last executing test programs:

21m5.050357371s ago: executing program 32 (id=35):
r0 = socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20002)
r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r7 = dup3(r5, r6, 0x0)
ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0))
open_by_handle_at(r4, &(0x7f0000000000)=@isofs={0x14, 0x1, {0x15, 0x10, 0x4, 0x6, 0xfffff4bb, 0x1}}, 0x60380)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0))
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0)
preadv(r8, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0)
r9 = getpgrp(0x0)
syz_open_procfs$namespace(r9, 0x0)

20m21.594399273s ago: executing program 33 (id=69):
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@grpquota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000040)='./file0\x00')
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

18m41.015455069s ago: executing program 34 (id=151):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f0000000200), 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r5 = gettid()
openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x84080, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
read$ptp(r6, 0x0, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})

18m24.051915631s ago: executing program 4 (id=180):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000006700000000022b0000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000b40)={0x17c04, r4, 0x801, 0x40eca, 0x8000000000000001, 0x10003})

18m20.259391658s ago: executing program 4 (id=183):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x5, 0x0)
open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x41, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lstat(0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

18m17.487601325s ago: executing program 4 (id=186):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80, 0x108)
symlinkat(&(0x7f00000001c0)='./file0\x00', r3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa)

18m10.753414455s ago: executing program 4 (id=188):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000080)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x80000000}}, {@uni_xlate}, {}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}], [{@appraise}]}, 0x25, 0x365, &(0x7f0000000640)="$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")
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)

18m6.409680927s ago: executing program 4 (id=192):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x480)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = msgget$private(0x0, 0x100)
msgsnd(r1, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfc6, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x8}, 0x0, 0x0, 0xfffffffffffffffe, 0x1414, 0xffff, 0x2, 0xffffffffffffffca, 0x8, 0x8580, 0x3})
msgsnd(r1, 0x0, 0x0, 0x800)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20040020)
socket$inet_mptcp(0x2, 0x1, 0x106)

18m0.466823519s ago: executing program 4 (id=197):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000021000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
prlimit64(r0, 0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

17m45.12244976s ago: executing program 35 (id=197):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000021000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
prlimit64(r0, 0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c)
pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

8m10.51906064s ago: executing program 1 (id=655):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00')
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpid()
r3 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r3, &(0x7f0000032140)=""/102344, 0x18fc8, 0x56)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x54)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x1, [<r9=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10})
close_range(r1, 0xffffffffffffffff, 0x0)
write$tcp_mem(r0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x2818c02, &(0x7f0000002580)=ANY=[], 0x1, 0xc3b, &(0x7f0000001940)="$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")

8m9.715319301s ago: executing program 1 (id=657):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d7, &(0x7f0000000840)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioperm(0x0, 0x4, 0x1)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f00000005c0)=ANY=[], 0x2, 0x1e3, &(0x7f0000000b40)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380)={0x0, 0xf52}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000040))
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)

8m7.865042034s ago: executing program 1 (id=659):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
prlimit64(r0, 0xa, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000006700000000022b0000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000b40)={0x17c04, r6, 0x801, 0x40eca, 0x8000000000000001, 0x10003})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")

8m6.770419052s ago: executing program 1 (id=660):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d7, &(0x7f0000000840)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioperm(0x0, 0x4, 0x1)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f00000005c0)=ANY=[], 0x2, 0x1e3, &(0x7f0000000b40)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380)={0x0, 0xf52}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000040))
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)

8m5.125469102s ago: executing program 1 (id=661):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
prlimit64(r0, 0xa, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000006700000000022b0000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c)
pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000b40)={0x17c04, r5, 0x801, 0x40eca, 0x8000000000000001, 0x10003})
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000c40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000009c0)={0xd4, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7dbd}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72c5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x8081)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")

8m0.12065772s ago: executing program 1 (id=663):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x480)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfc6, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x8}, 0x0, 0x0, 0xfffffffffffffffe, 0x1414, 0xffff, 0x2, 0xffffffffffffffca, 0x8, 0x8580, 0x3})
msgsnd(0x0, 0x0, 0x0, 0x800)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20040020)
socket$inet_mptcp(0x2, 0x1, 0x106)

7m42.377729205s ago: executing program 36 (id=663):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x480)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfc6, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x8}, 0x0, 0x0, 0xfffffffffffffffe, 0x1414, 0xffff, 0x2, 0xffffffffffffffca, 0x8, 0x8580, 0x3})
msgsnd(0x0, 0x0, 0x0, 0x800)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20040020)
socket$inet_mptcp(0x2, 0x1, 0x106)

3m44.503679106s ago: executing program 6 (id=832):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18)

3m41.718648825s ago: executing program 6 (id=835):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
prlimit64(0x0, 0xa, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000006700000000022b0000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000b40)={0x17c04, r6, 0x801, 0x40eca, 0x8000000000000001, 0x10003})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")

3m33.395074195s ago: executing program 6 (id=849):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x1000000201005)

3m31.658530423s ago: executing program 6 (id=850):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)={[{@barrier}, {@creator={'creator', 0x3d, "5a1b3b9a"}}, {@part={'part', 0x3d, 0x100}}, {@nobarrier}, {@gid}, {}, {@nls={'nls', 0x3d, 'cp437'}}]}, 0x44, 0x718, &(0x7f00000011c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1, 0x1c9, &(0x7f0000000780)="$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")

3m31.382787014s ago: executing program 6 (id=852):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0)

3m30.858127074s ago: executing program 6 (id=855):
chdir(&(0x7f0000000540)='./cgroup\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

3m30.562907578s ago: executing program 37 (id=855):
chdir(&(0x7f0000000540)='./cgroup\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

3m6.129796602s ago: executing program 7 (id=83):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]})

3m3.809978866s ago: executing program 7 (id=889):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0x2)

3m2.825848191s ago: executing program 7 (id=890):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x803}}], 0x18}}], 0x1, 0x20004844)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x10008, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

3m2.12473916s ago: executing program 7 (id=892):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000005c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1540, &(0x7f0000000180)="$eJzs3AuYjtXaOPD7Xms9DE16m+QwrLXuhzcNlkmSHJLkkCRJkuSUJGmSJCEx5JQ0JCHHSZPDEJJTY9I4nw85J022NEkSklOy/he7tt3X3u29/3t/n3019++6nmvW/aznXu9ac88173qe95r5ptvwOs3q1mxCRPBvwT9/SQaAGAAYDABXAUAAABXjKsZd6M8nMfnfexH2n/VA+uWeAbucuP65G9c/d+P6525c/9yN65+7cf1zN65/7sb1Zyw32zKj6NV85N6Dn///oXjv/b9wOb///4HklJvwxbpy13b/F1K4/rkb1z934/rnIsFvT3H9czeuf+7G9f/ju/13+rj+f1Ax/9xlXH/GcrO/PAs+573/L3ge/T8P9W/m5/3NZxy/PIK+/Gv7bzgu848fY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFc4rS/RAHAL+3LPS/GGGOMMcYYY4z95/i8f6cj3//xRBhjjDHGGGOMMfa/CEGABAUB5IG8EAP5ID9cAbFwJRSAqyACV0McXAMF4VooBIWhCBSFeCgGxUGDAQsEIZSAkhCF66AUXA8JUBrKQFlwUA4S4QYoDzdCBbgJKsLNUAlugcpQBapCNbgVqsNtUANuh5pwB9SC2lAH6sKdUA/ugvpwNzSAe6Ah3AuN4D5oDPdDE3gAmsKD0AwegubwMLSAltAKWkOb/6/8F6AXvAi9oQ8kQ1/oBy9BfxgAA2EQDIaXYQi8AkPhVUiBYTAcXoMR8DqMhDdgFIyGMfAmjIVxMB4mwESYBKnwFkyGtyEN3oEpMBWmwXRIhxkwE96FWTAb5sB7MBfeh3kwHxbAQlgEH0AGLIZM+BCWwEeQBUthGSyHFbASVsFqWANrYR2shw2wETbBZtgCH8NW2AbbYQfshF2wGz6BPfAp7IXPIBs+/xfzT/2P/O4ICChQoEKFeTAPxmAM5sf8GIuxWAALYAQjGIdxWBALYiEshEWwCMZjPBbH4mjQICFhCSyBUYxiKSyFCZiAZbAMOnSYiIlYHm/EClgBK2JFrISVsDJWwSpYDathdayONbAG1sSaWAtrYR2sg3finXgX1sf62AAbYENsiI2wETbGxtgEm2BTbIrNsBk2x+bYAltgK2yFbbANtsW22A7bYXtsjx2wA3bEjpiESdgJO2Fn7IxdsAt2xa7YDbthd+yBPfAFfAFfxBexD9YSfbEf9sP+2B8H4iAchC/jEHwFX8FXMQWH4XB8DV/D13EknsRROBrH4BisLsbheJyAJCZhKqbiZJyMaZiGU3AqTsXpmI4zcCbOxFk4G2fjezgX38f3cT7Ox4W4CBdhBi7GTMzEJXgKs3ApLsPluAJX4gpcjWtwNa7D9bgON+JG3Iyb8WP8GLfhNtyBO3AX7sJP8BP8FD/FFMzGbNyH+3A/7scDeABzMAcP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPhf/VdNdpdemgLhACSXyiDwiRsSI/CK/iBWxooAoICIiIuJEnCgoCopCopAoIoqIeBEvioviwggjSISihCghoiIqSolSIkEkiDKijHDCiUSRKMqL8qKCqCAqiptFJXGLqCyqiMdcNVFNVBftXQ1xu6gpaopaoraoI+qKuqKeqCfqi/qigWggGoqGopG4TzQWfXEgPiAuVKaZGIbNxXBsIVqKVqK1eB0fEW3FSGwnHhPtxeNiNI7CjqKtSxJPiU5iPHYWz4gJ+KzoKiZhN/G86C56iJ7iBdFLtHO9RR8xBfuKfmI69hcDxEAxSMzC2uJCxeqIV0WKGCaGi9fEQnxdjBRviFFitBgj3hRjxTgxXkwQE8UkkSreEpPF2yJNvCOmiKlimpgu0sUMMVO8K2aJ2WKOeE/MFe+LeWK+WCAWikXiA5EhFotM8aFYIj4SWWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy3iY7FVbBPbxQ6xU+wSu8UnYo/4VOwVn4ls8bnYJ/4k9osvxAHxpcgRX4mD4mtxSHwjDotvxRHxnTgqjonj4ntxQvwgTopT4rQ4I86KH8U58ZM4L7wAiVJIKZUMZB6ZV8bIfDK/vELGyitlAXmVjMirZZy8RhaU18pCsrAsIovKeFlMFpdaGmklyVCWkCVlVF4nS8nrZYIsLcvIstLJcjJR3iDLyxtlBXmTrChvlpXkLbKyrCKrymryVlld3iZryNtlTXmHrCVryzqyrrxT1pN3yfrybtlA3iMbyntlI3mfbCzvl03kA7KpfFA2kw/J5vJh2UK2lK1ka9lGPiLbykdluwAA5OOyg3xCdpRPyiT5lOwkn5ad5TOyi3xWdpXPyW7yedld9pA95U/yvPSyt+wjk2Vf2U++JPvLAXKgHCQHy5flEPmKHCpflSlymBwuX5Mj5OtypHxDjpKj5Rj5phwrx8nxcoKcKCfJVPmWnCzflmnyHTlFTpXT5HSZLmfIgT+PNOefyH/7b+QPvfjqm+UW+bHcKrfJ7XKH3Cl3yd1yt9wj98i9cq/Mltlyn9wn98v98oA8IHNkjjwoD8pD8pA8LA/LI/KIPCqPyTPye3lC/iBPylPylDwjz8qz8tzP3wNQqISSSqlA5VF5VYzKp/KrK1SsulIVUFepiLpaxalrVEF1rSqkCqsiqqiKV8VUcaWVUVaRClUJVVJF1XWqlLpeJajSqowqq5wqpxLVDf92/j+aXxvVRrVVbVU71U61V+1VB9VBdVQdVZJKUp1UJ9VZdVZdVBfVVXVV3VQ31V11Vz1VT9VL9VK9VW+VrJJVP/WS6q8GqIFqkBqsXlZD1BA1VA1VKSpFDVfD1Qg1Qo1UI9UoNUqNUWPUWDVWjVfj1UQ1UaWqVDVZTVZpKk1NUVPUNDVNpat0NVPNVLPULDVHzVFz1Vw1T81TC9QCtUgtUhkqQ2WqTLVELVFZaqlaqpar5WqlWqlWq9VqrVqr1qv1aqPaqLLUFrVFbVVb1Xa1Xe1UO9VutVvtUXvUXrVXZatstU/tU/vVfnVAHVA5KkcdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5df7Cti8QgQhUoII8QZ4gJogJ8gf5g9ggNigQFAgiQSSIC+KCgsG1QaGgcFAkKBrEB8WC4oEOTGADCsKgRFAyiAbXBaWC64OEoHRQJigbuKBckBjcEJQPbgwqBDcFFYObg0rBLUHloEpQNagW3BpUD24LagS3BzWDO4JaQe1fPocK7grqB3cHDYJ7gobBvUGj4L6gcXB/0CR4IGgaPBg0Cx4KmgcPBy2ClkGroHXQ5p8dP6gT1A3uDOr97vjenyz8qOut++hk3Vf30y/p/nqAHqgH6cH6ZT1Ev6KH6ld1ih6mh+vX9Aj9uh6p39Cj9Gg9Rr+px+pxeryeoCfqSTpVv6Un67d1mn5HT9FT9TQ9XafrGXqmflfP0rP1HP2enqvf1/P0fL1AL9SL9Ac6Qy/WmfpDvUR/pLP0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Md6q96mt+sdeqfepXfrT/Qe/aneqz/T2fpzvU//Se/XX+gD+kudo7/SB/XX+pD+Rh/W3+oj+jt9VB/Tx/X3+oT+QZ/Up/RpfUaf1T/qc/onfV77C5v7C2/vRhll8pg8JsbEmPwmv4k1saaAKWAiJmLiTJwpaAqaQqaQKWKKmHgTb4qb4uYCMmRKmBImaqKmlCllEkyCKWPKGGecSTSJprwpbyqYCqaiqWgqmUqmsqlsqpqq5lZzq7nN3GZuN7ebO8wdprapbeqauqaeqWfqm/qmgWlgGpqGppFpZBqbxqaJaWKamqammWlmmpvmpoVpYVqZVqaNaWPamramnWln2pv2poPpYDqajibJJJlOppPpbDqbLqaL6Wq6mm6mm+luupuepqfpZXqZ3md6m2STbPqZfqa/6W8GmoFmsBlshpghZqgZalJMihluhpsRZoQZaUaaUWa0GWPeNGPNODPeTDATzSSTalLNZDPZpJk0M8VMMdPMNJNu0s1MM9PMMrPMHDPHzDVzzTwzzywwC8wis8hkmAyTaTLNErPEZJkss8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMlvMFrNVbjXbzXaz0+w0u81us8fsMXvNXpNtss0+s8/sN/vNAXPA5Jgcc9AcNIfMIXPYHDZHzBFz1Bw1x81xc8KcMCfNSXPanDZnzY/mnPnJnDfexFgB+e0VNtZeaQvYq2yMzWf/Oi5ii9p4W8wWt9oWsoV/FRtrbYItbcvYstbZcjbR3vCbuLKtYqvaavZWW93eZmv8Jq5n77L17d22gb3H1rV3/ipuaO+1jexDtrF92DaxLW1T29o2sw/Z5vZh28K2tK1sa9vBPmE72idtkn3KdrJP/ybOsIvtGrvWrrPr7R77qT1tz9hD9ht71v5oe9s+drB92Q6xr9ih9lWb0mDYr2M7zI6xb9qxdpwdbyfYiXbSb+JpdrpNtzPsTPuunWVn/yZeZD+wc22mnWfn2wV24cX4wpwy7Yd2if3IZtmldpldblfYlXaVXf2XuS63G+0mu9nutp/YrXab3W532J1218X4wjr22s9stv3cHrRf2/32C3vAHrY59quL8YX1Hbbf2iP2O3vUHrPH7ff2hP3BnrSnLq7/wtq/tz/Z89ZbICRBkhQFlIfyUgzlo/x0BcXSlVSArqIIXU1xdA0VpGupEBWmIlSU4qkYFSdNhiwRhVSCSlKUrqNSdD0lUGkqQ2XJUTlKpBuoPN1IFegmqkg3UyW6hSpTFapK1ehWqk63UQ0FVJPuoFpUm+pQXbqT6tFdVJ/upgZ0DzWke6kR3UeN6X5qQg9QU3qQmtFD1JwephbUklpRa2pDj1BbepTa0WPUnh6nDvQEdaQnKYmeok70NHWmZ6gLPUtd6TnqRs9Td+pBPekF6kUvUm/qQ8nUl/rRS9SfBtBAGkSD6WUaQq/QUHqVUmgYDafXaAS9TiPpDRpFo2kMvUljaRyNpwk0kSZRKr1Fk+ltSqN3aApNpWk0ndJpBs2kd2kWzaY59B7NpfdpHs2nBbSQFtEHlEGLKZM+pCX0EWXRUlpGy2kFraRVtJrW0FpaR+tpA22kTbSZttDHtJW20XbaQTtpF+2mT2gPfUp76TPKps9pH/2J9tMXdIC+pBz6ig7S13SIvqHD9C0doe/oKB2j4/Q9naAf6CSdotN0hs7Sj3SOfqLz5AlCDEUoQxUGYZ4wbxgT5gvzh1eEseGVYYHwqjASXh3GhdeEBcNrw0Jh4bBIWDSMD4uFxUMdmtCGFIZhibBkGA2vC0uF14cJYemwTFg2dGG5MDG8ISwf3hhWCG8KK4Y3h5XCW8LKYZXwoXuqhbeG1cPbwhrh7WHN8I6wVlg7rBPWDe8M64V3hfXDu8MG4T1hhfDesFF4X9g4vD9sEj4QNg0fDJuFD4XNw4fDFmHLsFXYOmwTPhK2DR8N24WPhe3Dx8MO4RNhx/DJMCl8KuwUPv0P+5PDvmG/8KXwpdD7u+WC6MLoougH0Yzo4mhm9MPokuhH0azo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxuim6Oao93XzgkMnnHTKBS6Py+tiXD6X313hYt2VroC7ykXc1S7OXeMKumtdIVfYFXFFXbwr5oo77YyzjlzoSriSLuquc6Xc9S7BlXZlXFnnXDmX6Fq7Nq6Na+sede3cY669e9w97p5wT7gn3ZPuKdfJPe06u2dcF/es6+qec8+5511318P1dC+4Xu5F19v1ccku2fVz/Vx/198NdAPz/LwHc0PdUJfiUtxwN9yNcCPcSDfSjXKj3Bg3xo11Y914N95NdBNdqkt1k91kl+bS3BQ3xU1z01y6S3cz3Uw3y81yc9wcNzdhrpvn5rkFboFb5Ba5DJfhMl2mW+KWuCyX5Za5ZW6FW+FWuVVujVvj1rl1boPb4Da5TW6L2+K2uq1uu9vudrqdbrfb7fa4PW6v2+uyXbbb5/a5/W6/O+C+dDnuK3fQfe0OuW/cYfetO+K+c0fdMXfcfe9OuB/cSXfKnXZn3Fn3ozvnfnLnnXepkbcikyNvR9Ii70SmRKZGpkWmR9IjMyIzI+9GZkVmR+ZE3ovMjbwfmReZH1kQiQGADyIZkcWRzMiHkSWRjyJZkaWRZZHlkRWRlRHvi20NfQlf0kf9db6Uv94n+NK+jC/rnS/nE/0Nvry/0VfwN/mK/mZfyd/iK/sqvqp/2LfwLX0r39q38Y/4tv5R384/5tv7x30H/4Tv6J/0Sf4p38k/7Tv7Z3wX/6zv6p/z3fzzvrvv4Xv6F3wv/6Lv7fv4ZN/X9/Mv+f5+gB/oB/nB/mU/xL/ih/pXfYof5of71/wI/7of6d/wo/xoP8a/6cf6cX68n+An+kk+1b/lJ+d726f5d/wUP9VP89N9up/hZ/p3/Sw/28/x7/m5/n0/z8/3C/xCv8h/4DP8Yp/pP/RL/Ec+yy/1y/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8V/7Lf6bX673+F3+l1+t//E7/Gf+r3+M5/tP/f7/J/8fv+FP+C/9Dn+K3/Qf+0P+W/8Yf+tP+K/80f9MX/cf+9P+B/8SX/Kn/Zn/Fn/oz/nf/Ln+W/WGGOMMcb+KWkHfr+/7984J34+LugHAFduK5rz1/0KADYU+nN7gIjvEAGAp/p0e+CXo1at5OTkn6/NkhCUnA8AkUv5F29Dfo6XQnt4ApLgMSj/N+c3QPQ4S78zPh71PnozQP6/yrmwj/8lvjT+jX9n/EceH5NRKTwd9+vxz/2837ww/+h8gISSl3LywaX40vgV/s74hdv+3vyzJOT7IhWg3V/lxMKl+NL4ifAoPA1Jv7qSMcYYY4wxxhj7swGiapd/cP958f48Xl0ML57OC3+J/+H9OWOMMcYYY4wxxi6/Z3v0fPKRpKTHunCDG/87jbwA8F8wDW78a43L/ZuJMcYYY4wx9p92adN/uWfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXv8X/07scq+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9z+XwAAAP//TLI8jQ==")
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
clock_gettime(0x0, &(0x7f0000001e40)={<r1=>0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000001d80)={0xb, 0x3, 0xe, 0xfffffffffffffffb, 0x27dc, 0x9, 0x101, 0x6}, &(0x7f0000001dc0)={0x4, 0xf1, 0xffff, 0x800, 0x6, 0x8, 0xfffffffffffffffc, 0x7}, &(0x7f0000001e00)={0x7fff, 0x0, 0x7a8, 0x9, 0x7, 0x0, 0x8000, 0x7}, &(0x7f0000001e80)={r1, r2+10000000}, &(0x7f0000001f00)={&(0x7f0000001ec0)={[0x5]}, 0x8})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f00000004c0)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000001540)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80801, 0x60)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000900))

