last executing test programs:

9m55.078420581s ago: executing program 0 (id=457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
pipe(&(0x7f0000000180))
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000007b000000bf610000000000000701000004000000850000005d000000b7000000"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)

9m53.277878496s ago: executing program 0 (id=459):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20c453, &(0x7f0000000080)={[{@jqfmt_vfsold}]}, 0x1, 0x568, &(0x7f00000003c0)="$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")
r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
io_setup(0x200, &(0x7f0000000140)=<r1=>0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000940)='./file2\x00', 0x10ca, &(0x7f0000000980)={[{@errors_remount}, {@mblk_io_submit}, {@grpjquota}, {@grpid}, {@quota}]}, 0x5, 0x4f7, &(0x7f00000009c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000f40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000fc0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001040), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001080), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000010c0)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x3, 0x0, 0x0, &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001cc0), 0x10}, 0x94)
bind$inet6(r0, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x8, 0x0, r0, 0x0, 0x0, 0x4, 0x0, 0x2}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0)
write(r5, &(0x7f00000002c0)='keyA keyB 2000000000 0 0', 0x18)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

9m46.437704059s ago: executing program 0 (id=466):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"])

9m45.422790974s ago: executing program 0 (id=469):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x110000)
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12102)

9m43.201439332s ago: executing program 0 (id=471):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
pipe(&(0x7f0000000180))
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)

9m41.453848501s ago: executing program 0 (id=474):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x0, 0x7fff, 0x3, 0xffffffffffffffff, 0x0, 0x0})
madvise(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x16)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1})
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r4)
execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x1000000, &(0x7f0000004440)=ANY=[], 0x1, 0x0, 0x0)
read$FUSE(r5, 0x0, 0x0)
write$FUSE_INIT(r5, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x4, 0x1], 0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9m25.60985666s ago: executing program 32 (id=474):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x0, 0x7fff, 0x3, 0xffffffffffffffff, 0x0, 0x0})
madvise(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x16)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1})
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r4)
execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x1000000, &(0x7f0000004440)=ANY=[], 0x1, 0x0, 0x0)
read$FUSE(r5, 0x0, 0x0)
write$FUSE_INIT(r5, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x4, 0x1], 0x8080000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m57.317588136s ago: executing program 1 (id=1104):
syz_emit_vhci(0x0, 0x8)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x614b, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
mknod$loop(0x0, 0x6000, 0x0)
r4 = open(0x0, 0x10507e, 0xa6)
fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000023c0)=0x1)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/217)
r5 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000080)=0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x70, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)

1m51.74047085s ago: executing program 2 (id=1106):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount$nfs(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=202049,'])
socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004080)
mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = msgget$private(0x0, 0x3ac)
msgrcv(r1, 0x0, 0x0, 0x2, 0x2000)
msgsnd(r1, &(0x7f0000000300)={0x2}, 0x8, 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000ac0)='./sec\x00', &(0x7f0000000b00)='securityfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sec/tomoyo/profile\x00', 0x1, 0x0)
msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000bc0)=""/130)
write(r5, &(0x7f0000000b80)="3c5c413ecd45036a2762bb626c65640a", 0x10)

1m51.73998348s ago: executing program 1 (id=1107):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000002c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000600), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6)
setgroups(0x400000000000026f, &(0x7f00000006c0)=[0x0, 0xee00])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000700)=0x5, 0x4)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0xfd, 0x392, &(0x7f0000001000)="$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")
r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
write$FUSE_ENTRY(r5, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x8, 0xffffffffffffffc0, 0x9, 0x9, {0x4, 0xffffffffffffffff, 0x7, 0x7fffffff, 0x7fffffff, 0x3ff, 0x74e, 0x17d2, 0x65, 0xa000, 0xfffffff9, 0x0, 0x0, 0x4, 0x7}}}, 0x90)
mkdir(&(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd0939199c36b4d28)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f0000000000)={0x20002016})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r6, &(0x7f00000004c0)='4', 0x0}, 0x20)
ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, 0x0)

1m50.624891584s ago: executing program 2 (id=1108):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
epoll_create1(0x0)
keyctl$invalidate(0x15, 0x0)
r3 = socket(0x28, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8})
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0})

1m50.562316431s ago: executing program 1 (id=1109):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)}, &(0x7f0000000200)=0xff4c)
syz_open_dev$tty1(0xc, 0x4, 0x1)
symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x2, 0x0, 0xa, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x4000004, 0x80010, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2e, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
madvise(&(0x7f0000391000/0x1000)=nil, 0x1000, 0x10)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x2)
readahead(r4, 0x6, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000100)=0x405, 0x4)
r5 = socket$rxrpc(0x21, 0x2, 0x1e)
bind$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24)
epoll_create(0x1002)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @empty}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x0)

1m50.526650955s ago: executing program 3 (id=1110):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a0001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="30000000110001000000000000000000000000000000000000000000000000000f00030073797a6b616c", 0x2a}], 0x1}, 0x0)
sendmsg$sock(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_newneigh={0x30, 0x1c, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0x2}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_LLADDR={0xa, 0x2, @random}]}, 0x30}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r8 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407})
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
ioctl$int_in(r7, 0x5421, &(0x7f00000000c0)=0x9732)
listen(r7, 0xec)
accept4$bt_l2cap(r7, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r2, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_emit_ethernet(0x3e, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbcf50f85889e0080045000030006500000001a78bac1e0001ac1414350400907800000000451742bc0064fe1f0529009eac1414aae0000002"], 0x0)

1m49.475390943s ago: executing program 2 (id=1111):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0xffffffff}}}}}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x53, 0x4)
recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
r2 = memfd_create(0x0, 0x6)
fallocate(r2, 0x0, 0x0, 0x88)
futex(0x0, 0x4, 0x2, &(0x7f0000000200), 0x0, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000380)="00f589e0be8c68984368c18cb1a51792edfc64ebcd10f08d4ad201ca72131f9de2adbe7c0ee658d73b468667e360af95484d7e09b9003e882e6ca383ef0eebd756ead670a8c525", 0xfceb)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedreceive(r4, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)

1m49.333054967s ago: executing program 3 (id=1112):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1018e58, &(0x7f0000000640), 0x4, 0x62c, &(0x7f0000000680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000d40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000dc0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000e40), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000e80), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x4000010)
syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22)
landlock_create_ruleset(0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1, 0x17, &(0x7f0000001100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xbfffffff}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read(r0, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x6, 0x1, 0x3, 0x1}, 0x3c, [0xc00000, 0x5, 0x6, 0x4, 0x6f, 0x400, 0x1a80800, 0x8000, 0x8a, 0xf, 0x3, 0x2, 0x8, 0x765, 0x7, 0xd, 0xd4f, 0x2d5f, 0x3, 0xfffffff9, 0x9, 0x101, 0xfffffff7, 0x3, 0x800, 0x1, 0x4, 0x7f, 0x4, 0xb, 0x7, 0xca, 0x7, 0x48, 0xb875, 0x8, 0x6, 0xb, 0xfffffff2, 0x0, 0x0, 0x4, 0x90, 0x3, 0x9, 0x167ec654, 0x5, 0x400, 0x0, 0x6, 0x871, 0x0, 0x2, 0xb, 0x2, 0x6, 0x8, 0x6, 0xbdb, 0x3, 0x6, 0x0, 0x40, 0x100], [0xf6, 0x80, 0x10000, 0xffffffff, 0x0, 0x4, 0xff, 0x101, 0x6, 0x0, 0x5, 0x0, 0x0, 0xb61, 0x5, 0xe, 0x0, 0x4, 0xfffffffe, 0xfffff769, 0xc, 0x1, 0x7, 0x80000001, 0x5, 0x0, 0x9, 0x400, 0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7f, 0x8, 0x60df, 0x9, 0x9, 0x8, 0x8, 0x62, 0x3, 0x3, 0x5, 0x80, 0x7ff, 0x4, 0x1, 0x9, 0xf, 0x502, 0x1, 0xdbd, 0x6, 0x10001, 0x6, 0xc, 0x2, 0x8, 0x4, 0x10000, 0x61a1, 0x1, 0x3], [0x9, 0x7d5ea5e0, 0x7fffffff, 0xa1, 0x8, 0x9, 0x4, 0x3, 0x7, 0x0, 0x76c8, 0x1946000, 0x0, 0x2, 0x4, 0x1, 0x4b6, 0xafa, 0x76e, 0x2, 0x3, 0x1, 0x5, 0x0, 0x7, 0x520, 0x0, 0x3, 0x3, 0x6, 0xfffffffd, 0x10000, 0x9e, 0x2a2, 0x5, 0x2, 0x7, 0x2, 0x4, 0x9, 0x400, 0x9, 0x7, 0x80000001, 0x3, 0x7, 0x1, 0x7, 0x77, 0x0, 0x1, 0x6, 0xfff, 0x1, 0xe51c, 0xfffffff5, 0x7fffffff, 0x0, 0xc9, 0x9, 0x7, 0x97, 0xfffffffe, 0x38000], [0x10000, 0x3, 0xfb8, 0x7, 0x2, 0x101, 0x1, 0x6, 0xb, 0x9, 0x5, 0x4, 0x1, 0x7, 0x9, 0x8, 0x7, 0x4, 0x5, 0xffff21c1, 0x1, 0x9c6, 0x5be, 0x6, 0x69f7, 0x6, 0x6, 0x24b, 0x3, 0xf, 0x9, 0x2, 0x7, 0x1, 0xfff, 0xfffffffc, 0x0, 0xfffff000, 0x2, 0x7, 0x8, 0x70f, 0x5, 0x2, 0x9, 0xfffffffe, 0x6, 0xf7fe, 0xb4, 0x27f2542e, 0x8, 0xf, 0x2, 0xffffffe6, 0x401, 0x7fffffff, 0x0, 0x9d5c, 0x1, 0x6, 0x1, 0xfffffff2, 0x8, 0x5]}, 0x45c)

