last executing test programs:

14m4.065414219s ago: executing program 2 (id=3):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@user_xattr}, {@nodioread_nolock}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="05", 0x5b2000000000000}], 0x1, 0x7, 0x0, 0x15)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})

14m2.593416935s ago: executing program 2 (id=5):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x20044000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xef)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937e, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x40)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r4, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)

13m59.772452086s ago: executing program 2 (id=11):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x700)

13m59.295869011s ago: executing program 32 (id=11):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x700)

8m11.440246988s ago: executing program 3 (id=610):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@usrjquota}, {@nobh}, {@nodiscard}]}, 0x3, 0x462, &(0x7f0000001f80)="$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")
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x6, 0x5, 0x7, 0x8, 0x8001, 0x7fff, 0x7]}, &(0x7f0000000080)=0x12)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0], 0x2c}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m58.699637258s ago: executing program 3 (id=617):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r1, &(0x7f0000000300), 0x0}, 0x20)
r2 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]})
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r4 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}, 0x40000)
clock_gettime(0x0, &(0x7f0000000180))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000005700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4004010)

7m58.238818703s ago: executing program 3 (id=621):
socket$nl_route(0x10, 0x3, 0x0)
msgsnd(0x0, 0x0, 0x401, 0x0)
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1100)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000280))
getresuid(&(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@test_dummy_encryption}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x44}}, {@nouid32}, {@grpjquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@data_err_abort}, {@mb_optimize_scan}], [{@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'init_itable'}}, {@measure}, {@uid_gt={'uid>', r1}}]}, 0x0, 0x488, &(0x7f0000000b00)="$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")
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
getrlimit(0xb, &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300)
msgsnd(0x0, 0x0, 0x8, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc020000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000000000000002000"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

7m55.308001115s ago: executing program 3 (id=623):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = inotify_init1(0x0)
r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400)
r6 = dup(r4)
inotify_rm_watch(r6, r5)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10)
r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1})

7m53.94653253s ago: executing program 3 (id=624):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_pidfd_open(0x0, 0x0)
setns(r4, 0x24020000)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff)

7m50.561730106s ago: executing program 3 (id=626):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
socket(0xa, 0x3, 0x3a)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf010000005b3b3b"])
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"})
getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0)

7m35.465547672s ago: executing program 33 (id=626):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
socket(0xa, 0x3, 0x3a)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf010000005b3b3b"])
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"})
getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0)

5m2.143644292s ago: executing program 1 (id=858):
r0 = socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f00000001c0)={{0x7d3117e6, 0x1}, {0x3, 0x67fb}, 0x681})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4)
r5 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', 0x0})

4m59.395189454s ago: executing program 1 (id=861):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095", @ANYRES16=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m55.998273012s ago: executing program 1 (id=866):
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x2, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0xb, "09904b30ad2bb70fda"}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0xf, [{@broadcast, 0xfffffff0}, {@local, 0x8001}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)
socket$inet6(0xa, 0x805, 0x0)
socket(0x28, 0xa, 0x0)
r0 = socket(0x28, 0x5, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xf, 0x0, @thr={0x0, 0x0}})
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$kcm(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
sendfile(r2, r2, 0x0, 0x101)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7e, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000001100)={0x3, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @local}}}, 0x108)
close(0x3)
socket(0x2, 0x80805, 0x0)
socket$packet(0x11, 0x2, 0x300)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)

4m53.605628789s ago: executing program 1 (id=873):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0xd, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r0, 0x646ea000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000200)=0xa, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0xfe71, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0)

4m48.24901443s ago: executing program 1 (id=878):
socket$nl_route(0x10, 0x3, 0x0)
msgsnd(0x0, 0x0, 0x401, 0x0)
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1100)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0x7f)
getresuid(&(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@test_dummy_encryption}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x44}}, {@nouid32}, {@grpjquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@data_err_abort}, {@mb_optimize_scan}], [{@fowner_gt={'fowner>', r1}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'init_itable'}}, {@measure}, {@uid_gt={'uid>', r2}}]}, 0x0, 0x488, &(0x7f0000000b00)="$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")
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
getrlimit(0xb, &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300)
msgsnd(0x0, 0x0, 0x8, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc020000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000000000000002000"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

4m43.025828288s ago: executing program 1 (id=883):
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0xffffffffffffffff)
sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x96}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="8000102e7577c401", 0x8}], 0x1, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x4)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000003c0))
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@RTA_MARK={0x8, 0x10, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)

4m27.532145244s ago: executing program 34 (id=883):
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0xffffffffffffffff)
sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x96}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="8000102e7577c401", 0x8}], 0x1, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x4)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000003c0))
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@RTA_MARK={0x8, 0x10, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)

4m19.529289005s ago: executing program 4 (id=912):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0x46, 0x3, 0x0, 0x85, 0x6, 0x21, 0xe6, 0x0, 0x81, 0x4c, 0x2, 0x3}, 0xe)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x1, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

4m16.167105373s ago: executing program 4 (id=913):
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
syz_emit_vhci(0x0, 0xc)

4m14.354622003s ago: executing program 4 (id=916):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socket$inet_udp(0x2, 0x2, 0x0)

4m11.430296706s ago: executing program 4 (id=919):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r3, 0x29, 0x13, 0x0, 0x300)

4m9.548200938s ago: executing program 4 (id=922):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00'})
msgsnd(0x0, 0x0, 0x401, 0x0)
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1100)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0x7f)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@test_dummy_encryption}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x44}}, {@nouid32}, {@grpjquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@data_err_abort}, {@mb_optimize_scan}], [{@fowner_gt={'fowner>', r1}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'init_itable'}}, {@measure}, {@uid_gt}]}, 0x0, 0x488, &(0x7f0000000b00)="$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")
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
getrlimit(0xb, &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300)
msgsnd(0x0, 0x0, 0x8, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc020000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000000000000002000"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

4m5.141403877s ago: executing program 4 (id=934):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x2cf67cb7e14e88d0})

3m49.435604255s ago: executing program 35 (id=934):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x2cf67cb7e14e88d0})

17.611691531s ago: executing program 7 (id=1244):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
mount$binderfs(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x20a0440, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

12.549785038s ago: executing program 0 (id=1250):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14)
syz_emit_ethernet(0x99, &(0x7f0000001b40)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x63, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x2, {[@exp_smc={0xfe, 0x6}]}}, {"ffaf37c94bd77d95f8a7484ed5752f3c6fb324fa40e0752e7aeed8dbcb9f5dec2fac17c637d154e0e3e643c5c4ad6e690f5d716d8f8bd53711e5c2afbc460074139a39173b2d24"}}}}}}}, 0x0)

12.452303369s ago: executing program 5 (id=1251):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
shmget(0x0, 0x2000, 0x64, &(0x7f0000ffc000/0x2000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x4, 0x2}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000780), 0x0}, 0x20)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x21, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

12.225212912s ago: executing program 7 (id=1252):
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x3a)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, 0xffffffffffffffff)
sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x96}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="8000102e7577c401", 0x8}], 0x1, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x4)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000003c0))
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@RTA_MARK={0x8, 0x10, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)

11.907002955s ago: executing program 6 (id=1253):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
ioctl$PTP_ENABLE_PPS(r4, 0xc0403d11, 0xffffffffffffffff)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

10.269681304s ago: executing program 7 (id=1254):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x240400c2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, &(0x7f0000000280))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4089, 0x1a, 0xff9, 0x1}, 0x28)
capset(0x0, &(0x7f0000000140))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0)

10.248351664s ago: executing program 5 (id=1255):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10.092465046s ago: executing program 6 (id=1256):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

8.451504104s ago: executing program 6 (id=1257):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000002040)="17", 0x1, 0x40804, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x49)
syz_open_dev$vim2m(0x0, 0x7, 0x2)

8.433363665s ago: executing program 5 (id=1258):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
tee(r0, 0xffffffffffffffff, 0x4e, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0)

8.121872938s ago: executing program 5 (id=1259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012b", 0x7}, {&(0x7f0000000540)}], 0x2}, 0x20008b88)

6.270651009s ago: executing program 6 (id=1260):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
mount$binderfs(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x20a0440, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

6.257985849s ago: executing program 0 (id=1261):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

6.21422897s ago: executing program 5 (id=1262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
open_tree(0xffffffffffffffff, 0x0, 0x1100)
getresuid(&(0x7f0000000080), 0x0, &(0x7f0000000100))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@test_dummy_encryption}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x44}}, {@nouid32}, {@grpjquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@data_err_abort}, {@mb_optimize_scan}], [{@fowner_gt}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'init_itable'}}, {@measure}, {@uid_gt}]}, 0x0, 0x488, &(0x7f0000000b00)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
getrlimit(0xb, &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
msgsnd(0x0, 0x0, 0x8, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc020000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000000000000002000"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

4.310584561s ago: executing program 7 (id=1263):
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
request_key(0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socket$inet_udp(0x2, 0x2, 0x0)

3.380302142s ago: executing program 0 (id=1264):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
ioctl$PTP_ENABLE_PPS(r4, 0xc0403d11, 0xffffffffffffffff)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1.707488841s ago: executing program 7 (id=1265):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000002040)="17", 0x1, 0x40804, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x49)
syz_open_dev$vim2m(0x0, 0x7, 0x2)

1.694997071s ago: executing program 0 (id=1266):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

276.513797ms ago: executing program 0 (id=1267):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
tee(r0, 0xffffffffffffffff, 0x4e, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0)

238.474618ms ago: executing program 7 (id=1268):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
shmget(0x0, 0x2000, 0x64, &(0x7f0000ffc000/0x2000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x4, 0x2}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000780), 0x0}, 0x20)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x21, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x8})

161.770068ms ago: executing program 6 (id=1269):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14)
syz_emit_ethernet(0x99, &(0x7f0000001b40)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x63, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x2, {[@exp_smc={0xfe, 0x6}]}}, {"ffaf37c94bd77d95f8a7484ed5752f3c6fb324fa40e0752e7aeed8dbcb9f5dec2fac17c637d154e0e3e643c5c4ad6e690f5d716d8f8bd53711e5c2afbc460074139a39173b2d24"}}}}}}}, 0x0)

161.529078ms ago: executing program 5 (id=1270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012b", 0x7}, {&(0x7f0000000540)="9e91d91a92dc7c8fff658bb539e2ffb332c9", 0x12}], 0x2}, 0x20008b88)

11.18856ms ago: executing program 0 (id=1271):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400)
dup(r5)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10)
r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1})
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa8aaaaa00bb08804500001c000000"], 0x0)
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="4500005800000000002f9078000000e0e000c800b48065580000000010000800000086c3080088be000000001000000088f7ffff00000000080022eb00000000200000000200000000000000000000000800655800000000eec28beb3340611bc803979560fe2fd0e2351cd24b0335eb6ffcbc6f166b11215ae40f7266ef7ed01368eb7fc1a620f9aedd92d5fae6177f6f3eea52c10e38436e5f470b920ee987ea53c89b0b354cf618f2a862dd99ec2fb79ae6d309a6a5eee9e40c4e8ce108d040678ec72d81b36b5f25be63f5d4f855"], 0x0)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180a0000000000000000000000000000850000006600000095"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