3m1.435363051s ago: executing program 38 (id=892):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000005c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1540, &(0x7f0000000180)="$eJzs3AuYjtXaOPD7Xms9DE16m+QwrLXuhzcNlkmSHJLkkCRJkuSUJGmSJCEx5JQ0JCHHSZPDEJJTY9I4nw85J022NEkSklOy/he7tt3X3u29/3t/n3019++6nmvW/aznXu9ac88173qe95r5ptvwOs3q1mxCRPBvwT9/SQaAGAAYDABXAUAAABXjKsZd6M8nMfnfexH2n/VA+uWeAbucuP65G9c/d+P6525c/9yN65+7cf1zN65/7sb1Zyw32zKj6NV85N6Dn///oXjv/b9wOb///4HklJvwxbpy13b/F1K4/rkb1z934/rnIsFvT3H9czeuf+7G9f/ju/13+rj+f1Ax/9xlXH/GcrO/PAs+573/L3ge/T8P9W/m5/3NZxy/PIK+/Gv7bzgu848fY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFc4rS/RAHAL+3LPS/GGGOMMcYYY4z95/i8f6cj3//xRBhjjDHGGGOMMfa/CEGABAUB5IG8EAP5ID9cAbFwJRSAqyACV0McXAMF4VooBIWhCBSFeCgGxUGDAQsEIZSAkhCF66AUXA8JUBrKQFlwUA4S4QYoDzdCBbgJKsLNUAlugcpQBapCNbgVqsNtUANuh5pwB9SC2lAH6sKdUA/ugvpwNzSAe6Ah3AuN4D5oDPdDE3gAmsKD0AwegubwMLSAltAKWkOb/6/8F6AXvAi9oQ8kQ1/oBy9BfxgAA2EQDIaXYQi8AkPhVUiBYTAcXoMR8DqMhDdgFIyGMfAmjIVxMB4mwESYBKnwFkyGtyEN3oEpMBWmwXRIhxkwE96FWTAb5sB7MBfeh3kwHxbAQlgEH0AGLIZM+BCWwEeQBUthGSyHFbASVsFqWANrYR2shw2wETbBZtgCH8NW2AbbYQfshF2wGz6BPfAp7IXPIBs+/xfzT/2P/O4ICChQoEKFeTAPxmAM5sf8GIuxWAALYAQjGIdxWBALYiEshEWwCMZjPBbH4mjQICFhCSyBUYxiKSyFCZiAZbAMOnSYiIlYHm/EClgBK2JFrISVsDJWwSpYDathdayONbAG1sSaWAtrYR2sg3finXgX1sf62AAbYENsiI2wETbGxtgEm2BTbIrNsBk2x+bYAltgK2yFbbANtsW22A7bYXtsjx2wA3bEjpiESdgJO2Fn7IxdsAt2xa7YDbthd+yBPfAFfAFfxBexD9YSfbEf9sP+2B8H4iAchC/jEHwFX8FXMQWH4XB8DV/D13EknsRROBrH4BisLsbheJyAJCZhKqbiZJyMaZiGU3AqTsXpmI4zcCbOxFk4G2fjezgX38f3cT7Ox4W4CBdhBi7GTMzEJXgKs3ApLsPluAJX4gpcjWtwNa7D9bgON+JG3Iyb8WP8GLfhNtyBO3AX7sJP8BP8FD/FFMzGbNyH+3A/7scDeABzMAcP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPhf/VdNdpdemgLhACSXyiDwiRsSI/CK/iBWxooAoICIiIuJEnCgoCopCopAoIoqIeBEvioviwggjSISihCghoiIqSolSIkEkiDKijHDCiUSRKMqL8qKCqCAqiptFJXGLqCyqiMdcNVFNVBftXQ1xu6gpaopaoraoI+qKuqKeqCfqi/qigWggGoqGopG4TzQWfXEgPiAuVKaZGIbNxXBsIVqKVqK1eB0fEW3FSGwnHhPtxeNiNI7CjqKtSxJPiU5iPHYWz4gJ+KzoKiZhN/G86C56iJ7iBdFLtHO9RR8xBfuKfmI69hcDxEAxSMzC2uJCxeqIV0WKGCaGi9fEQnxdjBRviFFitBgj3hRjxTgxXkwQE8UkkSreEpPF2yJNvCOmiKlimpgu0sUMMVO8K2aJ2WKOeE/MFe+LeWK+WCAWikXiA5EhFotM8aFYIj4SWWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy3iY7FVbBPbxQ6xU+wSu8UnYo/4VOwVn4ls8bnYJ/4k9osvxAHxpcgRX4mD4mtxSHwjDotvxRHxnTgqjonj4ntxQvwgTopT4rQ4I86KH8U58ZM4L7wAiVJIKZUMZB6ZV8bIfDK/vELGyitlAXmVjMirZZy8RhaU18pCsrAsIovKeFlMFpdaGmklyVCWkCVlVF4nS8nrZYIsLcvIstLJcjJR3iDLyxtlBXmTrChvlpXkLbKyrCKrymryVlld3iZryNtlTXmHrCVryzqyrrxT1pN3yfrybtlA3iMbyntlI3mfbCzvl03kA7KpfFA2kw/J5vJh2UK2lK1ka9lGPiLbykdluwAA5OOyg3xCdpRPyiT5lOwkn5ad5TOyi3xWdpXPyW7yedld9pA95U/yvPSyt+wjk2Vf2U++JPvLAXKgHCQHy5flEPmKHCpflSlymBwuX5Mj5OtypHxDjpKj5Rj5phwrx8nxcoKcKCfJVPmWnCzflmnyHTlFTpXT5HSZLmfIgT+PNOefyH/7b+QPvfjqm+UW+bHcKrfJ7XKH3Cl3yd1yt9wj98i9cq/Mltlyn9wn98v98oA8IHNkjjwoD8pD8pA8LA/LI/KIPCqPyTPye3lC/iBPylPylDwjz8qz8tzP3wNQqISSSqlA5VF5VYzKp/KrK1SsulIVUFepiLpaxalrVEF1rSqkCqsiqqiKV8VUcaWVUVaRClUJVVJF1XWqlLpeJajSqowqq5wqpxLVDf92/j+aXxvVRrVVbVU71U61V+1VB9VBdVQdVZJKUp1UJ9VZdVZdVBfVVXVV3VQ31V11Vz1VT9VL9VK9VW+VrJJVP/WS6q8GqIFqkBqsXlZD1BA1VA1VKSpFDVfD1Qg1Qo1UI9UoNUqNUWPUWDVWjVfj1UQ1UaWqVDVZTVZpKk1NUVPUNDVNpat0NVPNVLPULDVHzVFz1Vw1T81TC9QCtUgtUhkqQ2WqTLVELVFZaqlaqpar5WqlWqlWq9VqrVqr1qv1aqPaqLLUFrVFbVVb1Xa1Xe1UO9VutVvtUXvUXrVXZatstU/tU/vVfnVAHVA5KkcdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5df7Cti8QgQhUoII8QZ4gJogJ8gf5g9ggNigQFAgiQSSIC+KCgsG1QaGgcFAkKBrEB8WC4oEOTGADCsKgRFAyiAbXBaWC64OEoHRQJigbuKBckBjcEJQPbgwqBDcFFYObg0rBLUHloEpQNagW3BpUD24LagS3BzWDO4JaQe1fPocK7grqB3cHDYJ7gobBvUGj4L6gcXB/0CR4IGgaPBg0Cx4KmgcPBy2ClkGroHXQ5p8dP6gT1A3uDOr97vjenyz8qOut++hk3Vf30y/p/nqAHqgH6cH6ZT1Ev6KH6ld1ih6mh+vX9Aj9uh6p39Cj9Gg9Rr+px+pxeryeoCfqSTpVv6Un67d1mn5HT9FT9TQ9XafrGXqmflfP0rP1HP2enqvf1/P0fL1AL9SL9Ac6Qy/WmfpDvUR/pLP0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Md6q96mt+sdeqfepXfrT/Qe/aneqz/T2fpzvU//Se/XX+gD+kudo7/SB/XX+pD+Rh/W3+oj+jt9VB/Tx/X3+oT+QZ/Up/RpfUaf1T/qc/onfV77C5v7C2/vRhll8pg8JsbEmPwmv4k1saaAKWAiJmLiTJwpaAqaQqaQKWKKmHgTb4qb4uYCMmRKmBImaqKmlCllEkyCKWPKGGecSTSJprwpbyqYCqaiqWgqmUqmsqlsqpqq5lZzq7nN3GZuN7ebO8wdprapbeqauqaeqWfqm/qmgWlgGpqGppFpZBqbxqaJaWKamqammWlmmpvmpoVpYVqZVqaNaWPamramnWln2pv2poPpYDqajibJJJlOppPpbDqbLqaL6Wq6mm6mm+luupuepqfpZXqZ3md6m2STbPqZfqa/6W8GmoFmsBlshpghZqgZalJMihluhpsRZoQZaUaaUWa0GWPeNGPNODPeTDATzSSTalLNZDPZpJk0M8VMMdPMNJNu0s1MM9PMMrPMHDPHzDVzzTwzzywwC8wis8hkmAyTaTLNErPEZJkss8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMlvMFrNVbjXbzXaz0+w0u81us8fsMXvNXpNtss0+s8/sN/vNAXPA5Jgcc9AcNIfMIXPYHDZHzBFz1Bw1x81xc8KcMCfNSXPanDZnzY/mnPnJnDfexFgB+e0VNtZeaQvYq2yMzWf/Oi5ii9p4W8wWt9oWsoV/FRtrbYItbcvYstbZcjbR3vCbuLKtYqvaavZWW93eZmv8Jq5n77L17d22gb3H1rV3/ipuaO+1jexDtrF92DaxLW1T29o2sw/Z5vZh28K2tK1sa9vBPmE72idtkn3KdrJP/ybOsIvtGrvWrrPr7R77qT1tz9hD9ht71v5oe9s+drB92Q6xr9ih9lWb0mDYr2M7zI6xb9qxdpwdbyfYiXbSb+JpdrpNtzPsTPuunWVn/yZeZD+wc22mnWfn2wV24cX4wpwy7Yd2if3IZtmldpldblfYlXaVXf2XuS63G+0mu9nutp/YrXab3W532J1218X4wjr22s9stv3cHrRf2/32C3vAHrY59quL8YX1Hbbf2iP2O3vUHrPH7ff2hP3BnrSnLq7/wtq/tz/Z89ZbICRBkhQFlIfyUgzlo/x0BcXSlVSArqIIXU1xdA0VpGupEBWmIlSU4qkYFSdNhiwRhVSCSlKUrqNSdD0lUGkqQ2XJUTlKpBuoPN1IFegmqkg3UyW6hSpTFapK1ehWqk63UQ0FVJPuoFpUm+pQXbqT6tFdVJ/upgZ0DzWke6kR3UeN6X5qQg9QU3qQmtFD1JwephbUklpRa2pDj1BbepTa0WPUnh6nDvQEdaQnKYmeok70NHWmZ6gLPUtd6TnqRs9Td+pBPekF6kUvUm/qQ8nUl/rRS9SfBtBAGkSD6WUaQq/QUHqVUmgYDafXaAS9TiPpDRpFo2kMvUljaRyNpwk0kSZRKr1Fk+ltSqN3aApNpWk0ndJpBs2kd2kWzaY59B7NpfdpHs2nBbSQFtEHlEGLKZM+pCX0EWXRUlpGy2kFraRVtJrW0FpaR+tpA22kTbSZttDHtJW20XbaQTtpF+2mT2gPfUp76TPKps9pH/2J9tMXdIC+pBz6ig7S13SIvqHD9C0doe/oKB2j4/Q9naAf6CSdotN0hs7Sj3SOfqLz5AlCDEUoQxUGYZ4wbxgT5gvzh1eEseGVYYHwqjASXh3GhdeEBcNrw0Jh4bBIWDSMD4uFxUMdmtCGFIZhibBkGA2vC0uF14cJYemwTFg2dGG5MDG8ISwf3hhWCG8KK4Y3h5XCW8LKYZXwoXuqhbeG1cPbwhrh7WHN8I6wVlg7rBPWDe8M64V3hfXDu8MG4T1hhfDesFF4X9g4vD9sEj4QNg0fDJuFD4XNw4fDFmHLsFXYOmwTPhK2DR8N24WPhe3Dx8MO4RNhx/DJMCl8KuwUPv0P+5PDvmG/8KXwpdD7u+WC6MLoougH0Yzo4mhm9MPokuhH0azo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxuim6Oao93XzgkMnnHTKBS6Py+tiXD6X313hYt2VroC7ykXc1S7OXeMKumtdIVfYFXFFXbwr5oo77YyzjlzoSriSLuquc6Xc9S7BlXZlXFnnXDmX6Fq7Nq6Na+sede3cY669e9w97p5wT7gn3ZPuKdfJPe06u2dcF/es6+qec8+5511318P1dC+4Xu5F19v1ccku2fVz/Vx/198NdAPz/LwHc0PdUJfiUtxwN9yNcCPcSDfSjXKj3Bg3xo11Y914N95NdBNdqkt1k91kl+bS3BQ3xU1z01y6S3cz3Uw3y81yc9wcNzdhrpvn5rkFboFb5Ba5DJfhMl2mW+KWuCyX5Za5ZW6FW+FWuVVujVvj1rl1boPb4Da5TW6L2+K2uq1uu9vudrqdbrfb7fa4PW6v2+uyXbbb5/a5/W6/O+C+dDnuK3fQfe0OuW/cYfetO+K+c0fdMXfcfe9OuB/cSXfKnXZn3Fn3ozvnfnLnnXepkbcikyNvR9Ii70SmRKZGpkWmR9IjMyIzI+9GZkVmR+ZE3ovMjbwfmReZH1kQiQGADyIZkcWRzMiHkSWRjyJZkaWRZZHlkRWRlRHvi20NfQlf0kf9db6Uv94n+NK+jC/rnS/nE/0Nvry/0VfwN/mK/mZfyd/iK/sqvqp/2LfwLX0r39q38Y/4tv5R384/5tv7x30H/4Tv6J/0Sf4p38k/7Tv7Z3wX/6zv6p/z3fzzvrvv4Xv6F3wv/6Lv7fv4ZN/X9/Mv+f5+gB/oB/nB/mU/xL/ih/pXfYof5of71/wI/7of6d/wo/xoP8a/6cf6cX68n+An+kk+1b/lJ+d726f5d/wUP9VP89N9up/hZ/p3/Sw/28/x7/m5/n0/z8/3C/xCv8h/4DP8Yp/pP/RL/Ec+yy/1y/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8V/7Lf6bX673+F3+l1+t//E7/Gf+r3+M5/tP/f7/J/8fv+FP+C/9Dn+K3/Qf+0P+W/8Yf+tP+K/80f9MX/cf+9P+B/8SX/Kn/Zn/Fn/oz/nf/Ln+W/WGGOMMcb+KWkHfr+/7984J34+LugHAFduK5rz1/0KADYU+nN7gIjvEAGAp/p0e+CXo1at5OTkn6/NkhCUnA8AkUv5F29Dfo6XQnt4ApLgMSj/N+c3QPQ4S78zPh71PnozQP6/yrmwj/8lvjT+jX9n/EceH5NRKTwd9+vxz/2837ww/+h8gISSl3LywaX40vgV/s74hdv+3vyzJOT7IhWg3V/lxMKl+NL4ifAoPA1Jv7qSMcYYY4wxxhj7swGiapd/cP958f48Xl0ML57OC3+J/+H9OWOMMcYYY4wxxi6/Z3v0fPKRpKTHunCDG/87jbwA8F8wDW78a43L/ZuJMcYYY4wx9p92adN/uWfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXv8X/07scq+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9z+XwAAAP//TLI8jQ==")
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
clock_gettime(0x0, &(0x7f0000001e40)={<r1=>0x0, <r2=>0x0})
pselect6(0x40, &(0x7f0000001d80)={0xb, 0x3, 0xe, 0xfffffffffffffffb, 0x27dc, 0x9, 0x101, 0x6}, &(0x7f0000001dc0)={0x4, 0xf1, 0xffff, 0x800, 0x6, 0x8, 0xfffffffffffffffc, 0x7}, &(0x7f0000001e00)={0x7fff, 0x0, 0x7a8, 0x9, 0x7, 0x0, 0x8000, 0x7}, &(0x7f0000001e80)={r1, r2+10000000}, &(0x7f0000001f00)={&(0x7f0000001ec0)={[0x5]}, 0x8})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f00000004c0)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000001540)="$eJzs3U9oHOfZAPBnFMmyZeIv5PvIZ4zjjO18YPM5ykpKlIoc0s1qJE8i7YrdVbEpITGxnBrLSUgIaUxp6kvSlpbSU49priGX3FoKLfTQ9lRoDr30EAjk0pKWFkpLKbjs7K61+rOSLctymv5+i/edfeedd953djzPzmrfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIqlMl0pjSczl1cUzaX+V6XptfpP53fp+tirZZL0RSetf7N0bB9tZB/9nZfZ9radjcbj96nDsbSV748r+++55/L8HB7rLb9Kg7Traf9ZQ74sk4hutRl06t7y89MptaMgu+vZPOhN7b3iRv19rPc9m1bxRy+fLs1maN2rp1ORk6eHTM410Jp/LGmcbzWw+rdSzcrNWT09UTqZjU1MTaTZ6trZYnZ0uz2XdzMceGi+VJtOnRheycr1Rqz781Gijcjqfm8urs0WZ8dLr0SrzWGtHfDpvps2sPJ+mFy4uL01s1dRWobFVOcOrdpzDD97zyWsf/+XiUmuH7FdJ0tkxx8fGxsfHJh+devSxUmlwvDS+OqO0RlwvEQMRrRK3Zaflztq/Qd5gZ49ZNyPi2n/tzMEbbtFAJ/7HXORRjcU4E2mkMVA8rzyGohLTUY9azLde/3Zozfx18f//Hv7jrzdbb2/870b5gyuzD0UR/4+0Xx3pF//XtWIHHoP9aq2+325Nb96r8UZciUtxLpZjOZbile2scc/aWm/HY7idDuxsrbORRTXyaEQt8piPcpGTdnLSmIrJmIxSPBunYyYakcZM5DEXWTTibDSiGVmxR1WiHlmUoxm1qEcaJ6ISJyONsZiKqZiINLIYjbNRi8WoxmxMR7mo5UJcLLb7xJp23ff15378wm8+eac1fb3Q2CYdSVof5vZ/FPHnTQqtC/c3Ef9bJQY6e/euxCR2yd6bfFd36MgNt+5aEf8H73QzAAAAgNsoKb59TyJiKO4vpmbyuezLd7pZAAAAwA4qftd8uJUMtabuj6R1/l/aoOSHEcO73jwAAABgByTFGLskIkbigfZUd7jURl8CAAAAAP+Gir//H2klIxFvFhnO/wEAAOBz5pv9rrH/8Z7iGrsj0VgYTn76p6jXh5KrC2ceTC6XW+XKl+9qL9dJvnS9xubMoeRAp5IimRy8sj+JiMFKdjjpXv3yn52xBJ8Wz4dWLkDY71r/yRYNiM0bULyK78TRdpmj59vp+e6c9lpGZvK5bLRSm3t8LOl8OdJ87cWLX42i+9+qzh9I4sLF5aXR519aPl+05WqrlquXO5eHT7pLRbQHVGzSlmvd0RT3b9zjoWIgRme9I+31lnr737ma7MDm/U961/lWHGuXOTbSTkdW939va51jo4+PRbl8YKCZnWm+dq2n951WjK30fLjb2+Qm3oW34ni7zPETx9vJBq0YX9WKF9e3Yrx3+9/YtrjhVrxz9M0zf/1FLckmtmrFxC22AuBOuVBc9WclCu0rotA/rrW1AtqauLuvu+TNHOUurHzK6C7fE+sGY110T7cT3d+KE+0yJ9qfJwYPbRBXShsc0V+++PIvO0f0R977wQ+fOfKrD9bE9ZtoxXtxsl2mk8S9P+8TY1t9/u6aqPpua4l3+663MTeevD48MZS0bz4UVx66ePncC0svLL04Pj4xWXqkVHp0PIaKjwqdpE9LRR6A/2xb3WPng69dL9rvLjzJI1ucVd97/ScFo/F8vBTLcT5OFaMNIuKBjWsd6fkZwqktzlpHeu7wcmqLc8uVsuNryw4fT6JP2YmeLfa/3y+Sv92mNwQAdsGxLeJwEve0L/vz+t2dJdaUuCtJTvWed38lIg71i7mtWH6yfePc7tlx9I/lvX7fSb+wGxsFAD7nsvqnyUjz7aRezxeeHZuaGis3T2dpvVZ5Oq3n07NZmlebWb1yulydzdKFeq1Zq3S/Op7OGmljcWGhVm+mM7V6ulBr5GeKO7+nnVu/N7L5crWZVxoLc1m5kaWVWrVZrjTT6bxRSRcWn5zLG6ezerFwYyGr5DN5pdzMa9W0UVusV7LRNG1kWU/BfDqrNvOZPBtK82q6UM/ny/WrETG3OJ+l01mjUs8XmrV2hd115dWZWn2+qHZ0fff/sNvbGwA+C15948qlc8vLS69sb+J3N1L4TvcRAFhNlAYAAAAAAAAAAAAAgM++9cP1Wrk3NRBwKLY9fPDV4WhN7Nvu4q2JZzo9uYVRjJtMDMYOV7j5xP+/3+7MTlS4vp6hbs7dW4373LfqPd3T2cS7tBF2cuK5J564tJKTDPZu3iffPHj6oyy6vdukno3/p2w01PXtAxF7fvS9ds4X+xROBne4px9GxDYWv5ZsUmZ3j0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCP+FQAA//+XX0rH")
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80801, 0x60)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000900))

2m33.83741678s ago: executing program 9 (id=967):
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x35, 0x1, @thr={0x0, 0x0}}, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r2 = syz_open_pts(r1, 0x121500)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x3)
timer_gettime(0x0, 0x0)
pipe(0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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")

2m32.07832888s ago: executing program 9 (id=973):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc57, &(0x7f00000021c0)="$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")
symlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

2m30.032673431s ago: executing program 9 (id=977):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002100))
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1)

