last executing test programs:

2m16.602751919s ago: executing program 1 (id=305):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3cd4e1a89b51be4a6aa4c65285f988329a8163", 0x7d}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)

2m16.247020174s ago: executing program 1 (id=308):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
truncate(&(0x7f00000000c0)='./file3\x00', 0x6)
linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400)
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r0], 0x835, 0x0)

2m12.129168867s ago: executing program 1 (id=311):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000a64fd9c323317ea6c1ee66f10000000000000000000000b5f35a57f277b6f12794b999c65f779194308a9b1c"], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x400, 0x7ffc, 0x8040024e}, &(0x7f0000000180)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
timer_create(0x3, 0x0, 0x0)
eventfd2(0xff, 0x80001)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
bind$can_raw(r5, &(0x7f0000000240), 0x10)
close_range(r4, r5, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2})
r6 = socket(0x840000000002, 0x3, 0x100)
getsockopt$inet_pktinfo(r6, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2)
socketpair(0x8, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900030004000000040000000200000600000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000040)={{}, {' ', 0x4}, {' ', 0x2}}, 0x3f)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, 0x0, &(0x7f0000000140)=r7}, 0x20)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0d\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fcdbdf2525000000050029000000000005002b00030000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0)
setreuid(0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r9, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x7e8}}, 0x4000000)

2m9.353806599s ago: executing program 1 (id=315):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x5}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x2)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @tid=r5}, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x404000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})

2m5.199381596s ago: executing program 1 (id=321):
semop(0x0, &(0x7f00000002c0)=[{0x0, 0x202}, {}], 0x2)
semop(0x0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1)

2m2.512729489s ago: executing program 1 (id=326):
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, 0x0}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, "46f9"}}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e20, @empty}})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)

2m1.637801735s ago: executing program 32 (id=326):
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, 0x0}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, "46f9"}}, {0x0, 0x0}, {0x0, 0x0}]})
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0_to_team\x00', {0x2, 0x4e20, @empty}})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)

1m55.474954949s ago: executing program 0 (id=335):
semop(0x0, &(0x7f00000002c0)=[{0x0, 0x9}, {0x0, 0x202}, {}], 0x3)
semop(0x0, 0x0, 0x0)

1m54.33715731s ago: executing program 0 (id=338):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IlnvRiZISIhSkIUqVIlLr1ayqa1s0sjeIrcHFBDn9iuUgzlz4ISClANnvoJRjwgkjr4Fzeysd+NsXZuk2XXz+0mz7zPzzrzzzJPZ0cxY0QZ4aa2+l7lHKbJ65Z3tcn53p9Pb3encHcZJziRpJAtJinLxX5J8njzIYMo3hx1j7VOKT1dvrj/85PJgbqGeqvWLw7Y7mv1cmoNcq/Z5jdd+5vFGR7iU5ELdwtQ9HvrnxO5n/F4CALOsSE5NWt5MztY36+VzwOCueHCPfaI9mHYCAAAA8AK8spe9bOfctPMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk6T+/f+inhrDeCnF8Pf/5+tlqeMT7dG0EwAAAAAAAACA5+A7e9nLds4N5x8X1d/836hmLlaf38iH2Uo3m7ma7ayln342s5ykOTbQ/PZav7+5fIQt2xO3bL+Y4wUAAAAAAACAr6nfZ3X0938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgFRXJq0FTTxWHcTON0koUk8+V6D5KHw/gkezTtBAAAAOAFeGUve9nOueH846J65n+teu5fyIe5l3420k8v3dyq3gUMnvobuzud3u5O5245PT3uT/9zrDSqETN49zB5z61qjUv7W6zmF/l1rmQp72YzG/lN1tJPN0t5u4rWUqRZv71oDvOcmO9/n0zl3S/L9fUqk8XczkaV29XczAfp5VYa1TFU6xy6x/yurE7xk9oRa3Srbssj+mXdzoZmVZG5/Yq06tqX1Th/eCWOeZ4c3NNyGvvvoC5+BTU/W7dlrd+e6Zq3x86+1w6vRNJq//v+eu/enfXbW1dm55DGHSOrg5XojFXi8smvxDHM19UYXEWPd7V8o9r2XDbyq3yQW+nmRlq5kZVcTycr+VFWxup66Qjftcbxvmvf/X4dzCX5ed3OhrKu58fqOn6la1Z940tGVbrw/K9Ip79VB+XJ+tbMXZHOH7g2Dyvx6uGV+OPj8nOrd+/O5vra/SPu73t1W1bgZzNVifJ8uVD+Y1VzT54dZd+rE/uWq76L+32Np/ou7fd92Td1vr6He3qkdtV3eWJfp+p7faxv0l0OADPv7Jtn5xf/tfiPxc8W/7C4vvjOwltnbpz59nzm/n76r6f+3PhT48fFm/ksvx09/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+/rY8+vrPW63U3R8FiDi4RCAQvWTDtKxPwVbvWv3v/2tZHH/9g4+7a+933u/euL6+0r19vrfzwxrXbG71ua/A57TQBgOdodNM/7UwAAAAAAAAAAAAAAIAv8iL+O/G0jxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh6W30vc49SZLl1tVXO7+50euU0jEdrLiQpyuBvST5PHmQwpTk2XPFF+yk+Xb25/vCTy6OxFobrF4dtdzRP5NI4kNOzjtd+5vFGR7iU5ELdwtT9LwAA///KnQMa")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
truncate(&(0x7f00000000c0)='./file3\x00', 0x6)
linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r0], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1m51.772140681s ago: executing program 0 (id=340):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018004000000000000c0000007a000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800020000002a002cbe21459c3f08ff0002000000000000005558d71c64e53618c4670b743c2a99c1c12d624f4c5835190ba38e633b632aaabc5b67355d182da1ec142087bf396b9745a050fedd16f432a536708fb20000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0x7, 0x7}, 0x10}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pI4   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={&(0x7f00000007c0)="f851489181e4a32b72500c9ed2832d840b13f956e62f2eaf3da68c883da0c17b91eeb99d52a01b32c50f764a54774b7e3b738e09a6cbba0fb76b1b06a628803750d15a3719f0504068fcae8256af5ac8121837fc374a14c85db8eedc638626c6ea365ea5de2582c72b9ddffab371d5676def8ba5cc6aa61d7fe04493138be56d00e3936624ed7e3e0fec3663f2800e8584780b5e51122e979bbbfb06205cda335aac0774335f14b426be3d726c38183f1ab6ded2e3cc940cb98f15b7ca306c2d6607d9d9550ac4bd39a26aae26270a", &(0x7f00000008c0)=""/33, &(0x7f0000000900)="719e169666267761160153eb7ccb036db3e3cfabc24915d3873b1e45db262a861ac1bdc8c772e0e1693d52c5c18159b47ae3f7314dee7d08990c3587d7d76d111415f420c705d6978307d156191375e91b7ab96d3a55f387de685478009256caec33f6ed4212e3c7988d537f223bb1de7586e29e4c6f5a435ba16f799ce16aa82cc2c8fe04bce00edf1e97c3", &(0x7f00000009c0)="2e68effb60", 0x4, r3}, 0x38)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xddd1}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0xfffffffffffffec5, 0x10, &(0x7f0000000180)={0x0, 0x0, 0xce, 0x833c}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x5, 0x8}, {0x2, 0x2, 0xc, 0x6}, {0x3, 0x2, 0x8, 0x9}, {0x5, 0x4, 0x1, 0x9cf9b63765462f59}, {0x1, 0x4, 0x10, 0x1}], 0x10, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0x6c, 0x68, &(0x7f0000000500)="d96ecc6453b79e2d165acbc086326ff39f9dd06e2abe0a2bedfef23cb7df85257f933150f554b5caf8b084a3d20d007c92344b8abdfcaf66fea1c792fd6fa49c2c9a92dbba7d026d7c44160801e7c723d4cfbb278e95043f3cb578ef414b0f0f7113d278be9cbf318b896e3d", &(0x7f0000000580)=""/104, 0x3, 0x0, 0x2e, 0x74, &(0x7f0000000600)="29f921595483c518c7001b04089668c07e386c682bd097fbf6316158fa94244a6f25201ba60580f1845b7ecebccf", &(0x7f0000000640)="1c1cdfb9ce83ae4e9f58dce572f8256bd5d488ab4bf53087ff714b9126588ef5926575b4ef7754afa8d9496bf6f05ec052882932bf7c97a1533fc39ad89e9125cdc6362b3503916b98bcf08b6763320dd69a8060d15fca2ac74470bf1053336e29ffcf63ea7964b4b26517579ae648c933ada85d", 0x5, 0x0, 0x6}, 0x50)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc495, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x47, 0x0, @fd_index=0x402, 0x0, 0x0, 0x0, {}, 0x1})
sched_getparam(0x0, &(0x7f0000002b40))
io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1)
semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000080)=""/106)
semop(0x0, &(0x7f00000002c0)=[{0x0, 0x9}, {0x0, 0x202}, {}], 0x3)
semop(0x0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)

1m50.288823227s ago: executing program 0 (id=342):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x5}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x2)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @tid=r5}, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x404000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

56.096537955s ago: executing program 0 (id=343):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
truncate(&(0x7f00000000c0)='./file3\x00', 0x6)
linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400)
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

56.094904345s ago: executing program 0 (id=346):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018004000000000000c0000007a000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800020000002a002cbe21459c3f08ff0002000000000000005558d71c64e53618c4670b743c2a99c1c12d624f4c5835190ba38e633b632aaabc5b67355d182da1ec142087bf396b9745a050fedd16f432a536708fb20000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0x7, 0x7}, 0x10}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pI4   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={&(0x7f00000007c0)="f851489181e4a32b72500c9ed2832d840b13f956e62f2eaf3da68c883da0c17b91eeb99d52a01b32c50f764a54774b7e3b738e09a6cbba0fb76b1b06a628803750d15a3719f0504068fcae8256af5ac8121837fc374a14c85db8eedc638626c6ea365ea5de2582c72b9ddffab371d5676def8ba5cc6aa61d7fe04493138be56d00e3936624ed7e3e0fec3663f2800e8584780b5e51122e979bbbfb06205cda335aac0774335f14b426be3d726c38183f1ab6ded2e3cc940cb98f15b7ca306c2d6607d9d9550ac4bd39a26aae26270a", &(0x7f00000008c0)=""/33, &(0x7f0000000900)="719e169666267761160153eb7ccb036db3e3cfabc24915d3873b1e45db262a861ac1bdc8c772e0e1693d52c5c18159b47ae3f7314dee7d08990c3587d7d76d111415f420c705d6978307d156191375e91b7ab96d3a55f387de685478009256caec33f6ed4212e3c7988d537f223bb1de7586e29e4c6f5a435ba16f799ce16aa82cc2c8fe04bce00edf1e97c3", &(0x7f00000009c0)="2e68effb60", 0x4, r2}, 0x38)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xddd1}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0xfffffffffffffec5, 0x10, &(0x7f0000000180)={0x0, 0x0, 0xce, 0x833c}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x5, 0x8}, {0x2, 0x2, 0xc, 0x6}, {0x3, 0x2, 0x8, 0x9}, {0x5, 0x4, 0x1, 0x9cf9b63765462f59}, {0x1, 0x4, 0x10, 0x1}], 0x10, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x6c, 0x68, &(0x7f0000000500)="d96ecc6453b79e2d165acbc086326ff39f9dd06e2abe0a2bedfef23cb7df85257f933150f554b5caf8b084a3d20d007c92344b8abdfcaf66fea1c792fd6fa49c2c9a92dbba7d026d7c44160801e7c723d4cfbb278e95043f3cb578ef414b0f0f7113d278be9cbf318b896e3d", &(0x7f0000000580)=""/104, 0x3, 0x0, 0x2e, 0x74, &(0x7f0000000600)="29f921595483c518c7001b04089668c07e386c682bd097fbf6316158fa94244a6f25201ba60580f1845b7ecebccf", &(0x7f0000000640)="1c1cdfb9ce83ae4e9f58dce572f8256bd5d488ab4bf53087ff714b9126588ef5926575b4ef7754afa8d9496bf6f05ec052882932bf7c97a1533fc39ad89e9125cdc6362b3503916b98bcf08b6763320dd69a8060d15fca2ac74470bf1053336e29ffcf63ea7964b4b26517579ae648c933ada85d", 0x5, 0x0, 0x6}, 0x50)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc495, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x47, 0x0, @fd_index=0x402, 0x0, 0x0, 0x0, {}, 0x1})
sched_getparam(0x0, &(0x7f0000002b40))
io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0)
r9 = semget$private(0x0, 0x4000000009, 0x0)
semctl$SEM_STAT_ANY(r9, 0x1, 0x14, &(0x7f0000000080)=""/106)
semop(r9, &(0x7f00000002c0)=[{0x0, 0x9}, {0x0, 0x202}, {}], 0x3)
semop(r9, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)