0s ago: executing program 6 (id=1272):
socket(0xa, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@utf8}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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")
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

kernel console output (not intermixed with test programs):

lave_1 removed
[  109.165542][ T1096] team0 (unregistering): Port device team_slave_0 removed
[  109.215319][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.272094][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.671362][ T1096] bond0 (unregistering): Released all slaves
[  109.851970][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[  109.867270][ T6046] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  110.032868][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.057336][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.085200][ T5896] bridge_slave_0: entered allmulticast mode
[  110.101878][ T5896] bridge_slave_0: entered promiscuous mode
[  110.156214][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.172754][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.192333][ T5896] bridge_slave_1: entered allmulticast mode
[  110.202693][ T5896] bridge_slave_1: entered promiscuous mode
[  110.253612][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.283560][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.863216][ T5896] team0: Port device team_slave_0 added
[  111.206198][ T6065] loop1: detected capacity change from 0 to 2048
[  111.221035][ T5896] team0: Port device team_slave_1 added
[  111.283842][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.291022][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.317532][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.332175][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.356913][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.478612][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.506956][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.558878][ T6073] loop0: detected capacity change from 0 to 4096
[  111.581392][ T6065] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.721698][ T5896] hsr_slave_0: entered promiscuous mode
[  111.784472][ T5896] hsr_slave_1: entered promiscuous mode
[  112.076471][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.459146][ T5896] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  113.581774][ T5896] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  113.742312][ T6123] loop1: detected capacity change from 0 to 256
[  113.908019][ T5896] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  114.153017][ T5896] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  114.386644][ T6123] FAT-fs (loop1): Directory bread(block 64) failed
[  114.394883][ T6123] FAT-fs (loop1): Directory bread(block 65) failed
[  114.466984][ T6123] FAT-fs (loop1): Directory bread(block 66) failed
[  114.473632][ T6123] FAT-fs (loop1): Directory bread(block 67) failed
[  114.561210][ T6123] FAT-fs (loop1): Directory bread(block 68) failed
[  114.577184][ T6123] FAT-fs (loop1): Directory bread(block 69) failed
[  114.583943][ T6123] FAT-fs (loop1): Directory bread(block 70) failed
[  114.629863][ T6123] FAT-fs (loop1): Directory bread(block 71) failed
[  114.636638][ T6123] FAT-fs (loop1): Directory bread(block 72) failed
[  114.720123][ T6123] FAT-fs (loop1): Directory bread(block 73) failed
[  114.830601][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.911868][ T5896] 8021q: adding VLAN 0 to HW filter on device team0
[  114.967999][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.975298][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.013948][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.021270][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.414773][ T6131] loop0: detected capacity change from 0 to 32768
[  115.473721][ T6131] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.61 (6131)
[  115.562370][ T6131] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  115.588060][ T6131] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  115.627262][ T6131] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  115.645809][ T6182] warning: `syz.1.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  115.672129][ T6131] BTRFS info (device loop0): trying to use backup root at mount time
[  115.699277][ T6131] BTRFS info (device loop0): setting nodatacow, compression disabled
[  115.736503][ T6131] BTRFS info (device loop0): enabling disk space caching
[  115.779847][ T6131] BTRFS info (device loop0): max_inline at 4096
[  115.786442][ T6131] BTRFS error (device loop0): cannot disable free space tree
[  115.823758][ T6131] BTRFS error (device loop0): open_ctree failed: -22
[  116.023506][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.203613][ T6196] loop1: detected capacity change from 0 to 512
[  116.339123][ T6196] EXT4-fs: Ignoring removed oldalloc option
[  116.889829][ T6196] EXT4-fs (loop1): 1 truncate cleaned up
[  117.125969][ T6196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.405723][ T6196] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.632724][ T6216] Zero length message leads to an empty skb
[  117.660789][ T6216] overlayfs: missing 'lowerdir'
[  118.079019][ T5896] veth0_vlan: entered promiscuous mode
[  118.168252][ T5896] veth1_vlan: entered promiscuous mode
[  118.337907][ T6229] loop0: detected capacity change from 0 to 128
[  118.399389][ T6229] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  118.418605][ T6229] hpfs: filesystem error: improperly stopped
[  118.424892][ T6229] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  118.432987][ T6229] hpfs: You really don't want any checks? You are crazy...
[  118.442988][ T6229] hpfs: hpfs_map_sector(): read error
[  118.448714][ T6229] hpfs: code page support is disabled
[  118.465465][ T6229] hpfs: hpfs_map_4sectors(): unaligned read
[  118.472344][ T6229] hpfs: hpfs_map_4sectors(): unaligned read
[  118.478615][ T6229] hpfs: filesystem error: unable to find root dir
[  118.885812][ T5896] veth0_macvtap: entered promiscuous mode
[  119.014110][ T5896] veth1_macvtap: entered promiscuous mode
[  119.165123][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.199804][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.251915][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.296008][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.340273][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.358137][ T6214] loop3: detected capacity change from 0 to 40427
[  119.375343][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.458258][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.516583][ T6214] F2FS-fs (loop3): Found nat_bits in checkpoint
[  119.618488][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.666904][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.684380][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.695073][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.705021][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.715596][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.731869][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.745745][ T5896] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.768303][ T5896] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.782962][ T5896] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.798887][ T5896] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.814370][ T6214] F2FS-fs (loop3): Start checkpoint disabled!
[  119.863139][ T6214] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  120.104450][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.135029][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.250571][ T6245] "syz.0.80" (6245) uses obsolete ecb(arc4) skcipher
[  120.268803][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.307394][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.776919][ T5838] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  120.958787][ T5838] usb 1-1: Using ep0 maxpacket: 8
[  120.972162][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  120.984057][ T5838] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  121.002487][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.056620][ T5838] usb 1-1: config 0 descriptor??
[  121.348467][ T5838] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  122.112319][ T1196] usb 1-1: USB disconnect, device number 2
[  122.754564][ T6304] loop3: detected capacity change from 0 to 8192
[  122.895550][ T6311] loop0: detected capacity change from 0 to 32768
[  122.905489][ T6311] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.102 (6311)
[  122.934863][ T6311] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.945237][ T6311] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  122.954027][ T6311] BTRFS info (device loop0): turning on async discard
[  122.960906][ T6311] BTRFS info (device loop0): metadata ratio 0
[  122.967092][ T6311] BTRFS info (device loop0): setting nodatasum
[  122.973418][ T6311] BTRFS info (device loop0): using free space tree
[  123.119168][ T6311] BTRFS info (device loop0): enabling ssd optimizations
[  123.131788][ T6327] tipc: Started in network mode
[  123.137770][ T6327] tipc: Node identity 6a6780d45dfa, cluster identity 4711
[  123.163306][ T6327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.239594][ T6327] syzkaller0: entered promiscuous mode
[  123.310809][ T6327] syzkaller0: entered allmulticast mode
[  123.385036][ T6333] tipc: Resetting bearer <eth:syzkaller0>
[  123.413057][   T28] audit: type=1800 audit(1778388547.371:4): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.102" name="file1" dev="loop0" ino=260 res=0 errno=0
[  123.572743][ T6333] tipc: Disabling bearer <eth:syzkaller0>
[  124.237169][ T5774] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.536192][ T5788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (5788)
[  124.787021][ T5846] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  125.050976][ T5846] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  125.076830][ T5846] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  125.125679][ T5846] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  125.152011][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.199248][ T6352] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  125.236410][ T5846] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  125.662716][ T5846] usb 5-1: USB disconnect, device number 2
[  125.889432][ T5838] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  126.113099][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  126.130816][ T5779] Bluetooth: hci1: command 0x0406 tx timeout
[  126.157199][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.177378][ T5838] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  126.186539][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.213984][ T5838] usb 4-1: config 0 descriptor??
[  126.679014][ T5838] kye 0003:0458:5016.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  126.702380][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.710155][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.726920][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.751893][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.761751][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.769048][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.775931][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.782887][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.802937][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.824404][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.839267][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.856427][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.869242][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.887825][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.914171][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.929055][ T6401] loop4: detected capacity change from 0 to 2048
[  126.935688][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.942900][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.960507][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  126.977629][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.001204][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.016856][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.034049][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.082717][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.131839][ T6401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.147299][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.154117][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.183480][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.210967][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.237656][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.269490][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.289971][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.308323][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.323939][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.331519][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.342257][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.359268][ T5896] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.362072][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.394905][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.428186][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.445602][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.482827][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.518733][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.546894][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.563041][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.594715][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.611725][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.623584][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.640608][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.655696][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.671067][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.685887][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.700444][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.737986][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.756693][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.776684][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.794915][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.819184][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.832081][ T6416] loop0: detected capacity change from 0 to 4096
[  127.856978][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.879484][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.895875][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.914096][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.961898][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  127.987748][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.022925][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.045484][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.079558][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.327783][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.334866][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.341782][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.349043][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.356021][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.363130][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.370611][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.387953][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.433558][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.451269][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.469900][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.510730][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.556566][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.600477][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.632623][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.659531][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.698241][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.705092][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.737990][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.755227][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.809473][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.842076][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.864219][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.895723][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.921671][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.937049][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.962543][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  128.980983][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.017654][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.037319][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.046261][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.053663][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.107003][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.134359][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.160543][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.180558][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.200539][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.216262][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.244367][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.262496][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.270089][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.282252][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.289534][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.296513][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.322698][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.347002][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.365966][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.381615][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.417914][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.424733][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.489331][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.547307][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.556038][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.641346][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.686442][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.699108][ T6459] loop4: detected capacity change from 0 to 256