2m29.278255988s ago: executing program 9 (id=981):
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="01006e000000001058000015000000"], 0x1c}}, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x900, &(0x7f0000000000)={0x9, 0xd, 0x100000}, 0x20)

2m28.838525854s ago: executing program 9 (id=986):
r0 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="248503", 0x3, 0x4085, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1, 0xe)

2m27.196838262s ago: executing program 9 (id=993):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020)

24.576300095s ago: executing program 2 (id=1352):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/476], 0x0, 0x307, &(0x7f0000000200)="$eJzs3UtrG1cUwPEzeliSXddalFJKCxcXSkvxYAu666Km2FAqaLGtQhwIjONxIjSWjEYYZEKsRSDbrLPwIssQCIHssgkhW2/yCZI4O2+8ixciE0bzsB4TRSLIj+T/W1hHc8+Zez1zZeNraebwjzubpY20iGhyIt7ISkzi/rOG/Pp879WPy8++8p4rtTi/MpdTKiYil288mH5am/j/8ddPUrKfvXJ4lHuz/8OKyLuV6xJTRVuVHUcZaq1SqbldqPWiXdKV+s8yDdtUxbJtVmt+u7FmmWrDqmxt1ZVRXp8c36qatq2Mcl2VzLqqVVStWlfGNaNYVrquq8lxgYhkwyjW06b1KyzcP3YcOXIcx0k1xHGciOxGECT9x9SnDRbnSdf575vbMznioxwZTsOxkxj4/OPz473+X98d7Pw7u6c0LJyS5Uur/8zn8wtLSqVFNm9vF7YL3qPX/nJCimKJKXtLv602xZ0jPtHcr4t/5xdmVUtWft7c9et3twveL4f5jVb9QVDUVi9B/ZxXrzrrkzJ+Um9KTqbkG4mszwX1EmurH5Nffmqr12VKXlyViliy7s7ktvqbc0r99W++q/9MKw8AAAAAAAAAgItIV6GT9Xst/FdvRtdTrXd8hO0Zd7Ob5yWE6+uzMiXN6PX52cj1/YR8nzjDbxwAAAAAgC+IXd8pGZZlVkcTxO9l+nSRFBE3ELk17Q6m7w6/9Uc8WO9jItLbFO/fRUeQ+d3r7+GSPzAZ5YEKgvQQI4wIgg9rlIzmo6ApI1HJsaEmwMxY5JFPVzUZ6fzpCGSQZEkPPbG1hF3fSQ08tXrKm8GW7yJzHO3j+3EMK+ltkfAM9q/6c6iXwweDdPeBmjnw9mv1+aHxNlziAwAAAHCBtP3hBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzkj4+X/Nv9P/IBcPC67b39kk/i3iey/J1n2feK77DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAceh8AAP//8yCz0A==")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

22.95153725s ago: executing program 2 (id=1355):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd', @ANYBLOB="5a36513c1f555e2c77664aec4e8ce1f2ac26d1a2cec565bafdc94a336782d622878dc6dcc90cdb067a7511ef340273c6503644f41a3054c0326d53a21c28bf7c84720f8f02cb0111b9a32e5ee6855f906ed2a8bce1c5be49e136c97349", @ANYRESHEX, @ANYBLOB=',\x00'])
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000000000000000000000000bbff0200"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

19.987410395s ago: executing program 2 (id=1361):
unshare(0x6a040000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x4}]})
syz_io_uring_setup(0xfb, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

18.258324638s ago: executing program 8 (id=1363):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x80, 0x108)
symlinkat(0x0, r3, &(0x7f00000002c0)='./file1\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}})
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0xc0f85403, &(0x7f0000000040))
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000180)="74ba280658", 0x5}], 0x1)
r8 = openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
r9 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000140)={'b', ' *:* ', 'm\x00'}, 0x8)
write$cgroup_devices(r9, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r10, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r11, 0x0, '\x00', 0x0, r10, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

16.706498746s ago: executing program 8 (id=1367):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189800, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000001100)='./file1\x00', 0x2000260)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0))

15.259600659s ago: executing program 8 (id=1382):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f000001aa40)="$eJzs3Au4jdX2MPAx5pwvm6SV5D7HHC8ruUySJJeERJIkSZJbQpIkSUhscktCEnJPcg/JLXZyv99yT5IjSZKQkGR+j/6dzzn/zv/fOd8539/3nT1+z/M+e4691hhrzD32s9b7vs+z97cdB1etX61yXWaGfwr+x5dUAEgBgH4AcA0ARABQKlupbIDDIJPG1H/uRcS/1kPTrnQH4kqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiPRs6/Tc18qRfo//ufv/IPf//58jn///Rg4XG/Pl+mLXd/oHUmT+6ZvMP32T+advMv/0Teafvsn8/81FAJX+m4dl/umbzF+I9OxK33/+Bw8wV76Hf6vjSv/+CSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYRIH86FywwA/Hl9pfsSQgghhBBCCCHEv07IeKU7EEIIIYQQQgghxP99CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQB/JCPrBA4IAhhvxQAJJwAxSEG6EQFIYiUBQ8FIPicBOUgJuhJNwCpeBWKA23QRkoC+WgPNwOFeAOqAiVoDLcCVXgLqgK1eBuqA73QA24F2rCfVAL7ofa8ADUgQehLjwE9eBhqA+PQAN4FBpCI2gMTaDp/1H+i9AVXoJu0B1SoQf0hJehF/SGPtAX+sEr0B9ehQHwGgyEQTAYXoch8AYMhTdhGAyHEfAWjIRRMBrGwFgYB+PhbZgA78BEeBcmwWSYAlNhGkyHGfAezIRZMBvehznwAcyFeTAfFsBC+BAWwWJIg49gCXwMS2EZLIcVsBJWwWpYA2thHayHDbARNsFm2AJb4RPYBtthB+yEXbAb9sCnsBc+g33wOeyHL/7B/LP/Kb8TAgIqVGjQYAbMgCmYgpkxM2bBLJgVs2ICE5gNs2F2zI45MAfmwlyYB/NgPsyHhISMjPkxPyYxiQWxIBbCQlgEi6BHj8WxOJbAm7EklsRSWApLY2ksg2WxLJbH8lgBK2BFrIiVsTJWwSpYFavi3Xg33oM1sAbWxJpYC2thbayNdbAO1sW6WA/rYX2sjw2wATbEhtgYG2NTbIrNsBk2x+bYEltiK2yFrbE1tsE22BbbYjtsh+2xPXbADtgRO2In7Iyd8UV8EV/Cl7A7VlE9sCf2xF7YC/tgX+yLr2B/fBVfxddwIA7Cwfg6vo5v4FA8g8NwOI7AEVhBjcLROAZZjcPxOB4n4ASciBNxEk7GyTgVp+F0nIEzcCbOwln4Ps7BD/ADnIfzcAEuxIW4CBdjGqbhEjyLS3EZLscVuBJX4Upcg2txDa7HDbgeN+Em3IJb8BP8BLfjdtyJO3E37sZP8VP8DD/Dgbgf9+MBPIAH8SAewkN4GA/jETyCR/EoHsNjeByP4wk8iafwJJ7G03gGz+I5PIfn8TxewOfzfF1vd+F1A0FdYpRRGVQGlaJSVGaVWWVRWVRWlVUlVEJlU9lUdpVd5VA5VC6VS+VReVQ+lU+RIsUqVvlVfpVUSVVQFVSFVCFVRBVRXnlVXBVXJVQJVVKVVKXUraq0uk2VUWVVC19elVcVVEtfUVVSlVVlVUXdpaqqaqqaqq6qqxqqhqqpaqpaqpaqrR5QdVQP7IMPqUuTqa8GYQM1GBuqRqqxaqLewMdUMzUUm6sWqqV6Qg3HYdhaNfNt1NOqrRqN7dSzagw+pzqocdhRvaA6qc6qi3pRdVXNfbcMv70FqqnYS/VWfVRfNRPvUpcmVlW9pgaqQWqwel0twDfUUPWmGqaGqxHqLTVSjVKj1Rg1Vo1T49XbaoJ6R01U76pJarKaoqaqaWq6mqHeUzPVLDVbva/mqA/UXDVPzVcL1EL1oVqkFqs09ZFaoj5WS9UytVytUCvVKrVarVFr1Tq1Xm1QG9UmtVltUVvVJ2qb2q52qJ1ql9qt9qhP1V71mdqnPlf71RfqgPqTOqi+VIfUV+qw+lodUd+oo+pbdUx9p46r79UJdVKdUj+o0+pHdUadVefUT+q8+lldUL+oiyoo0KiV1troSGfQGXWKzqQz66t0Fn21zqqv0Ql9rc6mr9PZ9fU6h86pc+ncOo/Oq/Npq0k7zTrW+XUBndQ36IL6Rl1IF9ZFdFHtdTFdXN+kS+ibdUl9iy6lb9Wl9W26jC6ry+ny+nZdQd+hK+pKurK+U1fRd+mqupq+W1fX9+ga+l5dU9+na+n7dW39gK6jH9R19UO6nn5Y19eP6Ab6Ud1QN9KNdRPdVD+mm+nHdXPdQrfUT+hW+kndWj+l2+indVv9jG6nn9Xt9XO6g35ed9Qv6E66s+6if9EXddDddHedqnvonvpl3Uv31n10X91Pv6L761f1AP2aHqgH6cH6dT1Ev6GH6jf1MD1cj9Bv6ZF6lB6tx+ixepwer9/WE/Q7eqJ+V0/Sk/UUPVVP09N1n98qzf478t/5G/kDfn31LXqr/kRv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+kf9Cn9Y/6jD6rz+qf9Hl9Xl/47WcABo0y2hgTmQwmo0kxmUxmc5XJYq42Wc01JmGuNdnMdSa7ud7kMDlNLpPb5DF5TT5jDRln2MQmvylgkuYGU9DcaAqZwqaIKWq8KWaKm5v+6fw/6q+paWqamWamuWluWpqWppVpZVqb1qaNaWPamramnWln2pv2poPpYDqajqaT6WS6mC6mq+lqupluJtWkmp7mZdPL9DZ9TF/Tz7xi+pv+ZoAZYAaagWawGWyGmCFmqBlqhplhZoQZYUaakWa0GW3GmrFmvBlvJpgJZqKZaCaZSWaKmWKmmWlmhplhZpqZZraZbeaYOWaumWvmm/lmoVloFplFJs2kmSVmiVlqlpllZoVZYVaZVWaNWWPWmXVmg9lgNplNZqnZaraabWab2WF2mF1ml9lj9pi9Zq/ZZ/aZ/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlhTphT5pQ5bU6bM+aMOWfOmfPmvLlgLpiL5uKl075IRSoykYkyRBmilCglyhxljrJEWaKsUdYoESWibFG2KHt0fZQjyhnlinJHeaK8USrYiCIXcRRH+aMCUTK6ISoY3RgVigpHRaKikY+KRcWjm6IS0c1RyeiWqFR0a1Q6ui0qE5WNykXlo9ujCtEdUcWoUlQ5ujOqEt0VVY2qRXdH1aN7ohrRvVHN6L6oVnR/VDt6IKoTPRjVjR6K6kUPR/WjR6IG0aNRw6hR1DhqEjX9l9YP4UzOx303292m2h62p33Z9rK9bR/b1/azr9j+9lU7wL5mB9pBdrB93Q6xb9ih9k07zA63I+xbdqQdZUfbMXasHWfH27ftBPuOnWjftZPsZDvFTrXT7HQ7w75nZ9pZdrZ9386xH9i5dp6dbxfYhfZDu8gutmn2I7vEfmyX2mV2uV1hV9pVdrVdY9fadXa93WA32k12s91it9pP7Da73e6wO+0uu9vusZ/avfYzu89+bvfbL+wB+yd70H5pD9mv7GH7tT1iv7FH7bf2mP3OHrff2xP2pD1lf7Cn7Y/2jD1rz9mf7Hn7s71gf7EXbbh0cn/p450MGcpAGSiFUigzZaYslIWyUlZKUIKyUTbKTtkpB+WgXJSL8lAeykf56BImpvyUn5KUpIJUkApRISpCRciTp+JUnEpQCSpJJakUlaLSVJrKUBkqR+Xodrqd7qA7qBJVojvpTrqL7qJqVI2qU3WqQTWoJtWkWlSLalNtqkN1qC7VpXpUj+pTfWpADaghNaTG1JiaUlNqRs2oOTWnltSSWlErak2tqQ21obbUltpRO2pP7akDdaCO1JE6USfqQl2oK3WlbtSNUimVelJP6kW9qA/1oX7Uj/pTfxpAA2ggDaTBNJiG0BAaSkNpGA2nEfQWjaRRNJrG0FgaR+NpPE2gCTSRJtIkmkRTaApNo2k0g2bQTJpJs2k2zaE5NJfm0nyaTwtpIS2iRZRGabSEltBSWkrLaTmtpJW0mlbTWlpL62k9baSNtJk201baSttoG+2gHbSLdtEe2kN7aS/to320n/bTATpAB+kgHaJDdJgO0xE6QkfpKB2jY3ScjtMJOkGn6BSdptN0hs7QOTpH5+lnukC/0EUKlOIUZHZXuSzuapfVXeNSXCZ3KY4A4FKcy+V2eVxel89Zl8Pl/KuYnHOFXGFXxBV13hVzxd1Nv4vLuLKunCvvbncV3B2u4u/i6u4eV8Pd62q6+1w1d/dfxbXc/a62e8TVcY+6uq6Rq+eauPruEdfAPeoaukausWviWrknXWv3lGvjnnZt3TPuKgD4y3iRW+zWunVuvdvg9rrP3Dn3kzvqvnXn3c+um+vu+rlXXH/3qhvgXnMD3aDfxSPcW26kG+VGuzFurBv3u3iKm+qmueluhnvPzXSzfhcvdB+6OS7NzXXz3Hy34Nf4Uk9p7iO3xH3slrplbrlb4Va6VW61W/O/e13hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJzCmTgzX8VZ+GrOytdwgq/lbHwdZ+frOQfn5Fycm/NwXs7HlokdM8ecnwtwkm/ggnwjF+LCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EVuRJX5ju5Sghclavx3Vyd7+EafC/X5Pu4Ft/PtfkBrsMPcl1+iOvxw1yfH+EG/Cg35EbcmJtwU36Mm/Hj3JxbcEt+glvxk9yan+I2/DS35We4HT/L7fk57sDPc0d+gTtxZ+7CL3JXfom7cXdO5R7ck1/mXtyb+3Bf7sevcH9+lQfwazyQB/Fgfp2H8Bs8lN/kYTycR/BbPJJH8Wgew2N5HI/nt3kCv8MT+V2exJN5Ck/laTydZ/B7PJNn8Wx+n+fwBzyX5/F8XsAL+UNexIs5jT/iJfwxL+VlvJxX8Epexat5Da/ldbyeN/BG3sSbeQtv5U94G2/nHbyTd/Fu3sOf8l7+jPfx57yfv+AD/Cc+yF/yIf6KD/PXfIS/4aP8LR/j7/g4f88n+CSf4h/4NP/IZ/gsn+Of+Dz/zBf4F77IgSHGWMU6NnEUZ4gzxilxpjhzfFWcJb46zhpfEyfia+Ns8XVx9vj6OEecM84V547zxHnjfLGNKXYxx3GcPy4QJ+Mb4oLxjXGhuHBcJC4a+7hYXDy+KS4R3xyXjG+JS8W3xqXj2+Iycdn4kfvKx7fHFeI74opxpbhyfGdcJb4rrhpXi++Oq8f3xDXie+Oa8X1xyfj+uHb8QFwnfjCuGz8U14sfjuvHj8QN4kfjhnGjuHHcJG4aPxY3ix+Pm8ct4pbxE3Gr+Mm4dfxU3CZ+Om4bP/OHj6fGPeKe8cvxy3EI9+r5yQXJhckPk4uSi5NpyY+SS5IfJ5cmlyWXJ1ckVyZXJVcn1yTXJtcl1yc3JDcmNyU3J7ckQ6iWETx65bU3PvIZfEaf4jP5zP4qn8Vf7bP6a3zCX+uz+et8dn+9z+Fz+lw+t8/j8/p83nryzrOPfX5fwCf9Db6gv9EX8oV9EV/Ue1/MF/dNfFPf1Dfzj/vmvoVv6Z/wT/gn/ZP+Kf+Uf9q39c/4dv5Z394/5zv45/3z/gXfyXf2XfyLvqt/yXfz3X2qT/U9fU/fy/fyfXwf38/38/19fz/AD/AD/UA/2A/2Q/wQP9QP9cP8MD/Cj/Aj/Ug/2o/2Y/1YP96P9xP8BD/RT/ST/CQ/xU/x0/w0P8PP8DP9TD/bz/ZzCs3xc/1cP9/P9wv9Qr/IL/JpPs0v8Uv8Ur/UL/fL/Uq/0q/2q/1av9av9+v9Rr/Rb/ab/Va/1W/z2/wOv8Pv8rv8Hr/H7/V7/T6/z+/3+/0Bf8Af9Af9If+VP+y/9kf8N/6o/9Yf89/54/57f8Kf9Kf8D/60/9Gf8Wf9Of+TP+9/9hf8L/6iD3584u3EhMQ7iYmJdxOTEpMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoS82+KQPxQIyXBDKBhuDIVC4VAkFA0+FAvFw02hRLg5lAy3hFLh1lA63BbKhLKhXHg0NAyNQuPQJDQNj4Vm4fHQPLQILcMToVV4MrQOT4U24enQNjwT2oVnQ/vwXOgQng8dwwuhU+gcuoQXQ9fwUugWuofU0CP0DC+HXqF36BP6hn7hldA/vBoGhNfCwDAoDA6vhyHhjTA0vBmGheFhRHgrjAyjwugwJowN48L48HaYEN4JE8O7YVKYHKaEqWFamB5mhPfCzDArzA7vhznhgzA3zAvzw4KwMHwYFoXFIS18FJaEj8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBJ2Ba2hx1hZ9gVdoc94dOwN3wW9oXPw/7wRTgQ/hQOhi/DofBVOBy+DkfCN+Fo+DYcC9+F4+H7cCKcDKfCD+F0+DGcCWfDufBTOB9+DhfCL+Gi/M2aEEIIIcTfRf/B4z3+xvcyAID6bd0TAK7envvwf665Mcd/rHurPK0SAPB0944P/fmoUiU1NfW35y7VEBWYBwCJv67/53gZtIQnoQ20gBJ/s7/eqvN5/oP6yVsBMv9FTgpcji/Xv/m/qP/YEyMWlY7PZftv6s8DKFTgck4muBxfrl/yv6ifs9kf9J/py/EAzf8iJwtcji/XLw6PwzPQ5q+eKYQQQgghhBBC/Ifeqlz7P7p+vnR9nsdczskIl+M/uj4XQgghhBBCCCHElfdc5y5PPdamTYv2f98Cf7sv8I9lyUIWsvj/bHGl35mEEEIIIYQQ/2qXT/qvdCdCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUT69T/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA//9lvzeI")
pipe(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget(0x0, 0x2000, 0x80, &(0x7f0000ff1000/0x2000)=nil)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x10010)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1)

9.958628229s ago: executing program 5 (id=1378):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x8, 0x4, 0x81, 0x0, 0x8001}, 0xc)

9.698868299s ago: executing program 2 (id=1380):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x22, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x40000000000000, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xfffffffffffffffe]})

9.326466047s ago: executing program 5 (id=1381):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @mcast2}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

9.09432229s ago: executing program 2 (id=1383):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@user_xattr}, {@noquota}, {@commit={'commit', 0x3d, 0x4}}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@bsdgroups}], [{@fowner_gt}, {@obj_user={'obj_user', 0x3d, 'commit'}}, {@fowner_lt}, {@obj_user={'obj_user', 0x3d, 'debug_want_extra_isize'}}, {@fowner_gt}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@obj_role={'obj_role', 0x3d, 'hfsplus\x00'}}]}, 0x1, 0x562, &(0x7f0000001080)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r0, &(0x7f00000000c0)=""/50, 0x32)
getdents64(r0, &(0x7f0000000f80)=""/4087, 0xbdf)

8.998886623s ago: executing program 0 (id=1384):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

8.760071948s ago: executing program 8 (id=1385):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3ff}, 0xe)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x2, &(0x7f0000000fc0)="c0f9", 0x9, 0x52, 0xb57, 0x3dda, 0x9, 0x0, 0xd, 'syz0\x00'})

8.617095344s ago: executing program 5 (id=1386):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf00000001090212"], 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x90004)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)

8.466778807s ago: executing program 2 (id=1387):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x0, @void}}}}}}}, 0x0)
r4 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000000)
inotify_rm_watch(0xffffffffffffffff, r4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

8.338384393s ago: executing program 0 (id=1388):
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x3000)=nil)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r2 = syz_open_pts(r1, 0x121500)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x3)
timer_gettime(0x0, 0x0)
pipe(0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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")

5.936913576s ago: executing program 0 (id=1390):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd', @ANYBLOB="5a36513c1f555e2c77664aec4e8ce1f2ac26d1a2cec565bafdc94a336782d622878dc6dcc90cdb067a7511ef340273c6503644f41a3054c0326d53a21c28bf7c84720f8f02cb0111b9a32e5ee6855f906ed2a8bce1c5be49e136c97349", @ANYRESHEX, @ANYBLOB=',\x00'])
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000000000000000000000000bbff0200"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

5.611311743s ago: executing program 3 (id=1391):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f00000000c0)=ANY=[], 0x1, 0x6ab, &(0x7f0000000880)="$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")
mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x9)

4.850684346s ago: executing program 0 (id=1392):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@nobarrier}, {@nouid32}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==")
read$msr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0x200, 0xd0, 0x200, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, [0x0, 0xffffffff], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x6b}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [0x0, 0xffffffff], 'sit0\x00', 'dvmrp0\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x8, 0xf7}}, @common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x7, 0x7f, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x97, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
r4 = socket$inet(0x2, 0x2, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0)
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0x7})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x28}}, 0x0)

4.850472746s ago: executing program 3 (id=1393):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x4800, &(0x7f0000000180)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

