f, 0x25dfdbfc, {}, [@NETNSA_FD={0x8, 0x3, r2}, @NETNSA_FD={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x830}, 0x40000)
ioctl(r0, 0x8b32, &(0x7f0000000040))
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r5 = pidfd_getfd(r4, r2, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, '\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x400c000)

[  314.788168][T14074] overlayfs: unrecognized mount option "0x0000000000000007" or missing value
14:45:48 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:48 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:48 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x7, 0x10}, 0xc)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x6}}}]}, 0x78}}, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r6, 0x10, &(0x7f0000000340)={&(0x7f0000000240)=""/209, 0xd1, <r7=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, [@alu={0x7, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffc0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x96e0, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x66}, @ldst={0x2, 0x0, 0x2, 0xb, 0x9, 0xfffffffffffffff8, 0x10}, @alu={0x4, 0x0, 0x1, 0x5, 0x4, 0x8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0xb, 0x2, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0xff, 0x6, &(0x7f0000000140)=""/6, 0x0, 0xd, [], r3, 0x0, r5, 0x8, &(0x7f00000001c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x0, 0x1ff}, 0x10, r7}, 0x78)

14:45:48 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
accept4$netrom(r1, &(0x7f0000000100)={{}, [@null, @rose, @null, @null, @default, @null, @rose, @netrom]}, &(0x7f0000000000)=0x48, 0x800)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0xc5, 0x1, 0x80}, 0xc)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x4, 0x1, 0x2, {0xa, @sdr={0x32525942, 0x20}}, 0x20})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:48 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  315.099461][T14102] overlayfs: unrecognized mount option "àTŸõcXZD6vñ©¶÷†Ù®?$NÉ Œæš2xó­èÔÆוn—p@ûΕa~¹b
I$M@�8_í½¶²’˜¡—Ìñ¢/ë‚ÿ©GÌÙÝ›¹Bn`‹¥ç¤ŸÇ§íšH–ØtsÜH¥
$ÿ%Ò²^M	–·" or missing value
[  315.197533][T14109] overlayfs: unrecognized mount option "àTŸõcXZD6vñ©¶÷†Ù®?$NÉ Œæš2xó­èÔÆוn—p@ûΕa~¹b
I$M@�8_í½¶²’˜¡—Ìñ¢/ë‚ÿ©GÌÙÝ›¹Bn`‹¥ç¤ŸÇ§íšH–ØtsÜH¥
$ÿ%Ò²^M	–·" or missing value
14:45:48 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x3, 0x100, 0x1, {0x4eb7, 0x9, 0x400, 0x3}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r1, 0x8b32, &(0x7f0000000040))

[  315.337612][T14116] overlayfs: failed to resolve './file0': -2
14:45:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x20001, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))

14:45:48 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:48 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x4, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe00}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x85}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40000000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1d}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x379}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r3, 0x8b32, &(0x7f0000000040))
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x258, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc0a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @loopback, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast1, 0xe71}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x10}, 0x4010)

14:45:48 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10100, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x18c, 0x23, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@nested={0xa0, 0x68, 0x0, 0x1, [@generic="2f5a2e57cfcbe91330ad0cf39fb27f120b25f264e71cb82141ee9a404df015b6b6dbefe594191be56c", @generic="963d388136732df0b2750f4ad98ac18cf969343cdb05929005237093ab76c84540f17fc40a4c455555430f82a382447079a41a1ea2aea889268e89b80b31ae65d400b2be9571f6f4505c6e0de7f07c0d3dbad1321b9685baad1619aa2e16f848a8727120ded07f0983692e5f68f511a7c28520"]}, @nested={0xd7, 0x38, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @fd=r3}, @generic="02608b90739fdc55bc9cf08b0bbd55c82509d64aa69d8b44e929dbac1bd3549f52a0fa61fc82f2d6dc1f6f5ef47fb80866ed6c0f36c10fa68c48ee821d08d0cf333223a76a68b8bfc6b61adbc22a43ec7b758e501a394f76b0bfb5d685326a19375fded158ad2e7f514a6818125e7b5a7ec51229d20f3a0b4f760e242e179ccb0ac3638f0db073bfd33b8e45609b1e70a1ec42515aaca4d6945324cf35abac5c4b477779f3f395b0eee39e2234b199a39f46ec4804dade", @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0x5c}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x14008061}, 0x34000090)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x650201, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
move_mount(r4, &(0x7f0000000200)='./bus\x00', r5, &(0x7f00000002c0)='./file1\x00', 0x5)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000080)=[{0x1, 0x0, {0x1, 0x1, 0x3}, {0x0, 0xff, 0x4}, 0xff, 0xfe}, {0x2, 0x0, {0x2, 0x0, 0x3}, {0x2, 0xf0}, 0xfe, 0xfd}, {0x2, 0x0, {0x1, 0x1, 0x2}, {0x0, 0x0, 0x1}, 0x2, 0x1}, {0x0, 0x0, {0x1, 0xff, 0x2}, {0x2, 0xf0, 0x3}, 0x1, 0x2}], 0x80)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8000, 0xec, 0x5, 0x6fb, 0x11, "4408977f05e36a37"})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:48 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  315.591142][T14130] overlayfs: failed to resolve './file0': -2
14:45:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'bond0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:49 executing program 0:
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
finit_module(r2, &(0x7f0000000080)='virt_wifi0\x00', 0x0)
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))

14:45:49 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:49 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  315.796407][T14132] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x128}, {}, {}], 0x3, 0x0)
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x5, 0x6, 0x0, 0x16, "3e46c1510a30d2aeb328bc8fb6fff8d1e8b80a"})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
memfd_create(&(0x7f0000000000)='\'\x00', 0x2)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27)

14:45:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'vcan0\x00', 0x5})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:49 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'system.', 'mountinfo\x00'}, &(0x7f00000001c0)='-\'\x00', 0x3, 0x1)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000200), &(0x7f00000002c0)=0x4)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
fanotify_mark(r0, 0x98, 0x40000000, r2, &(0x7f0000000080)='./file0\x00')
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x3, 0xff, 0xff, 0x3, 0x0, 0x9e, 0x20, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x400}, 0x100, 0xda2, 0x81, 0x1, 0xffffffff, 0x9, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)

[  315.954771][T14162] overlayfs: failed to resolve './file0': -2
14:45:49 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
write$P9_RREAD(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x101)

14:45:49 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  316.181219][T14173] overlayfs: unrecognized mount option "loweÚ‡Ó@Ôc:us" or missing value
[  316.281502][T14181] overlayfs: unrecognized mount option "loweÚ‡Ó@Ôc:us" or missing value
14:45:49 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x0, 0xc, 0x4, 0x800, 0x800, {0x77359400}, {0x2, 0x0, 0x1f, 0x3f, 0x20, 0x2, "ef770991"}, 0x3b, 0x1, @offset=0x40, 0x3, 0x0, <r3=>r2})
write$binfmt_misc(r3, &(0x7f0000000280)={'syz1', "dcd7b0dc57c9da3d1948c7b290a8645a01c23244f5e9f9a2c8e97022ade890acf5593c5dade8724e28eddc955704c74a6de63dbcfe2b0c01db523f6ab4eda16e651b2dc51010149277594962941bc34ff857abf75d80665eaf4da5ad9a8f3796bb5bf60f9626b73c9123c8d596dc6140d5085421ed52843ef6ea44097c2a4349ec19a098f373886ed3dbb6dae67f2d7ec0"}, 0x95)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'netpci0\x00', 0x7fff})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:49 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffff, 0x125840)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x76, &(0x7f0000000080)={r3}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r3, 0xa6, "b886c54d24740ef3c987ad24f4b2c044b2e2d9a1676b073c3d54850a2fd25bce4236d6c58db096954e7715b4f537f3009f02461bc8f91e7494acc66f7532b4d2067beac58c0de0cfc9ce21e985cd49fd3ff08679bc6d9a5db92d2de4bdb0dd03c2faade4621fa606bc649faaddfef5c85857edc59725410ccf5f5d50b1cce1a89848be1187ba65d0cc235ed2549f945d83fe55b8f206747edb80f05ff3fa5711cfbd5020af98"}, &(0x7f00000001c0)=0xae)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:49 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getmulticast={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000814)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = msgget$private(0x0, 0x0)
msgsnd(r3, &(0x7f0000000000)={0x2}, 0x2000, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000400)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff})
msgsnd(r3, &(0x7f0000000240)={0x1, "cc7f69b3576388e2d5b5a205183334c5a4fbbe"}, 0x1b, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000200)={0x9, 0x3, 0x1b, 0x1, 0x8})
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/112, 0x70)

14:45:50 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  316.746436][T14194] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:50 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0)

14:45:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r4, r0, 0x1})
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x401})
sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0xc, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008840}, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))
ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000))

14:45:50 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f7365582869723d2e2f62757328776f726b6469723d2e2f66690200000000000000f2726479723d2e2f66696c6530"])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'geneve1\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:50 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:50 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  317.199764][T14228] overlayfs: unrecognized mount option "loseX(ir=./bus(workdir=./fi" or missing value
[  317.253651][T14228] overlayfs: unrecognized mount option "loseX(ir=./bus(workdir=./fi" or missing value
14:45:50 executing program 2:
mkdir(&(0x7f0000000080)='./file1\x00', 0x40)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000280)={0xfffffffd, [0x0, 0xea04], 0x523}, 0x10)
fcntl$getflags(0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x22000}, 0xfffffffffffffeef, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008050}, 0x1)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc)
memfd_create(&(0x7f00000000c0)='\'eth1$\x00', 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000100)=""/228, &(0x7f0000000200)=0xe4)
ioctl(r0, 0x8b32, &(0x7f0000000040))
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f00000003c0)={0x6, 'gre0\x00', {0x6}, 0x47})

14:45:50 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/208, 0xd0}, {0x0}], 0x2}, 0x0)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/140, 0x8c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x42)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r4, 0x0, 0x8164, 0x0, 0x0, 0x800e00547)
shutdown(r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvfrom(r5, &(0x7f00000005c0)=""/211, 0xd3, 0x40002, 0x0, 0x0)
shutdown(r4, 0x0)
shutdown(r2, 0x0)

14:45:50 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  317.638391][T14246] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'ipvlan0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = openat(r1, &(0x7f0000000580)='./file0\x00', 0x400000, 0x40)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x6}}}]}, 0x78}}, 0x0)
connect$can_j1939(r2, &(0x7f00000005c0)={0x1d, r4, 0x0, {0x2, 0xf0, 0x2}, 0x7e}, 0x18)

14:45:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'tunl0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:51 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
readlinkat(r0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=""/152, 0x98)
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:51 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40420c0}, 0x4000000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000480)={0x0, 0x0, 0x300d, 0x1, 0x5, {0x6, 0xff}, 0x1})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000400)={0x8, "f91ecd4663fd66794930de97b8d30bc70f22683a9a99732e8682b67cdb5931f1", 0x10, 0x8, 0xe2, 0x4, 0x2})
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40100000202030000000000000000000a000009b40002802c00018014000300fe8000000000000000001800000000aa14000400fe800000390c000280050001000600000014000180080001080002007f0000011400018008000100ac14141b080002000a01010206000340000400002c00018014000300fe8000000000000000000007002000aa14000400fe88000000000000000000000000010114000180080001007f00000108000200ac0600034000010000fc0003802c00018014000300fc00000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100880000001400018008000100e006000208000200ffffffff2c00018014000300fe8000000000009c5010cec3829a9cefb80000000000000000aa14000400000000000000000000000000000000001400018008000100e000000208000200000000000c000280050001008800000006000340000380002c000180140003000000000000000000000000000000000114000400fe8800000000000000000000000001012c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb00"/454], 0x1c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000018)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x76, &(0x7f0000000080)={r5}, 0x8)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f00000003c0)={0x2000})
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r5, 0xbda7}, 0x8)

14:45:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0)
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  318.193977][T14274] overlayfs: missing 'lowerdir'
[  318.223644][T14272] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x800002})
ioctl(r0, 0x8008b32, &(0x7f0000000140)="f7c6af142bbe5fe8c6b8048e5d9543000000003ae561a02f298efdbc13723882bd5b4e14a206f3b470875adcd3873e8e85ed25f2707b663fb1b0e51e449ebc109b028cd0d0b281d08c012a51089c53d4991cb62caba8b320f691e96b0000635ebec26e6ba307003e118a0692fb0600000000000053b2725d5da84d04d0ae90c5e60841920500d30086e5bd76970cdd79174d5a8ab4553ce2634ff56f94134ee5cce597e8cec14eda5362b54208190cbe9454f6a75d08061b2ddff9a2a5724249b8d1edb6d41414a9d4c49aeeb5770a9282f39db26e3f66eb2aff33c5df39aab651486e450f31a0f152e70a8ec2")
r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x1030c0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x6, 0x2, 0x0, r2})
get_thread_area(&(0x7f0000000000)={0x7, 0x20000000, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1})

14:45:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0)
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:51 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
close(0xffffffffffffffff)

14:45:51 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x0, &(0x7f0000000080)})
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:51 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x101000, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl(r5, 0x3, &(0x7f0000000100)="858c9fbd9c50a222de7afd020c379275fe338494d7d05eee4841ad9c6c61c6d4a30f617abf714221b748e03ce08c5d4ebdd4")

[  318.479491][T14291] overlayfs: missing 'lowerdir'
14:45:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'bond0\x00', 0x2})
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x0)
ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000080)={0x500, 0xf0, 0x320, 0xa70, 0xfffffffb, 0x4, 0xf, 0x0, {0x6}, {0x2, 0x4}, {0xfffff000, 0x0, 0x1}, {0xf1, 0x7fff, 0x1}, 0x1, 0x2, 0x8, 0xe1, 0x1, 0x5, 0xedca, 0xcf2, 0xa4, 0x1ff, 0x7fff, 0x1000, 0x3, 0x200, 0x1, 0x6})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:51 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, 0x0)
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:52 executing program 1:
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
sched_setattr(0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

[  318.739965][T14311] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:52 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:52 executing program 0:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}]}]}, 0x6c}}, 0x0)

14:45:52 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@mcast2}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0)

14:45:52 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x323}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x8001a0, 0x1c, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000004122e25d30806", 0x0, 0x403, 0x0, 0x22d}, 0x28)
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000100)={0x1, 'ip6tnl0\x00', {}, 0xfe00})
listen(0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x98)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

[  318.866046][T14321] overlayfs: missing 'lowerdir'
14:45:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'xfrm0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'syzkaller1\x00'})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
socket$inet6_sctp(0xa, 0xf8d29fa9432dea65, 0x84)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in=@empty}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8)