[  129.710917][ T6458] autofs4:pid:6458:autofs_fill_super: called with bogus options
[  129.722487][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.730869][ T6455] loop0: detected capacity change from 0 to 32768
[  129.788287][ T6455] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.796661][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.835566][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.836496][ T6459] FAT-fs (loop4): Directory bread(block 64) failed
[  129.868342][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.875182][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.882592][ T6459] FAT-fs (loop4): Directory bread(block 65) failed
[  129.882724][ T6459] FAT-fs (loop4): Directory bread(block 66) failed
[  129.882779][ T6459] FAT-fs (loop4): Directory bread(block 67) failed
[  129.926637][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.933662][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.940580][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.947535][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.954436][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.966361][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.973343][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  129.980654][ T6459] FAT-fs (loop4): Directory bread(block 68) failed
[  129.987669][ T6459] FAT-fs (loop4): Directory bread(block 69) failed
[  130.001123][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.018414][ T6459] FAT-fs (loop4): Directory bread(block 70) failed
[  130.025330][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.041078][ T6455] XFS (loop0): Ending clean mount
[  130.041081][ T6459] FAT-fs (loop4): Directory bread(block 71) failed
[  130.041421][ T6459] FAT-fs (loop4): Directory bread(block 72) failed
[  130.067722][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.088260][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.095079][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.117096][ T6459] FAT-fs (loop4): Directory bread(block 73) failed
[  130.134202][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.158283][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.186712][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.198396][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.205328][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.272588][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.321608][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.376017][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.398164][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.405026][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.440949][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.451073][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.466449][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.497384][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.514907][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.541868][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.576884][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.625946][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.627015][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  130.646863][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.674809][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.704413][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.728576][ T6478] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  130.737441][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.744222][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.767458][ T5838] kye 0003:0458:5016.0001: unknown main item tag 0x0
[  130.783784][ T6477] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  130.838156][ T5838] kye 0003:0458:5016.0001: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0
[  130.877024][ T5838] kye 0003:0458:5016.0001: tablet-enabling feature report not found
[  130.920900][ T5838] kye 0003:0458:5016.0001: tablet enabling failed
[  131.017850][ T5838] usb 4-1: USB disconnect, device number 3
[  131.185314][ T6482] fido_id[6482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  131.437387][ T5838] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  131.641318][ T5838] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  131.666219][ T5838] usb 4-1: config 0 has no interface number 0
[  131.683241][ T5838] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  131.714638][ T5838] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  131.725969][ T5838] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  131.757568][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.784983][ T5838] usb 4-1: config 0 descriptor??
[  131.804172][ T6443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.850338][ T5838] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  131.933472][ T5838] usb 4-1: USB disconnect, device number 4
[  132.671059][ T6534] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  132.760363][ T6541] kvm: vcpu 6: requested lapic timer restore with starting count register 0x390=3206951851 (6413903702 ns) > initial count (411158038 ns). Using initial count to start timer.
[  133.404825][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  133.412261][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  133.440553][ T6557] loop4: detected capacity change from 0 to 512
[  133.472847][ T6557] ext4: Unknown parameter 'fowner>00000000000000000'
[  135.486804][    C0] sched: RT throttling activated
[  138.939709][ T6606] loop0: detected capacity change from 0 to 512
[  139.614296][ T6606] ext4: Unknown parameter 'fowner>00000000000000000'
[  139.635166][ T6609] loop3: detected capacity change from 0 to 512
[  140.920218][ T6609] ext4: Unknown parameter 'fowner>00000000000000000'
[  145.505085][ T6647] loop3: detected capacity change from 0 to 512
[  145.548410][ T6647] ext4: Unknown parameter 'fowner>00000000000000000'
[  145.615348][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  147.719952][ T6663] loop0: detected capacity change from 0 to 512
[  147.753736][ T6663] ext4: Unknown parameter 'fowner>00000000000000000'
[  150.487603][ T6678] loop0: detected capacity change from 0 to 512
[  150.553765][ T6678] ext4: Unknown parameter 'fowner>00000000000000000'
[  151.048086][ T6682] netlink: 64 bytes leftover after parsing attributes in process `syz.0.191'.
[  151.466866][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  156.586838][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  161.908767][ T6755] loop4: detected capacity change from 0 to 512
[  161.938150][ T6755] ext4: Unknown parameter 'fowner>00000000000000000'
[  162.019521][ T5788] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  162.746330][ T6761] netlink: 64 bytes leftover after parsing attributes in process `syz.4.204'.
[  164.330139][ T6764] loop3: detected capacity change from 0 to 512
[  164.381850][ T6764] ext4: Unknown parameter 'fowner>00000000000000000'
[  169.380363][ T6810] loop3: detected capacity change from 0 to 512
[  169.458316][ T6810] ext4: Unknown parameter 'fowner>00000000000000000'
[  169.626118][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  173.394138][ T6830] loop0: detected capacity change from 0 to 512
[  173.528212][ T6830] ext4: Unknown parameter 'fowner>00000000000000000'
[  173.681442][ T5788] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  174.152152][ T6847] netlink: 64 bytes leftover after parsing attributes in process `syz.0.220'.
[  175.899333][ T6856] loop4: detected capacity change from 0 to 512
[  175.947683][ T6856] ext4: Unknown parameter 'fowner>00000000000000000'
[  176.008832][ T5788] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  177.886776][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  180.430985][ T6884] loop4: detected capacity change from 0 to 512
[  180.538288][ T6884] ext4: Unknown parameter 'fowner>00000000000000000'
[  180.810960][ T5788] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  182.186776][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  185.094284][ T6900] loop4: detected capacity change from 0 to 512
[  185.228663][ T6900] ext4: Unknown parameter 'fowner>00000000000000000'
[  192.526923][ T6940] loop0: detected capacity change from 0 to 512
[  192.562039][ T6940] ext4: Unknown parameter 'fowner>00000000000000000'
[  194.656086][ T6952] loop0: detected capacity change from 0 to 512
[  194.705119][ T6952] ext4: Unknown parameter 'fowner>00000000000000000'
[  194.883276][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  194.890255][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  196.024988][ T6958] loop3: detected capacity change from 0 to 512
[  196.238234][ T6958] ext4: Unknown parameter 'fowner>00000000000000000'
[  196.467402][ T5788] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  197.826982][ T6960] netlink: 64 bytes leftover after parsing attributes in process `syz.0.249'.
[  209.461772][ T7014] loop3: detected capacity change from 0 to 512
[  209.602460][ T7017] loop0: detected capacity change from 0 to 512
[  209.618141][ T7014] ext4: Unknown parameter 'fowner>00000000000000000'
[  209.634947][ T7017] ext4: Unknown parameter 'fowner>00000000000000000'
[  209.846897][ T7018] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  211.166877][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  211.208224][ T7017] netlink: 64 bytes leftover after parsing attributes in process `syz.0.267'.
[  213.220701][ T7030] loop3: detected capacity change from 0 to 512
[  213.662953][ T7030] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  213.796916][ T5082] Bluetooth: hci0: command 0x0406 tx timeout
[  213.807239][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  214.894333][ T7030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.166994][ T7030] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.566468][ T7053] loop0: detected capacity change from 0 to 512
[  216.588708][ T7053] ext4: Unknown parameter 'fowner>00000000000000000'
[  217.399982][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.401147][ T7072] binder_alloc: 7071: binder_alloc_buf, no vma
[  220.586760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  221.956288][ T7089] loop4: detected capacity change from 0 to 128
[  222.154556][ T7089] bio_check_eod: 7 callbacks suppressed
[  222.154575][ T7089] syz.4.289: attempt to access beyond end of device
[  222.154575][ T7089] loop4: rw=2049, sector=145, nr_sectors = 95 limit=128
[  223.078254][ T5779] Bluetooth: hci3: command 0x0406 tx timeout
[  229.243427][ T7135] loop4: detected capacity change from 0 to 512
[  229.250881][ T7133] binder_alloc: 7130: binder_alloc_buf, no vma
[  229.283733][ T7135] ext4: Unknown parameter 'fowner>00000000000000000'
[  238.271735][ T7184] loop0: detected capacity change from 0 to 256
[  254.686827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  256.426736][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  256.587769][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  256.598804][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  261.298052][ T7326] loop4: detected capacity change from 0 to 512
[  261.315775][ T7326] ext4: Unknown parameter 'fowner>00000000000000000'
[  262.366963][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  265.051970][ T7344] loop0: detected capacity change from 0 to 512
[  265.092100][ T7344] ext4: Unknown parameter 'fowner>00000000000000000'
[  269.814069][ T7360] loop0: detected capacity change from 0 to 512
[  269.858107][ T7362] binder: BINDER_SET_CONTEXT_MGR already set
[  269.864581][ T7362] binder: 7361:7362 ioctl 4018620d 200000000500 returned -16
[  269.908139][ T7360] ext4: Unknown parameter 'fowner>00000000000000000'
[  270.007286][ T7018] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  270.577283][ T7366] netlink: 64 bytes leftover after parsing attributes in process `syz.0.372'.
[  272.197073][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  273.458451][ T7376] loop4: detected capacity change from 0 to 512
[  273.494024][ T7376] ext4: Unknown parameter 'fowner>00000000000000000'
[  277.692315][ T7395] binder: BINDER_SET_CONTEXT_MGR already set
[  277.710118][ T7395] binder: 7394:7395 ioctl 4018620d 200000000500 returned -16
[  278.467540][ T7400] netlink: 64 bytes leftover after parsing attributes in process `syz.3.382'.
[  280.291703][ T7403] loop4: detected capacity change from 0 to 512
[  280.333902][ T7403] ext4: Unknown parameter 'fowner>00000000000000000'
[  281.666582][ T7409] loop0: detected capacity change from 0 to 512
[  281.738195][ T7409] ext4: Unknown parameter 'fowner>00000000000000000'
[  282.485227][ T7018] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  286.193756][ T7442] netlink: 64 bytes leftover after parsing attributes in process `syz.1.391'.
[  288.578503][ T7450] loop3: detected capacity change from 0 to 512
[  288.613460][ T7450] ext4: Unknown parameter 'fowner>00000000000000000'
[  295.103118][ T7477] netlink: 64 bytes leftover after parsing attributes in process `syz.3.401'.
[  297.080484][ T7485] loop0: detected capacity change from 0 to 512
[  297.155241][ T7485] ext4: Unknown parameter 'fowner>00000000000000000'
[  300.552752][ T7501] loop3: detected capacity change from 0 to 512
[  300.607762][ T7501] ext4: Unknown parameter 'fowner>00000000000000000'
[  302.456568][ T7505] loop4: detected capacity change from 0 to 512
[  302.498305][ T7505] ext4: Unknown parameter 'fowner>00000000000000000'
[  302.609272][ T7018] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  303.101422][ T7508] netlink: 64 bytes leftover after parsing attributes in process `syz.4.412'.
[  309.140909][ T7533] loop3: detected capacity change from 0 to 128
[  309.173955][ T7533] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  309.186050][ T7533] hpfs: filesystem error: improperly stopped
[  309.192221][ T7533] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  309.200148][ T7533] hpfs: You really don't want any checks? You are crazy...
[  309.208942][ T7533] hpfs: hpfs_map_sector(): read error
[  309.214430][ T7533] hpfs: code page support is disabled
[  309.225354][ T7533] hpfs: hpfs_map_4sectors(): unaligned read
[  309.232331][ T7533] hpfs: hpfs_map_4sectors(): unaligned read
[  309.238386][ T7533] hpfs: filesystem error: unable to find root dir
[  310.781128][ T7546] loop0: detected capacity change from 0 to 512
[  310.803733][ T7546] ext4: Unknown parameter 'fowner>00000000000000000'
[  313.829018][ T7559] loop3: detected capacity change from 0 to 32768
[  313.856502][ T7559] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.428 (7559)