3.092119744s ago: executing program 3 (id=1394):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x80002, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20)
io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
setuid(0xee01)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004503002c00000000000490780000000000000000000000000018907804000000000000000000000000000000f65695ced1ca5f6606a75fbd50b1f90e45a29aec9f6a9d5218a7f5a1c5bceba991d214804b47c2ad967183bfdfb1b0dfd8a792c7c979c531d30c25b422c8f3cf3c774f79ad61be75da01f0909f8aab9a92a6ff801657adcc0024f41671cf2665e1a4ad1e5bc2af981dc2c18d9a3c0f94bcf9e9a35310b630cb5483227cf470302887"], 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0xc)
write$cgroup_pid(r8, &(0x7f0000000380), 0x12)
socket$inet6(0xa, 0x2, 0x7)

3.090249164s ago: executing program 5 (id=1406):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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")
mkdir(&(0x7f0000000440)='./file1\x00', 0x178)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000540)='./control\x00', 0x60)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
unlink(&(0x7f0000000140)='./file1\x00')

2.656492085s ago: executing program 5 (id=1395):
r0 = syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',norock,map=acorn,\x00'], 0x5, 0x654, &(0x7f0000000740)="$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")
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x0, r0}, 0x18)

1.840447093s ago: executing program 8 (id=1396):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
gettid()
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xffffff10, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x6000)

1.476729537s ago: executing program 3 (id=1397):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_io_uring_setup(0x27f0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

1.286447874s ago: executing program 5 (id=1398):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec2000000000001090224000100000000090400000103000000092100000001220b00090581035f"], 0x0)
socket$igmp(0x2, 0x3, 0x2)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b000000380800000000000000e80d"], 0x0}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00')

1.126768501s ago: executing program 8 (id=1399):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x5e, &(0x7f0000000240)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@errors_remount}, {@errors_continue}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3fd, 0x0, 0x0, 0x4, 0x10, "ef35af5c3676345a41499db7aac63a01000000000000004faa84a0ea000000ad00000000000c00002000", "036c47c67a89826b5c000000000014a1bcef549ba197fce47d9fdd913aa6950100020040000000000fffbf000000000000000600000200000000e600", "b7327736f71b208220000000b9000000000000000023f0fffffffff2ff5df600", [0x4]})
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x81430, &(0x7f0000000340)={[], [{@pcr={'pcr', 0x3d, 0x36}}, {@pcr={'pcr', 0x3d, 0x33}}]}, 0x2, 0xbd8, &(0x7f0000000c00)="$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")
unlink(&(0x7f0000000380)='./file0\x00')

1.097139596s ago: executing program 0 (id=1400):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0xfe, 0xbd1, &(0x7f0000002380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82042, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e)
ioctl$TCXONC(r1, 0x540a, 0x1)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
sendfile(r2, r2, 0x0, 0x80000000)

637.63184ms ago: executing program 3 (id=1401):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="993e43a68621c19c93f9a5789b2d6e9eab1e7cbddf11304303061cba4d43c329a8a42796d87171d3792ca1e7d7aa342f76dd4fc28aba2036d420dfd14fa73d09e45fb310762e660c996efd06ff70bb81749a6752e22872d8771b512c939a29b96531c92105840a7bc1223c2d9fe465f2ed0f41617690fedb9c9df771b91796ce7c8d64da7fc2f712450a9109f3f2612e050f2af841570fb5f1c668cc9dad303b7cf76664fd6579dd7fc29d46ae613245bbb996775160f42b0cfa391e427cc3c994da6a3044ffd8ae9a19a89755c6bdaece77bb1e4a687db7545e59ffed67f03fc3b22a27c4c2f5fd720737", 0xeb}, {&(0x7f0000000300)="a93a75d3073cceb5f68b21b976817f8d4dfd3fd3835e63e840e131cbd60610fb", 0x20}], 0x2)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {0x0}], 0x2}}], 0x1, 0x2, 0x0)

218.364295ms ago: executing program 3 (id=1402):
r0 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe)
fallocate(r1, 0x10, 0xbbd3, 0x7ffd)
mount_setattr(r0, &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800, &(0x7f0000000f00)={0x8, 0x85, 0xa0000, {r1}}, 0x20)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a00)=""/159, 0x9f)

0s ago: executing program 0 (id=1403):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$eJzs3T9rc1UYAPDnpmkSdUgGJxG8oIPTy9t3dUmVFqqZlAzqoMW2IE0QWij4B9NOri6OfgJBcHP1A7j4DQRXwc0OhSv35t4kbdPYaNP65/db+vTc85zznNPTlA45ef/54eFeGgdnn/0crVYStW504zyJTtSichqXdL8MAODf7DzL4rdsbJm8JCJaqysLAFihpf/+f7fykgCAFXvr7Xfe2Oz1tt5M01ZsD7846ef/2edfx883D+LDGMR+PI52XERkE+N4O8uyUT3NdeKl4eikn2cO3/uxHH/z14gifyPa0SmaLufv9LY20rGZ/FFex9Pl/N08/0m049k58+/0tp7MyY9+I15+cab+R9GOnz6Ij2IQe0UR0/zPN9L0teyr3z99Ny8vz09GJ/1m0W8qW7vnHw0AAAAAAAAAAAAAAAAAAAAAAP9hj8q7c5pR3N+TN5X376xd5N+sR1rpXL6fZ5yfVANduR9olMXX1f06j9M0zcqO0/x6PFeP+sOsGgAAAAAAAAAAAAAAAAAAAP5Zjj/+5HB3MNg/KoLXszKYtCwXVLcBVG/r/6vjdCct9aMXYnHn5nSuWhkuGDnWqj5JxMIy8kX8vd24dfDUTTV/8+2yA7b+vM/6dK7olJtxx+uqTtfhbjJ/D5tRtbSqQ/L9bJ9G3HKuxk2PsqWOX2Puo/bSa288UwSjBX0iWVTYK7+Md65sKX+hTid9GsWuzk1fL4OZ9CtnY6nzfP21Iknu/OUHAAAAAAAAAAAAAAAAAACYMX3T75yHZwtTa1lzZWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2afv7/JKhfa7kajMrkccsPry7o3Iij4wdeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8DfwQAAP//4wFdTQ==")
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)

kernel console output (not intermixed with test programs):