14:45:52 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  318.956022][T14333] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
14:45:53 executing program 0:
io_setup(0x10000, &(0x7f0000000000))
io_setup(0x40000000008, &(0x7f0000000240))

14:45:53 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:53 executing program 1:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000000199050000000000000000"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(r0, 0x0, r2, 0x0, 0x40003e, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
open(0x0, 0x0, 0x0)

[  319.771555][T14365] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'.
[  319.814195][T14364] overlayfs: unrecognized mount option "./bus" or missing value
14:45:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$RTC_VL_CLR(r1, 0x7014)

14:45:53 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:53 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:53 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}]}, 0x30}}, 0x0)

14:45:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000080)="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")

[  320.177281][T14383] overlayfs: unrecognized mount option "./bus" or missing value
14:45:53 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  320.454551][T14397] overlayfs: unrecognized mount option "./bus" or missing value
[  320.920070][T14344] overlayfs: failed to resolve './file0': -2
14:45:54 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x4, 0xc, 0x4, 0x0, 0xffff8001, {r2, r3/1000+10000}, {0x2, 0x8, 0x40, 0xff, 0x20, 0x24, "9d7972bd"}, 0x2, 0x4, @planes=&(0x7f0000000140)={0x0, 0x6c8, @mem_offset=0x5, 0x1}, 0x3f, 0x0, <r5=>r4})
ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000200))
finit_module(r0, &(0x7f0000000080)='systemlo)^\x00', 0x3)
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:54 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x0)

14:45:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xbe37)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="4ea35c9f13fc", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "08f200", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

14:45:54 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:54 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x80000, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7618cd6a2ed40241, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc080)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000100)={0x76, "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"})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000440))
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xc7e9, 0x4c3})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:54 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  320.972425][T14344] overlayfs: failed to resolve './file0': -2
[  321.126929][T14412] overlayfs: unrecognized mount option "./bus" or missing value
14:45:54 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x80)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:54 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0)

14:45:54 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:45:54 executing program 4:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f00000003c0)={0x4, 0xffffff00})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
fgetxattr(r1, &(0x7f0000000380)=@known='trusted.overlay.nlink\x00', &(0x7f00000000c0)=""/158, 0x9e)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@random={'system.', 'trustedcgroup@-[\x00'}, &(0x7f0000000200)=""/129, 0x81)
r2 = socket$nl_route(0x10, 0x3, 0x0)
dup(r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'gretap0\x00', 0x2})
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
read$rfkill(r4, &(0x7f0000000400), 0x8)
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f00000002c0)="b3a3acbf923c010000009c6fa5836cd8a1a36237fbf820037d3e3ff23565c67cdbc50d48d4a8d1aceada0cfbc42200fc0500000000000000bad406000000000000000819782abc9b0f621a1c6b8a1eff7d343228bb7f8498dc8f303a782f9f76f78701a2f0000050fe66b52f5e783006b32f13058e1e9a968a131be496b38bf889e7ee6876879a3f6c8db50229a990c20000000000000000")
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000004c0)=@req={0x28, &(0x7f0000000480)={'team0\x00', @ifru_settings={0xffffffff, 0x9, @sync=&(0x7f0000000440)={0x6, 0x40}}}})

14:45:54 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  321.396990][T14431] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:54 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file1\x00', 0xa7)
socket$bt_cmtp(0x1f, 0x3, 0x5)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c5d7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530b41a155525366689214eb5b868212fa09fde3ec314297d922e20f6a0846d8c894c904814454d8321c26466f7a71739752e60b0de1d5fdcff344a19d7a57f741f113b3d328ec5d20000000000d5c9b804de6f4ef1"])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:54 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a004872bbb689620900c07f801700000000593f77d747dceede20885532318ad608231b088784bacb299b79aaf8aa933cb97a557a3747c9d7ea8f086d6758e38b47a07f7dd31dc3e70772b589e7c6a8394f8370e0dfcbac491cab9a445b9e786bc74a4088f49eb7f5ad8332af06e351e71371f10a6154875d3ab6a9d6a2c9bf586668b7c33aac68df2ea5db828d4011747e7fd0a05dee9d3c442c6cafd5e5c8f3e5f5ba434140455002533525f7af292646fe293677b0afba585b55693d6709cc91f95f4532fa69a493252585b2a0cf4285887102f055ba9e26632ceb16bc9587af18c51be8a9c67374e538fd9b38ef3a6118c48db9424966ead427ccabfdbcdfc7c00000"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

[  321.506566][T14458] overlayfs: unrecognized mount option "./bus" or missing value
14:45:54 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x8009}}, 0x20}}, 0x0)

14:45:55 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/39, 0x27)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x216000, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000380), &(0x7f00000004c0)=0xc)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1, 0x1200)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000003c0), 0x4)
connect$caif(r2, &(0x7f0000000000)=@rfm={0x25, 0x0, "cf92dd68aecfa1a9f3d84747dc9b681a"}, 0x18)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000001c0)="57dfd2c86bc8fca26021cb728f7e09ce0d81276af3d456b5fd4de36da072a08fcf51c2e5add72869da29d68479d9970b2d5be60167c16dbffe5597c7491abc8d492234c2f54f88c2499605397a03b227f49c3133548f75199ce32483d0e0f3e2f6d6e7a4fe6fb598a72dd5e3d29969b780e59931112c6e9eeb3eef2eaf38ce248e1294bb5f1388b2d163738dae9419eec133b28e08ac0967409e434bfa709dc67bf7b699bceb", &(0x7f0000000300)=""/21, &(0x7f0000000280)="876cf5f4d9e39bcfda44b8518f71d9f41f91cddd6cbaee99866fe826cc0b5a7198cca3cd329d4b108b25c21616d0c1292ddf542951b0bac55d47dc630aed2ae348dda36dbf012aee31ea9247a9b15be2fbcc2a8bf1afece48a4e9786", &(0x7f0000000400)="5b633369fd1ba74d751c236f61f29e03703d22242456aac5ab3b2a278dc8446b1a017119122e08fe7eb60775bf2373a1091681b2d3ed5c2c74a1ea5e8d129200541e0d792f99198203e33dfe8656b662d4d3c536781b356870303859ca16c866763481f27297c4b2c3885f3342508442be0904a796fc6a20404ba73c60d725458c8749efdbdd4162dd8674338ccfe93a345b8faa0500e3226d7c6b522aaa1a997a0e984bdc254eba93d71904e889e33200"/189, 0x5, 0x1}, 0x38)

14:45:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  321.695132][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  321.722480][T14481] bridge1: port 1(syz_tun) entered blocking state
[  321.739071][T14481] bridge1: port 1(syz_tun) entered disabled state
14:45:55 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

[  321.751222][T14481] device syz_tun entered promiscuous mode
[  321.788506][T14485] overlayfs: unrecognized mount option "l]werdir=./bus" or missing value
[  321.804672][T14481] bridge1: port 1(syz_tun) entered blocking state
[  321.811279][T14481] bridge1: port 1(syz_tun) entered forwarding state
14:45:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  321.851181][T14493] overlayfs: unrecognized mount option "l]werdir=./bus" or missing value
[  321.865603][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  321.884509][T14496] overlayfs: unrecognized mount option "./bus" or missing value
14:45:55 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
set_robust_list(0x0, 0x0)
recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000380))

14:45:55 executing program 2:
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@ipv4={[], [], @multicast2}}, &(0x7f0000000140)=0x14)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:55 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:45:55 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="c087f6dbd4ac664e4dd9422e1afe2dd767e51a16379bc787b1edb1b831d8aa6ffdbf4d04b1ea13308b8708246cdcc1c60d8250cfc5c5baf530d03b7dd2b052975e82051f9fbb816380c4eaa1f60cbca34cfd1085f4a1b750bed5ec0f625c5b70c534dc81fb2f0f6df3d33e649d86420c28a459ceeb8b5823cc", 0x79}, {&(0x7f0000000100)="e29dfcb3f99f6c04dafc6fa2af0459b7e1aeb82b707cd1ad465483e2349ab34fceb6c86d5e8ea472b92f69720c17bf732ed0d31d92899ef69b24457e6842999893e2", 0x42}], 0x2, &(0x7f0000000200)}}], 0x1, 0x4000800)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x8b5, 0x0, 0x100, 0x8, 0x9, 0x51da, 0x9})
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r3 = inotify_init1(0x0)
r4 = inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x20000000)
readv(r3, &(0x7f0000000140)=[{&(0x7f00000038c0)=""/180, 0xb4}], 0x1)
inotify_rm_watch(r3, r4)
inotify_rm_watch(r2, r4)

14:45:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:55 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:55 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:45:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/34, 0x22}], 0x1, 0x1200)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x80, 0x9, 0x7ff, 0x7, 0x101})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000140))
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
fcntl$getown(r3, 0x9)
getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

[  322.221141][T14512] overlayfs: option "workdir=." is useless in a non-upper mount, ignore
14:45:55 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  322.279869][T14512] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
14:45:55 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
set_robust_list(0x0, 0x0)
recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000380))

14:45:55 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

[  322.405732][T14516] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:45:55 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000071400042cbd7000fcda84f9918c752108dbdf2508004400dc153c556fe5d82213620589b0f9418cae02349cdb9d826aeffabfaaf780034ad6db8afbaf2fa559d350cd1a02d881982994980bbc394aa177bc12937899f5194b83f9608f180ece1a8ad255e7e7ea0fa86b19b2b31372a0addb1f18480b3a9f7a648ec3ccf8b8031ce871354d5a640728117f94ef684ff19ba7043d5bc636894a24815c21c2c2d52e9263aba26be82d48", @ANYRES32=r0, @ANYBLOB="0800018175a20ea4f68e183782e5ef4d2fc88fbfb4fc362ba4511e04700cc8c2fb6fd8e3e8feb9e9c6832fc55932f892de26859a401d3d98456b8111fa0ae61c00067cb15d5025f5ac98cc853bc0c0ccf0b7031c42d7cc856a8e0152c31ad4fe0c744d69e52e926a8bb0a4749eb7182891f5e0a80f2e307725f2c5720af1a199e4fb5f11f26c33cd527c6e06106faa440d122f972ce8d92bf6bb320a28cae03c14f63b9882e3e581abd9c48f5ffa0465eb44ed651eabd596315415b678b55e7bb36fbcf96b2089363bc119f8b314fe432cb66fff5ffc1bf72f69c265749a074d5400dc1fe2ce621eb932b43a857a15bc01f54692241cdb56a9787491b498e1a0c92365539c00f6df114adae602a0e6c1c33344705ed1ac6d6f21776c2ebcca3c3a522d5bc523a68ebe927f60065fd0d70dd72c62c506021ddc92e097a5bff49ba777657d2288cff23ef42cb0f65544b77d4e829cf2a67060883c5d071700a1f12e5d017060a89f463ab7695c1102290e479da502e3181f2c4c3b0ac8aabee1ea325f"], 0x20}, 0x1, 0x0, 0x0, 0x4004008}, 0x81)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0xa00809, &(0x7f00000001c0)=ANY=[])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@random={'osx.', '!+Osecurityself$cgroup\x00'})

14:45:55 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'hsr0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:45:55 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:55 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
setitimer(0x1, 0x0, 0x0)

14:45:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  322.656833][T14543] overlayfs: option "workdir=." is useless in a non-upper mount, ignore
14:45:56 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

[  322.704554][T14543] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
14:45:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x30e})
ioctl(r0, 0x5, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x0, 0x7, 0x4, 0x10000, 0xffffff81, {r1, r2/1000+60000}, {0x3, 0xc, 0x8, 0x1, 0x3f, 0x3, "f6e983c8"}, 0x5, 0x0, @planes=&(0x7f0000000080)={0x3, 0x101, @fd=r3, 0xe89d}, 0xbc95, 0x0, <r4=>0xffffffffffffffff})
ioctl$KDDELIO(r4, 0x4b35, 0x0)

[  322.780135][T14547] overlayfs: missing 'lowerdir'
14:45:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:56 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  322.824835][ T3024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready
[  322.886056][T14561] overlayfs: missing 'lowerdir'
14:45:56 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:56 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:45:56 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x420800)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000200)=0x5)
setuid(r3)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x17, 0x7, {0xffffffffffffffff}, {r3}, 0x8, 0x8000})
r4 = syz_open_procfs(r2, &(0x7f0000000180)='net/arp\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
write$UHID_INPUT2(r4, &(0x7f0000000080)={0xc, {0xba, "9f2a5491f60c0b063fc2ebc643784572511d6648cfe3dc40c2df1b5d07e4a5c88bc19b10f0b94af52c04f947d5897238fb09b1389341757195b04ad35b2b587d1a5dcfad7e2b0169b74e5a8edf839c41523ff52fe3ddf830d4f3e6b44bdf020eb30e983de852a1cce58fab1c6dc9fde378ccc8b6658242c94aa33435e2eb635c60f1e48414705eec4aa8740ed73aadae237aa33db03a5f54cddc105b2e29547de6fa41152ba54857adfc07ea53ba3ce5500b0cdc312ddcb07342"}}, 0xc0)

14:45:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  323.070798][T14549] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  323.084267][T14576] overlayfs: option "workdir=." is useless in a non-upper mount, ignore
14:45:56 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  323.131591][T14576] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
14:45:56 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
umount2(&(0x7f0000000100)='./bus\x00', 0x9)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080))
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000000)=@random={'trusted.', '.+]\x11\xbd\t\xa5]mountinfo\x00'})

[  323.300238][T14594] overlayfs: unrecognized mount option "upper" or missing value
14:45:57 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024008f9be3f5965c9bacbc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48d9f1", 0x4f}], 0x1}, 0xc000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400})
sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x192, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10)

14:45:57 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:45:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:57 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x2, &(0x7f0000000200)="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")

14:45:57 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:57 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000080), &(0x7f0000000440)=""/4096, &(0x7f0000000100)="38aa9b7ddf2626f64fc8c22f028e046e9fa4cf39d5aa873ab3e1e1405fca4daa18adaae0b328330de6f4e9de2d32463431cd17adc53f2229d29db633d443c42cb29a92c152ce57eaad96c82045b9aa52c15635c582850fd1cc32448f27b4f9a445e14eb15dafd5124507c29c5c520187b909d42d6652103e0fe3be33eac4b073c9066a85e6cb5c9b9db71603facdc1d8473d608400ffb1a9849853097a6c0fa871440820b6fcd23efe2e948a", &(0x7f0000001440)="d92e4919df4bcf5de53bece442273a135e17d1370fc5222bfdd3d56fc1dce8cce96f1c39e70981cbc78595ae69c7aedfa63ceb7402a48880bb08b2d6b30b276a060b8d12c6eda6643c94d39e28cf92f37e8237ded3e05b545e62f304f6b10982f9615ec2e0aacb42e8bc793f30c324998683d74ac93ed6756b1e67f2e4364c7a0b430a2549fc70e6ed42fdf4112570cdc27e2db8ad67aa3f8026f6a5874f923e3a312ba91b130d902f96a53f59a60a8573578ff605942b399e15218a47c0a3027c7a77f3e7ad6e0924eb50c7f7", 0x7, r0, 0x4}, 0x38)
removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')