[  313.883602][ T7559] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  313.893939][ T7559] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  313.902719][ T7559] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  313.913406][ T7559] BTRFS info (device loop3): trying to use backup root at mount time
[  313.921550][ T7559] BTRFS info (device loop3): setting nodatacow, compression disabled
[  313.929957][ T7559] BTRFS info (device loop3): enabling disk space caching
[  313.937213][ T7559] BTRFS info (device loop3): max_inline at 4096
[  313.943463][ T7559] BTRFS error (device loop3): cannot disable free space tree
[  313.952317][ T7559] BTRFS error (device loop3): open_ctree failed: -22
[  314.271928][ T7565] loop4: detected capacity change from 0 to 1024
[  314.375098][   T28] audit: type=1800 audit(1778388738.331:5): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.430" name="file1" dev="loop4" ino=20 res=0 errno=0
[  315.982588][ T7571] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  316.001841][ T7570] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  317.722284][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  317.728727][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  320.605249][ T7603] loop4: detected capacity change from 0 to 256
[  323.052713][ T7603] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  323.292389][   T28] audit: type=1800 audit(1778388747.251:6): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.439" name="file1" dev="loop4" ino=1048604 res=0 errno=0
[  323.503306][ T7609] loop4: detected capacity change from 0 to 64
[  323.623253][ T7611] loop3: detected capacity change from 0 to 512
[  323.686195][ T7611] ext4: Unknown parameter 'fowner>00000000000000000'
[  324.082493][ T7618] netlink: 64 bytes leftover after parsing attributes in process `syz.3.433'.
[  325.534483][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'.
[  325.786355][ T7625] loop0: detected capacity change from 0 to 512
[  325.821768][ T7625] ext4: Unknown parameter 'fowner>00000000000000000'
[  329.563096][ T7645] loop4: detected capacity change from 0 to 512
[  329.607219][ T7645] ext4: Unknown parameter 'fowner>00000000000000000'
[  329.686860][ T7018] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  334.614985][ T7670] loop4: detected capacity change from 0 to 256
[  335.914611][ T7682] loop3: detected capacity change from 0 to 256
[  339.002424][ T7698] loop4: detected capacity change from 0 to 512
[  339.099917][ T7698] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  339.183271][ T7698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.226008][ T7698] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  340.928294][ T7711] netlink: 64 bytes leftover after parsing attributes in process `syz.1.458'.
[  341.697243][ T5896] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.928472][ T7727] loop4: detected capacity change from 0 to 256
[  344.336371][ T1915] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  344.567199][ T1915] usb 4-1: Using ep0 maxpacket: 16
[  344.574712][ T1915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  344.611717][ T1915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  344.629435][ T7739] loop0: detected capacity change from 0 to 128
[  344.686575][ T1915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  344.706852][ T1915] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  344.750150][ T7739] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  344.766784][ T1915] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  344.786982][ T7739] hpfs: filesystem error: improperly stopped
[  344.794710][ T1915] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  344.816782][ T1915] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  344.835138][ T7739] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  344.847223][ T1915] usb 4-1: Manufacturer: syz
[  344.856806][ T7739] hpfs: You really don't want any checks? You are crazy...
[  344.864531][ T7739] hpfs: hpfs_map_sector(): read error
[  344.899160][ T1915] usb 4-1: config 0 descriptor??
[  344.963502][ T7739] hpfs: code page support is disabled
[  345.040751][ T7741] loop4: detected capacity change from 0 to 4096
[  345.057227][ T7739] hpfs: hpfs_map_4sectors(): unaligned read
[  345.095659][ T7739] hpfs: hpfs_map_4sectors(): unaligned read
[  345.193446][ T7739] hpfs: filesystem error: unable to find root dir
[  345.376924][ T1915] rc_core: IR keymap rc-hauppauge not found
[  345.382910][ T1915] Registered IR keymap rc-empty
[  345.412901][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  345.436558][ T7745] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  345.478696][ T7744] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  345.498406][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  345.558927][ T1915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  345.768735][ T1915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6
[  345.807571][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  346.226889][ T7751] usb usb5: usbfs: process 7751 (syz.0.481) did not claim interface 0 before use
[  346.796875][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'.
[  346.805724][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'.
[  347.397007][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  347.456254][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  347.502839][ T7757] loop4: detected capacity change from 0 to 512
[  347.520238][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  347.566967][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  347.606984][ T7757] EXT4-fs: Ignoring removed nobh option
[  347.616175][ T7757] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  347.647045][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  347.690259][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  347.740357][ T7757] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  347.777489][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  347.825446][ T7759] loop0: detected capacity change from 0 to 512
[  347.857084][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  347.871353][ T7757] EXT4-fs (loop4): 1 truncate cleaned up
[  347.898147][ T7757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.913970][ T7759] ext4: Unknown parameter 'fowner>00000000000000000'
[  347.932668][ T1915] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  349.019921][ T1915] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  349.038010][ T1915] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  349.152005][ T1915] usb 4-1: USB disconnect, device number 5
[  349.289848][ T7770] netlink: 64 bytes leftover after parsing attributes in process `syz.0.483'.
[  351.776861][ T7778] usb usb5: usbfs: process 7778 (syz.3.485) did not claim interface 0 before use
[  352.357440][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'.
[  352.366410][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'.
[  352.898091][ T5896] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.216949][ T7786] loop4: detected capacity change from 0 to 4096
[  353.791695][ T7794] loop4: detected capacity change from 0 to 128
[  353.919761][ T7794] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  353.931813][ T7794] hpfs: filesystem error: improperly stopped
[  353.937994][ T7794] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  353.946028][ T7794] hpfs: You really don't want any checks? You are crazy...
[  353.955050][ T7794] hpfs: hpfs_map_sector(): read error
[  353.960762][ T7794] hpfs: code page support is disabled
[  354.068886][ T7794] hpfs: hpfs_map_4sectors(): unaligned read
[  354.075623][ T7794] hpfs: hpfs_map_4sectors(): unaligned read
[  354.081756][ T7794] hpfs: filesystem error: unable to find root dir
[  356.143859][ T7810] loop3: detected capacity change from 0 to 256
[  357.576879][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'.
[  357.585704][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'.
[  358.127708][ T7818] loop4: detected capacity change from 0 to 256
[  364.354004][ T7853] loop0: detected capacity change from 0 to 256
[  366.475442][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[  366.484410][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'.
[  368.659568][ T7881] loop3: detected capacity change from 0 to 512
[  368.690257][ T7881] ext4: Unknown parameter 'fowner>00000000000000000'
[  372.790750][ T7894] overlayfs: missing 'lowerdir'
[  373.198405][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'.
[  373.207431][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'.
[  377.593816][ T7910] loop4: detected capacity change from 0 to 128
[  377.952842][ T7910] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  377.965995][ T7910] hpfs: filesystem error: improperly stopped
[  377.972035][ T7910] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  377.980639][ T7910] hpfs: You really don't want any checks? You are crazy...
[  377.988162][ T7910] hpfs: hpfs_map_sector(): read error
[  377.993542][ T7910] hpfs: code page support is disabled
[  378.000218][ T7910] hpfs: hpfs_map_4sectors(): unaligned read
[  378.006254][ T7910] hpfs: hpfs_map_4sectors(): unaligned read
[  378.012223][ T7910] hpfs: filesystem error: unable to find root dir
[  379.547195][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  379.553659][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  380.684462][ T7928] loop4: detected capacity change from 0 to 512
[  380.704897][ T7928] ext4: Unknown parameter 'fowner>00000000000000000'
[  383.799192][ T7940] overlayfs: missing 'lowerdir'
[  384.005940][ T7945] loop0: detected capacity change from 0 to 256
[  384.382238][ T7948] loop3: detected capacity change from 0 to 256
[  391.475034][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'.
[  391.484131][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.536'.
[  395.553781][ T7997] loop3: detected capacity change from 0 to 512
[  395.684950][ T7997] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  395.720521][ T7997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.746950][ T7997] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  396.075587][ T8004] overlayfs: missing 'lowerdir'
[  396.117588][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.335482][ T8015] loop3: detected capacity change from 0 to 512
[  397.599273][ T8015] ext4: Unknown parameter 'fowner>00000000000000000'
[  399.490611][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'.
[  399.499778][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.547'.
[  400.018537][ T7561] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  403.144779][ T8038] overlayfs: missing 'lowerdir'
[  403.193119][ T8040] loop0: detected capacity change from 0 to 512
[  403.280184][ T8040] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  403.395704][ T8040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.428974][ T8040] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  403.607390][ T8046] loop4: detected capacity change from 0 to 4096
[  403.906568][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.414989][ T8071] loop4: detected capacity change from 0 to 512
[  409.430960][ T8071] ext4: Unknown parameter 'fowner>00000000000000000'
[  410.862430][ T8080] loop3: detected capacity change from 0 to 512
[  410.880788][ T8080] ext4: Unknown parameter 'fowner>00000000000000000'
[  414.907727][ T8095] overlayfs: missing 'lowerdir'
[  417.314243][ T8107] loop4: detected capacity change from 0 to 512
[  417.358766][ T8107] ext4: Unknown parameter 'fowner>00000000000000000'
[  417.451373][ T7018] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  423.054247][ T8122] loop3: detected capacity change from 0 to 512
[  424.138065][ T8122] ext4: Unknown parameter 'fowner>00000000000000000'
[  424.180738][ T8128] loop0: detected capacity change from 0 to 512
[  424.237142][ T8120] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  425.877225][ T8128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  425.958792][ T8128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.080587][ T8128] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.283199][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.008931][ T8141] overlayfs: missing 'lowerdir'
[  430.271177][ T8159] loop0: detected capacity change from 0 to 512
[  430.281668][ T8159] ext4: Unknown parameter 'fowner>00000000000000000'
[  431.518536][ T8120] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  433.394563][ T8171] loop3: detected capacity change from 0 to 512
[  433.468177][ T8171] ext4: Unknown parameter 'fowner>00000000000000000'
[  435.232525][ T8175] binder: 8174:8175 ioctl 4018620d 0 returned -22
[  438.218126][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'.
[  438.229863][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'.
[  438.289421][ T8194] loop0: detected capacity change from 0 to 256
[  441.692984][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  441.699945][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  442.797238][ T8221] binder: BINDER_SET_CONTEXT_MGR already set
[  442.821158][ T8221] binder: 8220:8221 ioctl 4018620d 200000000500 returned -16
[  443.143118][ T8227] loop4: detected capacity change from 0 to 256
[  445.034746][ T8240] loop3: detected capacity change from 0 to 1024
[  445.069061][ T8240] EXT4-fs: Ignoring removed orlov option
[  445.089342][ T8240] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  445.158461][ T8240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.288185][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.373475][ T8254] loop4: detected capacity change from 0 to 512
[  446.407970][ T8254] EXT4-fs: Ignoring removed nobh option
[  446.452138][ T8254] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  446.539101][ T8254] EXT4-fs (loop4): 1 truncate cleaned up
[  446.558044][ T8254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.866210][ T8263] loop3: detected capacity change from 0 to 512
[  446.899853][ T8263] EXT4-fs: Ignoring removed nobh option
[  446.942270][ T8263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  446.960563][ T8263] EXT4-fs (loop3): 1 truncate cleaned up
[  446.968006][ T8263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  455.961606][ T5896] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.931084][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.324211][ T8300] loop4: detected capacity change from 0 to 512
[  459.348343][ T8300] ext4: Unknown parameter 'fowner>00000000000000000'
[  459.417259][ T8284] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  461.064102][ T8302] loop3: detected capacity change from 0 to 512
[  461.118890][ T8302] ext4: Unknown parameter 'fowner>00000000000000000'
[  462.774160][ T8310] syz_tun: entered allmulticast mode
[  463.542663][ T8307] syz_tun: left allmulticast mode
[  464.647512][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'.
[  464.656663][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'.
[  472.716787][ T8359] usb usb5: usbfs: process 8359 (syz.0.633) did not claim interface 0 before use
[  473.447289][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'.
[  473.456118][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'.
[  476.685017][ T8380] loop4: detected capacity change from 0 to 512
[  476.694039][ T8380] ext4: Unknown parameter 'fowner>00000000000000000'
[  480.367992][ T8398] overlayfs: failed to clone upperpath
[  484.205339][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  484.215622][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  484.223673][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  484.232909][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  484.241074][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  484.249182][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  484.500937][ T8421] loop0: detected capacity change from 0 to 512
[  484.515853][ T8421] ext4: Unknown parameter 'fowner>00000000000000000'
[  486.278760][ T5779] Bluetooth: hci4: command tx timeout
[  486.658475][ T8414] chnl_net:caif_netlink_parms(): no params data found
[  486.936195][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.981656][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.037195][ T8414] bridge_slave_0: entered allmulticast mode
[  487.111186][ T8414] bridge_slave_0: entered promiscuous mode
[  487.138778][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.169810][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.190214][ T8414] bridge_slave_1: entered allmulticast mode
[  487.207730][ T8414] bridge_slave_1: entered promiscuous mode
[  487.320086][ T8443] loop0: detected capacity change from 0 to 1024
[  487.328946][ T8443] EXT4-fs: Ignoring removed orlov option