op7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1251.710984][ T6408] team0 (unregistering): Port device team_slave_1 removed
[ 1251.759396][ T6408] team0 (unregistering): Port device team_slave_0 removed
[ 1252.498759][T11365] veth0_vlan: entered promiscuous mode
[ 1252.624978][T11724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1252.655933][T11724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1252.808603][T11365] veth1_vlan: entered promiscuous mode
[ 1253.155426][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1253.163320][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1253.204358][T11365] veth0_macvtap: entered promiscuous mode
[ 1253.233663][T11365] veth1_macvtap: entered promiscuous mode
[ 1253.357915][T11486] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1253.443501][T11365] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1253.639676][T11365] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1253.692277][T11486] 8021q: adding VLAN 0 to HW filter on device team0
[ 1254.170217][T11753] loop5: detected capacity change from 0 to 1024
[ 1254.185883][T11753] EXT4-fs: Ignoring removed orlov option
[ 1254.191747][T11753] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1254.990803][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1255.025881][T11753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1255.150090][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1255.161844][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1255.183255][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1255.256731][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1255.388917][ T6408] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1255.977758][T11761] overlay: Unknown parameter '•'
[ 1255.998418][T11365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1256.008261][T11365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1256.037545][T11365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1256.072784][T11365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1256.363545][ T6408] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1256.959612][ T6408] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.089789][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1257.097087][ T6689] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1257.193247][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1257.217061][T11577] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1257.522618][ T6408] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.535508][ T5852] Bluetooth: hci4: command tx timeout
[ 1257.583664][ T6689] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1257.590929][ T6689] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1257.625951][T11577] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1257.693561][T11787] loop2: detected capacity change from 0 to 2048
[ 1257.739632][T11787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1257.780927][T11577] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1257.815568][   T30] audit: type=1800 audit(1749665364.101:36): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.897" name="file2" dev="loop2" ino=1416 res=0 errno=0
[ 1257.894793][T11577] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1258.306738][ T6408] bridge_slave_1: left allmulticast mode
[ 1258.314687][ T6408] bridge_slave_1: left promiscuous mode
[ 1258.324450][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1258.473006][ T6408] bridge_slave_0: left allmulticast mode
[ 1258.500022][ T6408] bridge_slave_0: left promiscuous mode
[ 1258.554121][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1258.655183][ T9949] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[ 1258.906459][ T9949] usb 3-1: config 0 has an invalid interface number: 244 but max is 0
[ 1258.949759][ T9949] usb 3-1: config 0 has no interface number 0
[ 1259.077816][ T9949] usb 3-1: New USB device found, idVendor=1c9e, idProduct=9b01, bcdDevice=6e.6c
[ 1259.089486][ T9949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1259.102529][ T9949] usb 3-1: Product: syz
[ 1259.108041][ T9949] usb 3-1: Manufacturer: syz
[ 1259.112816][ T9949] usb 3-1: SerialNumber: syz
[ 1259.137019][ T9949] usb 3-1: config 0 descriptor??
[ 1259.387526][ T9949] option 3-1:0.244: GSM modem (1-port) converter detected
[ 1259.453310][ T9949] usb 3-1: USB disconnect, device number 20
[ 1259.512303][ T9949] option 3-1:0.244: device disconnected
[ 1259.608067][ T5852] Bluetooth: hci4: command tx timeout
[ 1259.909350][ T6408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1259.951459][ T6408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1259.983675][ T6408] bond0 (unregistering): Released all slaves
[ 1260.196166][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1260.210640][T11809] loop2: detected capacity change from 0 to 128
[ 1260.233098][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1260.234993][T11809] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1260.354650][T11809] FAT-fs (loop2): FAT read failed (blocknr 234)
[ 1260.388330][T11809] FAT-fs (loop2): FAT read failed (blocknr 234)
[ 1260.725118][T11724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1260.761985][T11724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1260.966328][T11756] chnl_net:caif_netlink_parms(): no params data found
[ 1261.133703][ T6408] hsr_slave_0: left promiscuous mode
[ 1261.157886][ T6408] hsr_slave_1: left promiscuous mode
[ 1261.175557][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1261.183127][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1261.204219][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1261.225431][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1261.299624][ T6408] veth1_macvtap: left promiscuous mode
[ 1261.311714][ T6408] veth0_macvtap: left promiscuous mode
[ 1261.319462][ T6408] veth1_vlan: left promiscuous mode
[ 1261.325234][ T6408] veth0_vlan: left promiscuous mode
[ 1261.495238][T11834] loop5: detected capacity change from 0 to 256
[ 1261.524470][T11834] exfat: Deprecated parameter 'utf8'
[ 1261.543536][T11834] exfat: Deprecated parameter 'namecase'
[ 1261.563259][T11834] exfat: Deprecated parameter 'utf8'
[ 1261.592527][T11834] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1261.685485][ T5852] Bluetooth: hci4: command tx timeout
[ 1262.081813][ T6408] team0 (unregistering): Port device team_slave_1 removed
[ 1262.119220][ T6408] team0 (unregistering): Port device team_slave_0 removed
[ 1262.803330][T11847] loop3: detected capacity change from 0 to 256
[ 1262.859427][T11847] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1262.964004][T11849] loop5: detected capacity change from 0 to 256
[ 1263.116295][T11756] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1263.123509][T11756] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1263.198151][T11756] bridge_slave_0: entered allmulticast mode
[ 1263.296497][T11756] bridge_slave_0: entered promiscuous mode
[ 1263.765753][ T5852] Bluetooth: hci4: command tx timeout
[ 1263.910035][T11856] loop3: detected capacity change from 0 to 1024
[ 1263.967306][T11856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1263.998078][T11486] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1264.018331][T11756] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1264.020332][T11856] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1264.065513][T11756] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1264.072856][T11756] bridge_slave_1: entered allmulticast mode
[ 1264.118036][T11756] bridge_slave_1: entered promiscuous mode
[ 1264.140459][T11856] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[ 1264.222059][T11577] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1264.222416][T11856] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 383 with max blocks 1 with error 28
[ 1264.295476][T11856] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1264.295476][T11856] 
[ 1264.342615][T11856] EXT4-fs (loop3): Total free blocks count 0
[ 1264.365433][T11856] EXT4-fs (loop3): Free/Dirty block details
[ 1264.371396][T11856] EXT4-fs (loop3): free_blocks=4293918720
[ 1264.400200][T11856] EXT4-fs (loop3): dirty_blocks=32
[ 1264.406324][T11856] EXT4-fs (loop3): Block reservation details
[ 1264.412482][T11856] EXT4-fs (loop3): i_reserved_data_blocks=2
[ 1264.477492][T11861] EXT4-fs error (device loop3): ext4_free_blocks:6586: comm syz.3.914: Freeing blocks not in datazone - block = 0, count = 16
[ 1264.535581][T11577] 8021q: adding VLAN 0 to HW filter on device team0
[ 1264.552446][T11756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1264.772321][T11756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1264.805106][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1264.886693][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1264.893895][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1265.161404][T11756] team0: Port device team_slave_0 added
[ 1265.174589][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1265.181837][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1265.268770][T11756] team0: Port device team_slave_1 added
[ 1265.294197][T11869] loop3: detected capacity change from 0 to 128
[ 1265.372060][T11869] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1)
[ 1265.711404][T11756] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1265.718899][T11756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1265.747231][T11756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1265.792401][T11756] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1265.810780][T11876] loop2: detected capacity change from 0 to 128
[ 1265.821969][T11878] loop5: detected capacity change from 0 to 256
[ 1265.835429][T11876] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 1265.850517][T11756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1265.862433][T11878] exfat: Deprecated parameter 'utf8'
[ 1265.888022][T11756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1265.924777][T11878] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[ 1265.965655][T11486] veth0_vlan: entered promiscuous mode
[ 1266.034547][ T6145] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 1266.186537][T11880] loop2: detected capacity change from 0 to 128
[ 1266.205920][T11880] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1266.264309][T11756] hsr_slave_0: entered promiscuous mode
[ 1266.267060][T11880] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1266.291163][T11756] hsr_slave_1: entered promiscuous mode
[ 1266.306705][T11756] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1266.314331][T11756] Cannot create hsr debugfs directory
[ 1266.623478][ T6689] FAT-fs (loop3): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1)
[ 1267.537435][T11486] veth1_vlan: entered promiscuous mode
[ 1267.612153][ T6044] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1267.847193][T11895] binder: 11894:11895 ioctl c00c620f 200000000240 returned -22
[ 1268.065478][T11486] veth0_macvtap: entered promiscuous mode
[ 1268.183528][T11486] veth1_macvtap: entered promiscuous mode
[ 1268.216993][T11907] loop3: detected capacity change from 0 to 128
[ 1268.250176][T11907] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1268.281754][T11907] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1268.580848][T11486] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1268.694937][T11911] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1268.732498][T11486] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1269.736371][T11486] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1269.767565][T11486] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1269.794473][T11486] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1269.824001][T11486] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1269.865960][T11922] loop3: detected capacity change from 0 to 512
[ 1269.913490][T11577] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1269.915153][T11922] EXT4-fs: quotafile must be on filesystem root
[ 1269.984316][T11925] loop2: detected capacity change from 0 to 2048
[ 1270.098598][T11925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1270.175973][T11925] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1270.692127][T11937] loop3: detected capacity change from 0 to 512
[ 1270.700016][T11938] Bluetooth: MGMT ver 1.23
[ 1270.714712][T11937] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1270.753544][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1270.791339][T11937] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[ 1270.812815][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1270.835272][T11937] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #13: comm syz.3.937: attempt to clear invalid blocks 2 len 1
[ 1270.892456][T11937] EXT4-fs (loop3): Remounting filesystem read-only
[ 1270.940868][T11937] EXT4-fs (loop3): 1 truncate cleaned up
[ 1270.979900][ T6570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1270.991964][T11937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1271.016078][ T6570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1271.026551][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1271.262928][T11756] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1271.302737][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1271.324600][T11756] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1271.406734][T11756] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1271.458352][T11756] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1271.778658][T11577] veth0_vlan: entered promiscuous mode
[ 1271.934580][T11963] loop2: detected capacity change from 0 to 2048
[ 1272.195782][T11964] loop9: detected capacity change from 0 to 1024
[ 1272.204735][T11964] EXT4-fs: Ignoring removed orlov option
[ 1272.210591][T11964] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1272.290334][T11966] ipt_REJECT: ECHOREPLY no longer supported.
[ 1273.098084][T11963] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[ 1273.207654][T11964] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1273.337738][T11963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1273.389566][T11577] veth1_vlan: entered promiscuous mode
[ 1274.003793][T11975] loop5: detected capacity change from 0 to 1024
[ 1274.014402][T11975] hfsplus: Unknown parameter ''
[ 1275.006341][T11978] syz.2.944 (11978): /proc/11962/oom_adj is deprecated, please use /proc/11962/oom_score_adj instead.
[ 1276.044786][T11577] veth0_macvtap: entered promiscuous mode
[ 1276.138263][T11577] veth1_macvtap: entered promiscuous mode
[ 1276.231467][T11486] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1276.333150][T11577] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1276.373187][T11756] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1276.443905][T11987] loop3: detected capacity change from 0 to 2048
[ 1276.458383][T11988] loop5: detected capacity change from 0 to 1764
[ 1276.463102][T11577] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1276.531056][T11577] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1276.573413][T11577] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1276.594488][T11577] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1276.618574][T11577] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1276.647461][T11987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1276.699401][T11756] 8021q: adding VLAN 0 to HW filter on device team0
[ 1276.749717][T11987] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1276.932461][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1276.939747][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1276.970399][T11995] loop2: detected capacity change from 0 to 512
[ 1277.181232][T11999] capability: warning: `syz.9.948' uses 32-bit capabilities (legacy support in use)
[ 1277.796491][T11995] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.952: casefold flag without casefold feature
[ 1277.860373][T11995] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.952: couldn't read orphan inode 15 (err -117)
[ 1277.922460][T11995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1278.017409][T11995] EXT4-fs (loop2): shut down requested (0)
[ 1278.028072][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1278.097950][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1278.105177][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1278.109009][T12004] loop9: detected capacity change from 0 to 128
[ 1278.201338][T12004] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1278.259383][T12004] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1278.309629][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1278.329825][T12004] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[ 1278.410246][T12004] fscrypt: loop9: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13
[ 1278.564409][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1278.598622][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1278.661332][T11486] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1278.807978][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1278.865896][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1278.924443][T12016] loop2: detected capacity change from 0 to 512
[ 1278.994008][T12018] netlink: 9 bytes leftover after parsing attributes in process `syz.9.959'.
[ 1279.093518][T12016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1279.095784][T12018] gretap0: entered promiscuous mode
[ 1279.114531][T12020] loop3: detected capacity change from 0 to 2048
[ 1279.121197][T12016] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1279.178963][T12020] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[ 1279.632258][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1279.926222][T12034] futex_wake_op: syz.8.163 tries to shift op by -1; fix this program
[ 1280.236027][T12030] loop3: detected capacity change from 0 to 1024
[ 1280.760732][T12040] loop2: detected capacity change from 0 to 1024
[ 1280.845201][T12040] EXT4-fs: Ignoring removed orlov option
[ 1280.902047][T12040] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1281.071367][T12040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1281.349609][T12050] loop9: detected capacity change from 0 to 512
[ 1281.544459][T12050] EXT4-fs warning (device loop9): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1281.686633][T12050] EXT4-fs (loop9): mount failed
[ 1282.028878][T11756] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1282.398416][T11756] veth0_vlan: entered promiscuous mode
[ 1282.966576][T12066] loop8: detected capacity change from 0 to 512
[ 1283.596876][T12066] EXT4-fs (loop8): blocks per group (8192) and clusters per group (2304) inconsistent
[ 1283.668275][T11756] veth1_vlan: entered promiscuous mode
[ 1283.882717][T12070] loop9: detected capacity change from 0 to 2048
[ 1283.927021][T11756] veth0_macvtap: entered promiscuous mode
[ 1283.954078][T12070] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[ 1284.000393][T11756] veth1_macvtap: entered promiscuous mode
[ 1284.036288][T12070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1284.132753][T11756] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1284.272169][T11756] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1284.305079][T12075] loop3: detected capacity change from 0 to 2048
[ 1284.339400][T11756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1284.445014][T11756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1284.487131][T11756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1284.515397][T11756] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1284.533198][T12075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1284.592907][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1284.654283][T12075] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1284.689744][T12085] syz.8.976(12085): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 1284.899814][T12075] fs-verity: sha512 using implementation "sha512-avx2"
[ 1285.126483][T12095] netlink: 'syz.5.979': attribute type 1 has an invalid length.
[ 1285.162910][ T5967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1285.215664][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1285.242110][T12099] binder: 12097:12099 unknown command 0
[ 1285.275661][T12099] binder: 12097:12099 ioctl c0306201 2000000003c0 returned -22
[ 1285.361043][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1285.381783][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1285.412452][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1285.645114][T12107] loop5: detected capacity change from 0 to 128
[ 1285.695789][T12107] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1285.815392][T12107] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1287.239848][ T5967] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1287.355134][T12125] loop2: detected capacity change from 0 to 1024
[ 1287.434734][T12125] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1287.563941][T12125] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[ 1287.614594][T12125] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1287.657224][T12125] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.989: unexpected bad inode w/o EXT4_IGET_BAD
[ 1287.674029][T12133] loop3: detected capacity change from 0 to 2048
[ 1287.741062][T12125] EXT4-fs (loop2): no journal found
[ 1287.775370][T12125] EXT4-fs (loop2): can't get journal size
[ 1287.840254][T12125] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11c, mo2=0102]
[ 1287.861321][T12125] EXT4-fs (loop2): failed to initialize system zone (-117)
[ 1287.959269][T12125] EXT4-fs (loop2): mount failed
[ 1287.983711][T12133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1288.065805][T12133] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1288.156087][ T6145] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1288.315203][   T30] audit: type=1804 audit(1749665394.601:37): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.992" name="/newroot/21/file0/file0/file0" dev="loop3" ino=13 res=1 errno=0
[ 1288.389413][   T30] audit: type=1800 audit(1749665394.651:38): pid=12133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.992" name="file0" dev="loop3" ino=13 res=0 errno=0
[ 1288.591558][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1288.612174][ T6145] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1288.989977][T12158] loop5: detected capacity change from 0 to 512
[ 1289.165544][T12158] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1289.296759][T12158] EXT4-fs (loop5): 1 truncate cleaned up
[ 1289.307574][ T6145] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.359986][T12158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1289.445883][T12166] loop3: detected capacity change from 0 to 512
[ 1289.498979][T12166] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1289.606456][T12166] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.998: bad orphan inode 131083
[ 1289.713360][T12166] EXT4-fs (loop3): Remounting filesystem read-only
[ 1289.834132][T12166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1289.895588][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1290.067714][ T6145] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1290.104141][T12178] loop2: detected capacity change from 0 to 1024
[ 1290.503247][T12178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1290.665762][T12178] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1290.999198][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1291.012861][ T9454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1291.023867][ T9454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1291.062501][ T9454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1291.079999][ T9454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1291.092211][ T9454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1291.214496][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1291.214922][T12194] loop3: detected capacity change from 0 to 512
[ 1291.365429][T12194] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[ 1291.510785][T12203] loop0: detected capacity change from 0 to 512
[ 1291.644575][T12203] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1009: casefold flag without casefold feature
[ 1291.737680][ T6145] bridge_slave_1: left allmulticast mode
[ 1291.743591][T12203] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1009: couldn't read orphan inode 15 (err -117)
[ 1291.775495][ T6145] bridge_slave_1: left promiscuous mode
[ 1291.848523][T12208] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1292.126622][T12203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1292.154664][T12209] loop2: detected capacity change from 0 to 512
[ 1292.261206][T12209] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1292.351245][T12215] loop8: detected capacity change from 0 to 128
[ 1292.374712][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1292.421124][T12215] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1292.489991][ T6145] bridge_slave_0: left allmulticast mode
[ 1292.504557][ T6145] bridge_slave_0: left promiscuous mode
[ 1292.509654][T11756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1292.517553][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.529354][T12209] EXT4-fs (loop2): 1 truncate cleaned up
[ 1292.537679][T12209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1292.595521][ T5815] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1292.623632][T12215] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1292.815164][ T5815] usb 6-1: Using ep0 maxpacket: 16
[ 1292.839356][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1292.868057][T12223] loop0: detected capacity change from 0 to 16
[ 1292.887604][ T5815] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1292.925560][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.935089][T12223] erofs (device loop0): mounted with root inode @ nid 36.
[ 1293.308706][ T9454] Bluetooth: hci1: command tx timeout
[ 1293.348352][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1294.195132][ T5815] usb 6-1: config 0 descriptor??
[ 1294.330128][T12232] loop2: detected capacity change from 0 to 256
[ 1294.491542][T12232] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1294.626918][T12237] loop0: detected capacity change from 0 to 128
[ 1294.669781][T12237] ext4: Unknown parameter 'nouser_xattr'
[ 1294.693948][ T5815] hid-multitouch 0003:1FD2:6007.000D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0
[ 1294.842539][ T8722] usb 6-1: USB disconnect, device number 2
[ 1295.168503][T12242] fido_id[12242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1295.189628][T12244] loop0: detected capacity change from 0 to 256
[ 1295.271113][T12244] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1295.365828][ T9454] Bluetooth: hci1: command tx timeout
[ 1296.455286][T12261] loop2: detected capacity change from 0 to 128
[ 1296.480743][T12261] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1296.532428][T12261] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1296.865979][ T6145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1296.916785][ T6145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1296.931732][T12266] loop5: detected capacity change from 0 to 2048
[ 1296.932782][ T6145] bond0 (unregistering): Released all slaves
[ 1297.009490][T12266] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[ 1297.596731][ T9454] Bluetooth: hci1: command tx timeout
[ 1297.758044][T12266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1298.147444][T12269] loop3: detected capacity change from 0 to 256
[ 1298.254751][ T6372] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1298.307773][T12269] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d)
[ 1298.360432][T12269] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[ 1299.174220][T12263] warning: `syz.8.1027' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1299.254324][   T30] audit: type=1800 audit(1749665405.551:39): pid=12269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1030" name="file2" dev="loop3" ino=1048653 res=0 errno=0
[ 1299.280248][T12275] Zero length message leads to an empty skb
[ 1299.685512][ T9454] Bluetooth: hci1: command tx timeout
[ 1300.582677][T12289] loop5: detected capacity change from 0 to 1024
[ 1300.914033][T12287] loop3: detected capacity change from 0 to 8192
[ 1301.135039][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1036'.
[ 1301.566113][ T6145] hsr_slave_0: left promiscuous mode
[ 1301.650004][T12308] loop8: detected capacity change from 0 to 256
[ 1301.687298][T12308] exfat: Deprecated parameter 'namecase'
[ 1301.703661][T12310] loop2: detected capacity change from 0 to 512
[ 1301.767215][T12310] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.1040: inode #1792: comm syz.2.1040: iget: illegal inode #
[ 1301.824259][T12308] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1301.886702][T12310] EXT4-fs (loop2): Remounting filesystem read-only
[ 1301.901470][ T6145] hsr_slave_1: left promiscuous mode
[ 1301.914868][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1301.938019][T12310] EXT4-fs (loop2): no journal found
[ 1301.961800][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1301.995412][T12310] EXT4-fs (loop2): can't get journal size
[ 1302.084022][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1302.106385][T12310] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[ 1302.140020][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1302.157974][T12310] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[ 1302.250742][T12310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1302.300425][ T6145] veth1_macvtap: left promiscuous mode
[ 1302.320426][ T6145] veth0_macvtap: left promiscuous mode
[ 1302.330708][ T6145] veth1_vlan: left promiscuous mode
[ 1302.355505][ T6145] veth0_vlan: left promiscuous mode
[ 1302.438480][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1302.634204][T12327] binder: 12326:12327 ioctl c0306201 0 returned -14
[ 1302.680415][T12328] loop5: detected capacity change from 0 to 512
[ 1302.741450][T12328] EXT4-fs warning (device loop5): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1302.764567][T12328] EXT4-fs (loop5): mount failed
[ 1302.860453][T12334] loop2: detected capacity change from 0 to 1024
[ 1302.943348][T12334] hfsplus: xattr searching failed
[ 1302.958211][   T30] audit: type=1800 audit(1749665409.261:40): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1045" name="file1" dev="loop2" ino=2 res=0 errno=0
[ 1303.796450][T12352] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1049'.
[ 1303.884469][ T6145] team0 (unregistering): Port device team_slave_1 removed
[ 1303.939300][ T6145] team0 (unregistering): Port device team_slave_0 removed
[ 1304.734912][T12352] gretap0: entered promiscuous mode
[ 1305.400900][T12190] chnl_net:caif_netlink_parms(): no params data found
[ 1305.552614][T12384] loop3: detected capacity change from 0 to 8
[ 1305.563327][T12387] loop5: detected capacity change from 0 to 8
[ 1305.574229][T12384] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1305.585174][T12384] SQUASHFS error: Failed to read block 0x9b: -5
[ 1305.591558][T12384] SQUASHFS error: Unable to read metadata cache entry [99]
[ 1305.598998][T12384] SQUASHFS error: Unable to read inode 0x127
[ 1305.650133][T12384] loop3: detected capacity change from 0 to 256
[ 1305.739524][T12384] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d)
[ 1305.781566][T12387] loop5: detected capacity change from 0 to 512
[ 1305.798241][T12384] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[ 1305.932122][T12387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1307.170260][T12394] loop8: detected capacity change from 0 to 4096
[ 1307.205779][T12387] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1307.355644][T12394] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[ 1307.668396][T12394] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[ 1307.680500][T12394] ntfs3(loop8): Failed to load $Extend (-22).