1m47.688710557s ago: executing program 3 (id=1113):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$XFS_IOC_GETPARENTS(r2, 0xc028583e, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0xd, 0x0, 0x8000}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000cc0)=0x5, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = fsmount(r1, 0x1, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='cgroup.freeze\x00', 0x275a, 0x0)
ftruncate(r4, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x42480, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000002c0)={0x0, 0xffff, 0x0, 0x0, <r7=>0x0})
ptrace(0x10, r7)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="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", 0x80d}], 0x1}, 0x4000000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)

1m47.681561648s ago: executing program 2 (id=1121):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0)
write(r6, &(0x7f0000000300)='lzo', 0x3)
r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x80, 0x2)
ioctl(r9, 0xc138fd06, &(0x7f0000000680)="04000000000000")
setns(r8, 0x24020000)

1m46.614582777s ago: executing program 2 (id=1114):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000ac0)='./file1\x00', 0x3008452, &(0x7f0000000b00)=ANY=[], 0x4, 0x6ea, &(0x7f0000000280)="$eJzs3c9vHGf9B/D3rNeON98qX6dNaCSKsBKpIEUkTqwUwiUGIZRDhapy6NlKnMbqJqkSF6UFQQoITkgc+gcUJN84ICTuQeHCpdx69bESUi8RQlEltGhmZ9e79jr2Jv6RwOsVjed55sfzfOYzz8x411ltgP9Zl0+neT9FLp9+/W5ZX1udb6+tzh+qV7eTlOVG0uzOUtxMigfJQrm+GJgyMN/ko+WLb376cO2zbq1ZT9X2E/39pncU8og+7tVTZuv2ZkfuObmj9rttVeHlhSRX6vmwqZ22NbRhmbRT9RwOXGeTe+PsvuX1Djz7qqfTj7+czFTPzU1mksP1k7n6naC+OzT2Ncg9MNZdDgAAAJ5Tn9w66AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+VOk+v7/op4a9TyzKXrf/z/VW1aXn0ELO97y/p7GAQAAAAAAAAD746uP8ih3c6RX7xTV3/xPVpVj+aKT/F/ey50s5XbO5G4Ws5KV3M65JDMDDU3dXVxZuX2uv2dp9J7nR+55fr+OGAAAAAAAAAD+K/08rfW//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLOgSCa6s2o6lvyrnGcmjWbW1+Ve8vckUwcd7xiKDfV/d7oOKBwAAAB4MtNPsM//P8qj3M2R3uvjTlG+5s+Xqvp03svNrGQ5K2lnKVfr19Dlq/7G2up8e211/kY5lfXhOL7z+VhhTNUtTFS1UT2fqLZo5VqWqyVncqUK5moa3b5PJSd68QzENeDDz9fDvHRph5E167SWnf12xLsIu+f+UK3xmC1b68El/YzM1bGVex7tZqCo3qhJNmZi27PTHKrNVK1O9ns6l0b/nZ9j2+c8xaXaNr32HK7n5fH8ak9zPq5+JhqpMnG+N/rKa+bxmUi+9uc/vHW9ffOd69funH52DmkbE1ss3zgm5gcy8fJznYnmmNvPVZk43q9fzvfzw5zObN7I7SznR1nMSpbSe6NxsR7P5c+Zx2dqYaj2xnaRTNXnpXvOdhLTbL5XlRZzstr3SJZT5FauZimvVf/O51y+mQu5kIsDZ/j4lnFXx1Zd9Y2NV33vTP9lZPCnvl4Xyrvbr9fvcguPO+KtRudu6d77y7weHchrd9Q/7G91dOA6mBvI0ou97EyObHy8e+OGt9rLPn6xzXNif83UmSgvoN5TohfdS91MNKtn0eZx/rtOuV/aNzud64vvbtH+vQ31V+t5OaxWv7Ld1j2jT8XuKk/Vi5mu7yTDo6Nc91L/LjOwrrM+lrvrhp+45X7Hq3VF0btSf5Bb1QDYfKVO1b/DbWip38XLI3uZr/Y7MbBu6Pet3Eo7V/chfwA8ib+91S/O5PBU6x+tT1oft37Zut56ffq7h7516JWpTP518tvNuYlXG68Uf8rH+Wn1+h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhKd97/4J3Fdnvp9uhCY+tVQ4VWNi7ZquVDo9sp6i/02UFfz0VhOsnQkup7jnali+YY7bQ2htEtTCSpl3R+lux7fnrfaTV6m9+UheamETWqsDC05I+bG/xwzAiLnV0Xe1hoZH87LcfCqFUHeFMC9sXZlRvvnr3z/gffWL6x+PbS20s3Jy9cuDh38cJr82evLbeX5ro/DzpKYC+sP/QPOhIAAAAAAAAAAABgp0Z9MODkCyM/NDLuZzz8z0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgV1w+neb9FDk3d2aurK+tzrfLqVde37KZpNFIip8kxYNkId0pMwPNFfn9g3RG9PPR8sU3P3249tl6W83u9kmjnm/t8WuT3KunzCaZqOdPYai9K0/dXvHP3jGUCfui0+ksPF18sDv+EwAA//8BQfjb")
r0 = syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r1 = inotify_init1(0x80800)
fcntl$getown(0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
inotify_add_watch(r1, 0x0, 0x4000008)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2541, 0x0)
fcntl$addseals(r5, 0x409, 0x4000)
inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x800007e1)
mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x80c03, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}, {@grpquota_inode_hardlimit}, {@noswap}], [{@measure}, {@smackfsfloor}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x1005, 0x8000000, 0x1}, 0x48)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000b80), &(0x7f0000000b40)=ANY=[@ANYBLOB="02e7fc36d95728c432"], 0xa, 0x1)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0)
geteuid()
mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x200004, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7472616e733d78656e2c6f626a5f757365723d232c736d61636b667305000000686673706c7573002c6d61736b3d5e4d41595f455845432c736d61636b6673726f6f743d262c0080b4a85d122cc28457875ec08f8f1bf097dd58b672f1b47fe2bb2d9dddb0822e93d6b7238dfa3d2c8c9f735580a56c908e7aed0e0aeedb0eb24b7e11af3edaa91cf48336debf26f9b46f51268991da2c6045440721cf667166ede5df82ee0ae93c52dfb9724fefdb734b58c91ed63937ac268872e2999993814170d2a39351a1fcccaa3c65a6eb12037e3969e36eb0f24707f9f4ed7a244a5ddebf886570687a2e32250475c4e18f76d35d"])
unlink(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m44.230430543s ago: executing program 3 (id=1115):
syz_emit_vhci(0x0, 0x8)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x614b, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
mknod$loop(0x0, 0x6000, 0x0)
r4 = open(0x0, 0x10507e, 0xa6)
fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000023c0)=0x1)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/217)
r5 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000080)=0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x70, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)