[  487.343376][ T8443] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  487.417366][ T8443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.658814][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.698893][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.860826][ T8414] team0: Port device team_slave_0 added
[  487.870707][ T8414] team0: Port device team_slave_1 added
[  487.901622][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.911541][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.079395][ T8453] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  488.093348][ T8453] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.650: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  488.131845][ T8453] EXT4-fs (loop0): Remounting filesystem read-only
[  488.443780][ T5779] Bluetooth: hci4: command tx timeout
[  488.449541][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.466429][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.473638][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.499998][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.128981][ T8414] hsr_slave_0: entered promiscuous mode
[  489.170277][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.185679][ T8414] hsr_slave_1: entered promiscuous mode
[  490.516997][ T5779] Bluetooth: hci4: command tx timeout
[  490.585902][ T8414] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  490.634647][ T8414] Cannot create hsr debugfs directory
[  491.888185][ T8414] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  491.973719][ T8414] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  492.029784][ T8414] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  492.096506][ T8414] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  492.511661][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.597663][ T5779] Bluetooth: hci4: command tx timeout
[  492.713539][ T8414] 8021q: adding VLAN 0 to HW filter on device team0
[  492.760050][ T8476] loop0: detected capacity change from 0 to 512
[  492.798430][ T8476] EXT4-fs: Ignoring removed nobh option
[  492.810866][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.818183][ T8269] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.857311][ T8476] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  492.911206][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.918465][ T8269] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.964952][ T8476] EXT4-fs (loop0): 1 truncate cleaned up
[  493.001350][ T8476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  493.375112][ T8414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  493.555487][ T8486] loop4: detected capacity change from 0 to 512
[  493.564266][ T8486] ext4: Unknown parameter 'fowner>00000000000000000'
[  494.787661][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'.
[  494.796696][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'.
[  495.583645][ T8408] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  496.914275][ T8497] netlink: 64 bytes leftover after parsing attributes in process `syz.4.664'.
[  497.485451][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.945194][ T8414] veth0_vlan: entered promiscuous mode
[  497.970824][ T8414] veth1_vlan: entered promiscuous mode
[  498.026523][ T8414] veth0_macvtap: entered promiscuous mode
[  498.129987][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.213605][ T8414] veth1_macvtap: entered promiscuous mode
[  499.320951][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.342072][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.359036][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.374109][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.385402][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.416655][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.430483][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.446860][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.464638][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.485634][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.497762][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.528932][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.556462][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.581585][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.608319][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.637111][ T8414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.656934][ T8414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.679878][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.722073][ T8414] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.748859][ T8414] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.767729][ T8414] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.786952][ T8414] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.011057][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.083233][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.209106][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.253255][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.122368][ T8528] loop0: detected capacity change from 0 to 256
[  501.227301][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'.
[  501.236276][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.672'.
[  502.097471][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  502.103820][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  502.922309][ T8536] loop4: detected capacity change from 0 to 512
[  502.950885][ T8536] ext4: Unknown parameter 'fowner>00000000000000000'
[  504.330846][ T8544] netlink: 64 bytes leftover after parsing attributes in process `syz.4.675'.
[  504.867403][ T8546] loop0: detected capacity change from 0 to 256
[  509.774527][ T8571] netlink: 64 bytes leftover after parsing attributes in process `syz.1.687'.
[  510.664114][ T8587] loop4: detected capacity change from 0 to 256
[  513.454072][ T8609] loop0: detected capacity change from 0 to 512
[  513.492553][ T8609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  513.563072][ T8609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.587578][ T8609] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.917514][   T28] audit: type=1800 audit(1778388940.751:7): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.696" name="file1" dev="loop0" ino=15 res=0 errno=0
[  516.997969][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.959419][ T8634] loop4: detected capacity change from 0 to 256
[  517.990733][ T8638] loop5: detected capacity change from 0 to 256
[  519.464479][ T8646] loop0: detected capacity change from 0 to 256
[  520.480369][ T8656] loop4: detected capacity change from 0 to 256
[  523.426792][ T8669] usb usb5: usbfs: process 8669 (syz.4.709) did not claim interface 0 before use
[  523.976812][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'.
[  523.985634][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'.
[  526.864465][ T8705] loop5: detected capacity change from 0 to 512
[  526.885081][ T8705] ext4: Unknown parameter 'fowner>00000000000000000'
[  532.470619][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'.
[  532.479680][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'.
[  533.134632][ T8715] loop4: detected capacity change from 0 to 256
[  535.176740][ T8739] syz_tun: entered allmulticast mode
[  535.817558][ T8742] loop4: detected capacity change from 0 to 512
[  535.837909][ T8731] syz_tun: left allmulticast mode
[  536.135372][ T8742] ext4: Unknown parameter 'fowner>00000000000000000'
[  536.554883][ T8746] loop5: detected capacity change from 0 to 256
[  539.605455][ T8780] loop5: detected capacity change from 0 to 1024
[  539.617449][ T8780] EXT4-fs: Ignoring removed orlov option
[  539.656082][ T8780] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  541.368253][ T8780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.779452][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.803471][ T8797] loop4: detected capacity change from 0 to 256
[  547.399699][ T8823] loop5: detected capacity change from 0 to 1024
[  547.467724][ T8823] EXT4-fs: Ignoring removed nomblk_io_submit option
[  547.568575][ T8823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  547.594487][ T8828] loop0: detected capacity change from 0 to 256
[  550.351503][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  553.721083][ T8855] loop0: detected capacity change from 0 to 256
[  555.629679][ T8873] loop0: detected capacity change from 0 to 256
[  557.556151][ T8886] syz_tun: entered allmulticast mode
[  558.307366][ T8879] syz_tun: left allmulticast mode
[  561.589838][ T8900] loop0: detected capacity change from 0 to 512
[  562.532737][ T8900] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #11: block 10: comm syz.0.771: lblock 0 mapped to illegal pblock 10 (length 1)
[  562.689179][ T8907] loop4: detected capacity change from 0 to 256
[  562.721886][ T8900] EXT4-fs (loop0): Remounting filesystem read-only
[  562.739682][ T8900] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -5)
[  562.786783][ T8900] EXT4-fs (loop0): 1 orphan inode deleted
[  562.807649][ T8900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.862553][ T8909] loop5: detected capacity change from 0 to 256
[  563.497196][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  564.556761][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  565.507359][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.843133][ T8920] loop0: detected capacity change from 0 to 512
[  565.872601][ T8920] ext4: Unknown parameter 'fowner>00000000000000000'
[  567.653972][ T8932] loop0: detected capacity change from 0 to 1024
[  567.980448][ T8936] syz_tun: entered allmulticast mode
[  568.748651][ T8933] syz_tun: left allmulticast mode
[  568.757792][ T8932] EXT4-fs: Ignoring removed orlov option
[  568.838759][ T8932] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  569.075277][ T8932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  570.267231][ T8941] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.780: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  570.288306][ T8941] EXT4-fs (loop0): Remounting filesystem read-only
[  570.738616][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.868779][   T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.895782][ T8947] loop4: detected capacity change from 0 to 256
[  576.235870][ T8966] loop4: detected capacity change from 0 to 256
[  577.033819][   T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.273590][   T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.307141][   T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.053273][ T9007] loop5: detected capacity change from 0 to 512
[  582.128401][ T9007] EXT4-fs: Ignoring removed nobh option
[  582.156836][ T9007] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  582.307331][ T9007] EXT4-fs (loop5): 1 truncate cleaned up
[  582.463375][ T9007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  588.889996][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.891909][ T9032] loop0: detected capacity change from 0 to 256
[  593.944933][ T9045] loop4: detected capacity change from 0 to 256
[  595.004322][ T9054] overlayfs: failed to clone upperpath
[  604.398006][ T5779] Bluetooth: hci1: unexpected subevent 0x01 length: 8 < 18
[  605.249593][ T5775] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  605.687261][ T5775] usb 1-1: Using ep0 maxpacket: 16
[  606.606096][ T5784] Bluetooth: hci4: command 0x0406 tx timeout
[  606.895118][ T5775] usb 1-1: device descriptor read/all, error -71
[  608.005214][ T9144] loop5: detected capacity change from 0 to 256
[  612.650645][   T64] hsr_slave_0: left promiscuous mode
[  612.692309][   T64] hsr_slave_1: left promiscuous mode
[  612.756007][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  612.774202][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[  612.793288][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  612.806889][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[  612.830151][ T9180] loop0: detected capacity change from 0 to 512
[  612.850218][ T9180] ext4: Unknown parameter 'fowner>00000000000000000'
[  613.349127][   T64] bridge_slave_1: left allmulticast mode
[  613.552621][   T64] bridge_slave_1: left promiscuous mode
[  613.707160][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.788236][   T64] bridge_slave_0: left allmulticast mode
[  613.816718][   T64] bridge_slave_0: left promiscuous mode
[  613.832274][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.500485][   T64] veth1_macvtap: left promiscuous mode
[  614.506106][   T64] veth0_macvtap: left promiscuous mode
[  614.535835][   T64] veth1_vlan: left promiscuous mode
[  614.552622][   T64] veth0_vlan: left promiscuous mode
[  619.965449][   T64] team0 (unregistering): Port device team_slave_1 removed
[  620.213755][   T64] team0 (unregistering): Port device team_slave_0 removed
[  620.501145][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  620.939651][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  624.733016][   T64] bond0 (unregistering): Released all slaves
[  624.932004][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  624.938792][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  625.040885][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.824'.
[  625.049835][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.824'.
[  628.233293][ T5779] Bluetooth: hci4: unexpected subevent 0x01 length: 8 < 18
[  628.862875][ T9259] loop0: detected capacity change from 0 to 256
[  630.470795][ T9281] loop5: detected capacity change from 0 to 256
[  630.882991][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'.
[  630.891982][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'.
[  635.674308][ T9314] loop4: detected capacity change from 0 to 256
[  636.636035][ T9316] loop0: detected capacity change from 0 to 1024
[  636.810541][ T9316] EXT4-fs: Ignoring removed orlov option
[  636.853382][ T9316] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  636.932194][ T9316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  638.023127][ T9331] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.857: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  638.045122][ T9331] EXT4-fs (loop0): Remounting filesystem read-only
[  638.328107][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  638.986795][ T1196] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  639.823248][ T1196] usb 6-1: Using ep0 maxpacket: 16
[  639.862846][ T1196] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.894296][ T1196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  639.919227][ T1196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  639.932377][ T1196] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  639.944565][ T1196] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  639.981450][ T1196] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  640.006077][ T1196] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  640.096849][ T1196] usb 6-1: Manufacturer: syz
[  640.158532][ T1196] usb 6-1: config 0 descriptor??
[  640.593601][ T9357] syz_tun: entered allmulticast mode
[  641.325436][ T9351] syz_tun: left allmulticast mode
[  641.496636][ T1196] rc_core: IR keymap rc-hauppauge not found
[  641.513180][ T1196] Registered IR keymap rc-empty
[  641.539609][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  641.571163][ T9363] loop0: detected capacity change from 0 to 512
[  641.597896][ T9363] ext4: Unknown parameter 'fowner>00000000000000000'
[  641.606742][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  641.658582][ T1196] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  641.687122][ T9246] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  641.849355][ T1196] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7
[  641.921296][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  641.971975][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  642.036374][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  642.387517][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  642.577673][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  642.640127][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  642.696809][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  642.757278][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  642.820811][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  642.874898][ T1196] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  642.891204][ T9378] loop4: detected capacity change from 0 to 256
[  642.982088][ T1196] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  643.033895][ T1196] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  643.216754][ T1196] usb 6-1: USB disconnect, device number 2