[ 1307.686976][T12394] ntfs3(loop8): Failed to initialize $Extend.
[ 1307.806368][T12387] EXT4-fs (loop5): shut down requested (1)
[ 1308.797762][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1308.912960][T12412] binder: 12402:12412 ioctl c0306201 0 returned -14
[ 1309.571721][T12416] loop0: detected capacity change from 0 to 512
[ 1309.579755][T12190] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1309.637122][T12190] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1309.644489][T12190] bridge_slave_0: entered allmulticast mode
[ 1309.654637][T12190] bridge_slave_0: entered promiscuous mode
[ 1309.663568][T12190] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1309.695811][T12190] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1309.703109][T12190] bridge_slave_1: entered allmulticast mode
[ 1309.761985][T12416] EXT4-fs warning (device loop0): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1309.826453][T12416] EXT4-fs (loop0): mount failed
[ 1309.839323][T12425] loop3: detected capacity change from 0 to 1024
[ 1309.840375][T12190] bridge_slave_1: entered promiscuous mode
[ 1309.867264][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1309.873619][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1310.424320][T12428] loop5: detected capacity change from 0 to 1024
[ 1310.640278][T12190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1310.763539][T12190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1310.917511][T12440] syz.0.1066 uses obsolete (PF_INET,SOCK_PACKET)
[ 1310.987417][   T12] hfsplus: b-tree write err: -5, ino 3
[ 1311.010436][T11284] hfsplus: node 4:3 still has 1 user(s)!
[ 1311.839143][T12445] binder: BINDER_SET_CONTEXT_MGR already set
[ 1311.877924][T12445] binder: 12438:12445 ioctl 4018620d 200000000040 returned -16
[ 1312.040802][T12190] team0: Port device team_slave_0 added
[ 1312.050247][T12190] team0: Port device team_slave_1 added
[ 1312.318468][T12449] loop3: detected capacity change from 0 to 2048
[ 1313.918470][T12190] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1313.960372][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1314.095946][T12190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1314.152891][T12190] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1314.190809][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1314.308188][T12190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1314.337850][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1074'.
[ 1316.215706][T12486] loop0: detected capacity change from 0 to 512
[ 1316.312266][T12190] hsr_slave_0: entered promiscuous mode
[ 1316.320044][T12190] hsr_slave_1: entered promiscuous mode
[ 1316.329204][T12190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1316.337815][T12486] EXT4-fs warning (device loop0): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1316.352867][T12190] Cannot create hsr debugfs directory
[ 1316.357212][T12486] EXT4-fs (loop0): mount failed
[ 1316.591579][T12499] 9pnet: p9_errstr2errno: server reported unknown error               /sys/kernel/debug/kcov
[ 1316.591579][T12499] 7f8810ff9000-7f881hybla
[ 1322.252894][T12190] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1322.352210][T12190] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1322.378563][T12540] loop3: detected capacity change from 0 to 2048
[ 1322.453273][T12190] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1322.512477][T12540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1322.530860][T12190] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1322.630732][T12554] loop2: detected capacity change from 0 to 1024
[ 1322.638492][T12554] EXT4-fs: Ignoring removed nobh option
[ 1323.080990][T12554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1323.362618][T12554] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4112: comm syz.2.1101: Allocating blocks 497-513 which overlap fs metadata
[ 1323.576954][T12554] EXT4-fs (loop2): pa ffff888050ec5740: logic 256, phys. 385, len 8
[ 1323.585055][T12554] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5363: group 0, free 0, pa_free 1
[ 1323.977133][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1325.308710][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1325.362115][T12190] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1325.560772][T12190] 8021q: adding VLAN 0 to HW filter on device team0
[ 1325.968973][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1325.976255][ T6372] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1326.084722][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1326.092028][ T6372] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1326.953993][T12625] loop8: detected capacity change from 0 to 1024
[ 1329.338871][T12679] loop2: detected capacity change from 0 to 1024
[ 1329.507765][ T9948] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1330.205397][ T9948] usb 1-1: Using ep0 maxpacket: 16
[ 1330.232582][ T9948] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[ 1330.296005][ T9948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1330.326538][ T9948] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[ 1330.361421][ T9948] usb 1-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00
[ 1330.411915][ T9948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1330.445643][ T9948] usb 1-1: config 0 descriptor??
[ 1330.649512][T12689] binder: BINDER_SET_CONTEXT_MGR already set
[ 1330.655689][T12689] binder: 12686:12689 ioctl 4018620d 200000000040 returned -16
[ 1330.674825][T12689] binder: 12686:12689 ioctl c0306201 2000000003c0 returned -14
[ 1330.807135][T12691] loop8: detected capacity change from 0 to 512
[ 1330.831348][T12691] EXT4-fs (loop8): bad s_min_extra_isize: 65535
[ 1331.141829][ T9948] hid-generic 0003:18D1:5022.000E: hidraw0: USB HID v20.00 Device [HID 18d1:5022] on usb-dummy_hcd.0-1/input0
[ 1331.179571][ T9948] usb 1-1: USB disconnect, device number 3
[ 1331.993865][T12698] fido_id[12698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1332.355468][ T8723] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1332.436557][T12706] loop0: detected capacity change from 0 to 512
[ 1332.459808][T12706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1332.495896][T12706] EXT4-fs (loop0): 1 truncate cleaned up
[ 1332.504607][T12706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1332.527764][ T8723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1332.545372][ T8723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1332.575825][ T8723] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1332.585046][ T8723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1332.612990][ T8723] usb 9-1: config 0 descriptor??
[ 1332.667627][T11756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1333.260273][ T8723] hid-led 0003:0FC5:B080.000F: probe with driver hid-led failed with error -71
[ 1333.295384][ T8723] usb 9-1: USB disconnect, device number 2
[ 1333.698372][T12190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1334.100422][T12722] loop3: detected capacity change from 0 to 2048
[ 1334.127659][T12725] loop5: detected capacity change from 0 to 1024
[ 1334.190605][T12722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1334.276086][T12722] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1334.908698][T12190] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1335.301312][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1335.339222][T12757] loop2: detected capacity change from 0 to 1024
[ 1335.463872][T12757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1336.746715][T12772] loop3: detected capacity change from 0 to 8192
[ 1336.804538][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1337.011801][T12771] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2070)
[ 1337.090963][T12771] FAT-fs (loop3): Filesystem has been set read-only
[ 1337.109996][T12771] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2070)
[ 1337.119588][T12771] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2070)
[ 1337.137912][T12771] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2070)
[ 1337.147349][T12771] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2070)
[ 1337.156956][T12771] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2070)
[ 1337.167943][T12771] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2070)
[ 1337.177342][T12771] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2070)
[ 1337.188407][T12771] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2070)
[ 1337.201306][T12771] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2070)
[ 1337.313473][   T30] audit: type=1800 audit(1749665443.541:41): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1166" name="file2" dev="loop3" ino=1048672 res=0 errno=0
[ 1337.881125][ T9454] Bluetooth: hci4: Ignoring connect complete event for invalid link type
[ 1338.019177][T12790] loop2: detected capacity change from 0 to 16
[ 1338.031217][T12790] erofs (device loop2): mounted with root inode @ nid 36.
[ 1338.041979][ T9454] erofs (device loop2): failed to decompress -26 in[46, 0] out[9000]
[ 1338.048992][T12790] erofs (device loop2): failed to decompress -26 in[46, 4050] out[8192]
[ 1338.049086][T12790] erofs (device loop2): read error -117 @ 0 of nid 89
[ 1338.050231][   T30] audit: type=1800 audit(1749665444.351:42): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1172" name="file2" dev="loop2" ino=89 res=0 errno=0
[ 1338.052629][T12790] erofs (device loop2): failed to decompress -26 in[46, 4050] out[8192]
[ 1338.052712][T12790] erofs (device loop2): read error -117 @ 0 of nid 89
[ 1338.052896][T12790] erofs (device loop2): failed to decompress -26 in[46, 4050] out[8192]
[ 1338.052968][T12790] erofs (device loop2): read error -117 @ 0 of nid 89
[ 1338.065405][T12190] veth0_vlan: entered promiscuous mode
[ 1338.100438][T12190] veth1_vlan: entered promiscuous mode
[ 1338.193567][ T5844] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1338.446424][ T5844] usb 6-1: Using ep0 maxpacket: 8
[ 1338.457148][ T5844] usb 6-1: config 219 has an invalid interface number: 189 but max is 0
[ 1338.457194][ T5844] usb 6-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config
[ 1338.457231][ T5844] usb 6-1: config 219 has no interface number 0
[ 1338.457292][ T5844] usb 6-1: config 219 interface 189 altsetting 4 bulk endpoint 0x4 has invalid maxpacket 8
[ 1338.457339][ T5844] usb 6-1: config 219 interface 189 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0
[ 1338.457383][ T5844] usb 6-1: config 219 interface 189 altsetting 4 bulk endpoint 0xE has invalid maxpacket 0
[ 1338.457430][ T5844] usb 6-1: config 219 interface 189 has no altsetting 0
[ 1338.460310][ T5844] usb 6-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=98.9c
[ 1338.460356][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1338.460394][ T5844] usb 6-1: Product: syz
[ 1338.460423][ T5844] usb 6-1: Manufacturer: syz
[ 1338.460452][ T5844] usb 6-1: SerialNumber: syz
[ 1338.465720][T12794] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1338.686423][ T5844] usb-storage 6-1:219.189: USB Mass Storage device detected
[ 1338.728390][T12190] veth0_macvtap: entered promiscuous mode
[ 1338.994288][ T5844] usb 6-1: USB disconnect, device number 3
[ 1339.337645][T12816] loop2: detected capacity change from 0 to 2048
[ 1339.460392][T12816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1339.464358][T12819] loop8: detected capacity change from 0 to 2048
[ 1339.527686][T12816] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1339.572661][T12819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1339.689273][T12825] loop5: detected capacity change from 0 to 256
[ 1339.734487][T12825] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1340.457835][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1341.047565][T12843] loop2: detected capacity change from 0 to 256
[ 1341.146849][T12843] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1341.230993][T12843] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[ 1341.307275][T12843] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1341.350768][T12848] loop5: detected capacity change from 0 to 1024
[ 1341.485096][T12848] EXT4-fs: Ignoring removed orlov option
[ 1341.542869][T12848] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1341.770077][T12848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1341.875177][T12855] loop0: detected capacity change from 0 to 128
[ 1341.965662][T12857] loop2: detected capacity change from 0 to 1024
[ 1341.975752][T12857] hfsplus: Unknown parameter '/dev/ptmx'
[ 1342.036540][T12855] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1342.085259][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1342.155521][T12855] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1342.500274][T12864] loop5: detected capacity change from 0 to 512
[ 1342.602059][T12864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1342.645773][T12837] Bluetooth: hci0: command 0x0406 tx timeout
[ 1342.685146][T12864] EXT4-fs (loop5): 1 orphan inode deleted
[ 1342.727594][T11756] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1342.737586][T12864] EXT4-fs (loop5): 1 truncate cleaned up
[ 1342.847716][T12864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1343.681086][T12868] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[ 1344.398460][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1344.631560][T12882] loop8: detected capacity change from 0 to 256
[ 1344.759143][T12882] exFAT-fs (loop8): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[ 1344.835493][T12882] exFAT-fs (loop8): error, in sector 160, dentry 11 should be unused, but 0xc1
[ 1344.861150][T12882] exFAT-fs (loop8): Filesystem has been set read-only
[ 1345.112020][T12888] loop5: detected capacity change from 0 to 2048
[ 1345.307284][T12888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1345.327074][T12888] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1345.416924][T12897] loop0: detected capacity change from 0 to 1024
[ 1346.231502][T12905] ip6t_rpfilter: unknown options
[ 1347.196181][T12906] hub 8-0:1.0: USB hub found
[ 1347.203421][T12906] hub 8-0:1.0: 1 port detected
[ 1347.785676][T12902] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12)
[ 1347.792690][T12902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1347.801367][T12902] vhci_hcd vhci_hcd.0: Device attached
[ 1347.849574][T12837] Bluetooth: hci5: command 0x0406 tx timeout
[ 1348.674017][T12904] vhci_hcd: connection closed
[ 1348.886776][   T61] vhci_hcd: stop threads
[ 1348.928752][ T5844] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[ 1349.029314][   T61] vhci_hcd: release socket
[ 1349.035037][   T61] vhci_hcd: disconnect device
[ 1349.072912][ T5844] usb 33-1: enqueue for inactive port 0
[ 1349.096906][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1349.164058][ T5844] vhci_hcd: vhci_device speed not set
[ 1349.418703][T12915] loop5: detected capacity change from 0 to 128
[ 1349.518258][T12915] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1349.621616][T12915] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1349.639668][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1045.tmp-b7:5' failed: Read-only file system
[ 1349.698049][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system
[ 1349.735725][T12915] syz.5.1201 (pid 12915) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[ 1349.780824][T12915] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[ 1349.840845][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1045.tmp-b7:5' failed: Read-only file system
[ 1349.880968][T12837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1349.884899][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system
[ 1349.905843][T12837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1349.919900][T12837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1349.942472][T12837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1349.951921][T12837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1350.002997][T11284] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1350.237316][T12926] netlink: 'syz.5.1206': attribute type 4 has an invalid length.
[ 1350.246532][T12924] loop0: detected capacity change from 0 to 1024
[ 1350.252225][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1045.tmp-b7:5' failed: Read-only file system
[ 1350.254036][T12924] EXT4-fs: Ignoring removed i_version option
[ 1350.270696][T12924] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1350.350040][T12924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1350.351501][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1047.tmp-b7:0' failed: Read-only file system
[ 1350.374815][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1045.tmp-b7:5' failed: Read-only file system
[ 1350.412216][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1046.tmp-b7:5' failed: Read-only file system
[ 1350.437815][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[ 1350.482729][T12924] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz.0.1205: bg 0: block 260: invalid block bitmap
[ 1350.503936][T12924] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[ 1350.531721][T12931] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.1205: bit already cleared for inode 15
[ 1350.572111][T12924] syz.0.1205 (12924) used greatest stack depth: 21112 bytes left
[ 1350.699085][T11756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1350.800493][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1047.tmp-b7:0' failed: Read-only file system
[ 1351.258966][T12947] loop8: detected capacity change from 0 to 256
[ 1351.272876][T12947] exfat: Bad value for 'uid'
[ 1351.279731][T12947] exfat: Bad value for 'uid'
[ 1352.008203][ T9454] Bluetooth: hci6: command tx timeout
[ 1352.099121][T12961] loop3: detected capacity change from 0 to 2048
[ 1352.290406][T12961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1352.349371][T12961] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1352.424730][T12966] loop5: detected capacity change from 0 to 1024
[ 1353.069705][T12983] ip6t_rpfilter: unknown options
[ 1353.125414][T12980] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[ 1353.132120][T12980] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1353.140517][T12980] vhci_hcd vhci_hcd.0: Device attached
[ 1353.589298][T12981] vhci_hcd: connection closed
[ 1353.645702][ T9949] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[ 1353.741762][ T6689] vhci_hcd: stop threads
[ 1353.774711][T12985] loop8: detected capacity change from 0 to 2048
[ 1353.783718][ T6689] vhci_hcd: release socket
[ 1353.803965][ T6689] vhci_hcd: disconnect device
[ 1353.859832][T12987] loop2: detected capacity change from 0 to 128
[ 1353.877000][T12985] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1353.892412][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1353.938310][T12987] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1354.012929][T12987] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1354.085478][ T9454] Bluetooth: hci6: command tx timeout
[ 1354.206904][T12987] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[ 1354.610203][ T5834] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1354.741220][T12997] loop3: detected capacity change from 0 to 128
[ 1354.755094][T12997] EXT4-fs: Ignoring removed nobh option
[ 1354.904130][T12997] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1354.961372][T12997] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1355.593218][T12217] udevd[12217]: symlink '../../loop2' '/dev/disk/by-diskseq/1054.tmp-b7:2' failed: Read-only file system
[ 1355.621645][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1053.tmp-b7:8' failed: Read-only file system
[ 1355.665080][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1058.tmp-b7:3' failed: Read-only file system
[ 1355.716917][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system
[ 1355.772978][T12217] udevd[12217]: symlink '../../loop2' '/dev/disk/by-diskseq/1054.tmp-b7:2' failed: Read-only file system
[ 1355.787982][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1057.tmp-b7:8' failed: Read-only file system
[ 1355.803413][T11365] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1355.812674][T11924] udevd[11924]: symlink '../../loop5' '/dev/disk/by-diskseq/1056.tmp-b7:5' failed: Read-only file system
[ 1355.884324][T12217] udevd[12217]: symlink '../../loop2' '/dev/disk/by-diskseq/1059.tmp-b7:2' failed: Read-only file system
[ 1355.931469][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1058.tmp-b7:3' failed: Read-only file system
[ 1355.996745][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system
[ 1356.040757][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1225'.
[ 1356.326860][ T9454] Bluetooth: hci6: command tx timeout
[ 1357.103956][T13018] loop5: detected capacity change from 0 to 8192
[ 1357.159080][T13018] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1357.211361][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.247486][T13018] FAT-fs (loop5): Filesystem has been set read-only
[ 1357.254176][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.263415][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.285729][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.322514][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.332544][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.353048][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.385552][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.417681][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.473173][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.519111][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.538839][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.552504][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.563646][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.608972][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.630214][T13018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001)
[ 1357.674676][   T30] audit: type=1800 audit(1749665463.971:43): pid=13018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1227" name="file2" dev="loop5" ino=1048675 res=0 errno=0
[ 1357.934312][T13036] loop5: detected capacity change from 0 to 512
[ 1358.063068][T13036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1358.099051][T13042] loop3: detected capacity change from 0 to 1024
[ 1358.107208][T13042] EXT4-fs: Ignoring removed i_version option
[ 1358.113351][T13042] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1358.140624][T13036] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1358.210574][T13042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1358.282836][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1358.359119][T13042] EXT4-fs error (device loop3): __ext4_new_inode:1278: comm syz.3.1231: failed to insert inode 16: doubly allocated?
[ 1358.396852][T13046] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm syz.3.1231: bg 0: block 260: invalid block bitmap
[ 1358.415505][ T9454] Bluetooth: hci6: command tx timeout
[ 1358.460471][T13046] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[ 1358.538116][T13048] loop5: detected capacity change from 0 to 2048
[ 1358.593918][T13048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1358.611198][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1358.628437][T13048] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1358.802100][T13052] loop3: detected capacity change from 0 to 256
[ 1358.802386][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1358.842254][T13052] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1358.859052][T13052] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[ 1358.877765][T13052] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x062de574, utbl_chksum : 0xe619d30d)
[ 1358.890166][ T9949] vhci_hcd: vhci_device speed not set
[ 1359.746831][T13059] loop5: detected capacity change from 0 to 1024
[ 1359.771697][T13059] EXT4-fs: Ignoring removed orlov option
[ 1359.787199][T13059] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1359.842627][T13059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1359.934018][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1360.296910][ T9949] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1360.470759][ T9949] usb 6-1: config 0 has an invalid interface number: 5 but max is 0
[ 1360.479694][ T9949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1360.490115][ T9949] usb 6-1: config 0 has no interface number 0
[ 1360.496420][ T9949] usb 6-1: New USB device found, idVendor=152e, idProduct=30ca, bcdDevice=ae.11
[ 1360.505654][ T9949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.517442][ T9949] usb 6-1: config 0 descriptor??
[ 1360.535836][ T9949] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1360.548680][ T9949] usb 6-1: MIDIStreaming interface descriptor not found
[ 1360.787585][ T8723] usb 6-1: USB disconnect, device number 4
[ 1361.026484][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1048.tmp-b7:0' failed: Read-only file system
[ 1361.234865][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1057.tmp-b7:8' failed: Read-only file system
[ 1361.262799][ T5844] kernel write not supported for file /partitions (pid: 5844 comm: kworker/1:3)
[ 1361.281483][T13072] loop2: detected capacity change from 0 to 2048
[ 1361.317865][ T9792] udevd[9792]: symlink '../../loop2' '/dev/disk/by-diskseq/1059.tmp-b7:2' failed: Read-only file system
[ 1361.412175][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1068.tmp-b7:3' failed: Read-only file system
[ 1361.473692][T13072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1361.553922][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1068.tmp-b7:3' failed: Read-only file system
[ 1361.607122][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1048.tmp-b7:0' failed: Read-only file system
[ 1363.539026][T12837] Bluetooth: hci3: command 0x0406 tx timeout
[ 1363.612781][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1057.tmp-b7:8' failed: Read-only file system
[ 1364.169897][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1073.tmp-b7:3' failed: Read-only file system
[ 1364.411859][T12217] udevd[12217]: symlink '../../loop2' '/dev/disk/by-diskseq/1072.tmp-b7:2' failed: Read-only file system
[ 1364.511781][T12217] udevd[12217]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system
[ 1366.042462][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1072.tmp-b7:2' failed: Read-only file system
[ 1366.202972][T13108] loop8: detected capacity change from 0 to 512
[ 1366.223683][T13103] loop3: detected capacity change from 0 to 2048
[ 1366.261875][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'.
[ 1366.274587][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1072.tmp-b7:2' failed: Read-only file system
[ 1366.317807][T13108] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1366.324203][T12218] udevd[12218]: symlink '../../loop0' '/dev/disk/by-diskseq/1048.tmp-b7:0' failed: Read-only file system
[ 1366.415443][ T5991] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1366.416554][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1057.tmp-b7:8' failed: Read-only file system
[ 1366.441967][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1072.tmp-b7:2' failed: Read-only file system
[ 1366.494458][T13108] EXT4-fs (loop8): 1 truncate cleaned up
[ 1366.503544][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[ 1366.503677][T12217] udevd[12217]: symlink '../../loop3' '/dev/disk/by-diskseq/1073.tmp-b7:3' failed: Read-only file system
[ 1366.566641][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1057.tmp-b7:8' failed: Read-only file system
[ 1366.618617][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1074.tmp-b7:2' failed: Read-only file system
[ 1366.637888][T13108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1366.665485][ T5991] usb 3-1: Using ep0 maxpacket: 8
[ 1366.674858][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[ 1366.683056][ T5991] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1366.699205][T13103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1366.731259][ T5991] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1366.769609][T13103] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1366.783581][ T5991] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40
[ 1366.816024][T13117] loop0: detected capacity change from 0 to 16
[ 1366.817513][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1366.842628][ T5991] usb 3-1: Product: syz
[ 1366.875513][T13117] erofs (device loop0): mounted with root inode @ nid 36.
[ 1366.886841][ T5991] usb 3-1: Manufacturer: syz
[ 1366.918971][ T5991] usb 3-1: SerialNumber: syz
[ 1367.212396][ T5991] usb 3-1: USB disconnect, device number 21
[ 1367.266201][T11577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1367.419322][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1367.576696][T12921] chnl_net:caif_netlink_parms(): no params data found
[ 1368.735476][ T8723] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[ 1368.892289][T11724] bridge_slave_1: left allmulticast mode
[ 1368.955760][ T8723] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1368.964888][ T8723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.965461][T11724] bridge_slave_1: left promiscuous mode
[ 1369.030438][T11724] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1369.056631][ T8723] usb 9-1: config 0 descriptor??
[ 1369.109611][ T8723] cp210x 9-1:0.0: cp210x converter detected
[ 1369.137793][T13139] loop5: detected capacity change from 0 to 512
[ 1369.159563][T11724] bridge_slave_0: left allmulticast mode
[ 1369.182554][T11724] bridge_slave_0: left promiscuous mode
[ 1369.201772][T11724] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1369.216086][T13139] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1369.338867][T13139] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1369.409657][T13139] EXT4-fs (loop5): 1 truncate cleaned up
[ 1369.468781][T13139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1369.510240][ T8723] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1369.533779][ T9454] Bluetooth: hci0: unexpected event for opcode 0x2060
[ 1370.168613][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1370.178115][ T5815] usb 9-1: USB disconnect, device number 3
[ 1370.217160][ T5815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1370.417683][ T5815] cp210x 9-1:0.0: device disconnected
[ 1371.352678][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1371.359186][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1371.391938][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1079.tmp-b7:0' failed: Read-only file system
[ 1371.428127][ T9792] udevd[9792]: symlink '../../loop5' '/dev/disk/by-diskseq/1081.tmp-b7:5' failed: Read-only file system
[ 1371.486879][ T9525] udevd[9525]: symlink '../../loop8' '/dev/disk/by-diskseq/1078.tmp-b7:8' failed: Read-only file system
[ 1371.534688][T11924] udevd[11924]: symlink '../../loop3' '/dev/disk/by-diskseq/1080.tmp-b7:3' failed: Read-only file system
[ 1371.651522][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1081.tmp-b7:5' failed: Read-only file system
[ 1372.323268][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1082.tmp-b7:5' failed: Read-only file system
[ 1372.430823][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1079.tmp-b7:0' failed: Read-only file system
[ 1372.691073][ T9792] udevd[9792]: symlink '../../loop2' '/dev/disk/by-diskseq/1074.tmp-b7:2' failed: Read-only file system
[ 1372.816981][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1078.tmp-b7:8' failed: Read-only file system
[ 1372.936493][ T9949] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1372.950862][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1080.tmp-b7:3' failed: Read-only file system