1m44.229336003s ago: executing program 1 (id=1124):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000ac0)='./file1\x00', 0x3008452, &(0x7f0000000b00)=ANY=[], 0x4, 0x6ea, &(0x7f0000000280)="$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")
r0 = syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r1 = inotify_init1(0x80800)
fcntl$getown(0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
inotify_add_watch(r1, 0x0, 0x4000008)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2541, 0x0)
fcntl$addseals(r5, 0x409, 0x4000)
inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x800007e1)
mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x80c03, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'default', '', @void}}}, {@grpquota_inode_hardlimit}, {@noswap}], [{@measure}, {@smackfsfloor}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x1005, 0x8000000, 0x1}, 0x48)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000b80), &(0x7f0000000b40)=ANY=[@ANYBLOB="02e7fc36d95728c432"], 0xa, 0x1)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0)
geteuid()
mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x200004, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7472616e733d78656e2c6f626a5f757365723d232c736d61636b667305000000686673706c7573002c6d61736b3d5e4d41595f455845432c736d61636b6673726f6f743d262c0080b4a85d122cc28457875ec08f8f1bf097dd58b672f1b47fe2bb2d9dddb0822e93d6b7238dfa3d2c8c9f735580a56c908e7aed0e0aeedb0eb24b7e11af3edaa91cf48336debf26f9b46f51268991da2c6045440721cf667166ede5df82ee0ae93c52dfb9724fefdb734b58c91ed63937ac268872e2999993814170d2a39351a1fcccaa3c65a6eb12037e3969e36eb0f24707f9f4ed7a244a5ddebf886570687a2e32250475c4e18f76d35d"])
unlink(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m44.228877793s ago: executing program 2 (id=1116):
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|*iWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d00"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000180)={0x1ff, 0x4, 0x0, 0xfffff6a8, 0x3, "c1d846f1120224c70b82426319d4c37ee7e4c0", 0x1, 0x6})
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0x7, 0xa40, 0xffffff81, 0x7fffffff, 0x6, "662ceb757dcb7495e121fcd1f20e485396a278", 0x2, 0x5})
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x28, r1, 0x507, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x34}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48002}, 0x20000054)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x18, &(0x7f0000000140)={0x40, 0x3, 0x3, "e5851a"}, 0x0, 0x0, 0x0, 0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r5=>0x0})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000001780)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee)
close(r6)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0x6, 0xc}, {0x2}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)

1m43.141554875s ago: executing program 1 (id=1117):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x12, r0, 0x4000)
r1 = userfaultfd(0x80001)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})

1m42.971825032s ago: executing program 1 (id=1118):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"])
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0)
keyctl$chown(0x4, r3, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48050)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x14, &(0x7f0000000140)})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))

1m42.60525489s ago: executing program 3 (id=1119):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@block_validity}, {@nodiscard}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}], [{@dont_measure}, {@audit}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x5)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000001640)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0, @ANYRES16, @ANYRESOCT=r3, @ANYBLOB="621df7484119a8e68750f898534ead59a145fc2bc19cd14161f180c7b396b4f054cadc9d2bd2b29be1aaf704ed9a097bf210caa841e3cbe8070c7d0f5f9334e8d8f65079347fbc6584df22ac0d2aef0799facbe7f756499a6f18919e7bae05110f220ff27da11be12487372fae18d309cb104f347edb5c5ce96c644823c609581f70a06ae465aa4b924087d6ddc708fc9ec06e7687f96f018f6acaa5019a18f80db5e9ea409dfa08c1f1a1eee5197423b3b878d8c00dcc484ae3b190690b47ce4a8503d6f1488d17a28fe6", @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r5, @ANYRESDEC=r1], 0x2, 0x576, &(0x7f00000006c0)="$eJzs3V1v094dwPGfS7tGmdRN+08IVQUOZZOKVIKTQFDEleecpAcSO7Id1F6hiqaoIoWJMmntDfSGbdL2ItjlXsTeEdpLYPJD+pgHoI9U30/UHsc+PudnN/Kvbu1jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYrk12y5a0jReZ1kN59YCv7X/Nlv72Ay5d6gY0a+IFX9JLic30lk3fr+/+Lol8nHv3Zzk4iInO7++/tsnv0xO9NcfEfB3+fcPtrS1vfN6tdfrvjutQC6hm9PDlzW0Z0LftJyGVib0VbVSsR8s1UNVN00droSRbik30E7kB2rBvaeK1WpZ6cKK3/EaNaep+zMf3y/ZdkU9LbS1E4S+9+BpIXSXTLNpvEZSJ14c13kcfxCfmUhF2mkptb7R65bHbUBcqfgtlUrjKpXsUqlYLJWKlUfVR49te/LYDPsIOVbj9D60+Dmd2rEbOKmJLP9LU4x40pFlUQNfrtQkEF9aQ5Zn+vn/jw/0yH4P5v+5dNbcjf3Fs/G3ebmVvrs1LP8PieWUX5P9qI4v25Jt2ZHXsio96UlX3p1PRJfm1RAtnhgJxRcjLXGSOSqbo6QqFamILS9kSepT8T6si5GmaAllRUKJRCefKFcC0eJIJL4EomRBXLknSopSlaqURYmWgqyILx3xpCE1cZJW1mUj2e9lUdawGPcqFYduRr7/E+5KacTWkv9xcqd05AZO7ms//wMAAAAAgCvLSv76PpV83Uze101T2xcdFgAAAAAAOEXJf/7n4iK5OuumWJz/AwAAAABw1Uwn3y0RycvtdGpdrOR2qW/4I8DHsw8QAAAAAACcWPL//1txkYyBclusveFSuAgAAAAAAIAr4u97o+8OG2M3bE9b//2fBMGUtdte/oO1mYzN62xeS9e7drTFqD5rzWSNJEUlLSYnXT1n5dJKe4NgfsmK9XFxWPsBOHsBfPyeAH6ZlH/KnbTOnbW0XMuW/CbtJV83TV1w/eaTojjOzESkl6O/vNn4qySb/w+vNWPlZKPXLbx821tLYtmNW9ndzAZQPDaO4ohY3ifjLST3XAzc4qnkRoys37wl6xu9rt1ens5adjYn0ss3Jg73+GFmRJ+fZD6tNZ+NeJvvL0n7zMV9FgvDtj6LonjCLf8kd9M6dxfupsWAKErjoigdjCLbCROnHUV5XBTlE0YBABdlPctCUzIs/x/Luz9wlDuS3ePD3jdkd/nO7P5JFtI6C7PJgXVydsAR3R53RLdPmN3+c+wZSMNybNzvv45k1c/xCp+H9hs2S1a8C6+93/yzXN/a3rm/sbn6qvuq+6ZUKlfsh7b9qCRTyWZkBbkHADDAwWfsWAPz/6in8Hz9Gufuh9lZ9e7Rs+os4/1u75KCgryUt9KTNVlM7jZIrjgY+HtH/sBlCItjzlrzSZpMn/CyOOKs7lfJXQ79dksj6x6OoXwePwoAAM7N/Jg8PDr/p+fui2POuw/n8tFnx/kDT2sDAABnQwdfrHz0NysITPtFsVotOtGSVkFOnqnA1BpaGS/SgbvkeA2t2oEf+a7fjCeem5oOVdhpt/0gUnU/UG0/NMvJ8IEqe/R7qFuOFxk3bDe1E2rl+l7kuJGqmdBV7c6fmiZc0kGyctjWrqkb14mM76nQ7wSuLigVan2goqlpLzJ1E096qh2YlhPk1HO/2WlpVdOhG5h25KcN9vsyXt0PWkmzhYve2QAAXBJb2zuvV3u97rsznBjYce7cNxUAAGTGZGkAAAAAAAAAAAAAAAAAAAAAAHAJnMf9f0xc8Yn+UNA/3k5Ozi5CSy56//yUE2MPHR/O/OAE4Ez9PwAA//9euU4t")
r6 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000000)={0x0, 0x4, 0xfffffff7, 0x9, 0x101, 0xff, 0x8001, 0x0, 0x7, 0x8, 0x45a, 0x1})
keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14", @ANYBLOB="01002bbd7000fddbdf2549"], 0x14}}, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000080)={[{@nodioread_nolock}, {@errors_remount}, {@grpid}, {@data_err_ignore}, {@jqfmt_vfsold}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xe4d}}]}, 0x0, 0x474, &(0x7f0000000200)="$eJzs289vFFUcAPDvTH8A8qMV8QeIWiUmjcaWFlQOXjSaeMBoogc81nYhDQs1tBohRIoxeDExGD0bjyb+Bd6IiVFPJl714smQEOUCeqqZ2RnYLt1i7bZT2c8nme57M2933rdvfrx5bzeArjWU/UkitkXELxEx0MguLjDUeLl+9ezkX1fPTiaxsPD6H0le7trVs5Nl0fJ9W4vMcBqRfpgUO1ls9vSZ4xP1eu1UkR+dO/H26OzpM0+9e2LiWO1Y7eT4oUMHD4w9+8z40x2JM4vr2p73Z/bufvnNi69MHrn41g9fZ/XdVmxvjqNThrLA/1zItW57vNM7q9j2pnTSW2FFWJGeiMiaqy8//weiJ2423kC89EGllQPWVHZv2tR+8/wCcAdLouoaANUob/TZ82+5rFPXY0O48nzjASiL+3qxNLb0RlqU6Wt5vu2koYg4Mv/3F9kSazQOAQDQ7OPJzw/3N/U7bvY/0rgvf/0t/5sUcyiDEXF3ROyMiHsiYldE3BuRl70/Ih5YZX1u7f+kl1f5kcvK+n/PFXNbi/t/Ze8vBnuK3PY8/r7k6HS9tj8idkTEcPRtyvJjy+zj0os/f9JuW3P/L1uy/Zd9waIel3tbBuimJuYm8k5pB1w5H7Gnd6n4kxszAVnb746IPSv76B1lYvqJr/a2K3T7+JfRgXmmhS+z8Oaz+OejJf5S0jw/OX3L/OTo5qjX9o+WR8Wtfvzpwmvt9r+q+DvgSq3x2tT+rUUufdo8Xzu78n1c+PWjts80//H4T/uTN/J55v5i3XsTc3OnxiL6k8N5ftH68ZvvLfNl+ez4H9639Pm/Mx7OU1n7PxgR2UH8UES+9pGi7o9GxGMRsW+Z+L9/of22Mv5IK2r/8xFTS17/bhz/g8mi9l95ouf4d9+02/+/a/+DeWq4WJNf/25jqepkl4vWCq7mfwcAAAD/F2n+HfgkHbmRTtORkcZ3+HfFXWl9ZnbuyaMz75ycanxXfjD60nKka6AYD61P12tjyXzxiY3x0fFirLgcLz1QjBt/1rMlz49MztSnKo4dut3WNud/5veeqmsHrLEtS64d71/3igAVaJ1HTxdnz70aLgZwp/J7behetzn/0/WqB7D+3P+hey11/p9ryZsLgDuT+z90L+c/dKn026prAFTI/R+60mp+17+Gic0boxrVJDZqo+SJiDKRboj6SKxRouorEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8EwAA//8UXOpw")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