56.093724575s ago: executing program 33 (id=346):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018004000000000000c0000007a000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800020000002a002cbe21459c3f08ff0002000000000000005558d71c64e53618c4670b743c2a99c1c12d624f4c5835190ba38e633b632aaabc5b67355d182da1ec142087bf396b9745a050fedd16f432a536708fb20000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0x7, 0x7}, 0x10}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pI4   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={&(0x7f00000007c0)="f851489181e4a32b72500c9ed2832d840b13f956e62f2eaf3da68c883da0c17b91eeb99d52a01b32c50f764a54774b7e3b738e09a6cbba0fb76b1b06a628803750d15a3719f0504068fcae8256af5ac8121837fc374a14c85db8eedc638626c6ea365ea5de2582c72b9ddffab371d5676def8ba5cc6aa61d7fe04493138be56d00e3936624ed7e3e0fec3663f2800e8584780b5e51122e979bbbfb06205cda335aac0774335f14b426be3d726c38183f1ab6ded2e3cc940cb98f15b7ca306c2d6607d9d9550ac4bd39a26aae26270a", &(0x7f00000008c0)=""/33, &(0x7f0000000900)="719e169666267761160153eb7ccb036db3e3cfabc24915d3873b1e45db262a861ac1bdc8c772e0e1693d52c5c18159b47ae3f7314dee7d08990c3587d7d76d111415f420c705d6978307d156191375e91b7ab96d3a55f387de685478009256caec33f6ed4212e3c7988d537f223bb1de7586e29e4c6f5a435ba16f799ce16aa82cc2c8fe04bce00edf1e97c3", &(0x7f00000009c0)="2e68effb60", 0x4, r2}, 0x38)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xddd1}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0xfffffffffffffec5, 0x10, &(0x7f0000000180)={0x0, 0x0, 0xce, 0x833c}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x5, 0x8}, {0x2, 0x2, 0xc, 0x6}, {0x3, 0x2, 0x8, 0x9}, {0x5, 0x4, 0x1, 0x9cf9b63765462f59}, {0x1, 0x4, 0x10, 0x1}], 0x10, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x6c, 0x68, &(0x7f0000000500)="d96ecc6453b79e2d165acbc086326ff39f9dd06e2abe0a2bedfef23cb7df85257f933150f554b5caf8b084a3d20d007c92344b8abdfcaf66fea1c792fd6fa49c2c9a92dbba7d026d7c44160801e7c723d4cfbb278e95043f3cb578ef414b0f0f7113d278be9cbf318b896e3d", &(0x7f0000000580)=""/104, 0x3, 0x0, 0x2e, 0x74, &(0x7f0000000600)="29f921595483c518c7001b04089668c07e386c682bd097fbf6316158fa94244a6f25201ba60580f1845b7ecebccf", &(0x7f0000000640)="1c1cdfb9ce83ae4e9f58dce572f8256bd5d488ab4bf53087ff714b9126588ef5926575b4ef7754afa8d9496bf6f05ec052882932bf7c97a1533fc39ad89e9125cdc6362b3503916b98bcf08b6763320dd69a8060d15fca2ac74470bf1053336e29ffcf63ea7964b4b26517579ae648c933ada85d", 0x5, 0x0, 0x6}, 0x50)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc495, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x47, 0x0, @fd_index=0x402, 0x0, 0x0, 0x0, {}, 0x1})
sched_getparam(0x0, &(0x7f0000002b40))
io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0)
r9 = semget$private(0x0, 0x4000000009, 0x0)
semctl$SEM_STAT_ANY(r9, 0x1, 0x14, &(0x7f0000000080)=""/106)
semop(r9, &(0x7f00000002c0)=[{0x0, 0x9}, {0x0, 0x202}, {}], 0x3)
semop(r9, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)

31.178012186s ago: executing program 3 (id=390):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x6)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"})
unshare(0x4000280)
socket$kcm(0x10, 0x5, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)

26.676221687s ago: executing program 3 (id=395):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
truncate(&(0x7f00000000c0)='./file3\x00', 0x6)
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r0], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

20.685012154s ago: executing program 5 (id=403):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018004000000000000c0000007a000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800020000002a002cbe21459c3f08ff0002000000000000005558d71c64e53618c4670b743c2a99c1c12d624f4c5835190ba38e633b632aaabc5b67355d182da1ec142087bf396b9745a050fedd16f432a536708fb20000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0x7, 0x7}, 0x10}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pI4   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={&(0x7f00000007c0)="f851489181e4a32b72500c9ed2832d840b13f956e62f2eaf3da68c883da0c17b91eeb99d52a01b32c50f764a54774b7e3b738e09a6cbba0fb76b1b06a628803750d15a3719f0504068fcae8256af5ac8121837fc374a14c85db8eedc638626c6ea365ea5de2582c72b9ddffab371d5676def8ba5cc6aa61d7fe04493138be56d00e3936624ed7e3e0fec3663f2800e8584780b5e51122e979bbbfb06205cda335aac0774335f14b426be3d726c38183f1ab6ded2e3cc940cb98f15b7ca306c2d6607d9d9550ac4bd39a26aae26270a", &(0x7f00000008c0)=""/33, &(0x7f0000000900)="719e169666267761160153eb7ccb036db3e3cfabc24915d3873b1e45db262a861ac1bdc8c772e0e1693d52c5c18159b47ae3f7314dee7d08990c3587d7d76d111415f420c705d6978307d156191375e91b7ab96d3a55f387de685478009256caec33f6ed4212e3c7988d537f223bb1de7586e29e4c6f5a435ba16f799ce16aa82cc2c8fe04bce00edf1e97c3", &(0x7f00000009c0)="2e68effb60", 0x4, r3}, 0x38)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xddd1}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0xfffffffffffffec5, 0x10, &(0x7f0000000180)={0x0, 0x0, 0xce, 0x833c}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x5, 0x8}, {0x2, 0x2, 0xc, 0x6}, {0x3, 0x2, 0x8, 0x9}, {0x5, 0x4, 0x1, 0x9cf9b63765462f59}, {0x1, 0x4, 0x10, 0x1}], 0x10, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0x6c, 0x68, &(0x7f0000000500)="d96ecc6453b79e2d165acbc086326ff39f9dd06e2abe0a2bedfef23cb7df85257f933150f554b5caf8b084a3d20d007c92344b8abdfcaf66fea1c792fd6fa49c2c9a92dbba7d026d7c44160801e7c723d4cfbb278e95043f3cb578ef414b0f0f7113d278be9cbf318b896e3d", &(0x7f0000000580)=""/104, 0x3, 0x0, 0x2e, 0x74, &(0x7f0000000600)="29f921595483c518c7001b04089668c07e386c682bd097fbf6316158fa94244a6f25201ba60580f1845b7ecebccf", &(0x7f0000000640)="1c1cdfb9ce83ae4e9f58dce572f8256bd5d488ab4bf53087ff714b9126588ef5926575b4ef7754afa8d9496bf6f05ec052882932bf7c97a1533fc39ad89e9125cdc6362b3503916b98bcf08b6763320dd69a8060d15fca2ac74470bf1053336e29ffcf63ea7964b4b26517579ae648c933ada85d", 0x5, 0x0, 0x6}, 0x50)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc495, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x47, 0x0, @fd_index=0x402, 0x0, 0x0, 0x0, {}, 0x1})
sched_getparam(0x0, &(0x7f0000002b40))
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1)
clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0)
semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000080)=""/106)
semop(0x0, &(0x7f00000002c0)=[{0x0, 0x9}, {0x0, 0x202}, {}], 0x3)
semop(0x0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)

20.037963617s ago: executing program 2 (id=404):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40102)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r2=>0x0})
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, 0x0, 0x0, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000000))
getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000300)={0x28, 0x2, r2, r2, 0xffffffffffffff20, 0x8, 0x31})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'})

18.046704653s ago: executing program 5 (id=405):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
truncate(&(0x7f00000000c0)='./file3\x00', 0x6)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r0], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

17.998454967s ago: executing program 3 (id=406):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
truncate(&(0x7f00000000c0)='./file3\x00', 0x6)
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r0], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

17.883264859s ago: executing program 2 (id=408):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018004000000000000c0000007a000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800020000002a002cbe21459c3f08ff0002000000000000005558d71c64e53618c4670b743c2a99c1c12d624f4c5835190ba38e633b632aaabc5b67355d182da1ec142087bf396b9745a050fedd16f432a536708fb20000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0x7, 0x7}, 0x10}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pI4   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={&(0x7f00000007c0)="f851489181e4a32b72500c9ed2832d840b13f956e62f2eaf3da68c883da0c17b91eeb99d52a01b32c50f764a54774b7e3b738e09a6cbba0fb76b1b06a628803750d15a3719f0504068fcae8256af5ac8121837fc374a14c85db8eedc638626c6ea365ea5de2582c72b9ddffab371d5676def8ba5cc6aa61d7fe04493138be56d00e3936624ed7e3e0fec3663f2800e8584780b5e51122e979bbbfb06205cda335aac0774335f14b426be3d726c38183f1ab6ded2e3cc940cb98f15b7ca306c2d6607d9d9550ac4bd39a26aae26270a", &(0x7f00000008c0)=""/33, &(0x7f0000000900)="719e169666267761160153eb7ccb036db3e3cfabc24915d3873b1e45db262a861ac1bdc8c772e0e1693d52c5c18159b47ae3f7314dee7d08990c3587d7d76d111415f420c705d6978307d156191375e91b7ab96d3a55f387de685478009256caec33f6ed4212e3c7988d537f223bb1de7586e29e4c6f5a435ba16f799ce16aa82cc2c8fe04bce00edf1e97c3", &(0x7f00000009c0)="2e68effb60", 0x4, r3}, 0x38)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xddd1}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0xfffffffffffffec5, 0x10, &(0x7f0000000180)={0x0, 0x0, 0xce, 0x833c}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x5, 0x8}, {0x2, 0x2, 0xc, 0x6}, {0x3, 0x2, 0x8, 0x9}, {0x5, 0x4, 0x1, 0x9cf9b63765462f59}, {0x1, 0x4, 0x10, 0x1}], 0x10, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0x6c, 0x68, &(0x7f0000000500)="d96ecc6453b79e2d165acbc086326ff39f9dd06e2abe0a2bedfef23cb7df85257f933150f554b5caf8b084a3d20d007c92344b8abdfcaf66fea1c792fd6fa49c2c9a92dbba7d026d7c44160801e7c723d4cfbb278e95043f3cb578ef414b0f0f7113d278be9cbf318b896e3d", &(0x7f0000000580)=""/104, 0x3, 0x0, 0x2e, 0x74, &(0x7f0000000600)="29f921595483c518c7001b04089668c07e386c682bd097fbf6316158fa94244a6f25201ba60580f1845b7ecebccf", &(0x7f0000000640)="1c1cdfb9ce83ae4e9f58dce572f8256bd5d488ab4bf53087ff714b9126588ef5926575b4ef7754afa8d9496bf6f05ec052882932bf7c97a1533fc39ad89e9125cdc6362b3503916b98bcf08b6763320dd69a8060d15fca2ac74470bf1053336e29ffcf63ea7964b4b26517579ae648c933ada85d", 0x5, 0x0, 0x6}, 0x50)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc495, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x47, 0x0, @fd_index=0x402, 0x0, 0x0, 0x0, {}, 0x1})
sched_getparam(0x0, &(0x7f0000002b40))
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1)
clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0)
r9 = semget$private(0x0, 0x4000000009, 0x0)
semctl$SEM_STAT_ANY(r9, 0x1, 0x14, &(0x7f0000000080)=""/106)
semop(r9, &(0x7f00000002c0)=[{0x0, 0x9}, {0x0, 0x202}, {}], 0x3)
semop(r9, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)

14.208355319s ago: executing program 5 (id=410):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003d000107100000"], 0x18}}, 0x880)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={<r7=>0x0, 0xddf}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000380)={r7, 0x3}, 0x8)
io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x1000, 0x1, 0x7a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000097e3075ad39065cd72319ca29942e7fbecc18690de53b500639afa8e9e4138760902effa0ff4e653bd043116c5"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

11.9442537s ago: executing program 3 (id=412):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
truncate(&(0x7f00000000c0)='./file3\x00', 0x6)
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r0], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()

11.899568725s ago: executing program 2 (id=413):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400)
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r0], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

10.387928703s ago: executing program 4 (id=414):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x109000, 0x0)
getdents(r0, &(0x7f0000000b80)=""/167, 0xa7)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x82c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_int(r10, 0x101, 0x3, &(0x7f0000000100)=0x40, 0x4)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000500))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000900))

7.652906101s ago: executing program 4 (id=415):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3cd4e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e", 0x8d}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