14:45:57 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:45:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:57 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @netrom}, [@bcast, @remote, @remote, @rose, @remote, @rose, @remote, @bcast]}, &(0x7f00000000c0)=0x48)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
kcmp(r2, r3, 0x2, r5, r1)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x240000, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r8, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000980)=""/4096, 0x4000, 0x3000, 0x5, 0x2}, 0x20)
ioctl(r6, 0x8b32, &(0x7f0000000040))

[  324.191705][T14624] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  324.194489][T14623] overlayfs: unrecognized mount option "upper" or missing value
[  324.262284][T14634] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  324.273248][T14634] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  324.284261][T14634] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  324.293903][T14634] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  324.303426][T14634] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
14:45:57 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:57 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
getpid()
sched_setattr(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00')
preadv(r0, &(0x7f00000017c0), 0x375, 0x0)

[  324.313061][T14634] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  324.322696][T14634] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
14:45:57 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

[  324.441706][T14643] overlayfs: unrecognized mount option "upper" or missing value
14:45:58 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001"], 0x38}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0)

14:45:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:58 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:58 executing program 1:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a004872bbb689620900c07f801700000000593f77d747dceede20885532318ad608231b088784bacb299b79aaf8aa933cb97a557a3747c9d7ea8f086d6758e38b47a07f7dd31dc3e70772b589e7c6a8394f8370e0dfcbac491cab9a445b9e786bc74a4088f49eb7f5ad8332af06e351e71371f10a6154875d3ab6a9d6a2c9bf586668b7c33aac68df2ea5db828d4011747e7fd0a05dee9d3c442c6cafd5e5c8f3e5f5ba434140455002533525f7af292646fe293677b0afba585b55693d6709cc91f95f4532fa69a493252585b2a0cf4285887102f055ba9e26632ceb16bc9587af18c51be8a9c67374e538fd9b38ef3a6118c48db9424966ead427ccabfdbcdfc7c00000"], 0x70}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0)

14:45:58 executing program 2:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x51)
sendfile(r2, r2, &(0x7f0000000240), 0x7fff)

14:45:58 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
pidfd_open(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r1, 0x8b32, &(0x7f0000000040))
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0101000000000000000401000000440001000c00070000000000960000000c0006006c626c637200000008000b000a69700008000800000000000800090000000000080001000a000000080005"], 0x58}}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8d64}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0xc0040)
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x1, 0x81, 0x29e, 0x8, 0x101, 0xfe}, &(0x7f0000000000)=0x9c)

14:45:58 executing program 1:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0)

14:45:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

[  325.089493][T14672] overlayfs: workdir and upperdir must be separate subtrees
[  325.112275][T14675] __nla_validate_parse: 7 callbacks suppressed
[  325.112285][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
14:45:58 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  325.181544][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
14:45:58 executing program 2:
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/1, 0x2}], 0x200000000000000f)

14:45:58 executing program 1:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a004872bbb689620900c07f801700000000593f77d747dceede20885532318ad608231b088784bacb299b79aaf8aa933cb97a557a3747c9d7ea8f086d6758e38b47a07f7dd31dc3e70772b589e7c6a8394f8370e0dfcbac491cab9a445b9e786bc74a4088f49eb7f5ad8332af06e351e71371f10a6154875d3ab6a9d6a2c9bf586668b7c33aac68df2ea5db828d4011747e7fd0a05dee9d3c442c6cafd5e5c8f3e5f5ba434140455002533525f7af292646fe293677b0afba585b55693d6709cc91f95f4532fa69a493252585b2a0cf4285887102f055ba9e26632ceb16bc9587af18c51be8a9c67374e538fd9b38ef3a6118c48db9424966ead427ccabfdbcdfc7c00000"], 0x70}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0)

14:45:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0)

14:45:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:58 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:45:58 executing program 0:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
creat(0x0, 0x6857b21ff1155d90)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x51)
sendfile(r1, r1, &(0x7f0000000240), 0x7fff)

[  325.458497][T14692] overlayfs: workdir and upperdir must be separate subtrees
14:45:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000440)={0x5, 0x0, [{}, {}, {}, {}, {}]})

14:45:58 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  325.760065][T14713] overlayfs: workdir and upperdir must be separate subtrees
[  325.794851][T14666] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  325.835215][T14666] IPVS: persistence engine module ip_vs_pe_
[  325.835215][T14666] ip not found
[  325.946270][T14666] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  325.978329][T14666] IPVS: persistence engine module ip_vs_pe_
[  325.978329][T14666] ip not found
14:45:59 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})

14:45:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:45:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0)

14:45:59 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

[  326.072998][T14726] overlayfs: failed to resolve './fil': -2
14:45:59 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r3, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r4, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe)

14:45:59 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
wait4(r1, 0x0, 0x0, 0x0)

14:45:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:45:59 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:59 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
syz_open_pts(r0, 0x200280)
r1 = socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl(r1, 0x8b31, &(0x7f0000000000))

14:45:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0)

14:45:59 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

[  326.420544][T14747] overlayfs: failed to resolve './fil': -2
14:45:59 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/208, 0xd0}, {0x0}], 0x2}, 0x0)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/140, 0x8c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r4, 0x0, 0x8164, 0x0, 0x0, 0x800e00547)
shutdown(r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvfrom(r5, &(0x7f0000000280)=""/195, 0xc3, 0x0, 0x0, 0x0)
shutdown(r4, 0x0)
shutdown(r2, 0x0)

14:45:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0)

14:45:59 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
r5 = syz_open_procfs(r4, &(0x7f0000000180)='gid_map\x00')
preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000000))
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r6, 0x8b32, &(0x7f0000000040))

14:45:59 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:45:59 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a004872bbb689620900c07f801700000000593f77d747dceede20885532318ad608231b088784bacb299b79aaf8aa933cb97a557a3747c9d7ea8f086d6758e38b47a07f7dd31dc3e70772b589e7c6a8394f8370e0dfcbac491cab9a445b9e786bc74a4088f49eb7f5ad8332af06e351e71371f10a6154875d3ab6a9d6a2c9bf586668b7c33aac68df2ea5db828d4011747e7fd0a05dee9d3c442c6cafd5e5c8f3e5f5ba434140455002533525f7af292646fe293677b0afba585b55693d6709cc91f95f4532fa69a493252585b2a0cf4285887102f055ba9e26632ceb16bc9587af18c51be8a9c67374e538fd9b38ef3a6118c48db9424966ead427ccabfdbcdfc7c00000"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x4, 0x0, [{}, {}, {}, {}]})

[  326.720144][T14773] overlayfs: failed to resolve './fil': -2
14:46:00 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:46:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x3, 0x0, [{}, {}, {}]})

14:46:00 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:46:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

[  327.020925][T14787] overlayfs: failed to resolve './file': -2
[  327.202077][T14796] overlayfs: failed to resolve './file': -2
14:46:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x7e7d, @private1={0xfc, 0x1, [], 0x1}, 0xe}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a72ff58ab16f88b9663da5668b145e6313c17b22b9e79c9258687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6da56acb5ded04e543506a3bfcb79eda41d0d8d5e649caab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9f11b0000ff7f0000"], 0x10}}, 0x0)
dup(0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0xa52c46821820391d, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}])
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x1ba)
write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f)

14:46:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x2, 0x0, [{}, {}]})

14:46:00 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:46:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:00 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000240), 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f00000000c0))
fcntl$getflags(r1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$KVM_GET_NR_MMU_PAGES(r7, 0xae45, 0x9)
setsockopt(r1, 0x5, 0x1000, &(0x7f0000000080)="2e083c3a9d2b0a8e04bfcaf13b599ad25ca6f1618e12d88afdc3c4beac19cb6d122ffda716b516d70e", 0x29)
ioctl(r0, 0x8b32, &(0x7f0000000040))
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0xc540, 0x0)

14:46:00 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440)={0x1, 0x0, [{}]})

[  327.534867][T14811] overlayfs: failed to resolve './file': -2
14:46:01 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(0x0, &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:46:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000100)={0x0, &(0x7f00000000c0)="57235472dffd15968de2432e10a331da09219598f3687d72b386575d6cd053", 0x1f})
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4)

14:46:01 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440))

[  328.373987][T14815] syz-executor.0 (14815) used greatest stack depth: 22968 bytes left
14:46:01 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_SET_STATUS(r0, 0x4c05, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "b04a83706694a75154c629f35b71a95a8f04000000000000002d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9fcaf69ec0e43", "d66ee438c05a45ff21d756bd900300000000000000a482ebf7a08c305bee6fd6"})

14:46:01 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'virt_wifi0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
preadv(r4, &(0x7f0000000e00)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000dc0)={&(0x7f0000000140), 0xc, &(0x7f0000000d80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="84a814000000000000000000", @ANYRES16=r5, @ANYBLOB="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"], 0xb84}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl(r1, 0x80, &(0x7f0000000040)="94ab61ace978f0b02575882588c404841f97032e268133cd895700008ee4282881e6ab6f648d69c9676ffe4eaabb4f01f1a3586c34d8d00e92c454b481e7d865bd30bcdf38ceaea5074c98d1cbb7ed3055ce869017e6e3b91a9c6a07598ca4fd211c516382dbc56507683218d7840f62f5e624ea1ad271d7578bd4bef1e4f1a24558bd90d816e556bb6f4fbcffffff7f3aced38846811411f29cf0b145369a44ddfcf742aa54e12aaeb8ceda5f2cd5ad7e393b4e6a58b4e7aba6cff865119f66a6a2524b6f5e3c917a52520ac5b7ff475d7e52b30170ffc85fd2a09c60572e66bbfbffffffffffffff70")

14:46:01 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:01 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(0x0, &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:46:01 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000440))

14:46:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00')
sendfile(r0, r1, 0x0, 0x7ffff000)

14:46:02 executing program 5:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)

14:46:02 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(0x0, &(0x7f0000000080)=@known='system.sockprotoname\x00')

14:46:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x76, &(0x7f0000000080)={r4}, 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r4, 0x9}, &(0x7f00000000c0)=0xc)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:46:02 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
fchdir(r0)
syz_read_part_table(0x0, 0x0, 0x0)

14:46:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:02 executing program 0:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0xffffffffffffffdf, 0x20000801, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

14:46:02 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:02 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', 0x0)

14:46:02 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000140)={'veth0_macvtap\x00', 0x2})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x56a6, 0x10, 0x1, 0x40, 0x10, "9b1df8c95fb88591"})
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x62, &(0x7f00000000c0)="c2506cf3894711c4187782fe9f9a16f1482d4aa7cd557549e9d45b0bd9182109936db5fe6b03877881bfdad828e9413dce3f20dd1c54a95e93221c0878e42a0b82c28e2b45488f6f9a36b8932f900e664e9596e2c54270e0fc5372694288260bfc57", 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000015ad7e077cf058b26a7a54565c0704f88aef177be5b41d65504027555", @ANYBLOB="695b0202fd983203dd5823e733b8757b4dc1eb0fcce3e5f2ea3bfe69a8d8426b4be4f268b30f032042047f2bd6b923e9e0d928bf5938839c025556c643c608e5f05ed45611d7e03a3ac0b5", @ANYBLOB="05040000c69b0398a08d78850000", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x800c1)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4050}, 0x24004000)
ioctl(r3, 0xb, &(0x7f0000000200)="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")

14:46:02 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
exit(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='statm\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0)

14:46:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000140)="e3fd0e1189eecf8ea17d14e198cae480fcf1d8dc5f83e40f649382bdcb3526719817bc4ef9373eee0998d21a1834473d93f775f2bfde8de11a0442f1de0271996924fba0395581f05ec99bb12d3fb464d521d5c36c28bea624fb4826100f517871fa6ebd09e3afa8c07693ceb78729fbce61305388c202a3f047930e26d18712cc846bd1b11256b2ed5d584b70cf7bfb7053252763786397d24f3bf86c")
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000))
sendto$phonet(r1, &(0x7f0000000080)="192a60e26da562fdd1c1e98f11875a27facf46d59bf86e91f546dd7899536cb59799341774cf0c39f9757e56c9046aa188a763d99e4591fd8cb68aff0273741cd7bee40f4e78f2bdc955c76b2453bd3b84d72cbc4117b085cd", 0x59, 0x4008854, 0x0, 0x0)

14:46:02 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', 0x0)

14:46:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:02 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
dup(r1)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:02 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{}, {<r3=>0x0}, {}, {}, {}]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000001c0)="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")
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r3, 0x3})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:46:03 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x4a)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb01001f1}, 0x0)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35)

14:46:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:03 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
removexattr(&(0x7f0000000040)='./bus\x00', 0x0)

14:46:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:03 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
dup(r1)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
keyctl$chown(0xc, 0x0, r4, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r8)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="780200001900020027bd7000fbdbdf250214807ffc02fd0f0025000008001900", @ANYRES32=r4, @ANYBLOB="08000500ffffffff0cdfff3d1cd4951b", @ANYRES32=0x0, @ANYBLOB="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"/330, @ANYRES32=0x0, @ANYBLOB="77f8392e027067f58da12c37fde2c8b8fc01f00687e77aa7d715a760d3267183e03373dd14b6d8cb24c7a9a82c45a07ac84b2bb1e83ef73a12bef5c4625a5a03be53f0f83c8c641db1fc9efde8bc96257bd0635ef5fdafb491f966362909c4faddca818bd438686809b62fb797a0b336a7c5d5e806bed379e42062fcfabc1b2a8c5efe1f7a51854628b140a1256c76b53d3c864346e5431c85b31176d5e27a31185d586894143c447e5456efdf48f05159dc93c824166067d4361cf2a71814006b00fc0101000000000000000000000000019cec510000080026000200000008000b00ff7f0000"], 0x278}}, 0x20048844)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r10)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRESOCT, @ANYBLOB="02000200f905bd7fef8fd3ba57af7f4ce0f84e1805d259c1471d0060635e73c18fa183986465b3cb41040c4068751a4be3c55c9178759bb2fce46a8eebdf84496609f4ede7ac6f2d0f3f2a056ffb5ea7105b3f19619d3859ee34192c8a27c73830b052edc0dc93e6438589be1ee1f25b4ccaae911b8c4a2a8335ad58226d593d34d6d831ad9b99a50bc8dd74d6c9c93a77ddc57fed3aa147fce931f686ebcc86c3b97356030c304f3be5e880e20aac5a849c5398d7600e1806f9520a5d9136d673e9f1e98550bfb823a95234f9ae2ced", @ANYRES32=0x0, @ANYBLOB="040002000000000008000400", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="48000004", @ANYRES32=r10, @ANYBLOB="10000100000000002000010000000000"], 0x6c, 0x3)
ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000000)={0x0, 0x2})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:46:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
poll(&(0x7f0000000140)=[{}, {}, {}, {}, {r0}], 0x5, 0x51)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549)
r2 = socket$inet6_udp(0x1c, 0x2, 0x0)
read(r2, &(0x7f0000000040)=""/25, 0x19)
shutdown(r1, 0x0)