1m41.378221366s ago: executing program 3 (id=1120):
clock_gettime(0x7, 0x0)
io_setup(0x6, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0))
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r8, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)

48.561913973s ago: executing program 4 (id=492):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
iopl(0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0xd, 0x7fffffff}, 0x0)
gettid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x48011)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000540)=""/102400, 0x19000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = timerfd_create(0x7, 0x800)
timerfd_gettime(r3, &(0x7f0000001000))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='1::%0.0.1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x1, 0xb, 0x1, 0xfffffffffffffff0, 0xc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

38.823529844s ago: executing program 4 (id=492):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
iopl(0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0xd, 0x7fffffff}, 0x0)
gettid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x48011)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000540)=""/102400, 0x19000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = timerfd_create(0x7, 0x800)
timerfd_gettime(r3, &(0x7f0000001000))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='1::%0.0.1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x1, 0xb, 0x1, 0xfffffffffffffff0, 0xc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

29.496813844s ago: executing program 4 (id=492):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
iopl(0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0xd, 0x7fffffff}, 0x0)
gettid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x48011)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000540)=""/102400, 0x19000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = timerfd_create(0x7, 0x800)
timerfd_gettime(r3, &(0x7f0000001000))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='1::%0.0.1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x1, 0xb, 0x1, 0xfffffffffffffff0, 0xc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.125086339s ago: executing program 4 (id=492):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
iopl(0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0xd, 0x7fffffff}, 0x0)
gettid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x48011)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000540)=""/102400, 0x19000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = timerfd_create(0x7, 0x800)
timerfd_gettime(r3, &(0x7f0000001000))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='1::%0.0.1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x1, 0xb, 0x1, 0xfffffffffffffff0, 0xc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.235614007s ago: executing program 4 (id=492):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
iopl(0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0xd, 0x7fffffff}, 0x0)
gettid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x48011)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000540)=""/102400, 0x19000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = timerfd_create(0x7, 0x800)
timerfd_gettime(r3, &(0x7f0000001000))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='1::%0.0.1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x1, 0xb, 0x1, 0xfffffffffffffff0, 0xc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 4 (id=492):
r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
iopl(0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0xd, 0x7fffffff}, 0x0)
gettid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x48011)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000540)=""/102400, 0x19000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = timerfd_create(0x7, 0x800)
timerfd_gettime(r3, &(0x7f0000001000))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='1::%0.0.1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x1, 0xb, 0x1, 0xfffffffffffffff0, 0xc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts.
[   80.722319][ T5772] cgroup: Unknown subsys name 'net'
[   80.869709][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.551908][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.198446][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.207161][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.230141][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.238510][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.250273][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.261216][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.280370][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.290999][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.298850][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.307547][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.315650][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.323361][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.401928][ T5784] (null): rxe_set_mtu: Set mtu to 1024
[   84.408714][ T5784] rxe_eth0 speed is unknown, defaulting to 1000
[   84.422101][ T5784] rxe_eth0 speed is unknown, defaulting to 1000
[   84.454739][ T5788] (null): rxe_set_mtu: Set mtu to 1024
[   84.460913][ T5784] rxe_eth0 speed is unknown, defaulting to 1000
[   84.473473][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.482776][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.490691][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.498821][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.507554][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.520291][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.549647][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   84.560900][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.571634][ T5792] (null): rxe_set_mtu: Set mtu to 1024
[   84.577429][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   84.584653][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.620127][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.651167][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.670791][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.681267][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.817581][ T5793] (null): rxe_set_mtu: Set mtu to 1024
[   84.840657][ T5793] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   84.892254][ T5784] infiniband rxe0: set active
[   84.898278][ T5784] infiniband rxe0: added rxe_eth0
[   84.920878][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   84.976623][ T5784] RDS/IB: rxe0: added
[   84.981543][ T5784] smc: adding ib device rxe0 with port count 1
[   84.987872][ T5784] smc:    ib device rxe0 port 1 has pnetid 
[   84.998673][ T5793] rxe_eth0 speed is unknown, defaulting to 1000
[   85.010002][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   85.209172][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   85.329126][ T5784] rxe_eth0 speed is unknown, defaulting to 1000
[   85.376447][ T5792] chnl_net:caif_netlink_parms(): no params data found
[   85.646967][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.660321][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.667762][ T5788] bridge_slave_0: entered allmulticast mode
[   85.694525][ T5788] bridge_slave_0: entered promiscuous mode
[   85.711885][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.719069][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.733172][ T5788] bridge_slave_1: entered allmulticast mode
[   85.741854][ T5788] bridge_slave_1: entered promiscuous mode
[   85.806589][ T5784] rxe_eth0 speed is unknown, defaulting to 1000
[   85.814703][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.821953][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.829238][ T5792] bridge_slave_0: entered allmulticast mode
[   85.837223][ T5792] bridge_slave_0: entered promiscuous mode
[   85.891832][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.899402][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.922866][ T5792] bridge_slave_1: entered allmulticast mode
[   85.940561][ T5792] bridge_slave_1: entered promiscuous mode
[   85.985847][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.021726][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.074129][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.131480][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.237152][ T5788] team0: Port device team_slave_0 added
[   86.251956][ T5792] team0: Port device team_slave_0 added
[   86.258244][ T5793] chnl_net:caif_netlink_parms(): no params data found
[   86.304399][ T5788] team0: Port device team_slave_1 added
[   86.314749][ T5792] team0: Port device team_slave_1 added
[   86.346318][ T5784] rxe_eth0 speed is unknown, defaulting to 1000
[   86.353492][ T5789] Bluetooth: hci0: command tx timeout
[   86.430405][ T5789] Bluetooth: hci1: command tx timeout
[   86.486010][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.493256][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.521562][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.536402][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.543725][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.570116][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.590190][ T5789] Bluetooth: hci2: command tx timeout
[   86.596977][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.620074][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.661606][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.710912][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.717930][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.745351][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.758061][ T5789] Bluetooth: hci3: command tx timeout
[   86.848573][ T5788] hsr_slave_0: entered promiscuous mode
[   86.855859][ T5788] hsr_slave_1: entered promiscuous mode
[   86.863824][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   86.886650][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.894312][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.905065][ T5793] bridge_slave_0: entered allmulticast mode
[   86.921842][ T5793] bridge_slave_0: entered promiscuous mode
[   87.004916][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.030285][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.037600][ T5793] bridge_slave_1: entered allmulticast mode
[   87.055114][ T5793] bridge_slave_1: entered promiscuous mode
[   87.086161][ T5792] hsr_slave_0: entered promiscuous mode
[   87.101325][ T5792] hsr_slave_1: entered promiscuous mode
[   87.120182][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.128179][ T5792] Cannot create hsr debugfs directory
[   87.303528][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.323141][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.447529][ T5793] team0: Port device team_slave_0 added
[   87.458401][ T5793] team0: Port device team_slave_1 added
[   87.643659][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.652838][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.683313][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.748074][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.756099][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.785761][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.859523][ T5446] infiniband rxe0: set active
[   87.926723][   T27] rxe_eth0 speed is unknown, defaulting to 1000
[   87.965351][ T5793] hsr_slave_0: entered promiscuous mode
[   87.973934][ T5793] hsr_slave_1: entered promiscuous mode
[   87.981069][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.988695][ T5793] Cannot create hsr debugfs directory
[   88.037833][ T5784] chnl_net:caif_netlink_parms(): no params data found
[   88.154639][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.209332][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.273634][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.284907][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.328716][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.339871][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.348455][ T5784] bridge_slave_0: entered allmulticast mode