7.406988375s ago: executing program 2 (id=416):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018004000000000000c0000007a000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800020000002a002cbe21459c3f08ff0002000000000000005558d71c64e53618c4670b743c2a99c1c12d624f4c5835190ba38e633b632aaabc5b67355d182da1ec142087bf396b9745a050fedd16f432a536708fb20000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0x7, 0x7}, 0x10}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pI4   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={&(0x7f00000007c0)="f851489181e4a32b72500c9ed2832d840b13f956e62f2eaf3da68c883da0c17b91eeb99d52a01b32c50f764a54774b7e3b738e09a6cbba0fb76b1b06a628803750d15a3719f0504068fcae8256af5ac8121837fc374a14c85db8eedc638626c6ea365ea5de2582c72b9ddffab371d5676def8ba5cc6aa61d7fe04493138be56d00e3936624ed7e3e0fec3663f2800e8584780b5e51122e979bbbfb06205cda335aac0774335f14b426be3d726c38183f1ab6ded2e3cc940cb98f15b7ca306c2d6607d9d9550ac4bd39a26aae26270a", &(0x7f00000008c0)=""/33, &(0x7f0000000900)="719e169666267761160153eb7ccb036db3e3cfabc24915d3873b1e45db262a861ac1bdc8c772e0e1693d52c5c18159b47ae3f7314dee7d08990c3587d7d76d111415f420c705d6978307d156191375e91b7ab96d3a55f387de685478009256caec33f6ed4212e3c7988d537f223bb1de7586e29e4c6f5a435ba16f799ce16aa82cc2c8fe04bce00edf1e97c3", &(0x7f00000009c0)="2e68effb60", 0x4, r3}, 0x38)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xddd1}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0xfffffffffffffec5, 0x10, &(0x7f0000000180)={0x0, 0x0, 0xce, 0x833c}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x5, 0x8}, {0x2, 0x2, 0xc, 0x6}, {0x3, 0x2, 0x8, 0x9}, {0x5, 0x4, 0x1, 0x9cf9b63765462f59}, {0x1, 0x4, 0x10, 0x1}], 0x10, 0xb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0x6c, 0x68, &(0x7f0000000500)="d96ecc6453b79e2d165acbc086326ff39f9dd06e2abe0a2bedfef23cb7df85257f933150f554b5caf8b084a3d20d007c92344b8abdfcaf66fea1c792fd6fa49c2c9a92dbba7d026d7c44160801e7c723d4cfbb278e95043f3cb578ef414b0f0f7113d278be9cbf318b896e3d", &(0x7f0000000580)=""/104, 0x3, 0x0, 0x2e, 0x74, &(0x7f0000000600)="29f921595483c518c7001b04089668c07e386c682bd097fbf6316158fa94244a6f25201ba60580f1845b7ecebccf", &(0x7f0000000640)="1c1cdfb9ce83ae4e9f58dce572f8256bd5d488ab4bf53087ff714b9126588ef5926575b4ef7754afa8d9496bf6f05ec052882932bf7c97a1533fc39ad89e9125cdc6362b3503916b98bcf08b6763320dd69a8060d15fca2ac74470bf1053336e29ffcf63ea7964b4b26517579ae648c933ada85d", 0x5, 0x0, 0x6}, 0x50)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc495, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x47, 0x0, @fd_index=0x402, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1)
clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0)
semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000080)=""/106)
semop(0x0, &(0x7f00000002c0)=[{0x0, 0x9}, {0x0, 0x202}, {}], 0x3)
semop(0x0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)

7.405658745s ago: executing program 3 (id=417):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
truncate(&(0x7f00000000c0)='./file3\x00', 0x6)
linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r0], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

7.174835727s ago: executing program 4 (id=418):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x6)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"})
unshare(0x4000280)
socket$kcm(0x10, 0x5, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)

5.51462084s ago: executing program 4 (id=419):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3)
r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r4)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=<r6=>0xffffffffffffffff, 0x2f, 0xd944a7f95dc2ff2, 0x1ffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x40)
keyctl$invalidate(0x15, r5)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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")
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r8, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES8=r7], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x29}, 0x94)
pivot_root(&(0x7f0000000180)='./file1\x00', 0x0)

5.506734891s ago: executing program 5 (id=420):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
truncate(&(0x7f00000000c0)='./file3\x00', 0x6)
linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r0], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

1.818326092s ago: executing program 4 (id=421):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r1 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodecompose}]}, 0x1, 0x5d3, &(0x7f0000000cc0)="$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")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
truncate(&(0x7f00000000c0)='./file3\x00', 0x6)
linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC=r0], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1.784258306s ago: executing program 2 (id=422):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x23d, &(0x7f0000000a40)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@mpls_newroute={0x1c, 0x18, 0x800, 0x70bd27, 0x25dfdbfe, {0x1c, 0x10, 0x10, 0x81, 0xfd, 0x2, 0x0, 0xa, 0x1900}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

1.615129872s ago: executing program 5 (id=423):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xd006, 0x2, 0x5, 0x9, "ea7174ddcf0fc7010002f7ffd2a2d97500", 0x2, 0x1})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xa)

1.606742543s ago: executing program 3 (id=424):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x60, 0xfe, 0x8}]})
write$ppp(r0, &(0x7f0000000300)="5af9", 0x2)

1.066853766s ago: executing program 5 (id=425):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce01020301090224"], 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x51f712581f24b5fd, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet(0x2, 0x3, 0x3)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)

1.066565476s ago: executing program 2 (id=426):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x400000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000600)={0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000640)={0x0, 0x9})
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c000c204e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0", @ANYRES64], 0x1, 0x442a, &(0x7f0000008940)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
sendmsg$key(r1, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket(0xa, 0x3, 0x3a)
getsockopt$MRT6(r3, 0x29, 0xce, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)=@v2={0x3, 0x2, 0x5, 0x7}, 0x9, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1)

0s ago: executing program 4 (id=427):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file2\x00', 0x2000048, &(0x7f0000000240)={[{@filestreams}, {@quota}, {@swalloc}]}, 0x1, 0xb950, &(0x7f000000d2c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
readahead(r0, 0x730, 0x2)

kernel console output (not intermixed with test programs):