[  644.083525][ T9391] loop5: detected capacity change from 0 to 512
[  644.107656][ T9391] EXT4-fs: Ignoring removed nobh option
[  645.111357][ T9391] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  645.249582][ T9391] EXT4-fs (loop5): 1 truncate cleaned up
[  645.256279][ T9391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  649.408078][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.230270][ T9436] loop4: detected capacity change from 0 to 256
[  656.258661][ T9462] loop4: detected capacity change from 0 to 1024
[  656.326359][ T9462] EXT4-fs: Ignoring removed orlov option
[  656.471758][ T9462] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  656.639341][ T9462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  657.087459][ T9472] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.885: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  657.165227][ T9474] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  657.525420][ T9472] EXT4-fs (loop4): Remounting filesystem read-only
[  657.540609][ T9477] loop0: detected capacity change from 0 to 1024
[  657.648142][ T9477] EXT4-fs: Ignoring removed nomblk_io_submit option
[  657.863086][ T5896] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.663734][ T9477] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  660.664114][ T9477] EXT4-fs: failed to create workqueue
[  660.664125][ T9477] EXT4-fs (loop0): mount failed
[  660.713256][ T9479] tty tty31: ldisc open failed (-12), clearing slot 30
[  661.514720][ T9487] loop4: detected capacity change from 0 to 256
[  662.495661][ T9496] loop5: detected capacity change from 0 to 512
[  662.520939][ T9496] ext4: Unknown parameter 'fowner>00000000000000000'
[  662.894496][ T9502] loop4: detected capacity change from 0 to 1024
[  662.895418][ T9503] loop0: detected capacity change from 0 to 512
[  663.230889][ T9503] ext4: Unknown parameter 'fowner>00000000000000000'
[  663.336777][ T9502] EXT4-fs: Ignoring removed orlov option
[  663.470957][ T9502] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  663.695436][ T9502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  664.118519][ T9512] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.892: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  664.147442][ T9512] EXT4-fs (loop4): Remounting filesystem read-only
[  665.026398][ T5896] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  666.889683][ T5779] Bluetooth: hci3: unexpected subevent 0x01 length: 8 < 18
[  668.207846][ T9538] loop0: detected capacity change from 0 to 256
[  669.746810][ T9556] netlink: 44 bytes leftover after parsing attributes in process `syz.4.901'.
[  669.945522][ T9561] loop5: detected capacity change from 0 to 1024
[  670.019614][ T9561] EXT4-fs: Ignoring removed orlov option
[  670.096844][ T9561] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  670.224433][ T9561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  671.274272][ T9573] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.902: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  671.313505][ T9573] EXT4-fs (loop5): Remounting filesystem read-only
[  671.683010][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  672.101651][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  672.130864][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  672.152597][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  672.207007][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  672.227058][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  672.242190][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  672.947402][ T9595] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  672.947402][ T9595] The task syz.0.900 (9595) triggered the difference, watch for misbehavior.
[  673.317901][ T9602] loop5: detected capacity change from 0 to 512
[  673.338523][ T9602] ext4: Unknown parameter 'fowner>00000000000000000'
[  674.737240][ T5784] Bluetooth: hci2: command tx timeout
[  674.824976][ T9586] chnl_net:caif_netlink_parms(): no params data found
[  675.294347][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.304809][ T9611] loop4: detected capacity change from 0 to 512
[  675.328547][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.335846][ T9586] bridge_slave_0: entered allmulticast mode
[  675.408629][ T9586] bridge_slave_0: entered promiscuous mode
[  675.429537][ T9611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  675.439168][ T9586] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.466753][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.474052][ T9586] bridge_slave_1: entered allmulticast mode
[  675.498014][ T9586] bridge_slave_1: entered promiscuous mode
[  675.531365][ T9611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  675.557833][ T9615] loop0: detected capacity change from 0 to 1024
[  675.585987][ T9615] EXT4-fs: Ignoring removed orlov option
[  675.592243][ T9611] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  675.616159][ T9615] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  675.664940][ T9586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.712605][ T9615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  675.929450][ T9586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  677.389845][ T9586] team0: Port device team_slave_0 added
[  677.396698][ T5784] Bluetooth: hci2: command tx timeout
[  677.487523][ T5896] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  677.532552][ T9586] team0: Port device team_slave_1 added
[  677.589767][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  677.660947][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.793180][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  677.802908][ T9586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  677.845916][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  677.855256][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.962419][ T9586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  678.281958][ T9586] hsr_slave_0: entered promiscuous mode
[  678.291284][ T9586] hsr_slave_1: entered promiscuous mode
[  678.303400][ T9586] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  678.380472][ T9586] Cannot create hsr debugfs directory
[  679.476637][ T5784] Bluetooth: hci2: command tx timeout
[  681.566814][ T5784] Bluetooth: hci2: command tx timeout
[  681.663867][ T9654] loop0: detected capacity change from 0 to 512
[  681.708524][ T9654] ext4: Unknown parameter 'fowner>00000000000000000'
[  683.420251][ T9586] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  683.460362][ T9586] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  683.541333][ T9586] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  683.636051][ T9586] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  684.058776][ T9586] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.139486][ T9586] 8021q: adding VLAN 0 to HW filter on device team0
[  684.173114][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.180306][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  684.225284][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.232509][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  685.929676][ T9586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  686.365210][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  686.377017][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  687.992869][ T9586] veth0_vlan: entered promiscuous mode
[  688.053965][ T9586] veth1_vlan: entered promiscuous mode
[  688.064605][ T9713] loop0: detected capacity change from 0 to 1024
[  688.087587][ T9713] EXT4-fs: Ignoring removed orlov option
[  688.131154][ T9713] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  688.175676][ T9586] veth0_macvtap: entered promiscuous mode
[  688.224888][ T9717] loop4: detected capacity change from 0 to 512
[  688.244596][ T9586] veth1_macvtap: entered promiscuous mode
[  688.262301][ T9717] ext4: Unknown parameter 'fowner>00000000000000000'
[  688.326199][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  688.366808][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  688.397255][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  688.435686][ T9713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  688.460438][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  688.473623][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  688.491523][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  688.572538][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  688.721111][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  688.936938][ T9458] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  689.109188][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  689.156124][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.507842][ T9713] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.921: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  689.529089][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.539733][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.565803][ T9713] EXT4-fs (loop0): Remounting filesystem read-only
[  689.586659][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.598023][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.611900][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.622063][ T9586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.632821][ T9586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.646040][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  689.775481][ T9586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  689.816871][ T9586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  689.825681][ T9586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  689.852654][ T9586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.024920][ T9734] loop5: detected capacity change from 0 to 1024
[  690.088738][ T9734] EXT4-fs: Ignoring removed nomblk_io_submit option
[  690.171685][ T9734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  690.216869][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.246093][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.971192][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  691.987876][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  692.008161][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  692.057810][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  692.370446][ T9758] loop5: detected capacity change from 0 to 256
[  693.951845][ T9772] loop0: detected capacity change from 0 to 512
[  694.177595][ T9772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  694.519845][ T9772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  694.561901][ T9772] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  698.040946][   T28] audit: type=1800 audit(1778389121.981:8): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.927" name="file1" dev="loop0" ino=15 res=0 errno=0
[  699.252699][ T9804] loop6: detected capacity change from 0 to 512
[  699.298892][ T9804] ext4: Unknown parameter 'fowner>00000000000000000'
[  699.588692][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.379879][ T9810] loop0: detected capacity change from 0 to 1024
[  700.415378][ T9810] EXT4-fs: Ignoring removed orlov option
[  700.470413][ T9810] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  700.699995][ T9810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  703.854480][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.405569][ T9844] loop0: detected capacity change from 0 to 512
[  706.447128][ T9844] ext4: Unknown parameter 'fowner>00000000000000000'
[  708.935834][ T9861] loop5: detected capacity change from 0 to 512
[  708.987760][ T9861] ext4: Unknown parameter 'fowner>00000000000000000'
[  709.666426][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  709.688622][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  709.710182][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  709.753697][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  709.767202][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  709.774595][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  710.404945][ T9870] loop6: detected capacity change from 0 to 1024
[  710.437488][ T9870] EXT4-fs: Ignoring removed orlov option
[  710.487105][ T9870] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  710.787901][ T9870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  710.859073][ T9867] chnl_net:caif_netlink_parms(): no params data found
[  711.854288][ T5784] Bluetooth: hci1: command tx timeout
[  711.900534][ T9891] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #12: block 7: comm syz.6.946: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  712.588294][ T9891] EXT4-fs (loop6): Remounting filesystem read-only
[  712.750338][ T9888] loop0: detected capacity change from 0 to 1024
[  712.848538][ T9888] EXT4-fs: Ignoring removed orlov option
[  712.910367][ T9888] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  713.080444][ T9888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  713.131878][ T9586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  713.203018][ T9867] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.288805][ T9867] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.297000][ T9867] bridge_slave_0: entered allmulticast mode
[  713.303945][ T9867] bridge_slave_0: entered promiscuous mode
[  713.330152][ T9867] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.339037][ T9867] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.346295][ T9867] bridge_slave_1: entered allmulticast mode
[  714.033906][ T5779] Bluetooth: hci1: command tx timeout
[  714.048797][ T9907] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.943: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  714.385661][ T9907] EXT4-fs (loop0): Remounting filesystem read-only
[  714.412045][ T9867] bridge_slave_1: entered promiscuous mode
[  714.584908][ T9916] loop5: detected capacity change from 0 to 256
[  717.067109][ T5779] Bluetooth: hci1: command tx timeout
[  717.838625][ T9867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  717.885205][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  717.909621][ T9867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  718.136418][ T9867] team0: Port device team_slave_0 added
[  718.155110][ T9867] team0: Port device team_slave_1 added
[  718.267029][ T9867] batman_adv: batadv0: Adding interface: batadv_slave_0
[  718.300199][ T9935] loop5: detected capacity change from 0 to 512
[  718.318977][ T9867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.448588][ T9935] ext4: Unknown parameter 'fowner>00000000000000000'
[  718.525664][ T9867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  718.560411][ T9484] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  718.711071][ T9867] batman_adv: batadv0: Adding interface: batadv_slave_1
[  718.718566][ T9867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.744855][ T9867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  718.777068][ T9931] loop6: detected capacity change from 0 to 2048
[  720.448393][ T5779] Bluetooth: hci1: command tx timeout
[  721.831160][ T9941] syz_tun: entered allmulticast mode
[  721.978066][ T9941] syz_tun: left allmulticast mode
[  722.322068][ T9867] hsr_slave_0: entered promiscuous mode
[  722.446724][ T9867] hsr_slave_1: entered promiscuous mode
[  722.465029][ T9950] loop0: detected capacity change from 0 to 2048
[  722.487379][ T9867] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  722.516918][ T9867] Cannot create hsr debugfs directory
[  722.557709][ T9950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  724.097997][ T9971] loop6: detected capacity change from 0 to 128
[  724.106315][ T9971] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  724.182136][ T9867] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  724.248743][ T9971] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  724.280837][ T9867] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  724.331158][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.378921][ T9867] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  724.486181][ T9867] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  728.125418][ T9867] 8021q: adding VLAN 0 to HW filter on device bond0
[  728.214658][ T9986] loop0: detected capacity change from 0 to 512
[  728.271345][ T9867] 8021q: adding VLAN 0 to HW filter on device team0
[  728.312864][ T9986] ext4: Unknown parameter 'fowner>00000000000000000'
[  728.508766][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.515969][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  728.630322][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.637546][ T6153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  729.781083][T10002] loop0: detected capacity change from 0 to 256