[   88.358551][ T5784] bridge_slave_0: entered promiscuous mode
[   88.368944][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.376487][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.383858][ T5784] bridge_slave_1: entered allmulticast mode
[   88.391677][ T5784] bridge_slave_1: entered promiscuous mode
[   88.430434][ T5789] Bluetooth: hci0: command tx timeout
[   88.466928][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.481579][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.493915][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.510633][ T5789] Bluetooth: hci1: command tx timeout
[   88.520681][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.536131][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.585867][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.602608][ T5784] team0: Port device team_slave_0 added
[   88.611646][ T5784] team0: Port device team_slave_1 added
[   88.649357][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.656893][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.685606][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.694302][ T5789] Bluetooth: hci2: command tx timeout
[   88.719443][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.730321][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.765930][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.830510][ T5789] Bluetooth: hci3: command tx timeout
[   88.853411][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.875968][ T5784] hsr_slave_0: entered promiscuous mode
[   88.882412][ T5784] hsr_slave_1: entered promiscuous mode
[   88.888975][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.897363][ T5784] Cannot create hsr debugfs directory
[   88.913339][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.925604][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.939399][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.184199][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.285324][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.296518][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.318513][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   89.331947][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.345849][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.357880][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.365277][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.387454][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.408213][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.415420][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.434624][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.466503][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[   89.498036][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[   89.524033][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.531293][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.549585][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.556831][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.606948][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.614201][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.633961][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.641239][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.835578][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.936438][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.987618][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[   90.032720][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.039927][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.073336][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.080563][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.193991][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.416417][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.435176][ T5788] veth0_vlan: entered promiscuous mode
[   90.457819][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.475921][ T5788] veth1_vlan: entered promiscuous mode
[   90.511848][ T5789] Bluetooth: hci0: command tx timeout
[   90.590457][ T5789] Bluetooth: hci1: command tx timeout
[   90.639817][ T5792] veth0_vlan: entered promiscuous mode
[   90.656558][ T5788] veth0_macvtap: entered promiscuous mode
[   90.676790][ T5793] veth0_vlan: entered promiscuous mode
[   90.692965][ T5788] veth1_macvtap: entered promiscuous mode
[   90.708181][ T5792] veth1_vlan: entered promiscuous mode
[   90.721210][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.736759][ T5793] veth1_vlan: entered promiscuous mode
[   90.751200][ T5789] Bluetooth: hci2: command tx timeout
[   90.816193][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.853932][ T5793] veth0_macvtap: entered promiscuous mode
[   90.864703][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.878921][ T5792] veth0_macvtap: entered promiscuous mode
[   90.893151][ T5793] veth1_macvtap: entered promiscuous mode
[   90.909298][ T5784] veth0_vlan: entered promiscuous mode
[   90.921193][ T5789] Bluetooth: hci3: command tx timeout
[   90.922952][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.936266][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.945130][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.954654][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.967818][ T5792] veth1_macvtap: entered promiscuous mode
[   91.005035][ T5784] veth1_vlan: entered promiscuous mode
[   91.028270][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.041036][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.053849][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.063446][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.079151][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.089227][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.101000][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.112581][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.138784][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.151641][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.163468][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.174659][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.186979][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.199110][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.209625][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.221464][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.243727][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.253379][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.263505][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.273902][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.326021][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.338966][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.354008][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.364320][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.404235][ T5784] veth0_macvtap: entered promiscuous mode
[   91.422691][ T5784] veth1_macvtap: entered promiscuous mode
[   91.502380][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.515704][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.596057][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.607797][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.617900][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.629708][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.640668][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.652211][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.663665][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.675491][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.687008][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.698362][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.709340][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.720392][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.731310][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.743508][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.759310][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.777618][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.789231][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.803729][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.812907][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.822136][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.849304][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.869158][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.938915][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.957542][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.983216][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.010797][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.042146][  T971] cfg80211: failed to load regulatory.db
[   92.071424][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.079329][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.114337][ T5788] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   92.263399][ T4125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.290869][ T4125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.370491][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.398110][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.395956][ T5789] Bluetooth: hci0: command tx timeout
[   93.401612][ T5789] Bluetooth: hci1: command tx timeout
[   93.407757][ T5789] Bluetooth: hci2: command tx timeout
[   93.413614][ T5789] Bluetooth: hci3: command tx timeout
[   94.020641][ T5914] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET)
[   94.055912][ T5914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11'.
[   94.083008][ T5914] syz.2.11[5914]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   95.091767][ T5925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15'.
[   95.918234][ T5930] mmap: syz.0.5 (5930) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.294502][ T5935] xt_hashlimit: size too large, truncated to 1048576
[   96.302111][ T5935] xt_hashlimit: max too large, truncated to 1048576
[   96.308991][ T5935] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[   96.594642][ T5774] IPVS: starting estimator thread 0...
[   96.854127][ T5936] IPVS: using max 16 ests per chain, 38400 per kthread
[   97.998437][  T971] IPVS: starting estimator thread 0...
[   98.101235][ T5951] IPVS: using max 17 ests per chain, 40800 per kthread
[   98.863182][ T5958] loop3: detected capacity change from 0 to 512
[   98.891098][ T5958] EXT4-fs (loop3): invalid inodes per group: 0
[   98.891098][ T5958] 
[  100.506383][ T5973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'.
[  101.041550][ T5983] netlink: 'syz.3.17': attribute type 4 has an invalid length.
[  101.049365][ T5983] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.17'.
[  101.240481][ T5985] process 'syz.2.21' launched './file0' with NULL argv: empty string added
[  104.390025][    C0] sched: RT throttling activated
[  105.137154][ T6019] loop2: detected capacity change from 0 to 512
[  105.197010][ T6019] EXT4-fs (loop2): invalid inodes per group: 0
[  105.197010][ T6019] 
[  105.736997][ T6028] netlink: 'syz.0.31': attribute type 4 has an invalid length.
[  105.744758][ T6028] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.31'.
[  106.329748][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32'.
[  106.463886][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.33'.
[  106.490935][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[  110.220281][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  112.371143][ T6075] netlink: 'syz.3.41': attribute type 4 has an invalid length.
[  112.378814][ T6075] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.41'.
[  113.826156][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'.
[  113.843224][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.44'.
[  116.559498][ T6104] sctp: failed to load transform for md5: -2
[  116.668670][ T6115] netlink: 'syz.2.50': attribute type 1 has an invalid length.
[  119.861341][ T6133] sctp: [Deprecated]: syz.3.55 (pid 6133) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.861341][ T6133] Use struct sctp_sack_info instead