sim3: renamed from eth3
[   87.127857][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.148691][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.178933][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.197806][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.325806][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.399126][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[   87.446896][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.469386][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.476922][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.529580][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.550321][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.557655][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.617061][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[   87.659958][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[   87.681443][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.688702][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.741846][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.749087][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.761057][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.768340][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.840935][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.849230][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.931072][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.978585][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[   87.997568][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.005002][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.054177][ T5802] Bluetooth: hci2: command tx timeout
[   88.054202][ T5804] Bluetooth: hci0: command tx timeout
[   88.054238][ T5804] Bluetooth: hci3: command tx timeout
[   88.059753][ T5802] Bluetooth: hci1: command tx timeout
[   88.104813][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.112030][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.520643][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.630782][ T5794] veth0_vlan: entered promiscuous mode
[   88.667427][ T5794] veth1_vlan: entered promiscuous mode
[   88.757982][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.789268][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.819534][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.860530][ T5794] veth0_macvtap: entered promiscuous mode
[   88.900283][ T5794] veth1_macvtap: entered promiscuous mode
[   88.937412][ T5791] veth0_vlan: entered promiscuous mode
[   88.965598][ T5790] veth0_vlan: entered promiscuous mode
[   88.983958][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.021821][ T5790] veth1_vlan: entered promiscuous mode
[   89.036346][ T5791] veth1_vlan: entered promiscuous mode
[   89.060217][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.094004][ T5796] veth0_vlan: entered promiscuous mode
[   89.112134][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.123925][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.133347][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.142638][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.169334][ T5796] veth1_vlan: entered promiscuous mode
[   89.209419][ T5791] veth0_macvtap: entered promiscuous mode
[   89.241049][ T5791] veth1_macvtap: entered promiscuous mode
[   89.263899][ T5790] veth0_macvtap: entered promiscuous mode
[   89.275741][ T5790] veth1_macvtap: entered promiscuous mode
[   89.340289][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.351862][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.364892][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.411223][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.423275][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.436190][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.448986][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.459711][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.470439][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.481439][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.495230][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.510033][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.521772][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.533482][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.543821][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.546029][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.562783][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.590424][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.601450][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.611525][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.624141][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.635710][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.680831][ T5796] veth0_macvtap: entered promiscuous mode
[   89.692133][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.705529][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.714683][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.727141][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.741310][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.751582][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.764272][ T5796] veth1_macvtap: entered promiscuous mode
[   89.903906][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.911914][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.034306][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.049041][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.055950][ T5882] overlayfs: conflicting options: metacopy=off,verity=on
[   90.059523][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.077642][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.090139][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.101282][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.116440][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.126607][ T5802] Bluetooth: hci1: command tx timeout
[   90.126646][   T50] Bluetooth: hci2: command tx timeout
[   90.132086][ T5802] Bluetooth: hci0: command tx timeout
[   90.138692][ T5804] Bluetooth: hci3: command tx timeout
[   90.173122][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.173654][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.191924][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.202865][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.212855][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.214548][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.231270][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.242409][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.255029][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.267734][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.277388][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.289571][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.298991][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.382942][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.391098][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.437018][ T5888] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   90.513661][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.533803][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.690576][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.721216][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.740616][ T5893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'.
[   90.901295][  T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.962705][  T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.092019][ T5896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'.
[   91.628215][ T5907] syz.0.1[5907]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   91.673858][ T5907] loop0: detected capacity change from 0 to 512
[   91.833367][ T5907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.848011][ T5907] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.872140][ T5912] loop1: detected capacity change from 0 to 64
[   91.958524][ T5912] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[   92.025067][   T28] audit: type=1800 audit(1760384712.815:2): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=15 res=0 errno=0
[   92.068542][   T28] audit: type=1800 audit(1760384712.855:3): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file2" dev="loop0" ino=16 res=0 errno=0
[   92.244031][ T5804] Bluetooth: hci3: command tx timeout
[   92.244695][ T5802] Bluetooth: hci2: command tx timeout
[   92.251627][ T5804] Bluetooth: hci0: command tx timeout
[   92.261002][ T5804] Bluetooth: hci1: command tx timeout
[   92.304844][   T27] cfg80211: failed to load regulatory.db
[   93.648709][ T5923] loop1: detected capacity change from 0 to 764
[   93.720868][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.800658][ T5923] process 'syz.1.8' launched '/dev/fd/15' with NULL argv: empty string added
[   93.867376][ T5924] Symlink component flag not implemented
[   93.897338][ T5924] Symlink component flag not implemented
[   94.121028][ T5932] Zero length message leads to an empty skb
[   94.156995][ T5929] loop2: detected capacity change from 0 to 256
[   94.243917][ T5860] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   94.402543][ T5860] usb 2-1: device descriptor read/64, error -71
[   94.502435][ T5935] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET)
[   94.692559][ T5860] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   94.868804][   T27] IPVS: starting estimator thread 0...
[   94.883067][ T5860] usb 2-1: device descriptor read/64, error -71
[   94.963008][ T5937] IPVS: using max 19 ests per chain, 45600 per kthread
[   95.016014][ T5860] usb usb2-port1: attempt power cycle
[   95.323474][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   95.392578][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.400982][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.410631][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   95.481798][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.584221][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.686613][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   96.225434][ T5929] IPVS: set_ctl: invalid protocol: 41 172.30.1.3:20003
[   96.242363][ T5860] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[   96.378799][ T5860] usb 2-1: device descriptor read/8, error -71
[   96.640231][ T5952] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.13'.
[   97.546740][ T5950] loop2: detected capacity change from 0 to 7
[   97.587501][ T5950] Dev loop2: unable to read RDB block 7
[   97.602842][ T5950]  loop2: AHDI p1 p2 p3
[   97.614064][ T5950] loop2: partition table partially beyond EOD, truncated
[   97.643865][ T5950] loop2: p1 start 1601398130 is beyond EOD, truncated
[   97.661190][ T5950] loop2: p2 start 1702059890 is beyond EOD, truncated
[   97.930866][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   97.958538][ T5162] Dev loop2: unable to read RDB block 7
[   97.978606][ T5162]  loop2: unable to read partition table
[   97.992333][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'.
[   97.997337][ T5162] loop2: partition table beyond EOD, truncated
[   98.473098][ T5971] loop3: detected capacity change from 0 to 4096
[   98.486175][ T5971] =======================================================
[   98.486175][ T5971] WARNING: The mand mount option has been deprecated and
[   98.486175][ T5971]          and is ignored by this kernel. Remove the mand
[   98.486175][ T5971]          option from the mount to silence this warning.
[   98.486175][ T5971] =======================================================
[   98.667213][ T5971] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   98.681447][ T5971] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[   99.001721][ T5972] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.092285][  T786] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  100.328158][  T786] usb 3-1: config 8 has an invalid interface number: 80 but max is 0
[  100.362542][  T786] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  100.386280][  T786] usb 3-1: config 8 has no interface number 0
[  100.399489][  T786] usb 3-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14
[  100.422828][  T786] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  100.432966][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.470248][  T786] usb 3-1: NFC: intf ffff88802ef7d000 id ffffffff8d63b020
[  100.472328][  T785] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  100.701347][  T785] usb 4-1: config 0 has an invalid interface number: 220 but max is 0
[  100.701401][  T785] usb 4-1: config 0 has no interface number 0
[  100.701443][  T785] usb 4-1: config 0 interface 220 altsetting 64 endpoint 0xD has invalid wMaxPacketSize 0
[  100.701469][  T785] usb 4-1: config 0 interface 220 altsetting 64 endpoint 0x5 has invalid wMaxPacketSize 0
[  100.701492][  T785] usb 4-1: config 0 interface 220 has no altsetting 0
[  100.709162][  T785] usb 4-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=52.2c
[  100.709195][  T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.709216][  T785] usb 4-1: Product: syz
[  100.709261][  T785] usb 4-1: Manufacturer: syz
[  100.709277][  T785] usb 4-1: SerialNumber: syz
[  100.718583][  T785] usb 4-1: config 0 descriptor??
[  100.749485][  T785] io_ti 4-1:0.220: required endpoints missing
[  100.759722][ T5975] loop2: detected capacity change from 0 to 1024
[  100.815643][ T5975] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  101.082665][   T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  101.238568][  T786] usb 3-1: USB disconnect, device number 2
[  101.284339][   T23] usb 2-1: config 8 has an invalid interface number: 80 but max is 0
[  101.284368][   T23] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  101.284388][   T23] usb 2-1: config 8 has no interface number 0
[  101.284432][   T23] usb 2-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14
[  101.284476][   T23] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  101.284501][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.331708][   T23] usb 2-1: NFC: intf ffff88802ef7c000 id ffffffff8d63b020
[  101.383974][  T785] usb 4-1: USB disconnect, device number 2
[  101.637377][  T785] usb 2-1: USB disconnect, device number 6
[  101.866054][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[  101.875645][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26'.
[  102.522032][ T6016] loop1: detected capacity change from 0 to 512
[  102.576865][ T6016] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  102.578662][ T6000] loop0: detected capacity change from 0 to 32768
[  102.620210][ T6016] EXT4-fs (loop1): orphan cleanup on readonly fs
[  102.645210][ T6019] loop3: detected capacity change from 0 to 64
[  102.662552][ T6016] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated!
[  102.681409][ T6019] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  102.718716][ T6016] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  102.730566][ T6016] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.29: Failed to acquire dquot type 1
[  102.837072][ T6016] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.29: bg 0: block 40: padding at end of block bitmap is not set
[  102.906832][ T6016] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  102.942738][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.952733][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.962360][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  103.026825][ T5795] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop0 scanned by udevd (5795)
[  103.573371][ T6016] EXT4-fs (loop1): 1 truncate cleaned up
[  103.581599][ T6016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  103.915488][ T6026] tipc: Failed to remove unknown binding: 66,1,1/0:2194250808/2194250810
[  103.937931][ T6027] 9pnet_fd: Insufficient options for proto=fd
[  104.112405][   T23] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  104.328186][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[  104.348585][   T23] usb 2-1: not running at top speed; connect to a high speed hub
[  104.374778][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.405507][   T23] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  104.539938][   T23] usb 2-1: config 1 has no interface number 1
[  104.716337][   T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  105.010942][   T23] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  105.089396][   T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.142440][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.150799][   T23] usb 2-1: Product: syz
[  105.292106][   T23] usb 2-1: Manufacturer: syz
[  105.322081][   T23] usb 2-1: SerialNumber: syz
[  105.690922][   T23] hub 2-1:1.0: Invalid hub with more than one config or interface
[  106.016234][ T6045] fuse: Bad value for 'rootmode'
[  106.105238][   T23] hub: probe of 2-1:1.0 failed with error -22
[  106.458553][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.533156][   T23] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  107.002654][   T23] usb 2-1: USB disconnect, device number 7
[  107.302324][  T786] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  107.447022][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  107.817808][  T786] usb 1-1: config 8 has an invalid interface number: 80 but max is 0
[  108.053112][  T786] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  108.542352][  T786] usb 1-1: config 8 has no interface number 0
[  108.548865][  T786] usb 1-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14
[  108.575652][  T786] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  108.585611][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.619446][  T786] usb 1-1: NFC: intf ffff88807c611000 id ffffffff8d63b020
[  108.740538][ T6057] syzkaller1: entered promiscuous mode
[  108.760802][ T6057] syzkaller1: entered allmulticast mode
[  108.848115][ T6051] loop2: detected capacity change from 0 to 512
[  108.875382][ T6051] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.886237][ T6051] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.894673][ T6069] loop1: detected capacity change from 0 to 64
[  108.898355][ T6051] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  108.932038][ T6053] loop0: detected capacity change from 0 to 1024
[  108.967594][ T6053] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  108.985126][ T6069] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  109.020091][ T6051] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  109.050381][ T6051] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  109.361524][ T6051] EXT4-fs (loop2): 1 truncate cleaned up
[  109.371237][ T6051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.421757][ T6051] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 4: comm syz.2.39: lblock 0 mapped to illegal pblock 4 (length 1)
[  109.456819][ T6051] EXT4-fs (loop2): Remounting filesystem read-only
[  109.497896][ T5853] usb 1-1: USB disconnect, device number 2
[  109.954143][ T6070] loop3: detected capacity change from 0 to 40427
[  109.956302][ T6051] syz.2.39 (6051) used greatest stack depth: 19792 bytes left