[  734.471719][ T9867] 8021q: adding VLAN 0 to HW filter on device batadv0
[  734.905557][T10029] autofs4:pid:10029:autofs_fill_super: called with bogus options
[  736.153109][T10045] loop0: detected capacity change from 0 to 512
[  736.193017][T10045] ext4: Unknown parameter 'fowner>00000000000000000'
[  736.878652][ T9867] veth0_vlan: entered promiscuous mode
[  737.053321][ T9867] veth1_vlan: entered promiscuous mode
[  737.388887][ T9867] veth0_macvtap: entered promiscuous mode
[  737.978259][ T9867] veth1_macvtap: entered promiscuous mode
[  738.250016][ T9867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  738.306718][ T9867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  738.526903][ T9867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  739.303064][ T9867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.308320][ T9867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.323697][ T9867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.357025][ T9867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.446571][ T9867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.456461][ T9867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.468321][ T9867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.480651][ T9867] batman_adv: batadv0: Interface activated: batadv_slave_0
[  741.491828][ T9867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.504653][ T9867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.515710][ T9867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.527534][ T9867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.537674][ T9867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.548814][ T9867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.560203][ T9867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.570931][ T9867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.581135][ T9867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  741.591855][ T9867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.604944][ T9867] batman_adv: batadv0: Interface activated: batadv_slave_1
[  741.705828][ T9867] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  741.763195][ T9867] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  741.806885][ T9867] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  741.815870][ T9867] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  742.359363][T10080] loop0: detected capacity change from 0 to 512
[  742.533799][T10080] ext4: Unknown parameter 'fowner>00000000000000000'
[  743.114130][ T6153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.136540][ T6153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  744.239995][T10094] autofs4:pid:10094:autofs_fill_super: called with bogus options
[  744.299782][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  744.352382][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  744.381483][T10099] loop5: detected capacity change from 0 to 1024
[  744.428337][T10099] EXT4-fs: Ignoring removed orlov option
[  744.806764][T10099] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  745.365349][T10099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  746.255329][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  746.690670][T10134] loop0: detected capacity change from 0 to 1024
[  746.707663][T10134] EXT4-fs: Ignoring removed orlov option
[  746.734331][T10134] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  746.874088][T10134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  746.952273][T10138] loop5: detected capacity change from 0 to 1024
[  746.998695][T10138] EXT4-fs: Ignoring removed orlov option
[  747.019208][T10138] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  747.080085][T10138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  747.841690][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  748.100498][T10142] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.984: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  748.192134][T10141] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  748.206638][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  748.254331][T10146] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.986: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  748.329857][T10142] EXT4-fs (loop0): Remounting filesystem read-only
[  748.329893][T10146] EXT4-fs (loop5): Remounting filesystem read-only
[  748.521872][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.538677][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.799894][ T6155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.862517][T10155] Bluetooth: MGMT ver 1.22
[  748.883771][T10155] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  749.071608][ T6155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.279568][ T6155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.543337][T10170] loop7: detected capacity change from 0 to 512
[  751.628722][T10170] ext4: Unknown parameter 'fowner>00000000000000000'
[  752.080202][T10089] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  752.166795][T10185] loop5: detected capacity change from 0 to 8
[  752.859278][ T6155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.236082][T10189] loop5: detected capacity change from 0 to 1024
[  753.307626][T10191] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  753.337193][T10189] EXT4-fs: Ignoring removed orlov option
[  753.396442][T10189] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  753.512544][T10189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  754.359517][T10199] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.997: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  754.417046][T10199] EXT4-fs (loop5): Remounting filesystem read-only
[  754.737816][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  756.164312][T10219] loop7: detected capacity change from 0 to 512
[  756.236080][T10219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  756.351987][T10219] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  756.366902][T10219] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  757.249576][ T9867] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  757.878927][T10238] loop5: detected capacity change from 0 to 512
[  757.940593][T10238] ext4: Unknown parameter 'fowner>00000000000000000'
[  758.041834][T10089] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  765.470801][T10276] loop7: detected capacity change from 0 to 128
[  765.527392][T10276] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  765.608853][T10276] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  765.744633][ T8269] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  765.797135][T10276] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  766.136796][T10289] loop5: detected capacity change from 0 to 8
[  766.898712][T10290] overlayfs: failed to resolve './file1': -2
[  767.005277][T10296] loop5: detected capacity change from 0 to 2048
[  767.107762][T10296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  768.107918][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.340862][T10315] loop5: detected capacity change from 0 to 256
[  770.969053][ T6155] hsr_slave_0: left promiscuous mode
[  771.021058][ T6155] hsr_slave_1: left promiscuous mode
[  771.302536][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  771.936581][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  772.039797][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  772.304414][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  772.654927][ T6155] bridge_slave_1: left allmulticast mode
[  773.015114][T10347] loop0: detected capacity change from 0 to 1024
[  773.021685][ T6155] bridge_slave_1: left promiscuous mode
[  773.022280][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.104470][T10347] EXT4-fs: Ignoring removed orlov option
[  773.157594][ T6155] bridge_slave_0: left allmulticast mode
[  773.166843][T10347] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  773.205912][ T6155] bridge_slave_0: left promiscuous mode
[  773.221290][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.267833][T10347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  773.910189][ T6155] veth1_macvtap: left promiscuous mode
[  774.266289][ T6155] veth0_macvtap: left promiscuous mode
[  774.280986][ T6155] veth1_vlan: left promiscuous mode
[  774.287922][ T6155] veth0_vlan: left promiscuous mode
[  774.685117][T10364] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.1026: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  774.743802][T10364] EXT4-fs (loop0): Remounting filesystem read-only
[  778.610365][ T6155] team0 (unregistering): Port device team_slave_1 removed
[  778.817376][ T6155] team0 (unregistering): Port device team_slave_0 removed
[  779.050940][ T6155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  779.193292][ T6155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.172627][ T6155] bond0 (unregistering): Released all slaves
[  781.310883][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  782.677694][T10410] syz_tun: entered allmulticast mode
[  783.370095][T10402] syz_tun: left allmulticast mode
[  783.909924][T10423] loop5: detected capacity change from 0 to 512
[  783.946040][T10423] ext4: Unknown parameter 'fowner>00000000000000000'
[  789.383539][T10494] syz_tun: entered allmulticast mode
[  790.125275][T10487] syz_tun: left allmulticast mode
[  791.379586][T10500] loop0: detected capacity change from 0 to 1024
[  791.604412][T10500] EXT4-fs: Ignoring removed orlov option
[  791.844998][T10500] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  791.930980][T10512] loop5: detected capacity change from 0 to 8
[  792.757761][T10500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  793.438685][T10522] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.1061: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  793.979750][T10522] EXT4-fs (loop0): Remounting filesystem read-only
[  794.235764][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  796.134144][T10555] syz_tun: entered allmulticast mode
[  796.775295][T10548] syz_tun: left allmulticast mode
[  796.997072][ T5784] Bluetooth: hci2: command 0x0406 tx timeout
[  803.613490][T10620] overlayfs: failed to resolve './file0': -2
[  806.996625][T10435] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  807.226658][T10435] usb 1-1: Using ep0 maxpacket: 16
[  807.248521][T10435] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  807.285777][T10435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  807.346951][T10435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  807.755516][T10435] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  807.870097][T10435] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  807.918049][T10435] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  807.954811][T10435] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  808.024836][T10435] usb 1-1: Manufacturer: syz
[  808.261501][T10435] usb 1-1: config 0 descriptor??
[  808.796837][T10435] rc_core: IR keymap rc-hauppauge not found
[  808.815715][T10435] Registered IR keymap rc-empty
[  808.833487][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  808.896871][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  808.959956][T10435] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  809.005148][T10435] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  809.479594][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  809.489450][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  809.497288][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  809.527835][    C1] rc rc0: IR event FIFO is full!
[  809.532973][    C1] rc rc0: IR event FIFO is full!
[  809.537948][    C1] rc rc0: IR event FIFO is full!
[  809.542927][    C1] rc rc0: IR event FIFO is full!
[  809.547902][    C1] rc rc0: IR event FIFO is full!
[  809.552870][    C1] rc rc0: IR event FIFO is full!
[  809.558383][    C1] rc rc0: IR event FIFO is full!
[  809.563380][    C1] rc rc0: IR event FIFO is full!
[  809.568353][    C1] rc rc0: IR event FIFO is full!
[  809.573757][    C1] rc rc0: IR event FIFO is full!
[  809.578957][    C1] rc rc0: IR event FIFO is full!
[  809.583941][    C1] rc rc0: IR event FIFO is full!
[  809.588921][    C1] rc rc0: IR event FIFO is full!
[  809.593907][    C1] rc rc0: IR event FIFO is full!
[  809.600808][    C1] rc rc0: IR event FIFO is full!
[  809.605795][    C1] rc rc0: IR event FIFO is full!
[  809.610762][    C1] rc rc0: IR event FIFO is full!
[  809.615731][    C1] rc rc0: IR event FIFO is full!
[  809.621302][    C1] rc rc0: IR event FIFO is full!
[  809.626279][    C1] rc rc0: IR event FIFO is full!
[  809.631243][    C1] rc rc0: IR event FIFO is full!
[  809.636221][    C1] rc rc0: IR event FIFO is full!
[  809.641190][    C1] rc rc0: IR event FIFO is full!
[  809.646158][    C1] rc rc0: IR event FIFO is full!
[  809.651130][    C1] rc rc0: IR event FIFO is full!
[  809.656183][    C1] rc rc0: IR event FIFO is full!
[  809.662771][    C1] rc rc0: IR event FIFO is full!
[  809.667770][    C1] rc rc0: IR event FIFO is full!
[  809.672737][    C1] rc rc0: IR event FIFO is full!
[  809.677706][    C1] rc rc0: IR event FIFO is full!
[  809.682677][    C1] rc rc0: IR event FIFO is full!
[  809.687646][    C1] rc rc0: IR event FIFO is full!
[  809.692613][    C1] rc rc0: IR event FIFO is full!
[  809.697585][    C1] rc rc0: IR event FIFO is full!
[  809.704807][    C1] rc rc0: IR event FIFO is full!
[  809.709822][    C1] rc rc0: IR event FIFO is full!
[  809.714798][    C1] rc rc0: IR event FIFO is full!
[  809.719775][    C1] rc rc0: IR event FIFO is full!
[  809.724745][    C1] rc rc0: IR event FIFO is full!
[  809.730105][    C1] rc rc0: IR event FIFO is full!
[  809.735086][    C1] rc rc0: IR event FIFO is full!
[  809.740056][    C1] rc rc0: IR event FIFO is full!
[  809.745026][    C1] rc rc0: IR event FIFO is full!
[  809.750001][    C1] rc rc0: IR event FIFO is full!
[  809.754973][    C1] rc rc0: IR event FIFO is full!
[  809.759939][    C1] rc rc0: IR event FIFO is full!
[  809.765178][    C1] rc rc0: IR event FIFO is full!
[  809.770167][    C1] rc rc0: IR event FIFO is full!
[  809.775139][    C1] rc rc0: IR event FIFO is full!
[  809.780345][    C1] rc rc0: IR event FIFO is full!
[  809.785337][    C1] rc rc0: IR event FIFO is full!
[  809.790309][    C1] rc rc0: IR event FIFO is full!
[  809.795279][    C1] rc rc0: IR event FIFO is full!
[  809.800263][    C1] rc rc0: IR event FIFO is full!
[  809.805235][    C1] rc rc0: IR event FIFO is full!
[  809.810234][    C1] rc rc0: IR event FIFO is full!
[  809.815207][    C1] rc rc0: IR event FIFO is full!
[  809.820190][    C1] rc rc0: IR event FIFO is full!
[  809.827037][    C1] rc rc0: IR event FIFO is full!
[  809.832024][    C1] rc rc0: IR event FIFO is full!
[  809.837012][    C1] rc rc0: IR event FIFO is full!
[  809.841977][    C1] rc rc0: IR event FIFO is full!
[  809.846948][    C1] rc rc0: IR event FIFO is full!
[  809.851913][    C1] rc rc0: IR event FIFO is full!
[  809.856887][    C1] rc rc0: IR event FIFO is full!
[  809.861858][    C1] rc rc0: IR event FIFO is full!
[  809.867170][    C1] rc rc0: IR event FIFO is full!
[  809.872177][    C1] rc rc0: IR event FIFO is full!
[  809.877156][    C1] rc rc0: IR event FIFO is full!
[  809.882120][    C1] rc rc0: IR event FIFO is full!
[  809.887079][    C1] rc rc0: IR event FIFO is full!
[  809.892541][    C1] rc rc0: IR event FIFO is full!
[  809.897705][    C1] rc rc0: IR event FIFO is full!
[  809.902673][    C1] rc rc0: IR event FIFO is full!
[  809.907639][    C1] rc rc0: IR event FIFO is full!
[  809.912600][    C1] rc rc0: IR event FIFO is full!
[  809.927092][    C1] rc rc0: IR event FIFO is full!
[  809.932094][    C1] rc rc0: IR event FIFO is full!
[  809.937068][    C1] rc rc0: IR event FIFO is full!
[  809.942042][    C1] rc rc0: IR event FIFO is full!
[  809.947011][    C1] rc rc0: IR event FIFO is full!
[  809.952000][    C1] rc rc0: IR event FIFO is full!
[  809.956963][    C1] rc rc0: IR event FIFO is full!
[  809.961933][    C1] rc rc0: IR event FIFO is full!
[  809.966891][    C1] rc rc0: IR event FIFO is full!
[  809.971854][    C1] rc rc0: IR event FIFO is full!
[  809.976816][    C1] rc rc0: IR event FIFO is full!
[  809.981774][    C1] rc rc0: IR event FIFO is full!
[  809.987106][    C1] rc rc0: IR event FIFO is full!
[  809.992080][    C1] rc rc0: IR event FIFO is full!
[  809.997232][    C1] rc rc0: IR event FIFO is full!
[  810.002207][    C1] rc rc0: IR event FIFO is full!
[  810.007187][    C1] rc rc0: IR event FIFO is full!