14:46:03 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x9000000)

14:46:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x191840, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r2, 0x44b6f2ca51787dc7, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000140)={0x10000, 0x2, 0x0, 0x4, 0x3})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000240), 0x10)
fcntl$getflags(r7, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000eae1267b3443a5783893bdeb1fc5694a7e600143e1a1356d3be2d4d0a62f7d864045af43a1c6bd153de5cd5c1dd083178b9352525bf6efee5aa4ffeb0417bc6f64a59eb1f4ddbf033fd022f935788703b6", @ANYRESOCT=r7, @ANYRESDEC=r6], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x88000, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r8, 0x4112, 0x0)

14:46:03 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:03 executing program 3:
request_key(0x0, 0x0, &(0x7f0000000200)='\xf4y6\xce\xaa#\x9d\xc6\xa6\x03\"H\xbaa\xbf\xae\x05\xe8\xd9\xadwJ\xf7m\xeb\x8b\x1c\xea\xa57\xb2u\x90\xd8\xd1\xc1\xf4\x12\f\x86\x9b\xa9\xd5\xfd\xff,\xb8\xcf\xba\x12\xd7\xc2\x1d\xb4\x85>YN\x19\xe2\xabM\xad\xe4\x14\x0f\xc5\xa4}\xfcdV\'X\xf3\xc5p\xee\xf9+\x1e\x96%8\xe7\xf49\x89\xff\xdb\x03[p\x8a\x87Q\xde,\x11\x90\xb1\xb3\xce\xbb\xdca\xc2\xca\x06\x00\x00\x00\xd3\xf9\xb09\xba&\x96\x18\xb1i\xdf\xa2\xc4\x05\xdc*I\xdb\xb5\x8c\xf1\xd8{\xed\xc1\xa2Qm\xa0+\x06\x9f\xa5;V\x96:\x02\xedN\x89\x97\xb8\x90}N\xc5\x8fu\x1d\x7fW\n\xe44', 0xfffffffffffffffd)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)="ef4f191795b65931b825f4fd3c2c481e0a5eaeb73fdec4927167d142875834b73cc2bfa7f310562415cd0dfaf2308e288228636aa61d72fc5c45244aeaf8a2b9cf169d548cc45030368d74f68d2a757237dfd7a306555c74167854c8da6a9ca7bd1671c1ba1fce6123", 0x69}], 0x1, 0x0)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000080), 0xfe28, 0xfffffffffffffffb)

[  330.616111][T15038] dns_resolver: Unsupported server list version (0)
[  330.628720][T15040] dns_resolver: Unsupported server list version (0)
14:46:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
dup(r1)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:04 executing program 5:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet6(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

14:46:04 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)
ioctl(r2, 0x8b32, &(0x7f00000000c0)="0b6d519ee7c5d6447cee4c8d785d16a3309c531447eb8c8b9beceeba976e9a07b6dc51f3b6ee09e3e04217e721a47f32601673907b9836dafeb9d0f1808d8e143028d7fc7f0850e1ee1d1fbfaa7bc5314b8be2f53c4d96")

14:46:04 executing program 3:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
capget(0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
exit(0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='statm\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)

14:46:04 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}}], 0x1, 0x0)

14:46:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a004872bbb689620900c07f801700000000593f77d747dceede20885532318ad608231b088784bacb299b79aaf8aa933cb97a557a3747c9d7ea8f086d6758e38b47a07f7dd31dc3e70772b589e7c6a8394f8370e0dfcbac491cab"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:04 executing program 3:

14:46:04 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0))
ioctl(r0, 0x8b32, &(0x7f0000000040))
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x220082, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00')
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r4, r3, 0x0, 0x20000000000000d8)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={<r5=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000180)={r5})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={r5, 0x1})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000080)={r5, 0x1})

14:46:04 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x15}, 0x20)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

14:46:04 executing program 3:
poll(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0)

14:46:04 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="02"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:05 executing program 5:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0)

14:46:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="02"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:05 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f0000002740)=[{&(0x7f0000000040)=""/126, 0x7e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e)
shutdown(r0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, &(0x7f0000000240)=""/121, 0x79, 0x0, 0x0, 0x0)
r3 = dup(r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549)
shutdown(r3, 0x0)
r5 = socket$inet6_tcp(0x1c, 0x1, 0x0)
listen(r5, 0x0)
accept4(r5, &(0x7f0000000040)=ANY=[], &(0x7f0000001080), 0x0)
shutdown(r4, 0x0)
shutdown(r1, 0x0)

14:46:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000))

14:46:05 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="02"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:05 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000080)="03301036dea87215e6e881bb2bebcfe6715f7819676d17a155718ae95a68c7594ca0455717ad17d5e83168427403ad6fa7f4a5f168b76ddc17369c16b91322808d21786708e77945f8eb8ae9ea43a47f126e0c1e20cb48dcdc13582f67972443f5244a0caa")

[  331.866191][T15111] EXT4-fs (loop5): Can't read superblock on 2nd try
[  331.939681][T15111] EXT4-fs (loop5): Can't read superblock on 2nd try
14:46:05 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00')
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/166, 0xa6}], 0x1, 0x0)

14:46:07 executing program 3:

14:46:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a004872bbb6"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000000)=0x80, 0x800)
connect$rds(r1, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:46:07 executing program 0:

14:46:07 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:07 executing program 5:

14:46:07 executing program 5:

14:46:07 executing program 3:

14:46:07 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x3, 0x1000, 0x164, &(0x7f0000000280)="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", 0x0, 0x0, 0x0})
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc)

14:46:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="02"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:08 executing program 0:

14:46:08 executing program 5:

14:46:08 executing program 3:

14:46:08 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x400)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x5)
setuid(r3)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000380)=<r5=>0x0)
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000100)="e98aab34a9703514cfeaed40b4170b8302cb9b887de8b914d06d3649495e35a6d2eacdec151de7eb3e9cf3bdf7f3d2b5075dceaa7fd4071716cd5a2eb8a65ba016f23af4a11466eb1009afd76af9b915a458dab694a5b285908920d27a4d43dde09177c8ff6f7435d3193f614618f3bfe8915f8f42b6b3b6316ad7161c5152f4b222c79af34e66244e381cfe4cc071aee09a9267483ad833b4d0720be76eb5857134fa3273897f6de6f1140a8637288b01cce02ae8408cf8c8471b517eea7949", 0xc0, 0x20}, {&(0x7f00000001c0)="ea0234f0386b50c697c119642a28a2f0772d0e3188ce25e23729cf86a67665d3e5190ced5cfe02262d50f228e232d67e6ec55095a54759ef3917e5a3f62194b3ea7d4f2aa9a6cedcba2e9456ec7c3737f965d2b95965184a0a2a9bf388b7228a919201d4fd50743a07ed3b142adf9f53096cce2f4f5422bf99a1fc4ead79778f669e6eae38a7", 0x86, 0x6}], 0x8800, &(0x7f00000003c0)={[{@quiet='quiet'}, {@umask={'umask', 0x3d, 0x1}}, {@gid={'gid', 0x3d, r1}}, {@quiet='quiet'}, {@part={'part', 0x3d, 0x8001}}, {@uid={'uid', 0x3d, r3}}, {@session={'session', 0x3d, 0xfff}}], [{@smackfshat={'smackfshat', 0x3d, 'em1:*'}}, {@dont_measure='dont_measure'}, {@fowner_lt={'fowner<', r5}}]})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(r0, 0x9, &(0x7f0000000040))

14:46:08 executing program 0:

14:46:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="02"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:08 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:08 executing program 5:

14:46:08 executing program 3:

14:46:08 executing program 0:

14:46:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="02"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x1200)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x6}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x254, 0x24, 0x4, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0xffff}, {0xf, 0x1}, {0x3, 0xffff}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7f, 0x4, 0x101, 0x2, 0x10000, 0x10001, 0x6}}, {0xfffffffffffffea9, 0x2, [0x4, 0x100, 0x4, 0x400, 0x8819, 0x7]}}, {{0x1c, 0x1, {0x3f, 0x3, 0x6, 0x0, 0x2, 0x5, 0x0, 0x8}}, {0x14, 0x2, [0x3, 0x1ff, 0x1, 0x400, 0x6, 0x8, 0x6, 0x2]}}, {{0x1c, 0x1, {0xf1, 0x0, 0xfea6, 0x9ad, 0x2, 0x5, 0x6}}, {0x4}}]}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfc, 0xbd, 0x200, 0x9, 0x0, 0xff, 0xa9, 0x6}}, {0x10, 0x2, [0x101, 0x7f, 0x1ff, 0x1, 0x9, 0x7]}}, {{0x1c, 0x1, {0x5a, 0x9, 0x5, 0x2f1a, 0x0, 0x837a, 0x40, 0x7}}, {0x12, 0x2, [0x100, 0x1000, 0x2, 0x5, 0x5, 0x40, 0x1]}}, {{0x1c, 0x1, {0x3, 0x6, 0x3, 0x8001, 0x1, 0x5, 0x8, 0x6}}, {0x10, 0x2, [0x6, 0x0, 0x9, 0x8, 0x4, 0x46c]}}]}, @qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x2, 0x1, 0x7186c453, 0x2, 0x3f, 0x7, 0xa}}, {0x18, 0x2, [0x5, 0x3, 0x8001, 0x400, 0x1, 0x8000, 0xa8, 0x800, 0x6, 0x9]}}, {{0x1c, 0x1, {0x9, 0x2, 0x400, 0x0, 0x0, 0x5f4b, 0x81, 0x5}}, {0xe, 0x2, [0x200, 0x35, 0x101, 0x9, 0x8]}}, {{0x1c, 0x1, {0x50, 0xfd, 0x6, 0x7ff, 0x2, 0x9, 0x94e1, 0x4}}, {0xc, 0x2, [0x2, 0x3, 0x200, 0x0]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x2, 0x2, 0x2, 0x800, 0x6}}, {0x10, 0x2, [0x3, 0x0, 0x1, 0x137a, 0x1, 0xcc]}}]}, @qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x8, 0x100, 0x1, 0x40, 0x7fff}, 0x7, 0x0, 0x758f, 0x9, 0x9c, 0x12, 0x5, 0x15, 0x5, 0x7243160e, {0x8000, 0x10001, 0x81, 0x2f2, 0x40}}}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x254}, 0x1, 0x0, 0x0, 0x20008890}, 0x20008000)
mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x2010, r1, 0x83000000)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:46:08 executing program 3:

14:46:08 executing program 5:

14:46:08 executing program 0:

14:46:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f000000000021"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:08 executing program 3:

14:46:08 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2})
iopl(0x1f)
ioctl(r0, 0x8b32, &(0x7f0000000040))

14:46:09 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:09 executing program 0:

14:46:09 executing program 5:

14:46:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f000000000021"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:09 executing program 3:

14:46:09 executing program 4:

14:46:09 executing program 0:

14:46:09 executing program 3:

14:46:09 executing program 5:

14:46:09 executing program 4:

14:46:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f000000000021"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:09 executing program 3:

14:46:09 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:09 executing program 0:

14:46:09 executing program 5:

14:46:09 executing program 4:

14:46:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f000000000021000000000001000000000020020001000100000200"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:09 executing program 3:

14:46:09 executing program 0:

14:46:09 executing program 4:

14:46:09 executing program 5:

14:46:09 executing program 3:

14:46:09 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f000000000021000000000001000000000020020001000100000200"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:09 executing program 5:

14:46:10 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:10 executing program 3:

14:46:10 executing program 4:

14:46:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x40008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x10)
lseek(r0, 0x800002, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="104ed936a95a8678dfdeb845170c9966789ecdd0b0d32fd96eb445c6d3c81cb664b343fe65c6a5fbebb39dd994a193ec87643ee5a990139bb7577cd01196810e9b0bf1ede4f87c326893871cb2686376a651866bbd680bcdab9d4331b188e151571d175efc90dadf153c0c7647ceedaf9fb083f51e64e99f8ef4203ac7744441e19d4df5cf89602f484e5b0ba07c909444b0226c5aaf58516cc24f6480d8f3febdeb629336e52e95a5a0421fc2a7e851310bb6dd96d82960a9574b4c6a19c2810be92c4c147de2676c14410f7d7a6f69c7ef5743b96dccea9cb8a52979e3a36908732e22448074d526e91036de6826dd278c83656a344cbc6ccc0106cb58ee3e8419a4e7f2c76f73b509103d500377e8140991c81f1468728ca94ea63a66eb5280be250ae5bc8d8de5250a9aa8e0"], 0x8a)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0)
sendfile(r1, r2, 0x0, 0x200fc0)

14:46:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f000000000021000000000001000000000020020001000100000200"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:10 executing program 5:

14:46:10 executing program 3:

14:46:10 executing program 5:

14:46:10 executing program 4:

14:46:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

[  336.985847][   T26] audit: type=1800 audit(1589121970.324:24): pid=15246 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16313 res=0
14:46:10 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:10 executing program 5:

[  337.068393][   T26] audit: type=1800 audit(1589121970.404:25): pid=15248 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16313 res=0
14:46:10 executing program 3:

14:46:10 executing program 4:

14:46:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:10 executing program 0:

14:46:10 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:10 executing program 5:

14:46:10 executing program 3:

14:46:10 executing program 4:

14:46:10 executing program 0:
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff90a7}, {0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4)

14:46:10 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:10 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:10 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:10 executing program 4:

14:46:11 executing program 3:

14:46:11 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:11 executing program 4:

14:46:11 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:11 executing program 3:

14:46:11 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:11 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x4000001, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x1000020, 0x0, "c15bf01f087d9b6b2b4ef2eccc1af741994072b427e00bbc53688e43ffcea5ee418ce7849ff32e33ea3fef495b9d29359a4593f4bed6f4cc492689ec6c293f53", "2ad9fecca7cc61ac7a23c4f3f3fa50d96f78bb5301efaa33050c8d8b649b433f"})

14:46:11 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f", 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