[  120.702753][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'.
[  120.859775][ T6142] loop1: detected capacity change from 0 to 512
[  120.991643][ T6142] EXT4-fs (loop1): invalid inodes per group: 0
[  120.991643][ T6142] 
[  121.048856][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.58'.
[  123.593647][ T6155] loop2: detected capacity change from 0 to 512
[  123.723696][ T6155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.775722][ T6155] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.580244][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  125.664557][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805c274c00: rx timeout, send abort
[  125.680114][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c274c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  125.990181][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  126.328741][ T6169] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  126.723060][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.558644][ T6193] ima: policy update failed
[  127.577551][   T28] audit: type=1802 audit(1792751863.749:2): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.69" res=0 errno=0
[  127.960896][ T6197] UBIFS error (pid: 6197): cannot open "ubi:0", error -19
[  127.975508][ T6197] ima: Unable to open file: / (-22)
[  128.425016][ T6191] ima: policy update failed
[  128.630358][   T28] audit: type=1802 audit(1792751864.609:3): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.69" res=0 errno=0
[  128.868233][ T6199] loop2: detected capacity change from 0 to 2048
[  128.891682][ T6201] loop0: detected capacity change from 0 to 512
[  128.934907][ T6199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.951870][ T6201] EXT4-fs (loop0): invalid inodes per group: 0
[  128.951870][ T6201] 
[  133.010882][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  133.017657][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  133.159497][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'.
[  133.315715][ T6223] loop7: detected capacity change from 0 to 16384
[  133.324702][ T6224] loop1: detected capacity change from 0 to 128
[  133.398176][ T6224] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  133.473114][ T6224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.550253][ T6226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.77'.
[  133.670120][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  135.250212][ T6225] loop7: detected capacity change from 16384 to 0
[  136.183550][ T6225] syz.2.77: attempt to access beyond end of device
[  136.183550][ T6225] loop7: rw=2049, sector=0, nr_sectors = 8 limit=0
[  136.250912][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.79'.
[  136.303964][ T6225] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  136.367950][ T6225] syz.2.77: attempt to access beyond end of device
[  136.367950][ T6225] loop7: rw=2049, sector=8, nr_sectors = 8 limit=0
[  136.423838][ T6225] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  136.483739][ T6225] syz.2.77: attempt to access beyond end of device
[  136.483739][ T6225] loop7: rw=2049, sector=16, nr_sectors = 8 limit=0
[  136.560144][ T6225] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  136.616641][ T6225] syz.2.77: attempt to access beyond end of device
[  136.616641][ T6225] loop7: rw=2049, sector=24, nr_sectors = 8 limit=0
[  137.490284][ T6225] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  137.535110][ T6225] syz.2.77: attempt to access beyond end of device
[  137.535110][ T6225] loop7: rw=2049, sector=32, nr_sectors = 8 limit=0
[  137.594030][ T6225] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  137.609458][ T6225] syz.2.77: attempt to access beyond end of device
[  137.609458][ T6225] loop7: rw=2049, sector=40, nr_sectors = 8 limit=0
[  137.637838][ T6225] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  137.688937][ T6225] syz.2.77: attempt to access beyond end of device
[  137.688937][ T6225] loop7: rw=2049, sector=48, nr_sectors = 8 limit=0
[  137.813561][ T6225] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  137.870679][ T6254] loop0: detected capacity change from 0 to 128
[  137.891255][ T6225] syz.2.77: attempt to access beyond end of device
[  137.891255][ T6225] loop7: rw=2049, sector=56, nr_sectors = 8 limit=0
[  137.954263][   T28] audit: type=1326 audit(1792751874.029:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafff39f559 code=0x0
[  138.032558][ T6225] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  138.143044][ T6225] syz.2.77: attempt to access beyond end of device
[  138.143044][ T6225] loop7: rw=2049, sector=64, nr_sectors = 8 limit=0
[  138.369916][ T6225] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  138.492123][ T6225] syz.2.77: attempt to access beyond end of device
[  138.492123][ T6225] loop7: rw=2049, sector=72, nr_sectors = 8 limit=0
[  138.557555][ T6225] Buffer I/O error on dev loop7, logical block 9, lost async page write
[  140.940309][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  141.350197][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  142.956576][ T6274] loop1: detected capacity change from 0 to 256
[  142.975168][ T6274] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d)
[  142.988961][ T6274] exFAT-fs (loop1): failed to load alloc-bitmap
[  142.995521][ T6274] exFAT-fs (loop1): failed to recognize exfat type
[  145.286882][ T6295] Invalid ELF header magic: != ELF
[  147.992793][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  149.933787][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[  150.101342][ T6315] loop0: detected capacity change from 0 to 128
[  150.250327][ T6315] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  150.380166][ T6315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.561762][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  151.590180][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  159.169945][ T6360] loop3: detected capacity change from 0 to 16
[  159.177357][ T6360] =======================================================
[  159.177357][ T6360] WARNING: The mand mount option has been deprecated and
[  159.177357][ T6360]          and is ignored by this kernel. Remove the mand
[  159.177357][ T6360]          option from the mount to silence this warning.
[  159.177357][ T6360] =======================================================
[  159.954597][ T6360] erofs: (device loop3): mounted with root inode @ nid 36.
[  160.321561][ T6370] Invalid ELF header magic: != ELF
[  162.881358][ T6387] loop3: detected capacity change from 0 to 256
[  164.347642][ T6387] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d)
[  164.362222][ T6387] exFAT-fs (loop3): failed to load alloc-bitmap
[  164.368768][ T6387] exFAT-fs (loop3): failed to recognize exfat type
[  168.422986][   T28] audit: type=1326 audit(1792751904.409:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.2.121" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f696279f559 code=0x0
[  169.189058][ T6416] loop2: detected capacity change from 0 to 512
[  169.465032][ T6422] input: syz0 as /devices/virtual/input/input5
[  169.591105][ T6277] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  169.784666][ T6277] usb 1-1: Using ep0 maxpacket: 8
[  169.796785][ T6277] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  169.805829][ T6277] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  169.825464][ T6277] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  169.842081][ T6277] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  169.855035][ T6277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.894273][ T6277] usbtmc 1-1:16.0: bulk endpoints not found
[  172.526223][    T8] usb 1-1: USB disconnect, device number 2
[  174.630177][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  176.921668][ T6457] loop3: detected capacity change from 0 to 32768
[  176.954135][ T6458] sctp: [Deprecated]: syz.0.133 (pid 6458) Use of struct sctp_assoc_value in delayed_ack socket option.
[  176.954135][ T6458] Use struct sctp_sack_info instead
[  177.169336][ T6457] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.135 (6457)
[  177.257379][ T6457] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  177.268231][ T6457] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  177.277653][ T6457] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  177.287642][ T6457] BTRFS info (device loop3): use zstd compression, level 3
[  177.295827][ T6457] BTRFS info (device loop3): force clearing of disk cache
[  177.303188][ T6457] BTRFS info (device loop3): enabling disk space caching
[  177.310502][ T6457] BTRFS info (device loop3): disk space caching is enabled
[  177.530128][ T6457] BTRFS info (device loop3): enabling ssd optimizations
[  177.537312][ T6457] BTRFS info (device loop3): auto enabling async discard
[  177.549809][ T6457] BTRFS info (device loop3): rebuilding free space tree
[  177.569022][ T6478] loop0: detected capacity change from 0 to 764
[  177.609926][ T6457] BTRFS info (device loop3): disabling free space tree
[  177.617386][ T6457] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  177.627590][ T6457] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  178.817317][ T5793] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  181.577495][ T6506] Invalid ELF header magic: != ELF
[  182.400097][    T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  182.846119][    T8] usb 3-1: Using ep0 maxpacket: 8
[  182.862717][    T8] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  182.887962][    T8] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  182.936414][    T8] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  182.954414][    T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  182.963898][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.011255][    T8] usbtmc 3-1:16.0: bulk endpoints not found
[  185.205879][    T8] usb 3-1: USB disconnect, device number 2
[  185.387752][ T6529] loop0: detected capacity change from 0 to 512
[  185.409004][ T6529] EXT4-fs: inline encryption not supported
[  185.460278][ T6529] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  185.551282][ T6529] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.148: corrupted in-inode xattr: e_value size too large
[  185.582797][ T6529] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.148: couldn't read orphan inode 15 (err -117)
[  187.231723][ T5789] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  187.240746][ T5789] Bluetooth: hci0: Injecting HCI hardware error event
[  187.249460][ T5789] Bluetooth: hci0: hardware error 0x00
[  187.292623][ T6529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.240863][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.311840][ T5789] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  189.648311][ T6553] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present
[  191.820213][    T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  192.299956][ T6577] warning: `syz.1.159' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  192.330942][    T8] usb 1-1: Using ep0 maxpacket: 8
[  192.345862][    T8] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  192.355171][    T8] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  192.365738][    T8] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  192.379104][    T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  192.389205][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.406575][    T8] usbtmc 1-1:16.0: bulk endpoints not found
[  192.490201][ T5862] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  192.669924][ T6582] loop1: detected capacity change from 0 to 1024
[  192.680294][ T5862] usb 4-1: Using ep0 maxpacket: 32
[  192.708517][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short
[  192.759141][ T5862] usb 4-1: config 5 has an invalid interface number: 4 but max is 1
[  192.810864][ T5862] usb 4-1: config 5 has an invalid interface number: 4 but max is 1
[  192.855391][ T5862] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2
[  192.900295][ T5862] usb 4-1: config 5 has no interface number 0
[  192.912681][ T5862] usb 4-1: config 5 interface 4 has no altsetting 1