[  109.981919][ T6070] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  110.016273][ T6070] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  110.028879][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.059988][ T6070] F2FS-fs (loop3): invalid crc value
[  110.107234][ T6070] F2FS-fs (loop3): Found nat_bits in checkpoint
[  110.202435][  T786] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  110.377493][ T6084] loop2: detected capacity change from 0 to 1024
[  110.388942][ T6070] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  110.402108][ T6070] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  110.433312][  T786] usb 2-1: config 8 has an invalid interface number: 80 but max is 0
[  110.461938][ T6084] EXT4-fs: Ignoring removed orlov option
[  110.514530][  T786] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  111.013442][  T786] usb 2-1: config 8 has no interface number 0
[  111.019742][  T786] usb 2-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14
[  111.032926][  T786] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  111.042018][  T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.079634][  T786] usb 2-1: NFC: intf ffff88807abcc000 id ffffffff8d63b020
[  111.128119][ T6084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.314457][ T5853] IPVS: starting estimator thread 0...
[  111.392642][ T6077] loop1: detected capacity change from 0 to 1024
[  111.426295][ T6077] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  111.435230][ T6093] IPVS: using max 17 ests per chain, 40800 per kthread
[  111.524662][   T23] usb 2-1: USB disconnect, device number 8
[  111.692431][  T785] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  111.902309][  T785] usb 1-1: Using ep0 maxpacket: 16
[  111.914790][  T785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.651569][  T785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.661709][  T785] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  112.674793][  T785] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  112.697562][  T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.750096][  T785] usb 1-1: config 0 descriptor??
[  113.089918][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[  113.115666][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.125189][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[  113.237802][  T785] shield 0003:0955:7214.0001: unknown main item tag 0x0
[  113.281534][  T785] shield 0003:0955:7214.0001: unknown main item tag 0x0
[  113.289092][  T785] shield 0003:0955:7214.0001: unknown main item tag 0x0
[  113.300817][  T785] shield 0003:0955:7214.0001: unknown main item tag 0x0
[  113.309750][  T785] shield 0003:0955:7214.0001: unknown main item tag 0x0
[  113.332770][  T785] input: HID 0955:7214 Haptics as /devices/virtual/input/input5
[  113.483684][ T6095] random: crng reseeded on system resumption
[  113.623978][  T785] shield 0003:0955:7214.0001: Registered Thunderstrike controller
[  113.639297][  T785] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  114.670625][ T6113] loop3: detected capacity change from 0 to 2048
[  114.721379][ T6113] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26504, location=26504
[  114.765270][    T8] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[  114.786334][ T6113] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.811168][    T8] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  114.839409][    T8] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  114.869299][    T8] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  114.972802][ T6111] usb 1-1: reset high-speed USB device number 3 using dummy_hcd
[  115.133078][ T6111] usb 1-1: device descriptor read/64, error -32
[  116.172401][ T6129] tap0: tun_chr_ioctl cmd 1074025677
[  116.178704][ T6129] tap0: linktype set to 256
[  116.202992][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.56'.
[  116.351629][  T785] usb 1-1: USB disconnect, device number 3
[  118.051197][ T6136] loop1: detected capacity change from 0 to 1024
[  118.068690][ T6136] EXT4-fs: Ignoring removed orlov option
[  118.104865][ T6125] loop0: detected capacity change from 0 to 32768
[  118.202422][  T785] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  118.220215][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.392836][  T785] usb 4-1: config 8 has an invalid interface number: 80 but max is 0
[  118.412328][  T785] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  118.442535][  T785] usb 4-1: config 8 has no interface number 0
[  118.459077][  T785] usb 4-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14
[  118.495430][  T785] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  118.502824][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.527151][  T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.557304][  T785] usb 4-1: NFC: intf ffff888078046000 id ffffffff8d63b020
[  118.591800][   T28] audit: type=1800 audit(1760384739.375:4): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.55" name="file2" dev="loop0" ino=11 res=0 errno=0
[  118.624572][ T6141] loop2: detected capacity change from 0 to 4096
[  118.693887][ T6141] ntfs3: loop2: Failed to load $MFT (-22).
[  118.858387][ T6134] loop3: detected capacity change from 0 to 1024
[  118.980683][ T6134] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  119.022953][    T8] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  119.297303][ T6111] usb 4-1: USB disconnect, device number 3
[  119.462460][    T8] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  119.490809][    T8] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.522291][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  119.529355][    T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  119.553067][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.586536][    T8] usb 3-1: config 0 descriptor??
[  120.621287][    T8] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  120.668611][    T8] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  120.718861][    T8] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  120.751183][    T8] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  120.796619][    T8] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  120.994862][ T6155] fuse: Unknown parameter 'user_i00000000000000000000'
[  121.430639][    T8] hid-rmi 0003:06CB:81A7.0002: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0
[  121.444986][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.527238][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.729132][ T6161] loop1: detected capacity change from 0 to 17
[  121.763287][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.64'.
[  121.788804][ T6161] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1
[  121.809802][ T6163] loop3: detected capacity change from 0 to 1024
[  121.844096][ T6163] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  121.875751][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.912640][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.990375][ T5860] usb 3-1: USB disconnect, device number 3
[  122.306175][ T6171] loop3: detected capacity change from 0 to 1024
[  122.342962][ T6171] EXT4-fs: Ignoring removed orlov option
[  122.387882][ T6171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.290832][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.325935][    T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  123.473466][ T6189] loop2: detected capacity change from 0 to 7
[  123.500364][ T6189] Dev loop2: unable to read RDB block 7
[  123.507339][ T6189]  loop2: AHDI p1 p2 p3
[  123.511689][ T6189] loop2: partition table partially beyond EOD, truncated
[  123.522655][    T8] usb 1-1: Using ep0 maxpacket: 16
[  123.550144][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.567952][ T6189] loop2: p1 start 1601398130 is beyond EOD, truncated
[  124.053001][ T6189] loop2: p2 start 1702059890 is beyond EOD, truncated
[  124.071269][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.089213][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  124.112638][    T8] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  124.121963][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.135209][    T8] usb 1-1: config 0 descriptor??
[  124.507702][ T6198] loop1: detected capacity change from 0 to 64
[  124.614423][    T8] shield 0003:0955:7214.0003: unknown main item tag 0x0
[  124.646419][    T8] shield 0003:0955:7214.0003: unknown main item tag 0x0
[  124.660553][    T8] shield 0003:0955:7214.0003: unknown main item tag 0x0
[  124.683120][ T5162] udevd[5162]: worker [5798] terminated by signal 33 (Unknown signal 33)
[  124.689777][    T8] shield 0003:0955:7214.0003: unknown main item tag 0x0
[  124.710582][ T5162] udevd[5162]: worker [5798] failed while handling '/devices/virtual/block/loop1'
[  124.722600][    T8] shield 0003:0955:7214.0003: unknown main item tag 0x0
[  124.744661][    T8] input: HID 0955:7214 Haptics as /devices/virtual/input/input6
[  124.802702][ T6179] random: crng reseeded on system resumption
[  124.837549][    T8] shield 0003:0955:7214.0003: Registered Thunderstrike controller
[  124.887331][    T8] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  125.384606][ T6215] fuse: Bad value for 'fd'
[  126.037803][    T8] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN
[  126.047913][ T6219] loop3: detected capacity change from 0 to 128
[  126.075054][ T6219] befs: (loop3): No write support. Marking filesystem read-only
[  126.082816][    T8] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  126.096341][    T8] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  126.122067][    T8] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE
[  126.128390][ T6219] befs: (loop3): invalid magic header
[  126.182454][ T6111] usb 1-1: reset high-speed USB device number 4 using dummy_hcd
[  126.352483][ T6111] usb 1-1: device descriptor read/64, error -32
[  126.613235][  T786] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  126.900586][  T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  126.999548][  T786] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  127.072396][  T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.102285][  T786] usb 2-1: config 0 descriptor??
[  127.110444][ T6217] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  127.542821][ T5853] usb 1-1: USB disconnect, device number 4
[  127.859000][  T786] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  128.260964][ T6236] loop2: detected capacity change from 0 to 7
[  128.285950][ T6236] Dev loop2: unable to read RDB block 7
[  128.296292][ T6236]  loop2: AHDI p1 p2 p3
[  128.300664][ T6236] loop2: partition table partially beyond EOD, truncated
[  128.309730][ T6236] loop2: p1 start 1601398130 is beyond EOD, truncated
[  128.318766][ T6237] loop1: detected capacity change from 0 to 8
[  128.339304][ T6236] loop2: p2 start 1702059890 is beyond EOD, truncated
[  128.380406][ T6237] SQUASHFS error: xz decompression failed, data probably corrupt
[  128.406876][ T6237] SQUASHFS error: Failed to read block 0x108: -5
[  128.419640][ T6237] SQUASHFS error: Unable to read metadata cache entry [106]
[  128.427445][ T6237] SQUASHFS error: Unable to read inode 0x11f
[  128.689377][ T6243] fuse: Unknown parameter 'user_i00000000000000000000'
[  129.146214][ T5860] usb 2-1: reset full-speed USB device number 9 using dummy_hcd
[  129.192763][ T6217] loop1: detected capacity change from 0 to 8
[  129.203168][ T6217] squashfs: Unknown parameter 'lýÁ`åÒ$í¿¡Ë(ïªf©ëD²ñçCÜ]ߧ·2õ1œw`ßÁ¹ÇýÎÑÎþ‰ÂzoþµÖ >µ^]´‹KÞn^´dߤ­�Ú^–£›D�×¾‡'
[  129.362003][ T5860] usb 2-1: device descriptor read/64, error -32
[  131.057391][ T6259] loop0: detected capacity change from 0 to 1024
[  131.076637][ T6259] EXT4-fs: Ignoring removed orlov option
[  131.165673][ T6259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.455814][ T6268] loop2: detected capacity change from 0 to 7
[  131.467096][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'.
[  131.481940][ T6268] Dev loop2: unable to read RDB block 7
[  131.494974][ T6275] netlink: 'syz.3.98': attribute type 1 has an invalid length.
[  131.510837][ T6268]  loop2: AHDI p1 p2 p3
[  131.515683][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'.
[  131.525628][ T6268] loop2: partition table partially beyond EOD, truncated
[  131.528677][  T786] usb 2-1: USB disconnect, device number 9
[  131.555946][ T6268] loop2: p1 start 1601398130 is beyond EOD, truncated
[  131.560227][ T6275] misc userio: Begin command sent, but we're already running
[  131.577663][ T6268] loop2: p2 start 1702059890 is beyond EOD, truncated
[  132.666004][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.719138][ T6287] loop1: detected capacity change from 0 to 512
[  132.835240][ T6287] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  133.254803][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  133.292773][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  133.426546][ T6287] EXT4-fs (loop1): 1 orphan inode deleted
[  133.503243][ T6287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.522029][ T6287] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  133.570828][   T28] audit: type=1800 audit(1760384754.365:5): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.100" name="bus" dev="loop1" ino=16 res=0 errno=0
[  133.870411][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.110437][ T6306] loop2: detected capacity change from 0 to 7
[  134.134400][ T6306] Dev loop2: unable to read RDB block 7
[  134.150397][ T6306]  loop2: AHDI p1 p2 p3
[  134.154904][ T6306] loop2: partition table partially beyond EOD, truncated
[  134.172581][ T6306] loop2: p1 start 1601398130 is beyond EOD, truncated
[  134.179645][ T6306] loop2: p2 start 1702059890 is beyond EOD, truncated
[  134.242284][  T786] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  134.395398][ T6308] FAULT_INJECTION: forcing a failure.
[  134.395398][ T6308] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  134.429738][ T6308] CPU: 1 PID: 6308 Comm: syz.1.108 Not tainted syzkaller #0
[  134.437209][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  134.447541][ T6308] Call Trace:
[  134.450901][ T6308]  <TASK>
[  134.453965][ T6308]  dump_stack_lvl+0x16c/0x230
[  134.458795][ T6308]  ? show_regs_print_info+0x20/0x20
[  134.464056][ T6308]  ? load_image+0x3b0/0x3b0
[  134.468696][ T6308]  ? __lock_acquire+0x7c80/0x7c80
[  134.473902][ T6308]  ? snprintf+0xdb/0x120
[  134.478060][ T6300] loop2: detected capacity change from 0 to 32768
[  134.478171][ T6308]  should_fail_ex+0x39d/0x4d0
[  134.489355][ T6308]  _copy_to_user+0x2f/0xa0
[  134.493821][ T6308]  simple_read_from_buffer+0xe7/0x150
[  134.499261][ T6308]  proc_fail_nth_read+0x1e3/0x250
[  134.504413][ T6308]  ? proc_fault_inject_write+0x340/0x340
[  134.509557][ T6296] loop0: detected capacity change from 0 to 32768
[  134.510079][ T6308]  ? fsnotify_perm+0x271/0x5e0
[  134.521411][ T6308]  ? proc_fault_inject_write+0x340/0x340
[  134.527386][ T6308]  vfs_read+0x27e/0x920
[  134.531721][ T6308]  ? kernel_read+0x1e0/0x1e0
[  134.536374][ T6308]  ? __fget_files+0x28/0x4d0
[  134.541166][ T6308]  ? __fget_files+0x44a/0x4d0
[  134.545896][ T6308]  ? __fdget_pos+0x2a3/0x330
[  134.550623][ T6308]  ? ksys_read+0x75/0x250
[  134.555017][ T6308]  ksys_read+0x147/0x250
[  134.555845][ T6300] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.106 (6300)
[  134.559297][ T6308]  ? vfs_write+0x940/0x940
[  134.559335][ T6308]  ? lockdep_hardirqs_on+0x98/0x150
[  134.581307][ T6308]  do_syscall_64+0x55/0xb0
[  134.585785][ T6308]  ? clear_bhb_loop+0x40/0x90
[  134.590514][ T6308]  ? clear_bhb_loop+0x40/0x90
[  134.595247][ T6308]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.601205][ T6308] RIP: 0033:0x7f30aeb8d8dc
[  134.605695][ T6308] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  134.625538][ T6308] RSP: 002b:00007f30afab1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  134.634097][ T6308] RAX: ffffffffffffffda RBX: 00007f30aede5fa0 RCX: 00007f30aeb8d8dc
[  134.642134][ T6308] RDX: 000000000000000f RSI: 00007f30afab10a0 RDI: 0000000000000005
[  134.644716][ T6296] ERROR: (device loop0): diAllocAG: numfree > numinos
[  134.644716][ T6296] 
[  134.650129][ T6308] RBP: 00007f30afab1090 R08: 0000000000000000 R09: 0000000000000000
[  134.650150][ T6308] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001
[  134.650161][ T6308] R13: 00007f30aede6038 R14: 00007f30aede5fa0 R15: 00007ffe74dbf5f8
[  134.650192][ T6308]  </TASK>
[  134.682417][  T786] usb 4-1: Using ep0 maxpacket: 16
[  134.708288][  T786] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.734638][  T786] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.759361][ T6296] ERROR: (device loop0): remounting filesystem as read-only
[  134.761849][  T786] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  134.795230][ T6296] ialloc: diAlloc returned -5!
[  134.833679][ T6300] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  134.845915][  T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.854836][ T6300] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  134.883175][  T786] usb 4-1: config 0 descriptor??
[  134.890413][ T6300] BTRFS info (device loop2): using free space tree
[  135.109785][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.130280][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.301278][ T6300] BTRFS info (device loop2): enabling ssd optimizations
[  135.388828][ T6300] BTRFS info (device loop2): auto enabling async discard
[  135.492945][  T786] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  135.506996][  T786] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  135.514895][  T786] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  135.524180][  T786] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  135.531132][  T786] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  135.618514][  T786] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  135.882742][  T786] usb 4-1: USB disconnect, device number 4
[  136.104380][ T5794] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  136.162020][ T6334] fido_id[6334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  137.612324][ T5860] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  137.620698][ T6354] loop2: detected capacity change from 0 to 7
[  137.657648][ T6354] Dev loop2: unable to read RDB block 7
[  137.669077][ T6354]  loop2: AHDI p1 p2 p3
[  137.674220][ T6354] loop2: partition table partially beyond EOD, truncated
[  137.682423][ T6354] loop2: p1 start 1601398130 is beyond EOD, truncated
[  137.689366][ T6354] loop2: p2 start 1702059890 is beyond EOD, truncated
[  138.503049][ T5860] usb 1-1: config 7 interface 0 has no altsetting 0
[  138.542704][ T5860] usb 1-1: string descriptor 0 read error: -22
[  138.549172][ T5860] usb 1-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44
[  138.599955][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.636423][ T5860] usb 1-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state
[  138.692333][ T5860] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  138.726922][ T5860] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design)
[  138.767527][ T5860] usb 1-1: media controller created