14:46:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x100000001)
socket$inet6(0xa, 0x0, 0x0)

14:46:11 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:11 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x2, 0x19, 0x1, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000003c0)=0x3)

14:46:11 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000024000b0f0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373000800"], 0x38}}, 0x0)

14:46:11 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x0, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:11 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[  338.505936][ T3821] ion_buffer_destroy: buffer still mapped in the kernel
14:46:11 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x100000001)
listen(r2, 0x400000001ffffffd)
r3 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x1402, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0)

14:46:12 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
write$binfmt_elf64(r3, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

14:46:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:12 executing program 4:
syz_mount_image$xfs(&(0x7f0000000640)='xfs\x00', &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@uqnoenforce='uqnoenforce'}, {@inode32='inode32'}], [{@obj_user={'obj_user', 0x3d, '/dev/sequencer2\x00'}}]})

[  339.105447][T15347] xfs: Unknown parameter 'obj_user'
[  339.156014][T15347] xfs: Unknown parameter 'obj_user'
14:46:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000200)="eb3c906d6b66732e706174000204050002000270fff8", 0xfde5}], 0x0, 0x0)
r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = memfd_create(&(0x7f0000000300)='\vem1\xc1\xf8\xa6\x8dN*\xff\x93\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\xe6\xb2\xdbb\xaf\x1euOf\xb9\xd3\xe3\tw\xa7\xeb/\x0e7\"\xe5\xe0R\xf1\r\x19lR<E\xcf\x1b}\x0f\x95\x1co\xa4\x8aa\xabJ\"mE\x013\xfbfV\xd8T\x9f@P}:\xe7\x802X\xa4\xf0\xc2\x99\xe7\xbd2m@\x83w,N!Uu\x97\xe4\x8ft\x1e\x81D\x19>{\x92\xd4i\x98\xbd\xce\xdf\x13\xc7p\xb9\xa2H\xa0\xdd,\xc9\xb8\xcf\x8a\x91VQ\xf5\x1c7eN\xeb\xed\xb6\xda\xf3\xc4\xf8P\x8f\x16\x8f\x88Y\xc8S\xf3\xd3\xfa\x81\x14\x98pa\xda+c\x12\xefq~\x97\xd9J\xc6\x0fF{\xa2\ay\xa6\xf06]\xd6?\xf4\x9a\xd2w\x12\x14\xa2w\xbd\xa7!\xbf%h`i\xb6', 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="2ec07b2e6e42a2"], 0x7)
mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x80000000004, 0x11, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)

14:46:14 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b1a, &(0x7f0000000040)='wlan0\x00')

14:46:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:14 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x0, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x100000001)
listen(r2, 0x400000001ffffffd)
r3 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x1402, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0)

14:46:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x100000001)
listen(r2, 0x400000001ffffffd)
r3 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x1402, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0)

14:46:15 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:15 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"})

14:46:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd00100400050000000000"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:15 executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x97b, @mcast1}], 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000001c0))
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f00000003c0))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
add_key(0x0, &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0)
mount$bpf(0x0, 0x0, &(0x7f0000000100)='bpf\x00', 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xffffffff)

14:46:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x100000001)
listen(r2, 0x400000001ffffffd)
r3 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x1402, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0)

14:46:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd00100400050000000000"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:15 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:15 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x0, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

[  342.159031][T15400] kvm [15395]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0xa25c3c0000000000
14:46:15 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000024000b0f0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff000000000c000100696e67726573730008000d0001"], 0x38}}, 0x0)

14:46:15 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:15 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd00100400050000000000"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

14:46:16 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:16 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:16 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
rmdir(&(0x7f0000000100)='./file0/file1\x00')

14:46:16 executing program 1:
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a"], 0x70}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0)

14:46:16 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="a2aaaaaa", @ANYRES32=0x41424344, @ANYBLOB], 0x0)

14:46:16 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6(0xa, 0x2, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:16 executing program 1:
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a"], 0x70}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0)

14:46:16 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"06000000dd245c84044d564bc9c8dc191f0100006fa42b76840000402bec0ba4c81036c93a40c8a4c20000003b00040000000000003c5ca2410101c0ee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db500800000000000008f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047666865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffb7e7603970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})

14:46:17 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, 0x0}, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:17 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:17 executing program 1:
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a"], 0x70}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0)

14:46:17 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:46:17 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, 0x0}, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:17 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6(0xa, 0x2, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:17 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:17 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

14:46:17 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:17 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

14:46:18 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, 0x0}, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:18 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, 0x0}, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:18 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000009000000040000c741d62f00000000002100000000000100000000002002000100010000020000000200fd001004000500000000000a"], 0x70}}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

14:46:18 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:18 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, 0x0}, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:18 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:18 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, 0x0}, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:18 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x0, 0x12, r0, 0x0)
setitimer(0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0)

14:46:18 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6(0xa, 0x2, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:18 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:18 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x80001, 0x84)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffff90a7}, {0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4)

14:46:19 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, 0x0}, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:19 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:19 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:19 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, 0x0}, 0x0)

14:46:19 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$netlink(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
dup(0xffffffffffffffff)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r2, 0x0, r4, 0x0, 0x30009, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, 0x0)

14:46:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, 0x0, 0x0)

14:46:19 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:19 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)

14:46:19 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:20 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, 0x0, 0x0)

14:46:20 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:20 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

14:46:20 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, 0x0, 0x0)

14:46:20 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:20 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$netlink(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:20 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)

14:46:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
dup(0xffffffffffffffff)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r2, 0x0, r4, 0x0, 0x30009, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4008ae89, 0x0)

14:46:20 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

14:46:20 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:20 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)

14:46:20 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:20 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$netlink(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:20 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

14:46:20 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)

14:46:21 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

14:46:21 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:21 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:21 executing program 1:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x2001)
splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0)

14:46:21 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

14:46:21 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:21 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:21 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:21 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r1, 0x4b35, 0x8)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r2, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:21 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:22 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

14:46:22 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:22 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

14:46:22 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:22 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001000010400000000000000f8ff020000", @ANYRES32=r1, @ANYBLOB="00000000000000000a0001"], 0x2c}}, 0x0)

14:46:22 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:22 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:22 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:22 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:22 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:22 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:22 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:23 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x20001, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

14:46:23 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x6d1b, &(0x7f0000000140)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b376b2a31d64fe5d99e2b5fc707659caeb206414b7a28bf43955ec55da6984c9", "e344cde8e308f0bcbe24b7d5d54019f32ed4fb42d6781a06d1a05ef2850feb6d"}}}]}, 0x268}}, 0x0)

14:46:23 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:23 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:23 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:23 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:23 executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={0x0, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100), 0xc, 0x0}, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002100)=""/207, 0xcf}, {&(0x7f0000000ac0)=""/163, 0xa3}], 0x2}}], 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c00)=""/77, 0x4d}], 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={0x0, 0x10c}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

14:46:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x0, 0x5, 0x401}, 0x14}}, 0x0)

14:46:23 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x0, 0x5, 0x401}, 0x14}}, 0x0)

14:46:23 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xfffffffffffffe98)

14:46:23 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:23 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x0, 0x5, 0x401}, 0x14}}, 0x0)

14:46:23 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:23 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:24 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:24 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, 0x0)

14:46:24 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:24 executing program 4:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b047511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0xfffffef1)

14:46:24 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:24 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:24 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r1, &(0x7f00000004c0)=[{0x0}], 0x1)
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000080))

14:46:24 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:24 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:24 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:24 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:24 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:24 executing program 1:
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r0, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f)
fdatasync(r0)

14:46:24 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:25 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000380)=[{0x2000000ffffff8d, 0x0, &(0x7f0000001500)=[{&(0x7f0000001380), 0x55911c}], 0x1}, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffffffffff46}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], 0x492492492492494, 0x0)

14:46:25 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:25 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:25 executing program 1:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x51b281, 0x0)

14:46:25 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:25 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b334a", 0xff8d}], 0x1)

14:46:25 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:25 executing program 1:
perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

14:46:25 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:25 executing program 4:

14:46:25 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, 0x0, 0x0)

14:46:25 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:25 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

14:46:25 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, 0x0, 0x0)

14:46:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:25 executing program 4:

14:46:25 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r0, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:25 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:25 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, 0x0, 0x0)

14:46:25 executing program 4:

14:46:25 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r0, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:25 executing program 4:

14:46:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

14:46:26 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r0, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:26 executing program 4:

14:46:26 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080), 0x0)

14:46:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:26 executing program 4:

14:46:26 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080), 0x0)

14:46:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:26 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:26 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:26 executing program 4:

14:46:26 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080), 0x0)

14:46:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

14:46:27 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:27 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:27 executing program 4:

14:46:27 executing program 4:

14:46:27 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:27 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{0x0}], 0x1)

14:46:27 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:27 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:27 executing program 4:

14:46:27 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{0x0}], 0x1)

14:46:27 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:28 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

14:46:28 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:28 executing program 4:

14:46:28 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{0x0}], 0x1)

14:46:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:28 executing program 4:

14:46:28 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:28 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:28 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1)

14:46:28 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:28 executing program 4:

14:46:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:29 executing program 4:

14:46:29 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1)

14:46:29 executing program 0:
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:29 executing program 0:
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:29 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1)

14:46:29 executing program 4:

14:46:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)

14:46:29 executing program 4:

14:46:29 executing program 0:
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:29 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d", 0x6}], 0x1)

14:46:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:30 executing program 4:

14:46:30 executing program 0:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:30 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:30 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d", 0x6}], 0x1)

14:46:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:30 executing program 0:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)

14:46:30 executing program 4:

14:46:30 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d", 0x6}], 0x1)

14:46:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:30 executing program 0:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:30 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:30 executing program 4:

14:46:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:30 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:30 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b", 0x9}], 0x1)

14:46:30 executing program 4:

14:46:30 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)

14:46:31 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:31 executing program 4:

14:46:31 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:31 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b", 0x9}], 0x1)

14:46:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:31 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b", 0x9}], 0x1)

14:46:31 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:31 executing program 4:

14:46:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:31 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5, 0x4}, 0xd8)

14:46:32 executing program 4:

14:46:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:32 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)

14:46:32 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b33", 0xa}], 0x1)

14:46:32 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:32 executing program 4:

14:46:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)

14:46:32 executing program 4:

14:46:32 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b33", 0xa}], 0x1)

14:46:32 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:32 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0ee8679b4d29f69b33", 0xa}], 0x1)

14:46:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)

14:46:33 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:33 executing program 4:

14:46:33 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:33 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8)

14:46:33 executing program 2:

14:46:33 executing program 4:

14:46:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8)

14:46:33 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:33 executing program 2:

14:46:33 executing program 4:

14:46:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8)

14:46:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:34 executing program 2:

14:46:34 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:34 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:34 executing program 4:

14:46:34 executing program 3:

14:46:34 executing program 3:

14:46:34 executing program 4:

14:46:34 executing program 2:

14:46:34 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:34 executing program 3:

14:46:34 executing program 2:

14:46:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x4)

14:46:35 executing program 4:

14:46:35 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:35 executing program 3:

14:46:35 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:35 executing program 2:

14:46:35 executing program 2:

14:46:35 executing program 4:

14:46:35 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:35 executing program 3:

14:46:35 executing program 2:

14:46:36 executing program 4:

14:46:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x4)

14:46:36 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:36 executing program 3:

14:46:36 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x4}}}]}, 0x34}}, 0x0)

14:46:36 executing program 2:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3af054182a9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f464de7188b"}, 0x60)

14:46:36 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/arp\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r1, r0, 0x0, 0x20000000000000d8)

14:46:36 executing program 2:
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)="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"})
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

14:46:36 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  363.555424][T16250] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  363.622697][T16252] BTRFS: device label kÓÍ°±è/ül}!-MòH®v
J›Þ;› devid 45829075003510506 transid 15372745096993452137 /dev/loop2 scanned by syz-executor.2 (16252)
14:46:37 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:37 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:37 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

[  363.892715][T16252] BTRFS error (device loop2): unsupported checksum algorithm: 43323
[  363.969541][T16252] BTRFS error (device loop2): open_ctree failed
[  364.065047][T16271] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 0 /dev/loop3 scanned by syz-executor.3 (16271)
[  364.165233][T16271] BTRFS error (device loop3): superblock checksum mismatch
[  364.179977][T16271] BTRFS error (device loop3): open_ctree failed
[  364.260788][T16271] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 9223372036888330240 transid 0 /dev/loop3 scanned by syz-executor.3 (16271)
[  364.287631][T16271] BTRFS error (device loop3): superblock checksum mismatch
[  364.304582][T16271] BTRFS error (device loop3): open_ctree failed
14:46:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x4)

14:46:37 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000001980))

14:46:37 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:37 executing program 2:
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)="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"})
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

14:46:37 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:37 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:37 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  364.513745][T16304] BTRFS: device label kÓÍ°±è/ül}!-MòH®v
J›Þ;› devid 45829075003510506 transid 15372745096993452137 /dev/loop2 scanned by syz-executor.2 (16304)
14:46:38 executing program 4:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffde6c68a94a86be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9aa2f4b8c2ee7a8483a098c82b5dc475e9f24df5d8e344916d"], 0x92)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/227, 0xe3}], 0x1)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)

14:46:38 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  364.699624][T16304] BTRFS error (device loop2): unsupported checksum algorithm: 43323
[  364.734720][T16304] BTRFS error (device loop2): open_ctree failed
14:46:38 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  364.857206][T16328] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in;
[  364.857206][T16328]    program syz-executor.4 not setting count and/or reply_len properly
14:46:38 executing program 2:
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)="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"})
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

14:46:38 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

[  364.959338][T16330] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in;
[  364.959338][T16330]    program syz-executor.4 not setting count and/or reply_len properly
[  365.062250][T16338] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 0 /dev/loop3 scanned by syz-executor.3 (16338)
[  365.114186][T16342] BTRFS: device label kÓÍ°±è/ül}!-MòH®v
J›Þ;› devid 45829075003510506 transid 15372745096993452137 /dev/loop2 scanned by syz-executor.2 (16342)
[  365.129830][T16338] BTRFS error (device loop2): unsupported checksum algorithm: 43323
[  365.177664][T16338] BTRFS error (device loop2): open_ctree failed
[  365.197712][T16342] BTRFS error (device loop2): unsupported checksum algorithm: 43323
[  365.260428][T16342] BTRFS error (device loop2): open_ctree failed
14:46:38 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:38 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:38 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x0)

14:46:38 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:38 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  365.513579][T16366] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 0 /dev/loop3 scanned by syz-executor.3 (16366)
14:46:39 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  365.698996][T16366] BTRFS error (device loop3): superblock checksum mismatch
14:46:39 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd1", 0xd0}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78}, 0x78)
tkill(r0, 0x33)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