[  193.162276][ T5862] usb 4-1: New USB device found, idVendor=134c, idProduct=1c16, bcdDevice=f0.53
[  193.179693][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.188230][ T5862] usb 4-1: Product: syz
[  193.197327][ T5862] usb 4-1: Manufacturer: syz
[  193.202378][ T5862] usb 4-1: SerialNumber: syz
[  193.265858][ T6589] Zero length message leads to an empty skb
[  194.312525][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.339757][ T5876] usb 1-1: USB disconnect, device number 3
[  194.390914][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.440665][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.447201][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.629248][ T6574] capability: warning: `syz.3.158' uses 32-bit capabilities (legacy support in use)
[  195.762209][ T5862] usb 4-1: USB disconnect, device number 2
[  196.495005][ T6610] netlink: 'syz.0.167': attribute type 4 has an invalid length.
[  196.502923][ T6610] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.167'.
[  197.594124][ T5789] Bluetooth: Unknown LE signaling command 0x0d
[  197.600896][ T5789] Bluetooth: Wrong link type (-22)
[  200.850182][ T6277] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  201.060052][ T6277] usb 3-1: Using ep0 maxpacket: 8
[  201.144589][ T6277] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  201.360502][ T6646] netlink: 'syz.3.180': attribute type 4 has an invalid length.
[  201.368397][ T6646] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.180'.
[  202.080060][ T6277] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  202.163613][ T6277] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  202.242479][ T6277] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  202.292571][ T6277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.415384][ T6277] usbtmc 3-1:16.0: bulk endpoints not found
[  202.641958][ T5862] usb 3-1: USB disconnect, device number 3
[  202.705169][ T6656] loop0: detected capacity change from 0 to 4096
[  202.943197][ T6656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  202.960238][ T6656] EXT4-fs (loop0): Test dummy encryption mode enabled
[  202.997867][ T6656] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  203.014397][ T6656] System zones: 0-5
[  203.027784][ T6656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.332805][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.197364][ T6683] i2c i2c-0: new_device: Missing parameters
[  207.000615][ T6680] Bluetooth: hci1: command 0x0406 tx timeout
[  207.006943][ T6680] Bluetooth: hci2: command 0x0406 tx timeout
[  209.870358][ T6698] loop1: detected capacity change from 0 to 512
[  209.901115][ T6698] EXT4-fs: Mount option(s) incompatible with ext2
[  210.994360][ T6704] loop2: detected capacity change from 0 to 512
[  211.171428][ T6704] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  211.184691][ T6704] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  211.674025][ T6704] EXT4-fs error (device loop2): ext4_init_orphan_info:623: comm syz.2.189: orphan file block 0: bad magic
[  211.690836][ T6704] EXT4-fs (loop2): mount failed
[  211.892229][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  212.290414][ T6709] loop1: detected capacity change from 0 to 4096
[  212.358032][ T6709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  212.396269][ T6709] EXT4-fs (loop1): Test dummy encryption mode enabled
[  212.479653][ T6709] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  212.582317][ T6709] System zones: 0-5
[  212.736798][ T6709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.945330][ T6720] loop0: detected capacity change from 0 to 164
[  214.240893][ T6721] iso9660: Corrupted directory entry in block 2 of inode 1792
[  214.280685][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.080158][ T6743] input: syz0 as /devices/virtual/input/input6
[  220.461660][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'.
[  220.947738][ T6760] loop3: detected capacity change from 0 to 4096
[  220.990173][ T6760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  221.100379][ T6760] EXT4-fs (loop3): Test dummy encryption mode enabled
[  221.960072][ T6760] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  222.061360][ T6760] System zones: 0-5
[  222.166285][ T6760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.369020][ T6776] loop0: detected capacity change from 0 to 32768
[  224.522227][ T6776] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.208 (6776)
[  224.958953][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.968302][ T6776] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  224.978769][ T6776] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  224.987781][ T6776] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  224.997482][ T6776] BTRFS info (device loop0): use zstd compression, level 3
[  225.004901][ T6776] BTRFS info (device loop0): force clearing of disk cache
[  225.012922][ T6776] BTRFS info (device loop0): enabling disk space caching
[  225.020331][ T6776] BTRFS info (device loop0): disk space caching is enabled
[  225.541287][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  225.544177][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  225.555207][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  225.566259][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  225.576764][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  225.586525][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  225.596389][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  225.606166][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  225.616474][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  225.626890][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  225.637151][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  225.647918][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  225.658596][ T6776] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  225.826795][ T6776] BTRFS error (device loop0): open_ctree failed: -12
[  225.861467][ T6739] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by udevd (6739)
[  226.881453][ T6802] loop2: detected capacity change from 0 to 2048
[  227.360513][ T6802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.429247][ T6813] input: syz0 as /devices/virtual/input/input7
[  228.297345][ T6827] loop3: detected capacity change from 0 to 512
[  228.310809][ T6827] EXT4-fs: inline encryption not supported
[  228.403969][ T6827] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  228.459864][ T6827] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.216: corrupted in-inode xattr: e_value size too large
[  228.475172][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.534206][ T6827] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.216: couldn't read orphan inode 15 (err -117)
[  228.563576][ T6827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.933484][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.881007][ T6846] Bluetooth: MGMT ver 1.22
[  234.028073][   T28] audit: type=1800 audit(1792751971.180:6): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.225" name=08 dev="sda1" ino=2044 res=0 errno=0
[  235.583235][ T6870] Bluetooth: MGMT ver 1.22
[  235.593670][ T6870] loop0: detected capacity change from 0 to 8
[  235.705399][ T6872] IPVS: wrr: TCP 127.0.0.1:21 - no destination available
[  237.391900][ T5876] IPVS: starting estimator thread 0...
[  237.931567][ T6882] ip_tables: iptables: counters copy to user failed while replacing table
[  237.944996][ T6874] IPVS: using max 16 ests per chain, 38400 per kthread
[  242.382305][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.391558][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.473436][ T6907] bridge0: entered allmulticast mode
[  242.576942][ T6908] bridge0: entered promiscuous mode
[  242.628916][ T6908] macsec1: entered promiscuous mode
[  242.661780][ T6908] macsec1: entered allmulticast mode
[  242.667298][ T6908] bridge0: entered allmulticast mode
[  242.699037][ T6908] bridge0: port 3(macsec1) entered blocking state
[  242.776597][ T6908] bridge0: port 3(macsec1) entered disabled state
[  242.865974][ T6908] bridge0: left allmulticast mode
[  242.880904][ T5862] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  242.885140][ T6908] bridge0: left promiscuous mode
[  243.018566][ T6909] bridge_slave_1: left allmulticast mode
[  243.026018][ T6909] bridge_slave_1: left promiscuous mode
[  243.046432][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.001081][ T5862] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  244.005960][ T6909] bridge_slave_0: left allmulticast mode
[  244.026812][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.046771][ T6909] bridge_slave_0: left promiscuous mode
[  244.060989][ T5862] usb 4-1: config 0 descriptor??
[  244.080388][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.213928][ T5876] usb 4-1: USB disconnect, device number 3
[  246.312674][ T6927] loop1: detected capacity change from 0 to 512
[  246.360506][ T6927] EXT4-fs: inline encryption not supported
[  246.376464][ T6927] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  246.752068][ T6927] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.240: corrupted in-inode xattr: e_value size too large
[  247.002422][ T6927] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.240: couldn't read orphan inode 15 (err -117)
[  247.231393][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  247.257411][ T6927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.741017][ T5876] usb 3-1: Using ep0 maxpacket: 8
[  247.782235][ T5876] usb 3-1: unable to get BOS descriptor or descriptor too short
[  247.830123][ T5876] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  247.916432][ T5876] usb 3-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  247.932017][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.944399][ T5876] usb 3-1: Product: syz
[  247.948618][ T5876] usb 3-1: Manufacturer: syz
[  247.968811][ T5876] usb 3-1: SerialNumber: syz
[  250.401169][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.479477][ T5876] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  250.492994][ T5876] usb 3-1: MIDIStreaming interface descriptor not found
[  250.652994][ T5876] usb 3-1: USB disconnect, device number 4
[  251.417965][ T6956] udevd[6956]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  251.976644][ T6963] loop2: detected capacity change from 0 to 512
[  252.090359][ T6963] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  252.148095][ T6963] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  255.884234][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  255.891167][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  255.917265][ T5786] Bluetooth: hci3: command 0x0406 tx timeout
[  257.296795][ T7005] loop3: detected capacity change from 0 to 256
[  261.670057][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  266.946163][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.953856][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.425237][ T7064] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  267.667886][ T7064] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  267.690530][ T7064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.734803][ T7064] usb 2-1: config 0 descriptor??
[  269.303731][ T7045] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.525611][ T7045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.714231][ T7045] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.723398][ T7045] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.733245][ T7045] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.742381][ T7045] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.949638][ T7070] batman_adv: batadv0: Adding interface: macvtap1
[  272.969901][ T7070] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.005596][ T7070] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  273.102509][ T7079] batman_adv: batadv0: Removing interface: macvtap1
[  273.124068][ T7097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  273.243001][ T6278] usb 2-1: USB disconnect, device number 3