[  810.015920][    C1] rc rc0: IR event FIFO is full!
[  810.020923][    C1] rc rc0: IR event FIFO is full!
[  810.025900][    C1] rc rc0: IR event FIFO is full!
[  810.030876][    C1] rc rc0: IR event FIFO is full!
[  810.035849][    C1] rc rc0: IR event FIFO is full!
[  810.040825][    C1] rc rc0: IR event FIFO is full!
[  810.045796][    C1] rc rc0: IR event FIFO is full!
[  810.050778][    C1] rc rc0: IR event FIFO is full!
[  810.056789][T10675] rc rc0: two consecutive events of type space
[  810.249105][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  810.286900][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  810.346713][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  810.393409][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  810.547238][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  810.596597][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  810.636577][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  810.697204][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  810.756627][T10435] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  810.763479][T10686] overlayfs: failed to resolve './file0': -2
[  810.808581][T10435] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  810.856842][T10435] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  810.902674][T10435] usb 1-1: USB disconnect, device number 5
[  812.790795][T10712] syz_tun: entered allmulticast mode
[  813.480188][T10705] syz_tun: left allmulticast mode
[  818.146178][T10730] loop5: detected capacity change from 0 to 512
[  818.164283][T10730] ext4: Unknown parameter 'fowner>00000000000000000'
[  818.286409][T10739] loop0: detected capacity change from 0 to 512
[  818.478435][T10739] ext4: Unknown parameter 'fowner>00000000000000000'
[  828.074406][T10789] overlayfs: failed to resolve './file0': -2
[  829.938772][T10809] loop5: detected capacity change from 0 to 512
[  830.008038][T10809] ext4: Unknown parameter 'fowner>00000000000000000'
[  833.677397][T10832] loop0: detected capacity change from 0 to 8
[  835.540227][T10846] overlayfs: failed to resolve './file0': -2
[  836.173065][T10854] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1139'.
[  836.954220][ T5784] Bluetooth: hci1: command 0x0406 tx timeout
[  837.250622][T10864] loop0: detected capacity change from 0 to 8
[  844.677942][T10901] overlayfs: failed to resolve './file0': -2
[  846.770140][T10914] loop0: detected capacity change from 0 to 256
[  855.140276][T10950] loop5: detected capacity change from 0 to 8
[  859.853868][T11016] loop0: detected capacity change from 0 to 512
[  859.868532][T11016] ext4: Unknown parameter 'fowner>00000000000000000'
[  862.589143][T11036] loop5: detected capacity change from 0 to 8
[  863.479509][T11047] loop0: detected capacity change from 0 to 512
[  863.500830][T11047] ext4: Unknown parameter 'fowner>00000000000000000'
[  865.031111][T11054] overlayfs: failed to resolve './file0': -2
[  866.733210][T11068] loop5: detected capacity change from 0 to 512
[  866.780208][T11068] ext4: Unknown parameter 'fowner>00000000000000000'
[  870.611750][T11091] overlayfs: failed to clone upperpath
[  870.797582][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  870.804211][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  875.612530][T11120] loop5: detected capacity change from 0 to 512
[  875.726628][T11120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  875.859335][T11120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  875.906732][T11120] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  876.366254][T11139] loop0: detected capacity change from 0 to 8
[  877.958960][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  879.619593][T11152] loop0: detected capacity change from 0 to 8
[  880.598150][T11157] loop5: detected capacity change from 0 to 512
[  880.655856][T11157] ext4: Unknown parameter 'fowner>00000000000000000'
[  882.157672][T11169] loop0: detected capacity change from 0 to 512
[  882.892300][T11169] ext4: Unknown parameter 'fowner>00000000000000000'
[  883.010108][T11125] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  886.526737][T11195] overlayfs: failed to resolve './file0': -2
[  893.162276][T11240] syz_tun: entered allmulticast mode
[  895.939869][T11243] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1212'.
[  897.736774][T11256] loop5: detected capacity change from 0 to 1024
[  897.768173][T11256] EXT4-fs: Ignoring removed nomblk_io_submit option
[  898.889152][T11256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  900.032745][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  900.376475][T11286] loop5: detected capacity change from 0 to 512
[  900.396807][T11286] ext4: Unknown parameter 'fowner>00000000000000000'
[  902.302075][T11301] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1221'.
[  906.586606][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1224'.
[  906.595518][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1224'.
[  908.896575][T11346] overlayfs: failed to resolve './file0': -2
[  911.964122][T11370] loop0: detected capacity change from 0 to 512
[  911.972390][T11370] ext4: Unknown parameter 'fowner>00000000000000000'
[  912.103995][T11372] syz_tun: entered allmulticast mode
[  912.138521][T11336] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  912.461998][T11373] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1231'.
[  915.903174][T11390] loop5: detected capacity change from 0 to 8
[  923.136345][    C1] Unknown status report in ack skb
[  923.170303][T11440] loop0: detected capacity change from 0 to 512
[  923.247895][T11440] ext4: Unknown parameter 'fowner>00000000000000000'
[  923.364262][T11441] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  925.249732][T11449] loop5: detected capacity change from 0 to 1024
[  925.277107][T11449] EXT4-fs: Ignoring removed nomblk_io_submit option
[  925.512602][T11449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  927.541299][ T8414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  931.432480][T11500] loop5: detected capacity change from 0 to 512
[  931.457983][T11500] ext4: Unknown parameter 'fowner>00000000000000000'
[  933.222880][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  933.231189][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  938.718145][    C0] ------------[ cut here ]------------
[  938.723715][    C0] WARNING: CPU: 0 PID: 11528 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600
[  938.733925][    C0] Modules linked in:
[  938.737898][    C0] CPU: 0 PID: 11528 Comm: syz.0.1271 Not tainted syzkaller #0
[  938.745389][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  938.755559][    C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  938.762005][    C0] Code: 24 4c 89 e7 e8 fe 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ed b2 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6
[  938.781698][    C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246
[  938.787885][    C0] RAX: ffffffff8a046f13 RBX: ffffffff8a045d16 RCX: ffff88802d7b3c00
[  938.795901][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  938.803942][    C0] RBP: 0000000000000000 R08: ffff88802d7b3c00 R09: 0000000000000003
[  938.811995][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88806c77e3c0
[  938.820037][    C0] R13: dffffc0000000000 R14: ffff88806c77e8b0 R15: ffff88806876dc24
[  938.828082][    C0] FS:  000055558c09b500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  938.837085][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  938.843792][    C0] CR2: 000000110c3b6016 CR3: 0000000030a25000 CR4: 00000000003506f0
[  938.851846][    C0] Call Trace:
[  938.855178][    C0]  <IRQ>
[  938.858103][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  938.863705][    C0]  ieee80211_beacon_get_tim+0xbf/0x580
[  938.869234][    C0]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  938.876055][    C0]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  938.881810][    C0]  __iterate_interfaces+0x243/0x500
[  938.887092][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  938.893371][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  938.900643][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  938.906949][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  938.914032][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[  938.919317][    C0]  __hrtimer_run_queues+0x520/0xc40
[  938.924561][    C0]  ? ktime_get_update_offsets_now+0x99/0x3f0
[  938.930657][    C0]  ? hw_scan_work+0xf60/0xf60
[  938.935380][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  938.940565][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  938.946723][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  938.951896][    C0]  handle_softirqs+0x280/0x820
[  938.956741][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  938.961548][    C0]  ? do_softirq+0x1a0/0x1a0
[  938.966113][    C0]  __irq_exit_rcu+0xd3/0x190
[  938.970770][    C0]  ? irq_exit_rcu+0x20/0x20
[  938.975317][    C0]  irq_exit_rcu+0x9/0x20
[  938.979630][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  938.985327][    C0]  </IRQ>
[  938.988324][    C0]  <TASK>
[  938.991291][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  938.997350][    C0] RIP: 0010:exit_to_user_mode_loop+0x40/0x110
[  939.003467][    C0] Code: fb eb 1d e8 d2 a6 12 09 65 48 8b 05 ba dc 8f 7e 4c 8b 30 41 f7 c6 0e 30 02 00 0f 84 c4 00 00 00 e8 f5 ba 19 00 fb 41 f6 c6 08 <74> 05 e8 09 d2 1a 09 41 f7 c6 00 10 00 00 74 08 48 89 df e8 78 a0
[  939.023188][    C0] RSP: 0000:ffffc9000547ff10 EFLAGS: 00000202
[  939.029354][    C0] RAX: 08b17bfdf288e600 RBX: ffffc9000547ff58 RCX: 08b17bfdf288e600
[  939.037403][    C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0
[  939.045419][    C0] RBP: 0000000000000000 R08: ffffffff8e8b19af R09: 1ffffffff1d16335
[  939.053510][    C0] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 0000000000000000
[  939.061612][    C0] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88802d7b3c00
[  939.069721][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  939.075338][    C0]  irqentry_exit_to_user_mode+0x9/0x30
[  939.080890][    C0]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  939.086433][    C0] RIP: 0033:0x7f70b04507f0
[  939.090904][    C0] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00
[  939.110628][    C0] RSP: 002b:00007ffc9bcc6c28 EFLAGS: 00000246
[  939.116798][    C0] RAX: 000000008a75b570 RBX: ffffffff8a75b570 RCX: ffffffff8a75b570
[  939.117020][   T64] ------------[ cut here ]------------
[  939.124790][    C0] RDX: 0000000000001570 RSI: ffffffff8a75b570 RDI: 000000000000000a
[  939.124821][    C0] RBP: 0000000000000000 R08: 00007f70b0800000 R09: 00007f70b0802000
[  939.124836][    C0] R10: 000000008a75b574 R11: 000000000000000a R12: 00007f70b0816038
[  939.124850][    C0] R13: 0000000000074722 R14: ffffffff8a75ba63 R15: 00007f70b1345720
[  939.124870][    C0]  ? plist_check_list+0xe3/0x240
[  939.124895][    C0]  ? plist_del+0x320/0x3f0
[  939.132701][   T64] WARNING: CPU: 1 PID: 64 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  939.138675][    C0]  ? plist_del+0x320/0x3f0
[  939.138698][    C0]  ? plist_del+0x320/0x3f0
[  939.138719][    C0]  </TASK>
[  939.138729][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  939.138750][    C0] CPU: 0 PID: 11528 Comm: syz.0.1271 Not tainted syzkaller #0
[  939.138769][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  939.138780][    C0] Call Trace:
[  939.138788][    C0]  <IRQ>
[  939.138794][    C0]  dump_stack_lvl+0x18c/0x250
[  939.138874][    C0]  ? show_regs_print_info+0x20/0x20
[  939.138985][    C0]  ? load_image+0x420/0x420
[  939.139098][    C0]  panic+0x2dc/0x730
[  939.139168][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  939.139276][    C0]  __warn+0x2e0/0x470
[  939.139345][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  939.139403][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  939.139469][    C0]  report_bug+0x2be/0x4f0
[  939.139529][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  939.139604][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  939.139651][    C0]  ? __ieee80211_beacon_get+0x1235/0x1600
[  939.139726][    C0]  handle_bug+0xcf/0x120
[  939.139776][    C0]  exc_invalid_op+0x1a/0x50
[  939.139825][    C0]  asm_exc_invalid_op+0x1a/0x20
[  939.139884][    C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  939.139970][    C0] Code: 24 4c 89 e7 e8 fe 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ed b2 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6
[  939.140013][    C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246
[  939.140061][    C0] RAX: ffffffff8a046f13 RBX: ffffffff8a045d16 RCX: ffff88802d7b3c00
[  939.140099][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  939.140134][    C0] RBP: 0000000000000000 R08: ffff88802d7b3c00 R09: 0000000000000003
[  939.140165][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88806c77e3c0
[  939.140206][    C0] R13: dffffc0000000000 R14: ffff88806c77e8b0 R15: ffff88806876dc24
[  939.140257][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  939.140352][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  939.140443][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  939.140520][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  939.140607][    C0]  ieee80211_beacon_get_tim+0xbf/0x580
[  939.140672][    C0]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  939.140791][    C0]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  939.140878][    C0]  __iterate_interfaces+0x243/0x500
[  939.140960][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  939.141029][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  939.141119][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  939.141183][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  939.141279][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[  939.141349][    C0]  __hrtimer_run_queues+0x520/0xc40
[  939.141409][    C0]  ? ktime_get_update_offsets_now+0x99/0x3f0
[  939.141501][    C0]  ? hw_scan_work+0xf60/0xf60
[  939.141575][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  939.141640][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  939.141760][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  939.141846][    C0]  handle_softirqs+0x280/0x820
[  939.141925][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  939.141989][    C0]  ? do_softirq+0x1a0/0x1a0
[  939.142067][    C0]  __irq_exit_rcu+0xd3/0x190
[  939.142116][    C0]  ? irq_exit_rcu+0x20/0x20
[  939.142190][    C0]  irq_exit_rcu+0x9/0x20
[  939.142232][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  939.142291][    C0]  </IRQ>
[  939.142303][    C0]  <TASK>
[  939.142322][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  939.142388][    C0] RIP: 0010:exit_to_user_mode_loop+0x40/0x110
[  939.142463][    C0] Code: fb eb 1d e8 d2 a6 12 09 65 48 8b 05 ba dc 8f 7e 4c 8b 30 41 f7 c6 0e 30 02 00 0f 84 c4 00 00 00 e8 f5 ba 19 00 fb 41 f6 c6 08 <74> 05 e8 09 d2 1a 09 41 f7 c6 00 10 00 00 74 08 48 89 df e8 78 a0
[  939.142512][    C0] RSP: 0000:ffffc9000547ff10 EFLAGS: 00000202
[  939.142557][    C0] RAX: 08b17bfdf288e600 RBX: ffffc9000547ff58 RCX: 08b17bfdf288e600
[  939.142596][    C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0
[  939.142636][    C0] RBP: 0000000000000000 R08: ffffffff8e8b19af R09: 1ffffffff1d16335
[  939.142673][    C0] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 0000000000000000
[  939.142704][    C0] R13: 0000000000000000 R14: 0000000000000008 R15: ffff88802d7b3c00
[  939.142785][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  939.142871][    C0]  irqentry_exit_to_user_mode+0x9/0x30
[  939.142926][    C0]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  939.142982][    C0] RIP: 0033:0x7f70b04507f0
[  939.143025][    C0] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00
[  939.143068][    C0] RSP: 002b:00007ffc9bcc6c28 EFLAGS: 00000246
[  939.143120][    C0] RAX: 000000008a75b570 RBX: ffffffff8a75b570 RCX: ffffffff8a75b570
[  939.143167][    C0] RDX: 0000000000001570 RSI: ffffffff8a75b570 RDI: 000000000000000a
[  939.143201][    C0] RBP: 0000000000000000 R08: 00007f70b0800000 R09: 00007f70b0802000
[  939.143242][    C0] R10: 000000008a75b574 R11: 000000000000000a R12: 00007f70b0816038
[  939.143271][    C0] R13: 0000000000074722 R14: ffffffff8a75ba63 R15: 00007f70b1345720
[  939.143326][    C0]  ? plist_check_list+0xe3/0x240
[  939.143376][    C0]  ? plist_del+0x320/0x3f0
[  939.143435][    C0]  ? plist_del+0x320/0x3f0
[  939.143470][    C0]  ? plist_del+0x320/0x3f0
[  939.143538][    C0]  </TASK>
[  939.147341][    C0] Kernel Offset: disabled