[  365.741325][T16366] BTRFS error (device loop3): open_ctree failed
14:46:39 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:39 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:39 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:39 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:39 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:39 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x0)

14:46:39 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:41 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, 0x0, 0x0)

14:46:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:41 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080))

[  368.650226][T16434] BTRFS error (device loop3): superblock checksum mismatch
[  368.669507][T16434] BTRFS error (device loop3): open_ctree failed
14:46:42 executing program 2:
semop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1400}], 0x1)
r0 = semget$private(0x0, 0x2, 0x0)
semop(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x1400}], 0x1)
semop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1400}], 0x1)

14:46:42 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x0)

14:46:42 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080))

14:46:42 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  369.015172][T16455] BTRFS error (device loop3): superblock checksum mismatch
14:46:42 executing program 2:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000100)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x0, 0x0)

[  369.080390][T16455] BTRFS error (device loop3): open_ctree failed
14:46:42 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, 0x0, 0x0)

14:46:42 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  369.282817][T16471] REISERFS warning (device md0): sh-2006 read_super_block: bread failed (dev md0, block 2, size 4096)
[  369.313053][T16471] REISERFS warning (device md0): sh-2006 read_super_block: bread failed (dev md0, block 16, size 4096)
[  369.358794][T16471] REISERFS warning (device md0): sh-2021 reiserfs_fill_super: can not find reiserfs on md0
14:46:42 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:42 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:42 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

[  369.520415][T16476] REISERFS warning (device md0):  reiserfs_fill_super: Cannot allocate commit workqueue
14:46:42 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:43 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:43 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x0)

14:46:43 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  370.099765][   T26] audit: type=1800 audit(1589122003.436:26): pid=16493 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="overlay" ino=16364 res=0
14:46:45 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080))

14:46:45 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:45 executing program 2:
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8a001, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200100, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @private=0xa0180fe}, 0x0, 0x2, 0x0, 0x1}}, 0x26)
socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@remote, 0x54, r2})
syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x5000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)

14:46:45 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, 0x0, 0x0)

14:46:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:45 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:45 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  372.175409][T16528] BTRFS error (device loop3): superblock checksum mismatch
[  372.202253][T16528] BTRFS error (device loop3): open_ctree failed
14:46:45 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:45 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:45 executing program 2:
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8a001, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200100, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @private=0xa0180fe}, 0x0, 0x2, 0x0, 0x1}}, 0x26)
socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/19], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6, 0xfff1}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x3c}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@remote, 0x54, r2})
syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00')
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0xc, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x5000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)

14:46:46 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:48 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x1, &(0x7f00000000c0), &(0x7f0000000100))

14:46:48 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

14:46:48 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:48 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x227e, &(0x7f0000000340))

14:46:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:48 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffde6c68a94a86be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9aa2f4b8c2ee7a8483a098c82b5dc475e9f24df5d8e344916d76155f006d1a000000af031f98e08ad58f03cf8f"], 0x92)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/227, 0xe3}], 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)

[  375.258375][T16587] BTRFS error (device loop3): superblock checksum mismatch
[  375.283899][T16587] BTRFS error (device loop3): open_ctree failed
14:46:48 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x1, &(0x7f00000000c0), &(0x7f0000000100))

14:46:48 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:48 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
getgid()
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r1, r0, 0x0, 0x20000000000000d8)

14:46:49 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  375.843140][T16611] BTRFS error (device loop3): superblock checksum mismatch
[  375.852750][T16611] BTRFS error (device loop3): open_ctree failed
14:46:49 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:49 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
select(0x80c9, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x2a)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

14:46:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

14:46:49 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:49 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x1, &(0x7f00000000c0), &(0x7f0000000100))

14:46:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:49 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:49 executing program 2:

14:46:49 executing program 2:

[  376.261004][T16641] BTRFS error (device loop3): superblock checksum mismatch
14:46:49 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  376.327396][T16641] BTRFS error (device loop3): open_ctree failed
14:46:49 executing program 2:

14:46:49 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:49 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:49 executing program 2:

[  376.820907][T16663] BTRFS error (device loop3): superblock checksum mismatch
[  376.831518][T16663] BTRFS error (device loop3): open_ctree failed
14:46:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

14:46:50 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:50 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:50 executing program 2:

14:46:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:50 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:50 executing program 2:

14:46:50 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  377.187972][T16688] BTRFS error (device loop3): superblock checksum mismatch
[  377.247289][T16688] BTRFS error (device loop3): open_ctree failed
14:46:50 executing program 2:

14:46:50 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:50 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:50 executing program 2:

[  377.612278][T16709] BTRFS error (device loop3): superblock checksum mismatch
[  377.621985][T16709] BTRFS error (device loop3): open_ctree failed
14:46:51 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:51 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:51 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:51 executing program 2:

14:46:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:51 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}}, &(0x7f0000000100))

14:46:51 executing program 2:

14:46:51 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  378.004104][T16731] BTRFS error (device loop3): superblock checksum mismatch
[  378.048906][T16731] BTRFS error (device loop3): open_ctree failed
14:46:51 executing program 2:

14:46:51 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}}, &(0x7f0000000100))

14:46:51 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:51 executing program 2:

[  378.337656][T16754] BTRFS error (device loop3): superblock checksum mismatch
[  378.503992][T16754] BTRFS error (device loop3): open_ctree failed
14:46:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:52 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:52 executing program 2:

14:46:52 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}}, &(0x7f0000000100))

14:46:52 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:52 executing program 2:

14:46:52 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  378.963252][T16780] BTRFS error (device loop3): superblock checksum mismatch
[  378.988589][T16780] BTRFS error (device loop3): open_ctree failed
14:46:52 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}}, &(0x7f0000000100))

14:46:52 executing program 2:

14:46:52 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

[  379.389987][T16796] BTRFS error (device loop3): superblock checksum mismatch
[  379.401911][T16796] BTRFS error (device loop3): open_ctree failed
14:46:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:53 executing program 2:

14:46:53 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:53 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}}, &(0x7f0000000100))

14:46:53 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:53 executing program 2:

[  379.879526][T16826] BTRFS error (device loop3): superblock checksum mismatch
14:46:53 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  379.950110][T16826] BTRFS error (device loop3): open_ctree failed
14:46:53 executing program 2:

14:46:53 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}}, &(0x7f0000000100))

14:46:53 executing program 2:

14:46:53 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

[  380.265893][T16842] BTRFS error (device loop3): superblock checksum mismatch
[  380.315890][T16842] BTRFS error (device loop3): open_ctree failed
14:46:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:54 executing program 2:

14:46:54 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:54 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r0, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}}, &(0x7f0000000100))

14:46:54 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:54 executing program 2:

14:46:54 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

[  380.813858][T16868] BTRFS error (device loop3): superblock checksum mismatch
[  380.822016][T16868] BTRFS error (device loop3): open_ctree failed
14:46:54 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r0, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}}, &(0x7f0000000100))

14:46:54 executing program 2:

14:46:54 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:54 executing program 2:

[  381.112179][T16887] BTRFS error (device loop3): superblock checksum mismatch
[  381.165892][T16887] BTRFS error (device loop3): open_ctree failed
14:46:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200), 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4)

14:46:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:54 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:54 executing program 2:

14:46:54 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r0, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}}, &(0x7f0000000100))

[  381.809836][T16911] BTRFS error (device loop3): superblock checksum mismatch
[  381.817760][T16911] BTRFS error (device loop3): open_ctree failed
14:46:55 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:55 executing program 2:

14:46:55 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:55 executing program 3:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:55 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:55 executing program 2:

14:46:55 executing program 2:

14:46:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200), 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4)

14:46:55 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:55 executing program 3:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:55 executing program 2:

14:46:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:56 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:56 executing program 2:

14:46:56 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:56 executing program 3:
syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:56 executing program 2:

14:46:56 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:56 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200), 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4)

14:46:57 executing program 2:

14:46:57 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:57 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:57 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x0, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:57 executing program 2:

14:46:57 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:57 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:57 executing program 2:

14:46:57 executing program 2:

14:46:57 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:58 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:58 executing program 2:

14:46:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:58 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:58 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x0, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:58 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:58 executing program 2:

14:46:58 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:58 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000100)={{0x1b, 0x5b, 0x34, 0x39, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

14:46:59 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:59 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:59 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:46:59 executing program 2:
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00')

[  386.143337][T17078] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:46:59 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x0, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

14:46:59 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:59 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:46:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:46:59 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r0+30000000}, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4)

14:46:59 executing program 2:

14:46:59 executing program 2:

14:46:59 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:59 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x40003ad, 0x2000000)

14:46:59 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:00 executing program 2:

14:47:00 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, 0x0, 0x0, 0x2000000)

14:47:00 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}}}}}, 0x2e)

14:47:00 executing program 2:

14:47:00 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:00 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, 0x0, 0x0, 0x2000000)

14:47:00 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r0+30000000}, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4)

14:47:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:00 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:00 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, 0x0, 0x0, 0x2000000)

14:47:00 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:00 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x0)

14:47:01 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  387.648605][T17147] overlayfs: filesystem on './file0' not supported as upperdir
14:47:01 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x0)

14:47:01 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}}}}}, 0x2e)

14:47:01 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:01 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:01 executing program 0:
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10)
pipe2(&(0x7f0000000280), 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x0, 0x40, 0x2, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x2, @ipv4={[], [], @broadcast}, 0x2}}, 0x0, 0x5, 0x4}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x0)

14:47:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r0+30000000}, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4)

14:47:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:01 executing program 0:
chdir(0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00')
r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000005c0)=""/223, 0xdf)

14:47:01 executing program 0:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffde6c68a94a86be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9aa2f4b8c2ee7a8483a098c82b5dc475e9f24df5d8e344916d76155f006d1a000000af031f98e08ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff68e0f9f0f8d14f69368272b0d4e93037bb8e1d0beb80dc87145c723d5ecbe556bb39ad383c"], 0x92)
open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/227, 0xe3}], 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400000008b)
utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x0, 0x100)

[  388.474218][T17184] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:47:01 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:02 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:02 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  388.820373][T17199] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in;
[  388.820373][T17199]    program syz-executor.0 not setting count and/or reply_len properly
14:47:02 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='mountstats\x00')
sendfile(r0, r1, &(0x7f00000001c0)=0x2f00, 0x4000000000dc)

14:47:02 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}}}}}, 0x2e)

14:47:02 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140), 0x0, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:02 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000100)={{0x1b, 0x5b, 0x34, 0x39, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

14:47:02 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:02 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:03 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:03 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2", 0x24, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:03 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)

14:47:03 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:03 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2", 0x24, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:03 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:04 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3"}}}}, 0x5c)

14:47:04 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:04 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)

14:47:04 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2", 0x24, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:04 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:04 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

[  390.857517][T17273] overlayfs: failed to resolve './bus': -2
14:47:04 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000", 0x36, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:04 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)

14:47:04 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080))

14:47:04 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000", 0x36, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:04 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:04 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:04 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3"}}}}, 0x5c)

14:47:04 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080))

14:47:04 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000", 0x36, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:04 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:04 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:05 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080))

14:47:05 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:05 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000", 0x3f, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:05 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r0})

14:47:05 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000", 0x3f, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:05 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r0})

14:47:05 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:05 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3"}}}}, 0x5c)

14:47:05 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:05 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000", 0x3f, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:05 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r0})

14:47:05 executing program 4:
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:06 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:06 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f424852", 0x44, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:06 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:06 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:06 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:06 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f424852", 0x44, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:06 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:06 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e"}}}}, 0x73)

14:47:06 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:06 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:06 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f424852", 0x44, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  393.480770][T17411] overlayfs: failed to resolve './file0': -2
14:47:06 executing program 4:
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:06 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:06 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:07 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248526653", 0x46, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:07 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

[  393.807913][T17432] overlayfs: failed to resolve './file0': -2
14:47:07 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248526653", 0x46, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:07 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:07 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

[  394.067663][T17445] overlayfs: failed to resolve './file0': -2
14:47:07 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e"}}}}, 0x73)

14:47:07 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:07 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:07 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f4248526653", 0x46, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:07 executing program 4:
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:07 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:07 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:08 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:08 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:08 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:08 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:08 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e"}}}}, 0x73)

14:47:08 executing program 2:
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:08 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:08 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f", 0x47, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:08 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[  395.598102][T17505] overlayfs: failed to resolve './file1': -2
14:47:09 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080))

14:47:09 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:09 executing program 2:
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:09 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080))

[  395.972310][T17529] overlayfs: failed to resolve './file1': -2
14:47:09 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:09 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080))

14:47:09 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa943106300"}}}}, 0x7f)

14:47:09 executing program 2:
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:09 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:09 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:09 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:10 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

[  396.657979][T17558] overlayfs: failed to resolve './file1': -2
14:47:10 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:10 executing program 2:
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:10 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

[  396.994100][T17578] overlayfs: failed to resolve './file1': -2
14:47:10 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x0, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:10 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:10 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa943106300"}}}}, 0x7f)

14:47:10 executing program 2:
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:10 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x0, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:10 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:10 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:11 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x0, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

[  397.694415][T17603] overlayfs: failed to resolve './file1': -2
14:47:11 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:11 executing program 2:
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:11 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:11 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, 0x0, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  398.016839][T17629] BTRFS error (device loop3): superblock checksum mismatch
[  398.023073][T17627] overlayfs: failed to resolve './file1': -2
[  398.034943][T17629] BTRFS error (device loop3): open_ctree failed
14:47:11 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:12 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa943106300"}}}}, 0x7f)

14:47:12 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:12 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, 0x0, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:12 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[  398.900504][T17652] BTRFS error (device loop3): superblock checksum mismatch
[  398.920249][T17652] BTRFS error (device loop3): open_ctree failed
14:47:12 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:12 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:12 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, 0x0, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  399.177545][T17672] BTRFS error (device loop3): superblock checksum mismatch
[  399.185886][T17672] BTRFS error (device loop3): open_ctree failed
14:47:12 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:12 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r1})

14:47:12 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  399.882105][T17686] BTRFS error (device loop3): superblock checksum mismatch
[  399.906371][T17686] BTRFS error (device loop3): open_ctree failed
14:47:13 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa943106300000000000000"}}}}, 0x85)

14:47:13 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

14:47:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:13 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:13 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  400.208005][T17706] overlayfs: failed to resolve './file0': -2
[  400.257854][T17710] BTRFS error (device loop3): superblock checksum mismatch
14:47:13 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

[  400.312969][T17710] BTRFS error (device loop3): open_ctree failed
14:47:13 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:13 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:13 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0)