[  139.988730][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  141.654612][ T5860] usb 1-1: USB disconnect, device number 5
[  143.838377][ T6386] loop1: detected capacity change from 0 to 32768
[  143.858164][ T6386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.124 (6386)
[  144.067763][ T6386] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.103432][ T6386] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  144.112746][ T6386] BTRFS info (device loop1): setting nodatacow, compression disabled
[  144.121099][ T6386] BTRFS info (device loop1): ignoring bad roots
[  144.138406][ T6386] BTRFS info (device loop1): doing ref verification
[  144.150876][ T6386] BTRFS error (device loop1): ignorebadroots must be used with ro mount option
[  144.164000][ T6386] BTRFS error (device loop1): open_ctree failed: -22
[  144.178621][ T6405] loop2: detected capacity change from 0 to 7
[  144.207401][ T6405] Dev loop2: unable to read RDB block 7
[  144.253724][ T6405]  loop2: AHDI p1 p2 p3
[  144.322955][ T6405] loop2: partition table partially beyond EOD, truncated
[  144.352970][ T6405] loop2: p1 start 1601398130 is beyond EOD, truncated
[  144.359886][ T6405] loop2: p2 start 1702059890 is beyond EOD, truncated
[  144.398203][ T6058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (6058)
[  144.578848][ T6413] netlink: 84 bytes leftover after parsing attributes in process `syz.3.131'.
[  145.870600][ T6427] bond0: entered promiscuous mode
[  145.875904][ T6427] bond_slave_0: entered promiscuous mode
[  145.881728][ T6427] bond_slave_1: entered promiscuous mode
[  145.987938][ T6427] batadv0: entered promiscuous mode
[  146.012100][ T6427] hsr1: entered allmulticast mode
[  146.017289][ T6427] bond0: entered allmulticast mode
[  146.022624][ T6427] bond_slave_0: entered allmulticast mode
[  146.028422][ T6427] bond_slave_1: entered allmulticast mode
[  146.034269][ T6427] batadv0: entered allmulticast mode
[  146.040046][ T6427] 8021q: adding VLAN 0 to HW filter on device hsr1
[  146.186231][ T6427] bond0: left promiscuous mode
[  146.191261][ T6427] bond_slave_0: left promiscuous mode
[  146.197703][ T6427] bond_slave_1: left promiscuous mode
[  146.270790][ T6427] batadv0: left promiscuous mode
[  147.656991][ T6432] loop0: detected capacity change from 0 to 32768
[  147.945738][ T6432] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.991218][ T6432] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  148.040997][ T6432] BTRFS info (device loop0): setting nodatacow, compression disabled
[  148.062812][ T6432] BTRFS info (device loop0): ignoring bad roots
[  148.069190][ T6432] BTRFS info (device loop0): doing ref verification
[  148.092369][ T6432] BTRFS error (device loop0): ignorebadroots must be used with ro mount option
[  148.141217][ T6432] BTRFS error (device loop0): open_ctree failed: -22
[  148.161209][ T6058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (6058)
[  148.543445][ T6437] loop3: detected capacity change from 0 to 32768
[  148.762388][ T6437] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.827152][ T6437] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  148.899057][ T6437] BTRFS info (device loop3): turning off barriers
[  149.003524][ T6437] BTRFS info (device loop3): setting nodatasum
[  149.009818][ T6437] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  149.023512][ T6437] BTRFS info (device loop3): use zstd compression, level 3
[  149.031070][ T6437] BTRFS info (device loop3): using free space tree
[  149.612932][ T6475] ieee802154 phy0 wpan0: encryption failed: -90
[  149.776835][ T6478] loop0: detected capacity change from 0 to 1024
[  149.835734][ T6478] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  151.728993][ T6496] loop2: detected capacity change from 0 to 1024
[  151.786667][ T6496] EXT4-fs: Ignoring removed orlov option
[  151.799760][ T5790] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.877582][ T5791] cgroup: fork rejected by pids controller in /syz1
[  151.922010][ T6496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.389585][ T6515] loop3: detected capacity change from 0 to 1024
[  153.397225][ T6515] EXT4-fs: Ignoring removed orlov option
[  153.420223][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.491230][ T6515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.648312][ T3494] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.854432][ T3494] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.320406][   T23] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  155.010007][ T3494] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.090985][   T23] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  155.106777][   T23] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  155.190204][ T3494] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.239744][   T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  155.257097][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  155.267210][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.277595][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  155.292381][   T23] usb 1-1: language id specifier not provided by device, defaulting to English
[  155.334113][   T23] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  155.362815][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.371166][   T23] usb 1-1: Manufacturer: 牢
[  155.418836][   T23] usb 1-1: config 0 descriptor??
[  155.435020][   T23] hub 1-1:0.0: bad descriptor, ignoring hub
[  155.441114][   T23] hub: probe of 1-1:0.0 failed with error -5
[  155.484092][   T23] input: 牢 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8
[  156.305786][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.342808][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.501137][ T6522] loop2: detected capacity change from 0 to 32768
[  156.518512][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  156.542825][   T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  156.552010][   T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  156.564766][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  156.575173][ T6523] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  156.615374][   T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  156.633900][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  156.880446][ T6522] JBD2: Ignoring recovery information on journal
[  157.093342][ T6522] JBD2: journal reset failed
[  157.112417][ T6522] (syz.2.158,6522,1):ocfs2_journal_load:1167 ERROR: Failed to load journal!
[  157.129585][ T5860] usb 1-1: USB disconnect, device number 6
[  157.156104][ T6522] (syz.2.158,6522,1):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -4
[  157.584771][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.161'.
[  158.762347][   T50] Bluetooth: hci1: command tx timeout
[  158.789669][ T6530] chnl_net:caif_netlink_parms(): no params data found
[  158.892760][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  159.062623][    T8] usb 4-1: device descriptor read/64, error -71
[  159.138985][ T6577] FAULT_INJECTION: forcing a failure.
[  159.138985][ T6577] name failslab, interval 1, probability 0, space 0, times 1
[  159.152468][ T6577] CPU: 0 PID: 6577 Comm: syz.0.164 Not tainted syzkaller #0
[  159.159845][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  159.170019][ T6577] Call Trace:
[  159.173365][ T6577]  <TASK>
[  159.176344][ T6577]  dump_stack_lvl+0x16c/0x230
[  159.181338][ T6577]  ? show_regs_print_info+0x20/0x20
[  159.186594][ T6577]  ? load_image+0x3b0/0x3b0
[  159.191218][ T6577]  ? __might_sleep+0xe0/0xe0
[  159.195858][ T6577]  ? __lock_acquire+0x7c80/0x7c80
[  159.200931][ T6577]  should_fail_ex+0x39d/0x4d0
[  159.205664][ T6577]  should_failslab+0x9/0x20
[  159.210314][ T6577]  slab_pre_alloc_hook+0x59/0x310
[  159.215482][ T6577]  kmem_cache_alloc_node+0x60/0x330
[  159.220733][ T6577]  ? lockdep_hardirqs_on+0x98/0x150
[  159.225993][ T6577]  ? __alloc_skb+0x108/0x2c0
[  159.230722][ T6577]  __alloc_skb+0x108/0x2c0
[  159.235276][ T6577]  alloc_skb_with_frags+0xca/0x7c0
[  159.240437][ T6577]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  159.246732][ T6577]  sock_alloc_send_pskb+0x857/0x990
[  159.252178][ T6577]  ? sock_kzfree_s+0x50/0x50
[  159.256837][ T6577]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  159.262523][ T6577]  __ip6_append_data+0x29e0/0x3c40
[  159.267711][ T6577]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  159.272632][ T6577]  ? ip6_setup_cork+0xfe0/0xfe0
[  159.277548][ T6577]  ip6_append_data+0x1b0/0x350
[  159.282368][ T6577]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  159.287271][ T6577]  udpv6_sendmsg+0xc04/0x22f0
[  159.291992][ T6577]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  159.296894][ T6577]  ? udp_v6_early_demux+0xf60/0xf60
[  159.302124][ T6577]  ? preempt_schedule_common+0x82/0xc0
[  159.307728][ T6577]  ? lock_chain_count+0x20/0x20
[  159.312644][ T6577]  ? _local_bh_enable+0xa0/0xa0
[  159.317641][ T6577]  ? inet_send_prepare+0x1b3/0x260
[  159.322904][ T6577]  ? inet_send_prepare+0x1b3/0x260
[  159.328075][ T6577]  ? inet6_sendmsg+0x5f/0xd0
[  159.332726][ T6577]  __sys_sendto+0x46a/0x620
[  159.337298][ T6577]  ? __ia32_sys_getpeername+0x90/0x90
[  159.342819][ T6577]  ? lock_chain_count+0x20/0x20
[  159.347788][ T6577]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  159.353813][ T6577]  ? lock_chain_count+0x20/0x20
[  159.358704][ T6577]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  159.364734][ T6577]  __x64_sys_sendto+0xde/0xf0
[  159.369472][ T6577]  do_syscall_64+0x55/0xb0
[  159.373933][ T6577]  ? clear_bhb_loop+0x40/0x90
[  159.378686][ T6577]  ? clear_bhb_loop+0x40/0x90
[  159.383417][ T6577]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.389361][ T6577] RIP: 0033:0x7fc94b18eec9
[  159.393817][ T6577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.413550][ T6577] RSP: 002b:00007fc94c0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  159.422018][ T6577] RAX: ffffffffffffffda RBX: 00007fc94b3e6180 RCX: 00007fc94b18eec9
[  159.430119][ T6577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  159.438124][ T6577] RBP: 00007fc94c0a1090 R08: 0000200000000240 R09: 000000000000001c
[  159.446496][ T6577] R10: 0000000004098884 R11: 0000000000000246 R12: 0000000000000001
[  159.454607][ T6577] R13: 00007fc94b3e6218 R14: 00007fc94b3e6180 R15: 00007ffe426f3c58
[  159.462729][ T6577]  </TASK>
[  159.622695][    T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  159.772681][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.792330][    T8] usb 4-1: device descriptor read/64, error -71
[  159.802319][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.809664][ T6530] bridge_slave_0: entered allmulticast mode
[  159.843631][ T6530] bridge_slave_0: entered promiscuous mode
[  159.864630][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.872042][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.886199][ T6530] bridge_slave_1: entered allmulticast mode
[  159.898644][ T6530] bridge_slave_1: entered promiscuous mode
[  159.943805][    T8] usb usb4-port1: attempt power cycle
[  160.018782][ T6575] loop2: detected capacity change from 0 to 32768
[  160.243599][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'.
[  160.355401][    T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  160.647441][ T6591] loop0: detected capacity change from 0 to 512
[  160.669788][ T6058] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop2 scanned by udevd (6058)
[  160.803870][    T8] usb 4-1: device not accepting address 7, error -71
[  160.952413][   T50] Bluetooth: hci1: command tx timeout
[  161.038191][ T6591] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  161.038432][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.062328][ T6591] System zones: 0-2, 18-18, 34-35
[  161.084779][ T6591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.100509][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.161298][ T6591] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.406741][ T6530] team0: Port device team_slave_0 added
[  161.547499][ T6591] smc: net device bond0 applied user defined pnetid SYZ0
[  161.555681][ T6530] team0: Port device team_slave_1 added
[  161.589979][ T6615] loop3: detected capacity change from 0 to 128
[  161.592722][ T6608] smc: net device bond0 erased user defined pnetid SYZ0
[  161.666668][ T6615] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  161.753713][ T6615] hpfs: filesystem error: improperly stopped
[  161.759888][ T6615] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  161.815714][ T6615] hpfs: You really don't want any checks? You are crazy...
[  161.834463][ T6615] hpfs: hpfs_map_sector(): read error
[  161.841375][ T6615] hpfs: code page support is disabled
[  161.854979][ T6615] hpfs: hpfs_map_4sectors(): unaligned read
[  161.861573][ T6615] hpfs: hpfs_map_4sectors(): unaligned read
[  161.877437][ T6615] hpfs: filesystem error: unable to find root dir
[  161.885622][ T3494] hsr_slave_0: left promiscuous mode
[  161.913758][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.932071][ T3494] hsr_slave_1: left promiscuous mode
[  161.944298][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.970069][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.018472][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.062254][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.093211][ T3494] bridge_slave_1: left allmulticast mode
[  162.099078][ T3494] bridge_slave_1: left promiscuous mode
[  162.121951][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.164698][ T3494] bridge_slave_0: left allmulticast mode
[  162.180708][ T3494] bridge_slave_0: left promiscuous mode
[  162.204413][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.280162][ T3494] veth1_macvtap: left promiscuous mode
[  162.291389][ T3494] veth0_macvtap: left promiscuous mode
[  162.297761][ T3494] veth1_vlan: left promiscuous mode
[  162.307998][ T3494] veth0_vlan: left promiscuous mode
[  162.987478][ T6616] loop2: detected capacity change from 0 to 32768
[  163.003526][   T50] Bluetooth: hci1: command tx timeout
[  163.019695][ T6616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.170 (6616)
[  163.091224][ T6616] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.182595][ T6616] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  163.191409][ T6616] BTRFS info (device loop2): setting nodatacow, compression disabled
[  163.232481][ T6616] BTRFS info (device loop2): ignoring bad roots
[  163.238942][ T6616] BTRFS info (device loop2): doing ref verification
[  163.274413][ T6616] BTRFS error (device loop2): ignorebadroots must be used with ro mount option
[  163.705442][ T6616] BTRFS error (device loop2): open_ctree failed: -22
[  164.753207][ T3494] team0 (unregistering): Port device team_slave_1 removed
[  164.808493][ T3494] team0 (unregistering): Port device team_slave_0 removed
[  164.862925][ T3494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.917003][ T3494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.088597][   T50] Bluetooth: hci1: command tx timeout
[  165.491084][ T3494] bond0 (unregistering): Released all slaves
[  165.572702][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.579694][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.605955][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.699564][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.720091][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.755404][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.635079][ T6530] hsr_slave_0: entered promiscuous mode
[  166.771685][ T6530] hsr_slave_1: entered promiscuous mode
[  166.817200][ T6530] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.835821][ T6530] Cannot create hsr debugfs directory
[  167.434243][ T6648] loop2: detected capacity change from 0 to 1024
[  167.518336][ T6648] EXT4-fs: Ignoring removed orlov option
[  167.657274][ T6648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.065667][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.371435][ T6683] loop2: detected capacity change from 0 to 1024
[  171.396422][ T6683] EXT4-fs: Ignoring removed orlov option
[  171.507531][ T6683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.069351][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.241287][ T6530] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  173.271874][ T6530] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  173.295587][ T6530] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  173.314695][ T6530] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  173.682433][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.679541][ T6530] 8021q: adding VLAN 0 to HW filter on device team0
[  174.736798][  T992] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.745397][  T992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.782532][  T992] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.789748][  T992] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.076399][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.071203][ T6530] veth0_vlan: entered promiscuous mode
[  178.130351][ T6530] veth1_vlan: entered promiscuous mode
[  178.153707][ T6757] loop0: detected capacity change from 0 to 256
[  178.190162][ T6757] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  178.931520][ T6530] veth0_macvtap: entered promiscuous mode
[  179.054441][ T6530] veth1_macvtap: entered promiscuous mode
[  179.150245][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.183642][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.202617][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.222586][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.227850][ T6764] loop2: detected capacity change from 0 to 1024
[  179.242466][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.272400][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.277351][ T6764] EXT4-fs: Ignoring removed orlov option
[  179.319584][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.354253][ T6764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.391829][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.428753][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.438911][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.450519][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.460944][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.472245][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.494186][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.577150][ T6530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.612422][ T6530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.652091][ T6530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.682385][ T6530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.685554][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.727210][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.754032][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.764696][  T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.831708][  T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.128935][ T6783] loop1: detected capacity change from 0 to 1024
[  181.176672][ T6783] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  185.290584][ T6831] fuse: Unknown parameter '0x000000000000000b'
[  186.738746][ T6845] loop0: detected capacity change from 0 to 1024