[ 1373.052980][T13174] loop2: detected capacity change from 0 to 1024
[ 1373.098217][ T9949] usb 1-1: Using ep0 maxpacket: 8
[ 1373.111577][ T9949] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[ 1373.151211][T13177] loop3: detected capacity change from 0 to 2048
[ 1373.162705][ T9949] usb 1-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config
[ 1373.207601][ T5991] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1373.233251][ T9949] usb 1-1: config 0 has no interface number 0
[ 1373.247513][ T9949] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 179, changing to 11
[ 1373.259832][ T9949] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 50386, setting to 1024
[ 1373.273582][ T9949] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1373.286840][ T9949] usb 1-1: config 0 interface 52 has no altsetting 0
[ 1373.295160][ T9949] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1373.343412][ T9949] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1373.355868][T13177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1373.376525][T13177] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1373.414955][ T5991] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1373.441793][ T9949] usb 1-1: Manufacturer: syz
[ 1373.484468][ T5991] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1373.515160][ T9949] usb 1-1: config 0 descriptor??
[ 1373.544812][ T5991] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1373.595715][ T5991] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1373.658527][ T5991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1373.697806][ T5991] usb 9-1: config 0 descriptor??
[ 1373.729256][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1373.785567][ T9949] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input13
[ 1374.107294][ T5815] usb 1-1: USB disconnect, device number 4
[ 1374.107342][    C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[ 1374.159834][ T5991] plantronics 0003:047F:FFFF.0010: invalid report_count -1838321966
[ 1374.218206][ T5991] plantronics 0003:047F:FFFF.0010: item 0 4 1 9 parsing failed
[ 1374.242917][ T5991] plantronics 0003:047F:FFFF.0010: parse failed
[ 1374.250717][ T5991] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22
[ 1375.432266][T11724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1375.648198][T11724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1375.716090][T11724] bond0 (unregistering): Released all slaves
[ 1375.979820][T13199] binder: 13195:13199 ioctl c00c6211 0 returned -14
[ 1376.253259][T11724] hsr_slave_0: left promiscuous mode
[ 1376.297435][T11724] hsr_slave_1: left promiscuous mode
[ 1376.320029][T11724] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1376.367136][T11724] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1377.050305][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1082.tmp-b7:5' failed: Read-only file system
[ 1377.112067][T13205] loop2: detected capacity change from 0 to 2048
[ 1377.124131][ T5991] usb 9-1: USB disconnect, device number 4
[ 1377.136687][T11724] veth0_macvtap: left promiscuous mode
[ 1377.179986][T11724] veth1_vlan: left promiscuous mode
[ 1377.189780][T11724] veth0_vlan: left promiscuous mode
[ 1377.625045][T13215] loop8: detected capacity change from 0 to 1024
[ 1377.633117][T13215] hfsplus: Unknown parameter ''
[ 1377.910744][T13205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1378.600086][ T9454] Bluetooth: hci4: command 0x0406 tx timeout
[ 1379.390755][T13230] loop2: detected capacity change from 0 to 1024
[ 1379.422335][T13230] hfsplus: Unknown parameter '/dev/ptmx'
[ 1379.683458][ T9948] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1379.740521][T13231] loop5: detected capacity change from 0 to 2048
[ 1380.538648][ T9948] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[ 1380.599979][ T9948] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1380.654838][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1078.tmp-b7:8' failed: Read-only file system
[ 1380.666303][ T9948] usb 9-1: config 220 has no interface number 2
[ 1380.672661][ T9948] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1381.148091][ T9948] usb 9-1: config 220 interface 0 has no altsetting 0
[ 1381.158684][ T9948] usb 9-1: config 220 interface 76 has no altsetting 0
[ 1381.178029][ T9948] usb 9-1: config 220 interface 1 has no altsetting 0
[ 1381.215145][ T9948] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1381.244429][ T9948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1381.247266][T13231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1381.268033][ T9948] usb 9-1: Product: syz
[ 1381.272593][ T9948] usb 9-1: Manufacturer: syz
[ 1381.277390][ T9948] usb 9-1: SerialNumber: syz
[ 1381.282249][T13231] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1381.363993][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1087.tmp-b7:2' failed: Read-only file system
[ 1381.412508][T12217] udevd[12217]: symlink '../../loop0' '/dev/disk/by-diskseq/1079.tmp-b7:0' failed: Read-only file system
[ 1381.435240][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1088.tmp-b7:8' failed: Read-only file system
[ 1381.537361][T12218] udevd[12218]: symlink '../../loop3' '/dev/disk/by-diskseq/1086.tmp-b7:3' failed: Read-only file system
[ 1381.538590][ T9948] usb 9-1: selecting invalid altsetting 0
[ 1381.592649][T12217] udevd[12217]: symlink '../../loop0' '/dev/disk/by-diskseq/1079.tmp-b7:0' failed: Read-only file system
[ 1381.603621][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1087.tmp-b7:2' failed: Read-only file system
[ 1381.619691][ T9948] usb 9-1: Found UVC 7.01 device syz (8086:0b07)
[ 1381.621667][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1088.tmp-b7:8' failed: Read-only file system
[ 1381.662989][ T9948] usb 9-1: No valid video chain found.
[ 1381.680085][T11924] udevd[11924]: symlink '../../loop5' '/dev/disk/by-diskseq/1082.tmp-b7:5' failed: Read-only file system
[ 1381.757673][ T9948] usb 9-1: selecting invalid altsetting 0
[ 1381.795402][ T9948] usbtest 9-1:220.1: probe with driver usbtest failed with error -22
[ 1381.865958][ T9948] usb 9-1: USB disconnect, device number 5
[ 1381.943651][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1382.084919][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1089.tmp-b7:8' failed: Read-only file system
[ 1382.174280][ T9792] udevd[9792]: symlink '../../loop2' '/dev/disk/by-diskseq/1091.tmp-b7:2' failed: Read-only file system
[ 1382.301456][T12217] udevd[12217]: symlink '../../loop5' '/dev/disk/by-diskseq/1092.tmp-b7:5' failed: Read-only file system
[ 1382.398289][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1091.tmp-b7:2' failed: Read-only file system
[ 1382.418458][T12217] udevd[12217]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[ 1382.443534][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1079.tmp-b7:0' failed: Read-only file system
[ 1382.580963][T11924] udevd[11924]: symlink '../../loop8' '/dev/disk/by-diskseq/1089.tmp-b7:8' failed: Read-only file system
[ 1382.762933][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1091.tmp-b7:2' failed: Read-only file system
[ 1382.802435][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1093.tmp-b7:2' failed: Read-only file system
[ 1382.804278][ T9792] udevd[9792]: symlink '../../loop5' '/dev/disk/by-diskseq/1092.tmp-b7:5' failed: Read-only file system
[ 1383.620972][T13267] loop8: detected capacity change from 0 to 512
[ 1383.779619][T13267] EXT4-fs (loop8): revision level too high, forcing read-only mode
[ 1383.882487][T13267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[ 1383.946407][T13267] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1383.961156][T13267] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #13: comm syz.8.1289: iget: bad i_size value: 12154761577498
[ 1384.067223][T13267] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1289: couldn't read orphan inode 13 (err -117)
[ 1384.103850][T13267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1384.235286][T13267] EXT4-fs warning (device loop8): dx_probe:859: inode #2: comm syz.8.1289: dx entry: limit 65535 != root limit 120
[ 1384.273486][T13279] loop0: detected capacity change from 0 to 128
[ 1384.315440][T13279] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1384.455586][T13267] EXT4-fs warning (device loop8): dx_probe:933: inode #2: comm syz.8.1289: Corrupt directory, running e2fsck is recommended
[ 1384.638682][T13279] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1384.753014][T11577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1386.672236][T11724] team0 (unregistering): Port device team_slave_1 removed
[ 1387.384795][T11724] team0 (unregistering): Port device team_slave_0 removed
[ 1387.423519][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1093.tmp-b7:2' failed: Read-only file system
[ 1387.484844][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1097.tmp-b7:8' failed: Read-only file system
[ 1387.617351][T13299] loop8: detected capacity change from 0 to 512
[ 1387.707071][T13299] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1387.776826][T13299] EXT4-fs (loop8): invalid journal inode
[ 1387.808853][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1099.tmp-b7:8' failed: Read-only file system
[ 1387.815560][T13299] EXT4-fs (loop8): can't get journal size
[ 1387.881834][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system
[ 1387.883202][T13299] EXT4-fs (loop8): 1 truncate cleaned up
[ 1387.934426][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1099.tmp-b7:8' failed: Read-only file system
[ 1387.961586][T13299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1387.988064][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system
[ 1388.787967][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1093.tmp-b7:2' failed: Read-only file system
[ 1388.927427][T13309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1298'.
[ 1389.020639][T13309] unsupported nlmsg_type 40
[ 1389.296904][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1093.tmp-b7:2' failed: Read-only file system
[ 1389.343269][T11577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1389.664892][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1099.tmp-b7:8' failed: Read-only file system
[ 1390.124839][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1099.tmp-b7:8' failed: Read-only file system
[ 1391.464897][T12921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1391.505493][T12921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1391.563272][T12921] bridge_slave_0: entered allmulticast mode
[ 1391.607903][T12921] bridge_slave_0: entered promiscuous mode
[ 1392.616158][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1086.tmp-b7:3' failed: Read-only file system
[ 1392.641372][T12921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1392.645213][T13327] loop5: detected capacity change from 0 to 1024
[ 1392.661070][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1100.tmp-b7:8' failed: Read-only file system
[ 1392.799195][T12921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1392.820437][T12921] bridge_slave_1: entered allmulticast mode
[ 1392.833180][T13338] loop8: detected capacity change from 0 to 1024
[ 1392.837619][T12921] bridge_slave_1: entered promiscuous mode
[ 1392.869954][T13338] hfsplus: Unknown parameter '/dev/ptmx'
[ 1392.882768][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1093.tmp-b7:2' failed: Read-only file system
[ 1393.482210][T13350] loop2: detected capacity change from 0 to 8
[ 1393.528702][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1098.tmp-b7:0' failed: Read-only file system
[ 1393.587932][ T9525] udevd[9525]: symlink '../../loop3' '/dev/disk/by-diskseq/1086.tmp-b7:3' failed: Read-only file system
[ 1393.682100][T12217] udevd[12217]: symlink '../../loop8' '/dev/disk/by-diskseq/1102.tmp-b7:8' failed: Read-only file system
[ 1393.712703][T13350] squashfs image failed sanity check
[ 1393.767677][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1102.tmp-b7:8' failed: Read-only file system
[ 1393.807201][T11924] udevd[11924]: symlink '../../loop2' '/dev/disk/by-diskseq/1093.tmp-b7:2' failed: Read-only file system
[ 1393.882176][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1101.tmp-b7:5' failed: Read-only file system
[ 1393.891514][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1102.tmp-b7:8' failed: Read-only file system
[ 1393.940471][T12921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1394.096259][T12921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1394.412047][T13360] loop2: detected capacity change from 0 to 1024
[ 1394.617728][T12921] team0: Port device team_slave_0 added
[ 1394.869808][T12921] team0: Port device team_slave_1 added
[ 1396.158956][T12921] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1396.205792][T12921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1396.277411][T12921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1396.358219][T12921] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1396.365232][T12921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1396.568984][T12921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1397.861349][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1098.tmp-b7:0' failed: Read-only file system
[ 1397.867268][T13392] loop3: detected capacity change from 0 to 512
[ 1397.896680][T13392] EXT4-fs: Ignoring removed i_version option
[ 1397.970384][T12217] udevd[12217]: symlink '../../loop2' '/dev/disk/by-diskseq/1107.tmp-b7:2' failed: Read-only file system
[ 1398.073543][T13400] loop2: detected capacity change from 0 to 1024
[ 1398.081437][T13400] hfsplus: Unknown parameter 'hash'
[ 1398.168948][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1103.tmp-b7:8' failed: Read-only file system
[ 1398.199465][T13392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1398.267842][T13392] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1398.419403][ T9792] udevd[9792]: symlink '../../loop3' '/dev/disk/by-diskseq/1108.tmp-b7:3' failed: Read-only file system
[ 1399.225776][T13409] input: syz0 as /devices/virtual/input/input15
[ 1399.241047][   T30] audit: type=1800 audit(1749665505.541:44): pid=13392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1321" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 1399.244006][ T9792] udevd[9792]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[ 1399.354056][T12217] udevd[12217]: symlink '../../loop2' '/dev/disk/by-diskseq/1109.tmp-b7:2' failed: Read-only file system
[ 1399.365505][ T8723] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1399.471485][T13415] loop0: detected capacity change from 0 to 1024
[ 1399.489982][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1399.500389][T12921] hsr_slave_0: entered promiscuous mode
[ 1399.511510][T12921] hsr_slave_1: entered promiscuous mode
[ 1399.751210][ T9792] udevd[9792]: symlink '../../loop2' '/dev/disk/by-diskseq/1109.tmp-b7:2' failed: Read-only file system
[ 1399.772459][T12921] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1399.781123][ T8723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1399.798724][T12921] Cannot create hsr debugfs directory
[ 1399.807132][ T8723] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1399.854809][ T8723] usb 9-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00
[ 1399.867766][ T9792] udevd[9792]: symlink '../../loop2' '/dev/disk/by-diskseq/1109.tmp-b7:2' failed: Read-only file system
[ 1399.885377][ T8723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1399.954149][T12217] udevd[12217]: symlink '../../loop3' '/dev/disk/by-diskseq/1108.tmp-b7:3' failed: Read-only file system
[ 1399.987653][ T8723] usb 9-1: config 0 descriptor??
[ 1400.028976][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1098.tmp-b7:0' failed: Read-only file system
[ 1400.079058][T13419] loop2: detected capacity change from 0 to 512
[ 1400.127772][T13419] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1400.255590][T13419] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[ 1400.333285][T13419] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[ 1400.410816][ T8723] hid-generic 0003:05AC:4262.0011: unbalanced delimiter at end of report description
[ 1400.429430][T13419] System zones: 0-2, 18-18, 34-34
[ 1400.460753][ T8723] hid-generic 0003:05AC:4262.0011: probe with driver hid-generic failed with error -22
[ 1400.498592][T13419] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1327: iget: bad i_size value: 360287970189639680
[ 1400.565497][T13419] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1327: couldn't read orphan inode 15 (err -117)
[ 1400.617433][ T8723] usb 9-1: USB disconnect, device number 6
[ 1400.726804][T13419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1401.361707][T13439] EXT4-fs error (device loop2): ext4_readdir:262: inode #2: block 3: comm syz.2.1327: path /544/file1: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[ 1402.132425][T13442] loop0: detected capacity change from 0 to 512
[ 1402.395423][T13442] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1402.466184][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1402.640685][T13442] EXT4-fs (loop0): 1 truncate cleaned up
[ 1402.695012][T13442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1402.880113][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1113.tmp-b7:2' failed: Read-only file system
[ 1403.018613][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1113.tmp-b7:2' failed: Read-only file system
[ 1403.141786][ T9792] udevd[9792]: symlink '../../loop3' '/dev/disk/by-diskseq/1112.tmp-b7:3' failed: Read-only file system
[ 1403.168710][T13481] loop2: detected capacity change from 0 to 1024
[ 1403.248862][T13481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1403.251137][T11756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1403.406893][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1103.tmp-b7:8' failed: Read-only file system
[ 1403.454277][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-diskseq/1117.tmp-b7:2' failed: Read-only file system
[ 1403.484562][T12217] udevd[12217]: symlink '../../loop0' '/dev/disk/by-diskseq/1116.tmp-b7:0' failed: Read-only file system
[ 1403.547369][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system
[ 1403.633091][ T9530] udevd[9530]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system
[ 1403.640501][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1116.tmp-b7:0' failed: Read-only file system
[ 1403.949738][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1119.tmp-b7:0' failed: Read-only file system
[ 1403.961369][ T9949] kernel write not supported for file /220/coredump_filter (pid: 9949 comm: kworker/1:5)
[ 1404.933821][T12921] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1405.025493][T12921] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1405.098077][T12921] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1405.236416][T12921] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1406.193826][T13507] loop8: detected capacity change from 0 to 128
[ 1406.245229][T13505] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1406.255197][T13505] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1406.265271][T13505] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1406.310694][   T30] audit: type=1800 audit(1749665512.541:45): pid=13505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1339" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[ 1406.487895][T13507] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1406.558799][T13507] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1406.625434][T13518] syz.0.1342 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1406.768761][T13507] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-aesni"
[ 1406.898524][T13523] loop5: detected capacity change from 0 to 4096
[ 1406.983370][T13523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1407.030263][T13507] fscrypt (loop8): Missing crypto API support for AES-128-CBC-ESSIV (API name: "essiv(cbc(aes),sha256)")
[ 1407.054061][T12921] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1407.074509][   T30] audit: type=1326 audit(1749665513.371:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13526 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f467578e929 code=0x7fc00000
[ 1407.201871][T11577] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1407.784588][   T30] audit: type=1326 audit(1749665514.041:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13526 comm="syz.2.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f467578e929 code=0x7fc00000
[ 1408.016850][T12921] 8021q: adding VLAN 0 to HW filter on device team0
[ 1408.066774][ T9792] udevd[9792]: symlink '../../loop3' '/dev/disk/by-diskseq/1112.tmp-b7:3' failed: Read-only file system
[ 1408.107539][T11916] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1408.114727][T11916] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1408.137591][T12217] udevd[12217]: symlink '../../loop8' '/dev/disk/by-diskseq/1121.tmp-b7:8' failed: Read-only file system
[ 1408.234065][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1408.257047][T11924] udevd[11924]: symlink '../../loop2' '/dev/disk/by-diskseq/1120.tmp-b7:2' failed: Read-only file system
[ 1408.270894][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1119.tmp-b7:0' failed: Read-only file system
[ 1408.277310][T11916] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1408.289242][T11916] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1408.291799][T12217] udevd[12217]: symlink '../../loop8' '/dev/disk/by-diskseq/1121.tmp-b7:8' failed: Read-only file system
[ 1408.396099][T13542] loop3: detected capacity change from 0 to 1024
[ 1408.524026][T13546] loop0: detected capacity change from 0 to 512
[ 1408.532863][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1122.tmp-b7:5' failed: Read-only file system
[ 1408.612637][T13542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1408.640456][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[ 1408.809379][T13557] 9pnet_fd: Insufficient options for proto=fd
[ 1409.435782][T13546] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[ 1409.552963][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1122.tmp-b7:5' failed: Read-only file system
[ 1409.583900][ T9792] udevd[9792]: symlink '../../loop3' '/dev/disk/by-diskseq/1124.tmp-b7:3' failed: Read-only file system
[ 1409.624709][T13546] EXT4-fs (loop0): invalid journal inode
[ 1409.671528][T12921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1409.685582][T13546] EXT4-fs (loop0): can't get journal size
[ 1409.702902][T11924] udevd[11924]: symlink '../../loop0' '/dev/disk/by-diskseq/1125.tmp-b7:0' failed: Read-only file system
[ 1410.018294][T13546] EXT4-fs (loop0): 1 truncate cleaned up
[ 1410.061112][T13546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1410.129180][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1410.147035][T13564] loop2: detected capacity change from 0 to 128
[ 1410.183631][T13565] loop8: detected capacity change from 0 to 128
[ 1410.363309][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'.
[ 1410.380087][T13569] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[ 1410.388774][T13569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1411.044366][T13565] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1411.374396][T13565] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1412.945875][T13472] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1413.079955][ T9530] udevd[9530]: symlink '../../loop5' '/dev/disk/by-diskseq/1126.tmp-b7:5' failed: Read-only file system
[ 1413.293667][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1127.tmp-b7:8' failed: Read-only file system
[ 1413.310979][ T9792] udevd[9792]: symlink '../../loop3' '/dev/disk/by-diskseq/1130.tmp-b7:3' failed: Read-only file system
[ 1413.400002][T13582] loop5: detected capacity change from 0 to 128
[ 1414.324532][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1127.tmp-b7:8' failed: Read-only file system
[ 1414.337812][T13582] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[ 1414.370725][T11756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1414.384621][T13585] loop8: detected capacity change from 0 to 256
[ 1414.449756][ T9454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1414.459739][ T9454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1414.472946][ T9454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1414.481711][ T9454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1414.490897][ T9454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1414.742656][T13591] loop3: detected capacity change from 0 to 128
[ 1414.793497][T13594] loop0: detected capacity change from 0 to 128
[ 1414.851420][T13591] EXT4-fs: Ignoring removed nobh option
[ 1414.862597][ T9792] udevd[9792]: symlink '../../loop5' '/dev/disk/by-diskseq/1132.tmp-b7:5' failed: Read-only file system
[ 1415.372889][   T30] audit: type=1326 audit(1749665521.543:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.2.1361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f467578e929 code=0x0
[ 1415.622245][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1131.tmp-b7:8' failed: Read-only file system
[ 1415.626315][T13585] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d)
[ 1415.635413][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-uuid/1234-1234.tmp-b7:8' failed: Read-only file system
[ 1415.740195][T13585] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186)
[ 1415.763862][ T9792] udevd[9792]: symlink '../../loop5' '/dev/disk/by-diskseq/1132.tmp-b7:5' failed: Read-only file system
[ 1415.781738][T13591] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1415.821054][ T9579] udevd[9579]: symlink '../../loop3' '/dev/disk/by-diskseq/1135.tmp-b7:3' failed: Read-only file system
[ 1415.845072][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1133.tmp-b7:8' failed: Read-only file system
[ 1415.856581][T13594] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1415.870834][T13591] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1415.953631][   T30] audit: type=1800 audit(1749665522.085:49): pid=13585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1357" name="file2" dev="loop8" ino=1048680 res=0 errno=0
[ 1415.972983][T13594] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1416.159858][T13588] chnl_net:caif_netlink_parms(): no params data found
[ 1416.215160][T13613] loop5: detected capacity change from 0 to 1024
[ 1416.265737][T13613] EXT4-fs: inline encryption not supported
[ 1416.346994][T13613] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1416.375582][T11365] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1416.380689][T13594] fscrypt (loop0): Missing crypto API support for AES-128-CBC-ESSIV (API name: "essiv(cbc(aes),sha256)")
[ 1416.419312][T13613] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.1362: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1416.491344][T13613] EXT4-fs (loop5): Remounting filesystem read-only
[ 1416.541143][T13613] Quota error (device loop5): write_blk: dquota write failed
[ 1416.716724][T13613] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[ 1416.730930][ T9454] Bluetooth: hci1: command tx timeout
[ 1416.793496][T13613] EXT4-fs (loop5): 1 orphan inode deleted
[ 1416.862700][T11756] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1416.873333][T13613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1416.946557][T13626] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1417.678887][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1418.739921][ T9792] udevd[9792]: symlink '../../loop5' '/dev/disk/by-diskseq/1138.tmp-b7:5' failed: Read-only file system
[ 1418.767145][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1141.tmp-b7:0' failed: Read-only file system
[ 1418.813717][T13648] loop8: detected capacity change from 0 to 128
[ 1418.872355][T13648] vfat: Bad value for 'gid'
[ 1418.876931][T13648] vfat: Bad value for 'gid'
[ 1418.908718][ T9792] udevd[9792]: symlink '../../loop5' '/dev/disk/by-diskseq/1138.tmp-b7:5' failed: Read-only file system
[ 1418.924211][ T9454] Bluetooth: hci1: command tx timeout
[ 1419.010349][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1140.tmp-b7:3' failed: Read-only file system
[ 1419.050249][ T9792] udevd[9792]: symlink '../../loop5' '/dev/disk/by-diskseq/1142.tmp-b7:5' failed: Read-only file system
[ 1419.206418][T12217] udevd[12217]: symlink '../../loop8' '/dev/disk/by-diskseq/1143.tmp-b7:8' failed: Read-only file system
[ 1419.227905][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1419.361876][T13660] loop8: detected capacity change from 0 to 256
[ 1419.382039][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1143.tmp-b7:8' failed: Read-only file system
[ 1419.394553][T13660] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1419.397658][T13662] loop5: detected capacity change from 0 to 128
[ 1419.405332][ T5815] usb 4-1: Using ep0 maxpacket: 32
[ 1419.426880][T13660] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[ 1419.450182][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1419.471917][ T5815] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[ 1419.487043][ T5815] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[ 1419.508338][ T5815] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[ 1419.536980][ T5815] usb 4-1: config 128 has no interface number 0
[ 1419.550026][T13662] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1419.570097][ T5815] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 1419.585786][ T5815] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1419.594328][T13660] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x062de574, utbl_chksum : 0xe619d30d)
[ 1419.596887][ T5815] usb 4-1: config 128 interface 127 has no altsetting 0
[ 1419.643345][ T5815] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[ 1419.650612][T13662] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1419.661978][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.670382][ T5815] usb 4-1: Product: syz
[ 1419.677252][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-diskseq/1143.tmp-b7:8' failed: Read-only file system
[ 1419.683366][ T5815] usb 4-1: Manufacturer: syz
[ 1419.693000][ T5815] usb 4-1: SerialNumber: syz
[ 1419.717012][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-uuid/1234-1234.tmp-b7:8' failed: Read-only file system
[ 1419.733989][ T9792] udevd[9792]: symlink '../../loop5' '/dev/disk/by-diskseq/1142.tmp-b7:5' failed: Read-only file system
[ 1419.990419][T13668] loop0: detected capacity change from 0 to 2048
[ 1420.119023][T13668] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[ 1421.159586][ T9454] Bluetooth: hci1: command tx timeout
[ 1421.303788][T11916] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1421.343155][T13668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1421.507096][ T5815] usb 4-1: USB disconnect, device number 2
[ 1423.374624][ T9454] Bluetooth: hci1: command tx timeout
[ 1423.428965][T13684] loop5: detected capacity change from 0 to 1024
[ 1423.442287][T13684] EXT4-fs: inline encryption not supported
[ 1423.449848][T13684] EXT4-fs: Ignoring removed bh option
[ 1423.459209][T13588] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1423.504797][T13588] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1423.529800][T13684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1423.535330][T13588] bridge_slave_0: entered allmulticast mode
[ 1423.612695][T13588] bridge_slave_0: entered promiscuous mode
[ 1423.620705][T13690] loop3: detected capacity change from 0 to 1024
[ 1423.634848][T13690] EXT4-fs: Ignoring removed nobh option
[ 1423.658972][T13588] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1423.666555][T13588] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1423.694152][T13588] bridge_slave_1: entered allmulticast mode
[ 1423.722061][T13690] EXT4-fs: Ignoring removed bh option