[  400.597302][T17728] overlayfs: failed to resolve './file0': -2
14:47:14 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  400.771246][T17731] BTRFS error (device loop3): superblock checksum mismatch
14:47:14 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080))

[  400.834256][T17731] BTRFS error (device loop3): open_ctree failed
[  401.039715][T17743] overlayfs: failed to resolve './file0': -2
14:47:14 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x0, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:14 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa943106300000000000000"}}}}, 0x85)

14:47:14 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080))

14:47:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:14 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  401.358441][T17753] BTRFS error (device loop3): superblock checksum mismatch
[  401.376228][T17753] BTRFS error (device loop3): open_ctree failed
14:47:14 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x15, 0x9, 0x1f})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080))

14:47:14 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x0, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:14 executing program 0:
mount(0x0, 0x0, &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00')
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000005c0)=""/223, 0xdf)

14:47:15 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  401.852030][T17774] BTRFS error (device loop3): superblock checksum mismatch
[  401.902962][T17774] BTRFS error (device loop3): open_ctree failed
14:47:15 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  401.974175][T17778] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:47:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:15 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa943106300000000000000"}}}}, 0x85)

14:47:15 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x0, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:15 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000100)={{0x1b, 0x5b, 0x34, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

14:47:15 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  402.326936][T17799] BTRFS error (device loop3): superblock checksum mismatch
[  402.383175][T17799] BTRFS error (device loop3): open_ctree failed
14:47:16 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:16 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:16 executing program 0:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffde6c68a94a86be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9aa2f4b8c2ee7a8483a098c82b5dc475e9f24df5d8e344916d76155f006d1a000000af031f98e08ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff68e0f9f0f8d14f69368272b0d4e93037bb8e1d0beb80dc87145c"], 0x92)
open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/227, 0xe3}], 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400000008b)
utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x0, 0x100)

14:47:16 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={0x0, &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  402.880752][T17824] BTRFS error (device loop3): superblock checksum mismatch
[  402.915318][T17824] BTRFS error (device loop3): open_ctree failed
[  402.929546][T17829] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in;
[  402.929546][T17829]    program syz-executor.0 not setting count and/or reply_len properly
14:47:16 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:16 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:16 executing program 0:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffde6c68a94a86be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9aa2f4b8c2ee7a8483a098c82b5dc475e9f24df5d8e344916d76155f006d1a000000af031f98e08ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff68e0f9f0f8d14f69368272b0d4e93037bb8e1d0beb80dc87145c"], 0x92)
open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/227, 0xe3}], 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400000008b)
utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x0, 0x100)

14:47:16 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={0x0, &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:16 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa943106300000000000000000001"}}}}, 0x88)

[  403.226404][T17849] BTRFS error (device loop3): superblock checksum mismatch
[  403.288612][T17849] BTRFS error (device loop3): open_ctree failed
14:47:16 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:16 executing program 0:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffde6c68a94a86be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9aa2f4b8c2ee7a8483a098c82b5dc475e9f24df5d8e344916d76155f006d1a000000af031f98e08ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff68e0f9f0f8d14f69368272b0d4e93037bb8e1d0beb80dc87145c"], 0x92)
open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/227, 0xe3}], 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400000008b)
utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x0, 0x100)

14:47:16 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={0x0, &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c60"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  403.537170][T17869] overlayfs: missing 'lowerdir'
[  403.625410][T17872] BTRFS error (device loop3): superblock checksum mismatch
14:47:17 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  403.726787][T17875] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in;
[  403.726787][T17875]    program syz-executor.0 not setting count and/or reply_len properly
[  403.771678][T17872] BTRFS error (device loop3): open_ctree failed
[  403.812872][T17884] overlayfs: missing 'lowerdir'
14:47:17 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), 0x0}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:17 executing program 0:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882)
write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d5010400000000010000deffde6c68a94a86be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9aa2f4b8c2ee7a8483a098c82b5dc475e9f24df5d8e344916d76155f006d1a000000af031f98e08ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff68e0f9f0f8d14f69368272b0d4e93037bb8e1d0beb80dc87145c"], 0x92)
open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/227, 0xe3}], 0x1)
bind$netlink(0xffffffffffffffff, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400000008b)
utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x0, 0x100)

14:47:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:17 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa943106300000000000000000001"}}}}, 0x88)

[  404.136800][T17893] BTRFS error (device loop3): superblock checksum mismatch
[  404.162739][T17903] overlayfs: missing 'lowerdir'
14:47:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:17 executing program 0:
mkdir(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
chdir(0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00')
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
getdents(r3, &(0x7f00000005c0)=""/223, 0xdf)

[  404.211563][T17893] BTRFS error (device loop3): open_ctree failed
14:47:17 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), 0x0}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  404.419709][T17917] overlayfs: missing 'lowerdir'
14:47:17 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  404.576220][T17921] BTRFS error (device loop3): superblock checksum mismatch
14:47:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

[  404.750267][T17928] overlayfs: missing 'lowerdir'
14:47:18 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  404.914163][T17921] BTRFS error (device loop3): open_ctree failed
[  404.940243][T17920] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:47:18 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$kcm(0x29, 0x2, 0x0)
splice(r4, 0x0, r3, 0x0, 0x8100000, 0x0)

14:47:18 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), 0x0}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[  405.098627][T17940] overlayfs: missing 'lowerdir'
14:47:18 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa943106300000000000000000001"}}}}, 0x88)

14:47:18 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  405.290987][T17945] BTRFS error (device loop3): superblock checksum mismatch
[  405.353229][T17945] BTRFS error (device loop3): open_ctree failed
[  405.468835][T17961] overlayfs: missing 'lowerdir'
14:47:18 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:18 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

[  405.695365][T17965] BTRFS error (device loop3): superblock checksum mismatch
[  405.713599][T17965] BTRFS error (device loop3): open_ctree failed
14:47:19 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  405.790318][T17974] overlayfs: missing 'lowerdir'
14:47:19 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[  406.089305][T17985] overlayfs: missing 'lowerdir'
14:47:19 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  406.183481][T17980] BTRFS error (device loop3): superblock checksum mismatch
[  406.212878][T17980] BTRFS error (device loop3): open_ctree failed
[  406.256368][T17994] overlayfs: option "workdir=." is useless in a non-upper mount, ignore
[  406.266920][T17994] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
14:47:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$kcm(0x29, 0x2, 0x0)
splice(r4, 0x0, r3, 0x0, 0x8100000, 0x0)

14:47:21 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:21 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:21 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa94310630000000000000000000100"}}}}, 0x89)

14:47:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:21 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[  408.513497][T18019] overlayfs: option "workdir=." is useless in a non-upper mount, ignore
[  408.526797][T18018] BTRFS error (device loop3): superblock checksum mismatch
[  408.542049][T18019] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  408.568285][T18018] BTRFS error (device loop3): open_ctree failed
14:47:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=.'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  408.932298][T18033] overlayfs: option "workdir=." is useless in a non-upper mount, ignore
[  408.963057][T18033] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
14:47:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  409.080625][T18036] overlayfs: unrecognized mount option "upper" or missing value
14:47:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:22 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$kcm(0x29, 0x2, 0x0)
splice(r4, 0x0, r3, 0x0, 0x8100000, 0x0)

[  409.353364][T18041] overlayfs: unrecognized mount option "upper" or missing value
14:47:22 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upper'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  409.653112][T18053] overlayfs: unrecognized mount option "upper" or missing value
14:47:24 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f4"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:24 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa94310630000000000000000000100"}}}}, 0x89)

14:47:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:24 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:24 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$kcm(0x29, 0x2, 0x0)
splice(r4, 0x0, r3, 0x0, 0x8100000, 0x0)

14:47:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[  411.555344][T18069] overlayfs: workdir and upperdir must be separate subtrees
14:47:25 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  411.651740][T18078] BTRFS error (device loop3): superblock checksum mismatch
[  411.674264][T18078] BTRFS error (device loop3): open_ctree failed
14:47:25 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f4"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  411.808969][T18087] overlayfs: workdir and upperdir must be separate subtrees
14:47:25 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  412.038098][T18098] overlayfs: workdir and upperdir must be separate subtrees
14:47:25 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  412.138876][T18094] BTRFS error (device loop3): superblock checksum mismatch
[  412.157061][T18094] BTRFS error (device loop3): open_ctree failed
14:47:25 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f4"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:25 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  412.227492][T18106] overlayfs: failed to resolve './fil': -2
14:47:25 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x9, '\a\x00`'}, "ccbfc12abc282c27820fd9118600820e000300110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa94310630000000000000000000100"}}}}, 0x89)

14:47:25 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:25 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./fil'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  412.374200][T18110] BTRFS error (device loop3): superblock checksum mismatch
[  412.398726][T18110] BTRFS error (device loop3): open_ctree failed
[  412.402154][T18115] overlayfs: failed to resolve './fil': -2
14:47:25 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  412.642651][T18130] overlayfs: failed to resolve './fil': -2
[  412.752251][T18132] BTRFS error (device loop3): superblock checksum mismatch
[  412.790370][T18132] BTRFS error (device loop3): open_ctree failed
14:47:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8100000, 0x0)

14:47:27 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:27 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:27 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018001251d00d1bd", 0x2e}], 0x1}, 0x0)

14:47:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

[  414.514500][T18152] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[  414.551417][T18153] BTRFS error (device loop3): superblock checksum mismatch
[  414.567404][T18153] BTRFS error (device loop3): open_ctree failed
[  414.588842][T18157] overlayfs: failed to resolve './file': -2
14:47:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8100000, 0x0)

14:47:28 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  414.755053][T18173] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
14:47:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8100000, 0x0)

[  414.910164][T18176] overlayfs: failed to resolve './file': -2
14:47:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018001251d00d1bd", 0x2e}], 0x1}, 0x0)

14:47:28 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0)

[  415.095097][T18183] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
14:47:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0)

[  415.165885][T18186] overlayfs: failed to resolve './file': -2
14:47:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:28 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:30 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x8100000, 0x0)

14:47:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:30 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018001251d00d1bd", 0x2e}], 0x1}, 0x0)

14:47:30 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[  417.572382][T18215] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
14:47:31 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200))
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x29, 0x2, 0x0)
splice(r3, 0x0, r2, 0x0, 0x8100000, 0x0)

[  417.659914][T18219] BTRFS error (device loop3): superblock checksum mismatch
[  417.675047][T18219] BTRFS error (device loop3): open_ctree failed
14:47:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:31 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c000200053582c137153e370900018001251d00d1bd", 0x2e}], 0x1}, 0x0)

[  417.889901][T18235] BTRFS error (device loop3): superblock checksum mismatch
14:47:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:31 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  417.966296][T18235] BTRFS error (device loop3): open_ctree failed
[  418.032609][T18244] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
14:47:31 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  418.161226][T18252] BTRFS error (device loop3): superblock checksum mismatch
[  418.170030][T18252] BTRFS error (device loop3): open_ctree failed
14:47:31 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:31 executing program 5:

14:47:31 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:31 executing program 5:

[  418.480594][T18269] BTRFS error (device loop3): superblock checksum mismatch
[  418.499228][T18269] BTRFS error (device loop3): open_ctree failed
14:47:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200))
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x29, 0x2, 0x0)
splice(r3, 0x0, r2, 0x0, 0x8100000, 0x0)

14:47:34 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(0x0, 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:34 executing program 5:

14:47:34 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb52"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:34 executing program 5:

14:47:34 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  420.904224][T18303] BTRFS error (device loop3): superblock checksum mismatch
[  420.916672][T18303] BTRFS error (device loop3): open_ctree failed
14:47:34 executing program 5:

14:47:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:34 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb52"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:34 executing program 5:

[  421.184005][T18326] BTRFS error (device loop3): superblock checksum mismatch
[  421.213042][T18326] BTRFS error (device loop3): open_ctree failed
14:47:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200))
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x29, 0x2, 0x0)
splice(r3, 0x0, r2, 0x0, 0x8100000, 0x0)

14:47:37 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x5000)

14:47:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:37 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

14:47:37 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb52"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:37 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

[  423.923026][T18356] BTRFS error (device loop3): superblock checksum mismatch
14:47:37 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000180)='1', 0x1}], 0x1)

[  424.010604][T18356] BTRFS error (device loop3): open_ctree failed
14:47:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040), 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:37 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)

[  424.090176][T18363] overlayfs: failed to resolve './bus': -2
14:47:37 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:37 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
read(r1, &(0x7f0000000080)=""/241, 0xf1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc08c5336, &(0x7f0000000580)={{}, 'port1\x00'})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

[  424.281945][T18382] BTRFS error (device loop3): superblock checksum mismatch
[  424.305207][T18382] BTRFS error (device loop3): open_ctree failed
14:47:37 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  424.396336][T18386] overlayfs: failed to resolve './bus': -2
[  424.451658][T18393] BTRFS error (device loop3): superblock checksum mismatch
[  424.459787][T18393] BTRFS error (device loop3): open_ctree failed
14:47:40 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)

14:47:40 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040), 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x29, 0x2, 0x0)
splice(r3, 0x0, r2, 0x0, 0x8100000, 0x0)

14:47:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:40 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
read(r1, &(0x7f0000000080)=""/241, 0xf1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc08c5336, &(0x7f0000000580)={{}, 'port1\x00'})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

14:47:40 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

[  427.052231][T18422] BTRFS error (device loop3): superblock checksum mismatch
[  427.091627][T18422] BTRFS error (device loop3): open_ctree failed
[  427.166287][T18428] overlayfs: failed to resolve './bus': -2
14:47:40 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040), 0x1c)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x4)

14:47:40 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:40 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)

[  427.409439][T18448] BTRFS error (device loop3): superblock checksum mismatch
14:47:40 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)

[  427.489659][T18448] BTRFS error (device loop3): open_ctree failed
14:47:40 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, 0x0)
ppoll(&(0x7f0000000240)=[{r0, 0x41a}, {}], 0x2, &(0x7f0000000200), 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4)

14:47:40 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:41 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)

[  427.756841][T18465] BTRFS error (device loop3): superblock checksum mismatch
[  427.784429][T18465] BTRFS error (device loop3): open_ctree failed
14:47:41 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)

14:47:43 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:43 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x29, 0x2, 0x0)
splice(r3, 0x0, r2, 0x0, 0x8100000, 0x0)

14:47:43 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
read(r1, &(0x7f0000000080)=""/241, 0xf1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc08c5336, &(0x7f0000000580)={{}, 'port1\x00'})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

14:47:43 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:43 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)

14:47:43 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4)