[  186.802269][ T6845] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  187.106675][ T6852] loop1: detected capacity change from 0 to 1024
[  187.145656][ T6852] EXT4-fs: Ignoring removed orlov option
[  187.204223][ T6855] loop2: detected capacity change from 0 to 7
[  187.225079][ T6062] Dev loop2: unable to read RDB block 7
[  187.243933][ T6852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.262227][ T6062]  loop2: AHDI p1 p2 p3
[  187.266485][ T6062] loop2: partition table partially beyond EOD, truncated
[  187.274627][ T6062] loop2: p1 start 1601398130 is beyond EOD, truncated
[  187.281541][ T6062] loop2: p2 start 1702059890 is beyond EOD, truncated
[  187.356615][ T6855] Dev loop2: unable to read RDB block 7
[  187.402546][ T6855]  loop2: AHDI p1 p2 p3
[  187.406898][ T6855] loop2: partition table partially beyond EOD, truncated
[  187.422997][ T6855] loop2: p1 start 1601398130 is beyond EOD, truncated
[  187.448892][ T6855] loop2: p2 start 1702059890 is beyond EOD, truncated
[  187.520502][ T6843] loop2: detected capacity change from 0 to 32768
[  187.562426][ T6843] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.210 (6843)
[  187.719914][ T6867] loop0: detected capacity change from 0 to 1024
[  187.763754][ T6867] EXT4-fs: Ignoring removed orlov option
[  187.868778][ T6843] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.891148][ T6843] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  187.908272][ T6843] BTRFS info (device loop2): setting nodatacow, compression disabled
[  187.923522][ T6843] BTRFS info (device loop2): ignoring bad roots
[  187.930499][ T6843] BTRFS info (device loop2): doing ref verification
[  187.939932][ T6843] BTRFS error (device loop2): ignorebadroots must be used with ro mount option
[  187.959328][ T6843] BTRFS error (device loop2): open_ctree failed: -22
[  188.453835][ T6867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.994027][ T6878] fuse: Unknown parameter 'fd0x000000000000000b'
[  189.386092][ T6058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (6058)
[  189.408670][ T6530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.116438][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.678829][ T6908] loop0: detected capacity change from 0 to 1024
[  191.798482][ T6908] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  192.279208][ T6913] loop2: detected capacity change from 0 to 7
[  192.309296][ T6913] Dev loop2: unable to read RDB block 7
[  192.332732][ T6913]  loop2: AHDI p1 p2 p3
[  192.351133][ T6913] loop2: partition table partially beyond EOD, truncated
[  192.391230][ T6913] loop2: p1 start 1601398130 is beyond EOD, truncated
[  192.412402][ T6913] loop2: p2 start 1702059890 is beyond EOD, truncated
[  192.521772][ T6920] loop2: detected capacity change from 0 to 1024
[  192.547170][ T6920] EXT4-fs: Ignoring removed orlov option
[  192.563716][ T6922] netlink: 208 bytes leftover after parsing attributes in process `syz.3.225'.
[  192.601555][ T6920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.626388][ T6925] loop0: detected capacity change from 0 to 1024
[  192.643503][ T6925] EXT4-fs: Ignoring removed orlov option
[  192.684290][ T6925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.840147][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.240508][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.687002][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  194.693931][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  196.001660][ T6951] loop2: detected capacity change from 0 to 7
[  196.009537][ T6951] Dev loop2: unable to read RDB block 7
[  196.017134][ T6951]  loop2: AHDI p1 p2 p3
[  196.021710][ T6951] loop2: partition table partially beyond EOD, truncated
[  196.039177][ T6949] loop0: detected capacity change from 0 to 1024
[  196.047731][ T6951] loop2: p1 start 1601398130 is beyond EOD, truncated
[  196.076289][ T6951] loop2: p2 start 1702059890 is beyond EOD, truncated
[  196.087550][ T6949] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  196.360295][ T6956] loop1: detected capacity change from 0 to 1024
[  196.364276][ T6958] loop0: detected capacity change from 0 to 1024
[  196.390455][ T6958] EXT4-fs: Ignoring removed orlov option
[  196.428856][ T6956] EXT4-fs: Ignoring removed orlov option
[  196.664515][ T6956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.689465][ T6958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.490150][ T6972] loop2: detected capacity change from 0 to 1024
[  197.498787][ T6972] EXT4-fs: Ignoring removed orlov option
[  199.765707][ T6976] loop3: detected capacity change from 0 to 256
[  199.903000][ T6976] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  199.903700][ T6972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.094806][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.291294][ T6530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.506045][ T7003] loop0: detected capacity change from 0 to 1024
[  201.524879][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.551513][ T7003] EXT4-fs: Ignoring removed orlov option
[  201.639983][ T7003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.846443][ T7007] loop3: detected capacity change from 0 to 1024
[  201.912768][ T7007] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  202.402490][ T7022] loop3: detected capacity change from 0 to 1024
[  202.413007][ T7022] EXT4-fs: Ignoring removed orlov option
[  202.442235][ T7022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.485304][   T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  203.524454][   T23] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  203.589356][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.117108][ T7020] loop2: detected capacity change from 0 to 32768
[  205.177189][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.203036][ T7020] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  205.236032][ T7020] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  205.311957][ T7020] BTRFS info (device loop2): using free space tree
[  205.409448][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  205.532576][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  205.747085][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  205.948182][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  206.000790][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  206.020533][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  206.030352][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  206.059564][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  206.069589][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  206.082008][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  206.092895][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  206.103708][ T7020] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  206.127629][ T7020] BTRFS error (device loop2): open_ctree failed: -12
[  206.313273][ T6058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (6058)
[  206.451108][ T7065] loop1: detected capacity change from 0 to 1024
[  206.478772][ T7067] loop0: detected capacity change from 0 to 1024
[  206.520336][ T7065] EXT4-fs: Ignoring removed orlov option
[  206.547189][ T7067] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  206.614324][ T7065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.023588][ T5807] Bluetooth: hci0: command 0x0406 tx timeout
[  207.036074][ T5807] Bluetooth: hci3: command 0x0406 tx timeout
[  207.047869][ T5807] Bluetooth: hci2: command 0x0406 tx timeout
[  209.516392][ T6530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.724745][ T7100] loop1: detected capacity change from 0 to 1024
[  209.751696][ T7100] EXT4-fs: Ignoring removed orlov option
[  209.776829][ T7103] loop0: detected capacity change from 0 to 164
[  209.817289][ T7100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.075947][ T7121] fuse: Unknown parameter 'user_id00000000000000000000'
[  212.325398][ T7128] loop0: detected capacity change from 0 to 1024
[  212.345471][ T6530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.406733][ T7128] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  212.705849][ T7133] loop1: detected capacity change from 0 to 1024
[  212.725670][ T7133] EXT4-fs: Ignoring removed orlov option
[  212.803940][ T7133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.564141][ T7141] loop2: detected capacity change from 0 to 4096
[  213.744569][ T7141] ntfs3: Unknown parameter '
'
[  214.560677][ T6530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.753949][ T7152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.273'.
[  215.686811][ T7168] loop1: detected capacity change from 0 to 1024
[  215.693846][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.273'.
[  215.694714][ T7168] EXT4-fs: Ignoring removed nobh option
[  215.710429][ T7168] EXT4-fs: inline encryption not supported
[  215.718998][ T7168] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  215.849169][ T7168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.925703][ T7168] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.274: Allocating blocks 497-513 which overlap fs metadata
[  215.949407][ T7168] EXT4-fs (loop1): pa ffff88805eb41570: logic 256, phys. 385, len 8
[  215.959007][ T7168] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1
[  216.346310][ T7174] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  216.700294][ T7182] loop2: detected capacity change from 0 to 1024
[  216.711209][ T7182] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  217.806701][ T7195] loop3: detected capacity change from 0 to 1024
[  217.814453][ T7195] EXT4-fs: Ignoring removed orlov option
[  217.874419][ T7195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.686329][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.705628][ T6530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.180504][ T7225] loop1: detected capacity change from 0 to 256
[  222.368035][ T7225] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  222.733290][ T7237] loop2: detected capacity change from 0 to 128
[  222.988778][ T7237] befs: (loop2): No write support. Marking filesystem read-only
[  223.502333][ T7237] befs: (loop2): invalid magic header
[  223.623476][ T6058] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  226.179751][ T7266] loop2: detected capacity change from 0 to 1024
[  226.218197][ T7266] EXT4-fs: Ignoring removed orlov option
[  226.610060][ T7268] loop3: detected capacity change from 0 to 256
[  226.809979][ T7266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.358874][ T7268] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  228.009098][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.710906][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.306'.
[  228.870549][ T7292] loop1: detected capacity change from 0 to 1024
[  228.879025][ T7292] EXT4-fs: Ignoring removed orlov option
[  228.902022][ T7288] loop2: detected capacity change from 0 to 256
[  228.910617][ T7288] exfat: Unknown parameter 'üKWk'
[  229.194466][ T7292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.248334][ T7298] loop0: detected capacity change from 0 to 1024
[  229.279260][ T7288] loop2: detected capacity change from 0 to 512
[  229.291641][ T7288] EXT4-fs: Mount option(s) incompatible with ext3
[  229.308020][ T7298] EXT4-fs: Ignoring removed orlov option
[  229.360664][ T6058] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  229.389072][ T7298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.374365][ T6530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.547400][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.464222][ T7319] loop3: detected capacity change from 0 to 1024
[  233.475664][ T7319] EXT4-fs: Ignoring removed orlov option
[  233.794730][ T7319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.754390][   T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  236.570029][ T7334] loop1: detected capacity change from 0 to 32768
[  236.714570][ T7334] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.725387][ T7334] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  236.735591][ T7334] BTRFS info (device loop1): turning off barriers
[  236.746363][ T7334] BTRFS info (device loop1): setting nodatasum
[  236.752359][   T27] usb 1-1: Using ep0 maxpacket: 32
[  236.754091][ T7334] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  236.763334][   T27] usb 1-1: config 5 has an invalid interface number: 100 but max is 0
[  236.771442][ T7334] BTRFS info (device loop1): use zstd compression, level 3
[  236.788356][   T27] usb 1-1: config 5 has no interface number 0
[  236.823175][   T27] usb 1-1: config 5 interface 100 altsetting 6 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  236.873116][ T7334] BTRFS info (device loop1): using free space tree
[  236.990447][   T27] usb 1-1: config 5 interface 100 has no altsetting 0
[  237.145149][   T27] usb 1-1: New USB device found, idVendor=10c4, idProduct=1101, bcdDevice=e0.cc
[  237.688332][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.697069][   T27] usb 1-1: Product: syz
[  237.701299][   T27] usb 1-1: Manufacturer: syz
[  237.706547][   T27] usb 1-1: SerialNumber: syz
[  237.799281][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.982012][   T27] cp210x 1-1:5.100: cp210x converter detected
[  238.005356][   T27] cp210x 1-1:5.100: failed to get vendor val 0x370b size 1: -71
[  238.025021][   T27] cp210x 1-1:5.100: querying part number failed
[  238.037448][   T27] usb 1-1: cp210x converter now attached to ttyUSB0
[  238.232624][   T27] usb 1-1: USB disconnect, device number 7
[  238.252032][   T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  238.266962][   T27] cp210x 1-1:5.100: device disconnected
[  238.482697][ T7369] loop3: detected capacity change from 0 to 2048
[  238.537424][ T7369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  238.576207][ T5853] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  238.659253][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.319'.
[  238.960560][ T5853] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  239.073754][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.206790][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  239.321386][ T5853] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  239.372227][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.412047][ T5853] usb 3-1: config 0 descriptor??
[  240.198320][ T5853] hid-generic 0003:1044:7A4D.0007: item fetching failed at offset 0/3
[  240.407657][ T5853] hid-generic: probe of 0003:1044:7A4D.0007 failed with error -22
[  240.503108][ T7363] loop2: detected capacity change from 0 to 512
[  240.628194][ T7367] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  240.679426][ T7387] loop3: detected capacity change from 0 to 1024
[  240.695453][ T7363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.698338][ T7387] EXT4-fs: Ignoring removed orlov option
[  240.753330][ T7363] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.829538][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.879008][ T7387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.965261][ T7363] EXT4-fs error (device loop2): ext4_get_first_dir_block:3606: inode #12: comm syz.2.318: directory missing '..'
[  241.038058][   T23] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  241.101198][ T5853] usb 3-1: USB disconnect, device number 4
[  241.317180][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.405345][   T23] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  241.683043][   T23] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  241.862597][   T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  241.932165][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  241.955604][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.983149][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.069343][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  242.093857][   T23] usb 1-1: language id specifier not provided by device, defaulting to English
[  242.108078][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.120040][   T23] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  242.138367][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.147216][   T23] usb 1-1: Manufacturer: 牢
[  242.157635][   T23] usb 1-1: config 0 descriptor??
[  242.170725][   T23] hub 1-1:0.0: bad descriptor, ignoring hub
[  242.177538][   T23] hub: probe of 1-1:0.0 failed with error -5
[  242.200077][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.216133][   T23] input: 牢 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9
[  242.394188][ T7400] loop3: detected capacity change from 0 to 1024
[  242.434668][ T7400] EXT4-fs: Ignoring removed orlov option
[  242.530924][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.541289][ T7400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.644571][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.235744][   T23] usb 1-1: USB disconnect, device number 8
[  244.356844][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.669304][ T7422] loop3: detected capacity change from 0 to 1024
[  244.714013][ T7422] EXT4-fs: Ignoring removed orlov option
[  244.751083][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.777654][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.794875][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.805689][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.811167][ T7422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.818586][ T7398] loop2: detected capacity change from 0 to 32768
[  244.832823][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  244.840344][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.876426][ T7398] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.327 (7398)
[  244.919950][ T7398] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  244.930473][ T7398] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  244.939537][ T7398] BTRFS info (device loop2): turning off barriers
[  244.946852][ T7398] BTRFS info (device loop2): setting nodatasum
[  244.953381][ T7398] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  244.963067][ T7398] BTRFS info (device loop2): use zstd compression, level 3
[  244.970506][ T7398] BTRFS info (device loop2): using free space tree
[  245.257366][ T7398] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  246.253398][ T7398] BTRFS error (device loop2): open_ctree failed: -12
[  246.498535][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.632962][ T7418] loop0: detected capacity change from 0 to 32768
[  246.653694][ T7418] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.330 (7418)
[  246.865573][ T7418] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  246.922303][ T5804] Bluetooth: hci1: command tx timeout
[  246.943964][ T7418] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  247.092247][ T7418] BTRFS info (device loop0): turning off barriers
[  247.259684][ T7418] BTRFS info (device loop0): setting nodatasum
[  247.391855][ T7418] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  247.607273][ T7418] BTRFS info (device loop0): use zstd compression, level 3
[  247.614839][ T7418] BTRFS info (device loop0): using free space tree