[ 1423.735058][T13588] bridge_slave_1: entered promiscuous mode
[ 1423.856612][T13690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1423.938744][T13699] loop0: detected capacity change from 0 to 256
[ 1424.040429][T13699] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d)
[ 1424.080473][T13699] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[ 1424.104743][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1152.tmp-b7:0' failed: Read-only file system
[ 1424.171816][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system
[ 1424.206673][   T30] audit: type=1800 audit(1749665529.800:50): pid=13699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1376" name="file2" dev="loop0" ino=1048684 res=0 errno=0
[ 1424.318303][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1152.tmp-b7:0' failed: Read-only file system
[ 1424.333500][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system
[ 1424.599970][T11284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1424.655824][T13588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1424.698107][ T9530] udevd[9530]: symlink '../../loop8' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system
[ 1424.712047][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1424.714239][T13588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1424.768988][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1152.tmp-b7:0' failed: Read-only file system
[ 1424.892931][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1152.tmp-b7:0' failed: Read-only file system
[ 1424.959275][ T9792] udevd[9792]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[ 1425.064233][ T9792] udevd[9792]: symlink '../../loop5' '/dev/disk/by-diskseq/1150.tmp-b7:5' failed: Read-only file system
[ 1425.143033][ T9530] udevd[9530]: symlink '../../loop0' '/dev/disk/by-diskseq/1153.tmp-b7:0' failed: Read-only file system
[ 1425.252838][T13714] loop3: detected capacity change from 0 to 1024
[ 1425.262029][T13714] EXT4-fs: inline encryption not supported
[ 1425.303452][T13714] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1425.429390][T13714] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.1379: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1425.602613][T13588] team0: Port device team_slave_0 added
[ 1425.661554][T13714] EXT4-fs (loop3): Remounting filesystem read-only
[ 1425.675113][T13714] Quota error (device loop3): write_blk: dquota write failed
[ 1425.729595][T13714] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1425.763142][T13588] team0: Port device team_slave_1 added
[ 1425.787760][T13723] loop2: detected capacity change from 0 to 1024
[ 1425.822424][T13714] EXT4-fs (loop3): 1 orphan inode deleted
[ 1425.841691][T13723] ext4: Unknown parameter 'fowner>000000000000'
[ 1425.930730][T13714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1426.293246][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1426.443265][T11365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1426.673738][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'.
[ 1427.227530][T13466] bridge_slave_1: left allmulticast mode
[ 1427.233273][T13466] bridge_slave_1: left promiscuous mode
[ 1427.267035][T13466] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1427.296212][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1427.315173][    T9] usb 6-1: config 0 has no interfaces?
[ 1427.323713][    T9] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[ 1427.333103][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1427.344586][T13466] bridge_slave_0: left allmulticast mode
[ 1427.350285][T13466] bridge_slave_0: left promiscuous mode
[ 1427.357054][T13742] loop0: detected capacity change from 0 to 512
[ 1427.359023][T13466] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1427.372210][    T9] usb 6-1: config 0 descriptor??
[ 1427.440723][T13742] EXT4-fs warning (device loop0): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1427.496867][T13742] EXT4-fs (loop0): mount failed
[ 1427.741723][ T9454] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[ 1427.752387][ T9454] CPU: 1 UID: 0 PID: 9454 Comm: kworker/u9:1 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) 
[ 1427.752439][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1427.752466][ T9454] Workqueue: hci0 hci_rx_work
[ 1427.752509][ T9454] Call Trace:
[ 1427.752522][ T9454]  <TASK>
[ 1427.752537][ T9454]  dump_stack_lvl+0x16c/0x1f0
[ 1427.752605][ T9454]  sysfs_warn_dup+0x7f/0xa0
[ 1427.752653][ T9454]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1427.752701][ T9454]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1427.752747][ T9454]  ? find_held_lock+0x2b/0x80
[ 1427.752803][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.752851][ T9454]  ? do_raw_spin_unlock+0x172/0x230
[ 1427.752898][ T9454]  kobject_add_internal+0x2c4/0x9b0
[ 1427.752952][ T9454]  kobject_add+0x16e/0x240
[ 1427.752995][ T9454]  ? __pfx_kobject_add+0x10/0x10
[ 1427.753048][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.753095][ T9454]  ? do_raw_spin_unlock+0x172/0x230
[ 1427.753137][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.753184][ T9454]  ? kobject_put+0xab/0x5a0
[ 1427.753230][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.753288][ T9454]  device_add+0x288/0x1a70
[ 1427.753332][ T9454]  ? __pfx_dev_set_name+0x10/0x10
[ 1427.753380][ T9454]  ? __pfx_device_add+0x10/0x10
[ 1427.753422][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.753469][ T9454]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1427.753549][ T9454]  hci_conn_add_sysfs+0x17e/0x230
[ 1427.753595][ T9454]  le_conn_complete_evt+0x1075/0x1d70
[ 1427.753671][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.753720][ T9454]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1427.753784][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.753840][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.753895][ T9454]  hci_le_conn_complete_evt+0x23c/0x370
[ 1427.753972][ T9454]  hci_le_meta_evt+0x357/0x5e0
[ 1427.754020][ T9454]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1427.754092][ T9454]  hci_event_packet+0x685/0x11c0
[ 1427.754158][ T9454]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1427.754203][ T9454]  ? __pfx_hci_event_packet+0x10/0x10
[ 1427.754268][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.754319][ T9454]  ? kcov_remote_start+0x3c9/0x6d0
[ 1427.754362][ T9454]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1427.754424][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.754484][ T9454]  hci_rx_work+0x2c5/0x16b0
[ 1427.754527][ T9454]  ? rcu_is_watching+0x12/0xc0
[ 1427.754584][ T9454]  process_one_work+0x9cf/0x1b70
[ 1427.754645][ T9454]  ? __pfx_process_one_work+0x10/0x10
[ 1427.754685][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.754744][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.754792][ T9454]  ? assign_work+0x1a0/0x250
[ 1427.754861][ T9454]  worker_thread+0x6c8/0xf10
[ 1427.754911][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.754961][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.755013][ T9454]  ? __kthread_parkme+0x19e/0x250
[ 1427.755065][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.755116][ T9454]  ? __pfx_worker_thread+0x10/0x10
[ 1427.755156][ T9454]  kthread+0x3c5/0x780
[ 1427.755219][ T9454]  ? __pfx_kthread+0x10/0x10
[ 1427.755286][ T9454]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1427.755332][ T9454]  ? rcu_is_watching+0x12/0xc0
[ 1427.755380][ T9454]  ? __pfx_kthread+0x10/0x10
[ 1427.755446][ T9454]  ret_from_fork+0x5d7/0x6f0
[ 1427.755502][ T9454]  ? __pfx_kthread+0x10/0x10
[ 1427.755566][ T9454]  ret_from_fork_asm+0x1a/0x30
[ 1427.755635][ T9454]  </TASK>
[ 1427.755683][ T9454] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1428.111653][ T9454] Bluetooth: hci0: failed to register connection device
[ 1429.157671][T13766] loop3: detected capacity change from 0 to 1024
[ 1429.483968][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1163.tmp-b7:3' failed: Read-only file system
[ 1429.525006][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[ 1429.573082][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system
[ 1429.755587][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1162.tmp-b7:0' failed: Read-only file system
[ 1429.820455][T13774] loop0: detected capacity change from 0 to 512
[ 1429.943933][ T9949] usb 6-1: USB disconnect, device number 5
[ 1430.022717][T12218] udevd[12218]: symlink '../../loop5' '/dev/disk/by-diskseq/1154.tmp-b7:5' failed: Read-only file system
[ 1430.058150][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1163.tmp-b7:3' failed: Read-only file system
[ 1430.185973][T13778] loop3: detected capacity change from 0 to 128
[ 1430.266260][T13774] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[ 1430.315843][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1165.tmp-b7:0' failed: Read-only file system
[ 1430.332209][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1163.tmp-b7:3' failed: Read-only file system
[ 1430.334435][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-label/\x86\x5b.tmp-b7:0' failed: Read-only file system
[ 1430.452198][ T9792] udevd[9792]: symlink '../../loop0' '/dev/disk/by-diskseq/1165.tmp-b7:0' failed: Read-only file system
[ 1430.808400][T13783] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1431.606221][T13466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1431.628542][T13788] loop5: detected capacity change from 0 to 256
[ 1431.636195][T13466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1431.658485][T13788] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1431.694043][T13788] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[ 1431.722694][T13788] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1431.847178][T13466] bond0 (unregistering): Released all slaves
[ 1432.000447][T13736] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1432.003542][   T30] audit: type=1800 audit(1749665537.084:51): pid=13736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1385" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[ 1432.014317][T13736] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1432.046598][T13736] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1432.822785][T13797] loop5: detected capacity change from 0 to 764
[ 1432.978917][T13799] loop8: detected capacity change from 0 to 128
[ 1433.089829][T13588] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1433.120966][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1433.189998][T13588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1433.265900][ T9454] Bluetooth: hci5: unexpected event for opcode 0x1003
[ 1433.495951][T11577] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[ 1433.535329][T11577] FAT-fs (loop8): Filesystem has been set read-only
[ 1433.551284][T13466] hsr_slave_0: left promiscuous mode
[ 1433.577073][T13466] hsr_slave_1: left promiscuous mode
[ 1433.583429][T13466] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1433.608018][T13466] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1433.699438][T13809] loop0: detected capacity change from 0 to 4096
[ 1433.764019][T13809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1433.778333][ T9949] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1433.798791][T13814] loop8: detected capacity change from 0 to 512
[ 1433.821535][T13814] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1433.927965][T13814] EXT4-fs error (device loop8): xattr_find_entry:333: inode #15: comm syz.8.1399: corrupted xattr entries
[ 1433.970948][ T9949] usb 6-1: Using ep0 maxpacket: 8
[ 1433.986980][ T9949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1434.013407][ T9949] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[ 1434.025675][ T9949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1434.045094][ T9949] usb 6-1: config 0 descriptor??
[ 1434.061927][T13814] EXT4-fs (loop8): 1 truncate cleaned up
[ 1434.082886][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1434.100293][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1434.123274][T13814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1434.530444][T13814] loop8: detected capacity change from 512 to 0
[ 1434.602954][T13814] 
[ 1434.605354][T13814] ======================================================
[ 1434.612394][T13814] WARNING: possible circular locking dependency detected
[ 1434.619451][T13814] 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 Not tainted
[ 1434.625073][T13827] loop3: detected capacity change from 0 to 2048
[ 1434.626561][T13814] ------------------------------------------------------
[ 1434.626578][T13814] syz.8.1399/13814 is trying to acquire lock:
[ 1434.634718][T11756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1434.639899][T13814] ffffffff908b44a8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870
[ 1434.664766][T13814] 
[ 1434.664766][T13814] but task is already holding lock:
[ 1434.672142][T13814] ffff88814338ec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[ 1434.683818][T13814] 
[ 1434.683818][T13814] which lock already depends on the new lock.
[ 1434.683818][T13814] 
[ 1434.694255][T13814] 
[ 1434.694255][T13814] the existing dependency chain (in reverse order) is:
[ 1434.703312][T13814] 
[ 1434.703312][T13814] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}:
[ 1434.711978][T13814]        blk_alloc_queue+0x619/0x760
[ 1434.717308][T13814]        blk_mq_alloc_queue+0x175/0x290
[ 1434.722899][T13814]        __blk_mq_alloc_disk+0x29/0x120
[ 1434.728492][T13814]        loop_add+0x49e/0xb70
[ 1434.733195][T13814]        loop_init+0x164/0x270
[ 1434.737990][T13814]        do_one_initcall+0x123/0x6e0
[ 1434.743413][T13814]        kernel_init_freeable+0x5c2/0x900
[ 1434.749170][T13814]        kernel_init+0x1c/0x2b0
[ 1434.754151][T13814]        ret_from_fork+0x5d7/0x6f0
[ 1434.759330][T13814]        ret_from_fork_asm+0x1a/0x30
[ 1434.764669][T13814] 
[ 1434.764669][T13814] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1434.771947][T13814]        fs_reclaim_acquire+0x102/0x150
[ 1434.777556][T13814]        kmem_cache_alloc_node_noprof+0x57/0x3b0
[ 1434.783923][T13814]        __alloc_skb+0x2b2/0x380
[ 1434.789002][T13814]        alloc_uevent_skb+0x7d/0x210
[ 1434.794337][T13814]        kobject_uevent_env+0xca4/0x1870
[ 1434.800061][T13814]        kobject_synth_uevent+0x7d4/0x8a0
[ 1434.805832][T13814]        bus_uevent_store+0x3d/0x90
[ 1434.811079][T13814]        bus_attr_store+0x74/0xb0
[ 1434.816234][T13814]        sysfs_kf_write+0xf2/0x150
[ 1434.821383][T13814]        kernfs_fop_write_iter+0x354/0x510
[ 1434.827258][T13814]        vfs_write+0x6c7/0x1150
[ 1434.832155][T13814]        ksys_write+0x12a/0x250
[ 1434.837045][T13814]        do_syscall_64+0xcd/0x4c0
[ 1434.842113][T13814]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1434.848607][T13814] 
[ 1434.848607][T13814] -> #0 (uevent_sock_mutex){+.+.}-{4:4}:
[ 1434.856570][T13814]        __lock_acquire+0x126f/0x1c90
[ 1434.862015][T13814]        lock_acquire+0x179/0x350
[ 1434.867109][T13814]        __mutex_lock+0x199/0xb90
[ 1434.872167][T13814]        kobject_uevent_env+0xb36/0x1870
[ 1434.877841][T13814]        loop_set_status+0x9c9/0xb90
[ 1434.883173][T13814]        lo_ioctl+0xbd3/0x2760
[ 1434.887982][T13814]        blkdev_ioctl+0x277/0x6d0
[ 1434.893082][T13814]        __x64_sys_ioctl+0x18e/0x210
[ 1434.898420][T13814]        do_syscall_64+0xcd/0x4c0
[ 1434.903474][T13814]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1434.909939][T13814] 
[ 1434.909939][T13814] other info that might help us debug this:
[ 1434.909939][T13814] 
[ 1434.920209][T13814] Chain exists of:
[ 1434.920209][T13814]   uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#25
[ 1434.920209][T13814] 
[ 1434.934040][T13814]  Possible unsafe locking scenario:
[ 1434.934040][T13814] 
[ 1434.941608][T13814]        CPU0                    CPU1
[ 1434.946994][T13814]        ----                    ----
[ 1434.952367][T13814]   lock(&q->q_usage_counter(io)#25);
[ 1434.957788][T13814]                                lock(fs_reclaim);
[ 1434.964321][T13814]                                lock(&q->q_usage_counter(io)#25);
[ 1434.972268][T13814]   lock(uevent_sock_mutex);
[ 1434.976886][T13814] 
[ 1434.976886][T13814]  *** DEADLOCK ***
[ 1434.976886][T13814] 
[ 1434.985045][T13814] 3 locks held by syz.8.1399/13814:
[ 1434.990288][T13814]  #0: ffff888143752400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xb90
[ 1434.999806][T13814]  #1: ffff88814338ec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[ 1435.011602][T13814]  #2: ffff88814338ec78 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[ 1435.023737][T13814] 
[ 1435.023737][T13814] stack backtrace:
[ 1435.029645][T13814] CPU: 0 UID: 0 PID: 13814 Comm: syz.8.1399 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) 
[ 1435.029698][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1435.029721][T13814] Call Trace:
[ 1435.029736][T13814]  <TASK>
[ 1435.029751][T13814]  dump_stack_lvl+0x116/0x1f0
[ 1435.029819][T13814]  print_circular_bug+0x275/0x350
[ 1435.029880][T13814]  check_noncircular+0x14c/0x170
[ 1435.029943][T13814]  __lock_acquire+0x126f/0x1c90
[ 1435.030013][T13814]  lock_acquire+0x179/0x350
[ 1435.030069][T13814]  ? kobject_uevent_env+0xb36/0x1870
[ 1435.030124][T13814]  ? __pfx___might_resched+0x10/0x10
[ 1435.030178][T13814]  __mutex_lock+0x199/0xb90
[ 1435.030213][T13814]  ? kobject_uevent_env+0xb36/0x1870
[ 1435.030259][T13814]  ? block_devnode+0x9e/0xd0
[ 1435.030307][T13814]  ? kobject_uevent_env+0xb36/0x1870
[ 1435.030355][T13814]  ? __pfx___mutex_lock+0x10/0x10
[ 1435.030396][T13814]  ? __asan_memcpy+0x3c/0x60
[ 1435.030434][T13814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1435.030479][T13814]  ? kobject_get_path+0x8e/0x2a0
[ 1435.030520][T13814]  ? kobject_uevent_env+0xb36/0x1870
[ 1435.030565][T13814]  kobject_uevent_env+0xb36/0x1870
[ 1435.030617][T13814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1435.030661][T13814]  ? __asan_memcpy+0x3c/0x60
[ 1435.030698][T13814]  loop_set_status+0x9c9/0xb90
[ 1435.030754][T13814]  lo_ioctl+0xbd3/0x2760
[ 1435.030801][T13814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1435.030846][T13814]  ? __lock_acquire+0xb8a/0x1c90
[ 1435.030907][T13814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1435.030951][T13814]  ? kasan_save_stack+0x42/0x60
[ 1435.030992][T13814]  ? kasan_save_stack+0x33/0x60
[ 1435.031032][T13814]  ? kasan_save_track+0x14/0x30
[ 1435.031075][T13814]  ? kasan_save_free_info+0x3b/0x60
[ 1435.031131][T13814]  ? __kasan_slab_free+0x51/0x70
[ 1435.031174][T13814]  ? kfree+0x2b4/0x4d0
[ 1435.031229][T13814]  ? tomoyo_path_number_perm+0x470/0x580
[ 1435.031272][T13814]  ? security_file_ioctl+0x9b/0x240
[ 1435.031318][T13814]  ? __x64_sys_ioctl+0xb7/0x210
[ 1435.031377][T13814]  ? do_syscall_64+0xcd/0x4c0
[ 1435.031411][T13814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1435.031458][T13814]  ? __pfx_lo_ioctl+0x10/0x10
[ 1435.031538][T13814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1435.031583][T13814]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1435.031629][T13814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1435.031674][T13814]  ? blkdev_common_ioctl+0x1dd/0x2480
[ 1435.031717][T13814]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1435.031763][T13814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1435.031808][T13814]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1435.031850][T13814]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[ 1435.031897][T13814]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1435.031976][T13814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1435.032020][T13814]  ? find_held_lock+0x2b/0x80
[ 1435.032066][T13814]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1435.032120][T13814]  ? __pfx_lo_ioctl+0x10/0x10
[ 1435.032165][T13814]  blkdev_ioctl+0x277/0x6d0
[ 1435.032211][T13814]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1435.032258][T13814]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1435.032302][T13814]  __x64_sys_ioctl+0x18e/0x210
[ 1435.032367][T13814]  do_syscall_64+0xcd/0x4c0
[ 1435.032404][T13814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1435.032441][T13814] RIP: 0033:0x7f0fa7f8e929
[ 1435.032470][T13814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1435.032510][T13814] RSP: 002b:00007f0fa8d60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1435.032545][T13814] RAX: ffffffffffffffda RBX: 00007f0fa81b5fa0 RCX: 00007f0fa7f8e929
[ 1435.032570][T13814] RDX: 00002000000000c0 RSI: 0000000000004c04 RDI: 0000000000000005
[ 1435.032594][T13814] RBP: 00007f0fa8010b39 R08: 0000000000000000 R09: 0000000000000000
[ 1435.032618][T13814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1435.032642][T13814] R13: 0000000000000000 R14: 00007f0fa81b5fa0 R15: 00007ffd9d5e45d8
[ 1435.032681][T13814]  </TASK>
[ 1435.464940][ T9949] logitech 0003:046D:C20E.0012: rdesc size test failed for formula gp
[ 1435.485563][ T9949] logitech 0003:046D:C20E.0012: unknown main item tag 0x0
[ 1435.506409][T13827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1435.518015][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1177.tmp-b7:3' failed: Read-only file system
[ 1435.518039][T13824] syz.8.1399: attempt to access beyond end of device
[ 1435.518039][T13824] loop8: rw=524288, sector=12, nr_sectors = 2 limit=0
[ 1435.532151][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system
[ 1435.548218][    C1] I/O error, dev loop8, sector 120 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[ 1435.555612][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system
[ 1435.632221][ T9949] logitech 0003:046D:C20E.0012: unknown main item tag 0x0
[ 1435.637466][T12217] udevd[12217]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[ 1435.653129][T12217] udevd[12217]: symlink '../../loop0' '/dev/disk/by-diskseq/1175.tmp-b7:0' failed: Read-only file system
[ 1435.667684][T13824] syz.8.1399: attempt to access beyond end of device
[ 1435.667684][T13824] loop8: rw=524288, sector=14, nr_sectors = 2 limit=0
[ 1435.672228][T12217] udevd[12217]: symlink '../../loop0' '/dev/disk/by-diskseq/1175.tmp-b7:0' failed: Read-only file system
[ 1435.676548][ T9949] logitech 0003:046D:C20E.0012: unknown main item tag 0x0
[ 1435.712828][T12217] udevd[12217]: symlink '../../loop0' '/dev/disk/by-diskseq/1178.tmp-b7:0' failed: Read-only file system
[ 1435.732414][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1176.tmp-b7:8' failed: Read-only file system
[ 1435.774031][T13832] loop0: detected capacity change from 0 to 256
[ 1435.774823][ T9530] udevd[9530]: symlink '../../loop3' '/dev/disk/by-diskseq/1177.tmp-b7:3' failed: Read-only file system
[ 1435.808004][T13824] syz.8.1399: attempt to access beyond end of device
[ 1435.808004][T13824] loop8: rw=524288, sector=16, nr_sectors = 2 limit=0
[ 1435.815353][T13814] syz.8.1399: attempt to access beyond end of device
[ 1435.815353][T13814] loop8: rw=12288, sector=26, nr_sectors = 2 limit=0
[ 1435.821740][T13824] syz.8.1399: attempt to access beyond end of device
[ 1435.821740][T13824] loop8: rw=12288, sector=18, nr_sectors = 2 limit=0
[ 1435.853013][T13824] EXT4-fs error (device loop8): ext4_get_inode_loc:4929: inode #18: block 9: comm syz.8.1399: unable to read itable block
[ 1435.890837][ T9792] udevd[9792]: symlink '../../loop8' '/dev/disk/by-diskseq/1176.tmp-b7:8' failed: Read-only file system
[ 1435.895256][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'.
[ 1435.913201][T13814] EXT4-fs error (device loop8): __ext4_find_entry:1613: inode #2: comm syz.8.1399: reading directory lblock 0
[ 1435.922179][ T9949] logitech 0003:046D:C20E.0012: unknown main item tag 0x0
[ 1435.937483][T13824] syz.8.1399: attempt to access beyond end of device
[ 1435.937483][T13824] loop8: rw=145409, sector=2, nr_sectors = 2 limit=0
[ 1435.972557][T13824] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[ 1435.981436][T13814] EXT4-fs (loop8): previous I/O error to superblock detected
[ 1435.985411][ T9949] logitech 0003:046D:C20E.0012: unknown main item tag 0x0
[ 1435.989521][T13814] syz.8.1399: attempt to access beyond end of device
[ 1435.989521][T13814] loop8: rw=145409, sector=2, nr_sectors = 2 limit=0
[ 1436.029398][    C0] I/O error, dev loop8, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[ 1436.039165][ T9949] logitech 0003:046D:C20E.0012: unknown main item tag 0x0
[ 1436.047407][T13814] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[ 1436.074323][ T9949] logitech 0003:046D:C20E.0012: unknown main item tag 0x0
[ 1436.087787][T13814] EXT4-fs (loop8): I/O error while writing superblock
[ 1436.099013][ T9949] logitech 0003:046D:C20E.0012: item fetching failed at offset 10/11
[ 1436.111494][ T9949] logitech 0003:046D:C20E.0012: parse failed
[ 1436.124871][T13824] EXT4-fs (loop8): I/O error while writing superblock
[ 1436.135743][ T9949] logitech 0003:046D:C20E.0012: probe with driver logitech failed with error -22
[ 1436.164226][ T9949] usb 6-1: USB disconnect, device number 6
[ 1436.170295][T13824] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: IO failure
[ 1436.181298][T13824] syz.8.1399: attempt to access beyond end of device
[ 1436.181298][T13824] loop8: rw=145409, sector=2, nr_sectors = 2 limit=0
[ 1436.207760][T13824] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[ 1436.217153][T13824] EXT4-fs (loop8): I/O error while writing superblock
[ 1436.224081][T13824] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #18: comm syz.8.1399: mark_inode_dirty error
[ 1436.236041][T13824] syz.8.1399: attempt to access beyond end of device
[ 1436.236041][T13824] loop8: rw=145409, sector=2, nr_sectors = 2 limit=0
[ 1436.260143][T13824] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[ 1436.280760][T13824] EXT4-fs (loop8): I/O error while writing superblock
[ 1436.288985][T13466] team0 (unregistering): Port device team_slave_1 removed
[ 1436.403739][T11577] syz-executor: attempt to access beyond end of device
[ 1436.403739][T11577] loop8: rw=12288, sector=26, nr_sectors = 2 limit=0
[ 1436.423623][T13466] team0 (unregistering): Port device team_slave_0 removed
[ 1436.462429][T12837] Bluetooth: hci0: command 0x0406 tx timeout
[ 1436.509889][T12700] EXT4-fs error (device loop8): ext4_get_inode_loc:4929: inode #2: block 5: comm syz.8.1150: unable to read itable block
[ 1436.524749][T12700] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[ 1436.539022][T12700] EXT4-fs (loop8): I/O error while writing superblock
[ 1436.545873][T12700] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: IO failure
[ 1436.573715][T12700] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[ 1436.583299][T12700] EXT4-fs (loop8): I/O error while writing superblock
[ 1436.598717][T12700] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.1150: mark_inode_dirty error
[ 1436.629991][T12700] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[ 1436.641389][T12700] EXT4-fs (loop8): I/O error while writing superblock
[ 1436.657753][T11724] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4914: inode #18: block 9: comm kworker/u8:1: unable to read itable block
[ 1436.685755][T11724] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[ 1436.703961][T11724] EXT4-fs (loop8): I/O error while writing superblock
[ 1436.730567][T11724] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4914: inode #2: block 5: comm kworker/u8:1: unable to read itable block
[ 1436.761618][T11724] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[ 1436.790201][T12700] Buffer I/O error on dev loop8, logical block 1, lost sync page write
[ 1437.135829][T13588] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1437.145346][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1437.195596][T13588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1437.314632][T13588] hsr_slave_0: entered promiscuous mode
[ 1437.327145][T13588] hsr_slave_1: entered promiscuous mode
[ 1437.336094][T13588] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1437.348931][T13588] Cannot create hsr debugfs directory
[ 1437.574650][T12837] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1437.583108][T12837] Bluetooth: hci5: Injecting HCI hardware error event
[ 1437.590407][T12837] Bluetooth: hci5: hardware error 0x00
[ 1437.681067][T13466] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1437.783000][T13466] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1437.858817][T13466] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1437.961705][T13466] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1438.051529][T13588] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1438.089858][T13588] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1438.152272][T13588] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1438.175051][T13588] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1438.208120][T13466] bridge_slave_1: left allmulticast mode
[ 1438.222119][T13466] bridge_slave_1: left promiscuous mode
[ 1438.232571][T13466] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1438.253754][T13466] bridge_slave_0: left allmulticast mode
[ 1438.272621][T13466] bridge_slave_0: left promiscuous mode
[ 1438.278456][T13466] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1438.571280][T13466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1438.602955][T13466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1438.624189][T13466] bond0 (unregistering): Released all slaves
[ 1438.918267][T13588] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1438.958563][T13588] 8021q: adding VLAN 0 to HW filter on device team0
[ 1438.995446][T13466] hsr_slave_0: left promiscuous mode
[ 1439.012112][T13466] hsr_slave_1: left promiscuous mode
[ 1439.018078][T13466] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1439.050478][T13466] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1439.062122][T13466] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1439.069608][T13466] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1439.114214][T13466] veth1_macvtap: left promiscuous mode
[ 1439.120293][T13466] veth0_macvtap: left promiscuous mode
[ 1439.133280][T13466] veth1_vlan: left promiscuous mode
[ 1439.139060][T13466] veth0_vlan: left promiscuous mode
[ 1439.560349][T13466] team0 (unregistering): Port device team_slave_1 removed
[ 1439.641812][T13466] team0 (unregistering): Port device team_slave_0 removed
[ 1439.799233][T12837] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1439.951125][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1439.958311][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1440.017428][T11916] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1440.024652][T11916] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1440.518644][T13588] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1440.966919][T13588] veth0_vlan: entered promiscuous mode
[ 1440.992442][T13588] veth1_vlan: entered promiscuous mode
[ 1441.045860][T13588] veth0_macvtap: entered promiscuous mode
[ 1441.071953][T13588] veth1_macvtap: entered promiscuous mode
[ 1441.119111][T13588] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1441.154628][T13588] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1441.182177][T13588] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.200039][T13588] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.208828][T13588] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.231896][T13588] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1441.300253][T13588] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht'
[ 1441.363016][T11916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1441.364799][T13588] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht'
[ 1441.392663][T11916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1441.429290][T13472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1441.448381][T13472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50