[  430.146827][T18494] BTRFS error (device loop3): superblock checksum mismatch
[  430.182247][T18494] BTRFS error (device loop3): open_ctree failed
14:47:43 executing program 3:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000004c01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x14, 0x2, @thr={&(0x7f0000000180), &(0x7f0000000380)="7386251417149f45c5863c2e759bb5c03704dc51c85f37abf3676ce7cd3dc9d0cae06fcc64d909a232fb38474c4736f8480258f3e6f55c987a0965bf604e22394267ea1cdaa2b87c765c0a65456fb872e53a34601337478a81a8fc9f5f7521f45764d268f5a06885fe44efd9d9fe078b73d680f7c2de081253895fcd71f1c960f5e67eb131cea19cab52854c65d9a517ea0ea9d728d2092631e9a13ded6ea3605a2031025f11d7ad1c462a6d351b16d3c267fb5202bf121a8e91555344434c"}}, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0xa000, 0x0)
write$char_usb(r1, &(0x7f0000000280)="4782c9b5df7ba624756aeff50d72749ba6536604418ee97603a3bf4af67024602c63236d5c8d0aa944af3e8a90f8433fdb8fd925b76e4dfda132ee6a028f3c55c67e0ee3f78d11002ff6308d95675b19536db5abdceff5d3dbf609c6f7f28982e6cfdd23d6fac982955ebb138034dbb58a155b50d664b384855f704f9fc9907bc37c9f683fd7b918470076fe441644785e71901ba14f", 0x96)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r0, 0x1, &(0x7f00000000c0)={{r2, r3+60000000}}, &(0x7f0000000100))

14:47:43 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  430.580596][T18516] BTRFS error (device loop3): superblock checksum mismatch
[  430.650389][T18516] BTRFS error (device loop3): open_ctree failed
[  430.689429][T18523] input: syz1 as /devices/virtual/input/input7
14:47:44 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
read(r1, &(0x7f0000000080)=""/241, 0xf1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x1d1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc08c5336, &(0x7f0000000580)={{}, 'port1\x00'})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1004000000016)

14:47:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:44 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$tun(r0, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x7}, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @remote={0xac, 0x14, 0x8}}, @timestamp}}}, 0x100c)

14:47:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4)

14:47:44 executing program 2:
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x2c}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @broadcast}, @parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0x20020000, {[@cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "c3"}]}]}}}}}}}, 0x0)

[  431.699807][T18565] sit: Dst spoofed 0.0.0.0/4800:: -> 255.255.255.255/2002:0:8609::3:c300:0
[  431.725140][T18567] sit: Dst spoofed 0.0.0.0/4800:: -> 255.255.255.255/2002:0:8609::3:c300:0
14:47:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x29, 0x2, 0x0)
splice(r3, 0x0, r2, 0x0, 0x8100000, 0x0)

14:47:46 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000024000b0f0e00000000000000ffffff9e", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000c000100696e67726573730008000d0001"], 0x38}}, 0x0)

14:47:46 executing program 5:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
read(r0, &(0x7f0000000080)=""/241, 0xf1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc08c5336, &(0x7f0000000580)={{}, 'port1\x00'})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)

14:47:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

14:47:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
clock_gettime(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0x541b, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x541b, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4)

[  433.170311][T18579] ==================================================================
[  433.179392][T18579] BUG: KASAN: null-ptr-deref in choke_reset+0x208/0x340
[  433.186341][T18579] Write of size 8 at addr 0000000000000000 by task syz-executor.2/18579
[  433.194669][T18579] 
[  433.197012][T18579] CPU: 0 PID: 18579 Comm: syz-executor.2 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0
[  433.207076][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  433.217162][T18579] Call Trace:
[  433.220465][T18579]  dump_stack+0x188/0x20d
[  433.224980][T18579]  ? choke_reset+0x208/0x340
[  433.229581][T18579]  __kasan_report.cold+0x5/0x4d
[  433.234452][T18579]  ? choke_reset+0x208/0x340
[  433.239055][T18579]  ? choke_reset+0x208/0x340
[  433.243840][T18579]  kasan_report+0x33/0x50
[  433.248183][T18579]  check_memory_region+0x141/0x190
[  433.253300][T18579]  memset+0x20/0x40
[  433.257119][T18579]  choke_reset+0x208/0x340
[  433.261547][T18579]  ? choke_destroy+0x40/0x40
[  433.266148][T18579]  qdisc_reset+0x6b/0x520
[  433.270499][T18579]  dev_deactivate_queue.constprop.0+0x13c/0x240
[  433.276749][T18579]  dev_deactivate_many+0xe2/0xba0
[  433.281801][T18579]  dev_deactivate+0xf8/0x1c0
[  433.286401][T18579]  ? dev_deactivate_many+0xba0/0xba0
[  433.291704][T18579]  qdisc_graft+0xd25/0x1120
[  433.296210][T18579]  ? qdisc_lookup+0x164/0x250
[  433.300898][T18579]  ? tc_dump_tclass+0x480/0x480
[  433.305757][T18579]  ? tc_get_qdisc+0xaf0/0xaf0
[  433.310444][T18579]  ? nla_memcpy+0xa0/0xa0
[  433.314803][T18579]  ? ns_capable_common+0xe2/0x100
[  433.319845][T18579]  tc_modify_qdisc+0xbab/0x1a00
[  433.324723][T18579]  ? qdisc_create+0x1140/0x1140
[  433.329588][T18579]  ? mutex_trylock+0x2c0/0x2c0
[  433.334358][T18579]  ? find_held_lock+0x2d/0x110
[  433.339187][T18579]  ? qdisc_create+0x1140/0x1140
[  433.344047][T18579]  rtnetlink_rcv_msg+0x44e/0xad0
[  433.349032][T18579]  ? rtnl_bridge_getlink+0x870/0x870
[  433.354339][T18579]  ? netdev_core_pick_tx+0x2e0/0x2e0
[  433.359636][T18579]  ? __copy_skb_header+0x210/0x5b0
[  433.364764][T18579]  ? skb_splice_bits+0x1a0/0x1a0
[  433.369740][T18579]  ? __kasan_kmalloc.constprop.0+0xbf/0xd0
[  433.375552][T18579]  ? kmem_cache_alloc+0x261/0x740
[  433.380592][T18579]  netlink_rcv_skb+0x15a/0x410
[  433.385373][T18579]  ? rtnl_bridge_getlink+0x870/0x870
[  433.390719][T18579]  ? netlink_ack+0xa10/0xa10
[  433.395340][T18579]  netlink_unicast+0x537/0x740
[  433.400125][T18579]  ? netlink_attachskb+0x810/0x810
[  433.405240][T18579]  ? _copy_from_iter_full+0x25c/0x870
[  433.410622][T18579]  ? __phys_addr_symbol+0x2c/0x70
[  433.415654][T18579]  ? __check_object_size+0x171/0x437
[  433.420994][T18579]  netlink_sendmsg+0x882/0xe10
[  433.425776][T18579]  ? aa_af_perm+0x260/0x260
[  433.430293][T18579]  ? netlink_unicast+0x740/0x740
[  433.435256][T18579]  ? netlink_unicast+0x740/0x740
[  433.440205][T18579]  sock_sendmsg+0xcf/0x120
[  433.444631][T18579]  ____sys_sendmsg+0x6bf/0x7e0
[  433.449434][T18579]  ? kernel_sendmsg+0x50/0x50
[  433.454139][T18579]  ___sys_sendmsg+0x100/0x170
[  433.458833][T18579]  ? sendmsg_copy_msghdr+0x70/0x70
[  433.464058][T18579]  ? __fget_files+0x32f/0x500
[  433.468750][T18579]  ? do_dup2+0x520/0x520
[  433.473020][T18579]  ? __fget_light+0x20e/0x270
[  433.477714][T18579]  __sys_sendmsg+0xec/0x1b0
[  433.482226][T18579]  ? __sys_sendmsg_sock+0xb0/0xb0
[  433.487262][T18579]  ? __x64_sys_futex+0x380/0x4f0
[  433.492223][T18579]  ? trace_hardirqs_off_caller+0x55/0x230
[  433.498389][T18579]  ? do_syscall_64+0x21/0x7d0
[  433.503076][T18579]  do_syscall_64+0xf6/0x7d0
[  433.507588][T18579]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[  433.513572][T18579] RIP: 0033:0x45c829
[  433.517478][T18579] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  433.537107][T18579] RSP: 002b:00007f8ac5525c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  433.545526][T18579] RAX: ffffffffffffffda RBX: 0000000000500d20 RCX: 000000000045c829
[  433.553510][T18579] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004
[  433.561495][T18579] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  433.569472][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  433.577434][T18579] R13: 0000000000000a05 R14: 00000000004ccbdd R15: 00007f8ac55266d4
[  433.585403][T18579] ==================================================================
[  433.593530][T18579] Disabling lock debugging due to kernel taint
[  433.599741][T18579] Kernel panic - not syncing: panic_on_warn set ...
[  433.606428][T18579] CPU: 0 PID: 18579 Comm: syz-executor.2 Tainted: G    B             5.7.0-rc1-next-20200415-syzkaller #0
[  433.617970][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  433.628029][T18579] Call Trace:
[  433.631471][T18579]  dump_stack+0x188/0x20d
[  433.636077][T18579]  panic+0x2e3/0x75c
[  433.639984][T18579]  ? add_taint.cold+0x16/0x16
[  433.644670][T18579]  ? retint_kernel+0x2b/0x2b
[  433.649886][T18579]  ? choke_reset+0x208/0x340
[  433.654747][T18579]  ? trace_hardirqs_on+0x55/0x220
[  433.659819][T18579]  ? choke_reset+0x208/0x340
[  433.664506][T18579]  end_report+0x4d/0x53
[  433.670357][T18579]  __kasan_report.cold+0xd/0x4d
[  433.675215][T18579]  ? choke_reset+0x208/0x340
[  433.679834][T18579]  ? choke_reset+0x208/0x340
[  433.684425][T18579]  kasan_report+0x33/0x50
[  433.688762][T18579]  check_memory_region+0x141/0x190
[  433.693875][T18579]  memset+0x20/0x40
[  433.697701][T18579]  choke_reset+0x208/0x340
[  433.702125][T18579]  ? choke_destroy+0x40/0x40
[  433.706717][T18579]  qdisc_reset+0x6b/0x520
[  433.711086][T18579]  dev_deactivate_queue.constprop.0+0x13c/0x240
[  433.717455][T18579]  dev_deactivate_many+0xe2/0xba0
[  433.722512][T18579]  dev_deactivate+0xf8/0x1c0
[  433.728756][T18579]  ? dev_deactivate_many+0xba0/0xba0
[  433.734103][T18579]  qdisc_graft+0xd25/0x1120
[  433.738625][T18579]  ? qdisc_lookup+0x164/0x250
[  433.743322][T18579]  ? tc_dump_tclass+0x480/0x480
[  433.748185][T18579]  ? tc_get_qdisc+0xaf0/0xaf0
[  433.752958][T18579]  ? nla_memcpy+0xa0/0xa0
[  433.757300][T18579]  ? ns_capable_common+0xe2/0x100
[  433.762337][T18579]  tc_modify_qdisc+0xbab/0x1a00
[  433.767230][T18579]  ? qdisc_create+0x1140/0x1140
[  433.772088][T18579]  ? mutex_trylock+0x2c0/0x2c0
[  433.776877][T18579]  ? find_held_lock+0x2d/0x110
[  433.781658][T18579]  ? qdisc_create+0x1140/0x1140
[  433.786514][T18579]  rtnetlink_rcv_msg+0x44e/0xad0
[  433.791460][T18579]  ? rtnl_bridge_getlink+0x870/0x870
[  433.796891][T18579]  ? netdev_core_pick_tx+0x2e0/0x2e0
[  433.802205][T18579]  ? __copy_skb_header+0x210/0x5b0
[  433.807328][T18579]  ? skb_splice_bits+0x1a0/0x1a0
[  433.812445][T18579]  ? __kasan_kmalloc.constprop.0+0xbf/0xd0
[  433.818254][T18579]  ? kmem_cache_alloc+0x261/0x740
[  433.823978][T18579]  netlink_rcv_skb+0x15a/0x410
[  433.828758][T18579]  ? rtnl_bridge_getlink+0x870/0x870
[  433.834160][T18579]  ? netlink_ack+0xa10/0xa10
[  433.838757][T18579]  netlink_unicast+0x537/0x740
[  433.843534][T18579]  ? netlink_attachskb+0x810/0x810
[  433.848643][T18579]  ? _copy_from_iter_full+0x25c/0x870
[  433.854021][T18579]  ? __phys_addr_symbol+0x2c/0x70
[  433.859047][T18579]  ? __check_object_size+0x171/0x437
[  433.864419][T18579]  netlink_sendmsg+0x882/0xe10
[  433.869189][T18579]  ? aa_af_perm+0x260/0x260
[  433.873689][T18579]  ? netlink_unicast+0x740/0x740
[  433.878628][T18579]  ? netlink_unicast+0x740/0x740
[  433.883916][T18579]  sock_sendmsg+0xcf/0x120
[  433.888330][T18579]  ____sys_sendmsg+0x6bf/0x7e0
[  433.893102][T18579]  ? kernel_sendmsg+0x50/0x50
[  433.897786][T18579]  ___sys_sendmsg+0x100/0x170
[  433.902463][T18579]  ? sendmsg_copy_msghdr+0x70/0x70
[  433.907578][T18579]  ? __fget_files+0x32f/0x500
[  433.912257][T18579]  ? do_dup2+0x520/0x520
[  433.916502][T18579]  ? __fget_light+0x20e/0x270
[  433.921190][T18579]  __sys_sendmsg+0xec/0x1b0
[  433.925694][T18579]  ? __sys_sendmsg_sock+0xb0/0xb0
[  433.930716][T18579]  ? __x64_sys_futex+0x380/0x4f0
[  433.935661][T18579]  ? trace_hardirqs_off_caller+0x55/0x230
[  433.941388][T18579]  ? do_syscall_64+0x21/0x7d0
[  433.946249][T18579]  do_syscall_64+0xf6/0x7d0
[  433.950756][T18579]  entry_SYSCALL_64_after_hwframe+0x49/0xb3
[  433.956655][T18579] RIP: 0033:0x45c829
[  433.960549][T18579] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  433.980238][T18579] RSP: 002b:00007f8ac5525c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  433.988660][T18579] RAX: ffffffffffffffda RBX: 0000000000500d20 RCX: 000000000045c829
[  433.996630][T18579] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004
[  434.004606][T18579] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  434.012582][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  434.020553][T18579] R13: 0000000000000a05 R14: 00000000004ccbdd R15: 00007f8ac55266d4
[  434.030176][T18579] Kernel Offset: disabled
[  434.034567][T18579] Rebooting in 86400 seconds..