[  273.442241][ T7119] loop2: detected capacity change from 0 to 512
[  274.132323][ T7119] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.276: bg 0: block 385: padding at end of block bitmap is not set
[  274.154388][ T7119] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  274.167687][ T7119] EXT4-fs (loop2): 2 truncates cleaned up
[  274.181844][ T7119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.507667][ T7110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.850108][ T7129] loop0: detected capacity change from 0 to 16
[  274.887816][ T7129] erofs: (device loop0): mounted with root inode @ nid 36.
[  274.920564][ T7129] bio_check_eod: 822 callbacks suppressed
[  274.920607][ T7129] syz.0.279: attempt to access beyond end of device
[  274.920607][ T7129] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[  274.951712][ T7129] trusted_key: syz.0.279 sent an empty control message without MSG_MORE.
[  276.905156][ T7144] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.285'.
[  276.915198][ T7144] 0ªX¹¦Dö»: renamed from eql (while UP)
[  276.927763][ T7144] 0ªX¹¦Dö»: entered allmulticast mode
[  277.006655][ T7148] ip_tables: iptables: counters copy to user failed while replacing table
[  278.261139][ T7157] rxe_eth0 speed is unknown, defaulting to 1000
[  281.722018][ T7185] loop3: detected capacity change from 0 to 16
[  281.935418][ T7185] erofs: (device loop3): mounted with root inode @ nid 36.
[  282.495122][ T7193] ip_tables: iptables: counters copy to user failed while replacing table
[  283.842026][ T7207] syzkaller0: entered promiscuous mode
[  283.847628][ T7207] syzkaller0: entered allmulticast mode
[  284.025557][ T7207] tipc: Started in network mode
[  284.043708][ T7207] tipc: Node identity 9251cb6f0969, cluster identity 4711
[  284.089622][ T7207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.022919][ T7206] tipc: Resetting bearer <eth:syzkaller0>
[  285.209135][ T7206] tipc: Disabling bearer <eth:syzkaller0>
[  285.299416][ T7058] tipc: Node number set to 2604190575
[  285.762333][ T7229] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  287.656246][ T7232] loop1: detected capacity change from 0 to 512
[  287.710969][ T7227] fuse: Bad value for 'fd'
[  287.819641][ T7232] EXT4-fs (loop1): 1 orphan inode deleted
[  287.833547][ T7232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.847256][ T6492] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  287.859343][ T7232] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.920254][ T6492] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:12: Failed to release dquot type 1
[  288.893150][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.615872][ T7260] ip_tables: iptables: counters copy to user failed while replacing table
[  289.932863][ T7264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.312'.
[  289.971549][ T7265] syz_tun: entered allmulticast mode
[  290.423431][ T7256] syz_tun: left allmulticast mode
[  297.722784][ T7310] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  298.940051][ T7320] loop0: detected capacity change from 0 to 164
[  299.400550][ T7312] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  299.418725][ T7322] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  299.451575][ T7317] loop0: detected capacity change from 0 to 512
[  299.459109][ T7317] EXT4-fs (loop0): unable to read superblock
[  299.474752][ T7317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  299.588028][ T7322] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  302.083585][ T7340] syz_tun: entered allmulticast mode
[  302.790273][ T7333] syz_tun: left allmulticast mode
[  303.812334][ T7350] capability: warning: `syz.1.328' uses deprecated v2 capabilities in a way that may be insecure
[  310.007465][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.339'.
[  313.501462][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.509477][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.580766][ T7389] bridge0: entered allmulticast mode
[  313.656668][ T7389] bridge_slave_1: left allmulticast mode
[  313.672315][ T7389] bridge_slave_1: left promiscuous mode
[  313.688515][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.725668][ T7389] bridge_slave_0: left allmulticast mode
[  313.738224][ T7389] bridge_slave_0: left promiscuous mode
[  313.755937][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.932114][ T7396] netlink: 72 bytes leftover after parsing attributes in process `syz.0.336'.
[  313.942842][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'.
[  313.953375][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'.
[  315.039037][ T7057] IPVS: starting estimator thread 0...
[  315.880021][ T7406] IPVS: using max 15 ests per chain, 36000 per kthread
[  316.140205][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'.
[  317.302650][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'.
[  317.319132][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  317.325748][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  321.855688][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.359'.
[  321.948899][ T7462] loop0: detected capacity change from 0 to 4096
[  322.061189][ T7462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  322.105575][ T7462] EXT4-fs (loop0): Test dummy encryption mode enabled
[  322.154481][ T7462] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  322.194620][ T7462] System zones: 0-5
[  322.219730][ T7462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.066473][ T7473] loop3: detected capacity change from 0 to 512
[  323.173655][ T7476] No such timeout policy "syz1"
[  324.505670][ T7482] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  326.762167][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.470022][ T7057] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  328.561966][ T7512] comedi comedi3: board detection failed
[  328.635268][ T7513] bridge0: port 3(netdevsim0) entered blocking state
[  328.642657][ T7513] bridge0: port 3(netdevsim0) entered disabled state
[  328.651543][ T7513] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  328.665257][ T7513] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  328.674594][ T7513] bridge0: port 3(netdevsim0) entered blocking state
[  328.681494][ T7513] bridge0: port 3(netdevsim0) entered forwarding state
[  328.747339][ T7057] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  328.764556][ T7513] netlink: 'syz.1.371': attribute type 10 has an invalid length.
[  328.792599][ T7513] bridge0: port 3(netdevsim0) entered disabled state
[  328.800762][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.808528][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.830663][ T7513] bridge0: port 3(netdevsim0) entered blocking state
[  328.837680][ T7513] bridge0: port 3(netdevsim0) entered forwarding state
[  328.845860][ T7513] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.853128][ T7513] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.860956][ T7513] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.868184][ T7513] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.888819][ T7513] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  329.409362][ T7057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.433950][ T7057] usb 1-1: config 0 descriptor??
[  329.697170][ T7507] batman_adv: batadv0: Adding interface: macvtap1
[  329.721167][ T7507] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.770127][ T7507] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  329.809067][ T7057] usb 1-1: USB disconnect, device number 4
[  331.162912][ T7531] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5792] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7531]
[  331.281358][ T5786] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  332.822303][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'.
[  341.412784][ T7595] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  344.844031][ T7065] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  346.457548][ T7065] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  346.470950][ T7065] usb 4-1: config 0 has no interfaces?
[  346.480543][ T7065] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  346.512530][ T7065] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  346.532494][ T7631] loop1: detected capacity change from 0 to 1024
[  347.142585][ T7065] usb 4-1: Product: syz
[  347.146971][ T7065] usb 4-1: SerialNumber: syz
[  347.154795][ T7065] usb 4-1: config 0 descriptor??
[  347.431468][ T7642] syz.1.399 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  347.457282][ T7642] xt_cgroup: invalid path, errno=-2
[  347.640207][ T7057] usb 4-1: USB disconnect, device number 4
[  348.709674][ T7664] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  349.537029][ T7674] loop3: detected capacity change from 0 to 512
[  349.571118][ T7674] EXT4-fs (loop3): Test dummy encryption mode enabled
[  349.743433][ T7674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.783203][ T7674] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.629051][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'.
[  353.101059][ T7701] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20
[  353.930854][ T7732] batman_adv: batadv0: Adding interface: macvtap2
[  353.952208][ T7732] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.381276][ T7740] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  354.485704][ T7732] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active
[  355.122241][ T7754] ip_tables: iptables: counters copy to user failed while replacing table
[  356.016662][ T7758] loop1: detected capacity change from 0 to 32768
[  356.074149][ T7758] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  356.084507][ T7758] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  356.093399][ T7758] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  356.102927][ T7758] BTRFS info (device loop1): use zstd compression, level 3
[  356.110411][ T7758] BTRFS info (device loop1): force clearing of disk cache
[  356.117659][ T7758] BTRFS info (device loop1): enabling disk space caching
[  356.124845][ T7758] BTRFS info (device loop1): disk space caching is enabled
[  356.426507][ T7758] BTRFS info (device loop1): enabling ssd optimizations
[  356.434188][ T7758] BTRFS info (device loop1): auto enabling async discard
[  356.447921][ T7758] BTRFS info (device loop1): rebuilding free space tree
[  356.583506][ T7758] BTRFS info (device loop1): disabling free space tree
[  356.592865][ T7758] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  356.602692][ T7758] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  358.957687][ T7794] ip6gretap1: entered allmulticast mode
[  358.975999][ T7794] batman_adv: batadv0: Adding interface: ip6gretap1
[  358.982999][ T7794] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.010010][ T7794] batman_adv: batadv0: Interface activated: ip6gretap1
[  360.273432][ T5784] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  361.520659][ T7811] loop0: detected capacity change from 0 to 512
[  361.570766][ T7811] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.431: corrupted in-inode xattr: invalid ea_ino
[  361.628580][ T7811] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.431: couldn't read orphan inode 15 (err -117)
[  361.668733][ T7811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.759003][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.956119][ T7830] netlink: 84 bytes leftover after parsing attributes in process `syz.2.432'.
[  363.083858][ T7832] overlayfs: failed to clone upperpath
[  363.983063][ T7831] block device autoloading is deprecated and will be removed.
[  364.034878][ T7831] syz.1.434: attempt to access beyond end of device
[  364.034878][ T7831] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  365.249966][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'.
[  365.401507][ T7855] printk: console [ttyS0] disabled

syzkaller
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: initialize_wifi_devices: failed set up IBSS network
device=0 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=4 req=492 state=3 status=67 (errno 9: Bad file descriptor)