[  247.622998][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  247.624991][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  247.680756][ T7465] loop3: detected capacity change from 0 to 1024
[  247.698617][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  247.701622][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  247.709356][ T7465] EXT4-fs: Ignoring removed orlov option
[  247.730996][ T7423] chnl_net:caif_netlink_parms(): no params data found
[  247.791553][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  247.797316][ T7465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.802630][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  247.942356][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  247.985041][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  248.204571][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  248.216432][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  248.292990][ T7418] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  248.660918][ T7418] BTRFS error (device loop0): open_ctree failed: -12
[  248.935978][ T6058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (6058)
[  249.003766][ T5804] Bluetooth: hci1: command tx timeout
[  249.049638][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.165035][   T11] hsr_slave_0: left promiscuous mode
[  250.171622][   T11] hsr_slave_1: left promiscuous mode
[  250.241201][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.248922][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.258338][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.272973][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.329190][   T11] bridge_slave_1: left allmulticast mode
[  250.347404][   T11] bridge_slave_1: left promiscuous mode
[  250.355623][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.419264][   T11] bridge_slave_0: left allmulticast mode
[  250.429908][   T11] bridge_slave_0: left promiscuous mode
[  250.461944][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.625298][ T7504] loop0: detected capacity change from 0 to 1024
[  250.661556][ T7504] EXT4-fs: Ignoring removed orlov option
[  250.774370][ T7504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.804053][   T11] veth1_macvtap: left promiscuous mode
[  250.809690][   T11] veth0_macvtap: left promiscuous mode
[  250.832743][   T11] veth1_vlan: left promiscuous mode
[  250.858607][   T11] veth0_vlan: left promiscuous mode
[  251.170031][ T5804] Bluetooth: hci1: command tx timeout
[  252.709184][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.463270][ T5804] Bluetooth: hci1: command tx timeout
[  254.476756][   T11] team0 (unregistering): Port device team_slave_1 removed
[  254.547222][   T11] team0 (unregistering): Port device team_slave_0 removed
[  254.612270][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.676205][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.682483][ T7545] loop0: detected capacity change from 0 to 32768
[  254.736739][ T7545] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  254.755840][ T7545] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  254.767933][ T7545] BTRFS info (device loop0): turning off barriers
[  254.776682][ T7545] BTRFS info (device loop0): setting nodatasum
[  254.784097][ T7545] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  254.794924][ T7545] BTRFS info (device loop0): use zstd compression, level 3
[  254.803958][ T7545] BTRFS info (device loop0): using free space tree
[  255.779231][   T11] bond0 (unregistering): Released all slaves
[  255.868200][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.877032][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.884873][ T7423] bridge_slave_0: entered allmulticast mode
[  255.892052][ T7423] bridge_slave_0: entered promiscuous mode
[  256.118818][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.130099][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  256.130201][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  256.144755][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.203983][ T7423] bridge_slave_1: entered allmulticast mode
[  256.711097][ T7423] bridge_slave_1: entered promiscuous mode
[  256.742060][ T7563] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  256.906196][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.974470][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.191400][ T7423] team0: Port device team_slave_0 added
[  257.220245][ T7423] team0: Port device team_slave_1 added
[  257.324048][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.343894][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.376554][ T7423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.433984][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.450967][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.502586][ T7423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.607529][ T7423] hsr_slave_0: entered promiscuous mode
[  257.619787][ T7423] hsr_slave_1: entered promiscuous mode
[  257.626828][ T7423] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.639364][ T7423] Cannot create hsr debugfs directory
[  257.739911][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.920526][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.108670][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.211648][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.630883][ T7423] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  259.657579][ T7423] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  259.690593][ T7423] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  259.717134][ T7423] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  259.768419][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.787995][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.810090][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.826088][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.835206][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  259.844405][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  260.132644][ T7423] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.377517][ T7423] 8021q: adding VLAN 0 to HW filter on device team0
[  260.430707][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.438001][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.459807][ T7600] chnl_net:caif_netlink_parms(): no params data found
[  260.542033][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.549683][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.841120][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.849889][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.858188][ T7600] bridge_slave_0: entered allmulticast mode
[  260.870011][ T7600] bridge_slave_0: entered promiscuous mode
[  260.907702][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.920057][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.931695][ T7600] bridge_slave_1: entered allmulticast mode
[  260.940289][ T7600] bridge_slave_1: entered promiscuous mode
[  260.981492][   T11] hsr_slave_0: left promiscuous mode
[  260.988312][   T11] hsr_slave_1: left promiscuous mode
[  260.995630][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.004547][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.012875][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.020364][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.028495][   T11] bridge_slave_1: left allmulticast mode
[  261.034365][   T11] bridge_slave_1: left promiscuous mode
[  261.040134][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.050402][   T11] bridge_slave_0: left allmulticast mode
[  261.056591][   T11] bridge_slave_0: left promiscuous mode
[  261.063721][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.091255][   T11] veth1_macvtap: left promiscuous mode
[  261.096978][   T11] veth0_macvtap: left promiscuous mode
[  261.103360][   T11] veth1_vlan: left promiscuous mode
[  261.108901][   T11] veth0_vlan: left promiscuous mode
[  261.760303][   T11] team0 (unregistering): Port device team_slave_1 removed
[  261.815588][   T11] team0 (unregistering): Port device team_slave_0 removed
[  261.869381][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.882513][ T5802] Bluetooth: hci3: command tx timeout
[  261.929269][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.556656][   T11] bond0 (unregistering): Released all slaves
[  262.670196][ T7600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.710713][ T7600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.814988][ T7600] team0: Port device team_slave_0 added
[  262.824432][ T7600] team0: Port device team_slave_1 added
[  262.871984][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.902646][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.947299][ T7600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.962522][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  262.969558][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.997949][ T7600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.109354][ T7600] hsr_slave_0: entered promiscuous mode
[  263.117464][ T7600] hsr_slave_1: entered promiscuous mode
[  263.124176][ T7600] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  263.131870][ T7600] Cannot create hsr debugfs directory
[  263.207865][ T7423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.611336][ T7600] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  263.639451][ T7600] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  263.652700][ T7600] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  263.666346][ T7600] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  263.910707][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.964670][ T5802] Bluetooth: hci3: command tx timeout
[  263.965263][ T7600] 8021q: adding VLAN 0 to HW filter on device team0
[  263.994444][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.002828][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.027245][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.034488][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.065424][ T7423] veth0_vlan: entered promiscuous mode
[  264.109695][ T7423] veth1_vlan: entered promiscuous mode
[  264.203862][ T7423] veth0_macvtap: entered promiscuous mode
[  264.228605][ T7423] veth1_macvtap: entered promiscuous mode
[  264.270573][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.285176][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.300339][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.313820][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.328098][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.349200][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.360575][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.372053][ T7423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.384786][ T7423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.398643][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.416945][ T7423] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.427841][ T7423] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.452257][ T7423] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.461043][ T7423] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.641304][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.669748][ T7600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.677916][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.750446][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.772203][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.970211][ T7676] loop4: detected capacity change from 0 to 1024
[  264.978860][ T7676] EXT4-fs: Ignoring removed orlov option
[  265.039906][ T7676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.202440][ T5802] Bluetooth: hci3: command tx timeout
[  266.280274][ T7600] veth0_vlan: entered promiscuous mode
[  266.341674][ T7600] veth1_vlan: entered promiscuous mode
[  266.428437][ T7423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.440311][ T7600] veth0_macvtap: entered promiscuous mode
[  266.454706][ T7600] veth1_macvtap: entered promiscuous mode
[  266.479586][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.502143][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.519437][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.548217][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.571608][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.582616][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.600521][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.629984][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.641360][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.658291][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.668987][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.686059][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.707779][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.723301][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.748143][ T7600] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.764850][ T7600] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.776463][ T7600] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.787977][ T7600] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.927952][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.944008][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.981479][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.992425][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.402574][    T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[  267.595224][    T9] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  267.610881][    T9] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  267.628287][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  267.637847][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  267.662232][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  267.681255][    T9] usb 6-1: language id specifier not provided by device, defaulting to English
[  267.708853][    T9] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  267.728315][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.739473][    T9] usb 6-1: Manufacturer: 牢
[  267.757159][    T9] usb 6-1: config 0 descriptor??
[  267.764923][    T9] hub 6-1:0.0: bad descriptor, ignoring hub
[  267.771007][    T9] hub: probe of 6-1:0.0 failed with error -5
[  267.796098][    T9] input: 牢 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10
[  268.024413][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.049061][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.179691][ T2177] usb 6-1: USB disconnect, device number 2
[  268.282916][ T5802] Bluetooth: hci3: command tx timeout
[  308.488483][ T8133] loop5: detected capacity change from 0 to 1024
[  308.495009][ T8136] loop2: detected capacity change from 0 to 1024
[  308.496248][ T8136] EXT4-fs: Ignoring removed orlov option
[  308.508760][ T8138] loop4: detected capacity change from 0 to 1024
[  308.516815][ T8133] EXT4-fs: Ignoring removed orlov option
[  308.530596][ T8138] EXT4-fs: Ignoring removed orlov option
[  308.561929][ T8136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.580389][ T8133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.617368][ T8138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.722442][ T2177] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  309.102255][ T2177] usb 4-1: Using ep0 maxpacket: 16
[  312.378190][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.432667][ T2177] usb 4-1: device descriptor read/all, error -71
[  312.461368][ T7423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.760577][ T7600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.796314][ T8171] netlink: 'syz.3.355': attribute type 24 has an invalid length.
[  312.849677][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'.
[  312.859526][ T8171] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  313.670027][ T8179] loop4: detected capacity change from 0 to 4096
[  313.770501][ T8179] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  315.339017][ T8195] loop2: detected capacity change from 0 to 1024
[  315.364332][ T8195] EXT4-fs: Ignoring removed orlov option
[  315.400935][ T8197] loop4: detected capacity change from 0 to 1024
[  315.410313][ T8197] EXT4-fs: Ignoring removed orlov option
[  315.426458][ T8195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.750989][ T8197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.001371][ T8184] loop3: detected capacity change from 0 to 32768
[  316.102491][ T8184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.358 (8184)
[  316.193244][ T8184] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.239028][ T8184] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  316.477888][ T8184] BTRFS info (device loop3): setting nodatacow, compression disabled
[  316.487470][ T8184] BTRFS info (device loop3): ignoring bad roots
[  316.498444][ T8184] BTRFS info (device loop3): doing ref verification
[  316.505959][ T8184] BTRFS error (device loop3): ignorebadroots must be used with ro mount option
[  317.447317][ T8184] BTRFS error (device loop3): open_ctree failed: -22
[  317.512544][ T8139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (8139)
[  317.566887][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  317.573337][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  318.635764][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.855633][ T7423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.971350][ T8225] loop2: detected capacity change from 0 to 1024
[  319.132538][ T8225] EXT4-fs: Ignoring removed orlov option
[  319.778613][ T8225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.055964][ T6111] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  321.306955][ T6111] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  321.486611][ T6111] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  321.677441][ T6111] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  321.761537][ T6111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  322.031805][ T6111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  322.142940][ T6111] usb 5-1: language id specifier not provided by device, defaulting to English
[  322.177646][ T6111] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  322.198440][ T6111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.243565][ T6111] usb 5-1: Manufacturer: 牢
[  322.326983][ T6111] usb 5-1: config 0 descriptor??
[  322.417654][ T6111] hub 5-1:0.0: bad descriptor, ignoring hub
[  322.451603][ T6111] hub: probe of 5-1:0.0 failed with error -5
[  322.601031][ T6111] input: 牢 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11
[  322.622595][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.662390][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.722796][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.907190][   T23] usb 5-1: USB disconnect, device number 2
[  326.913609][ T8276] loop2: detected capacity change from 0 to 1024
[  326.938108][ T8276] EXT4-fs: Ignoring removed orlov option
[  326.971073][ T8276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.762082][    C1] sched: RT throttling activated
[  329.029086][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.044262][ T8299] loop3: detected capacity change from 0 to 1024
[  329.061877][ T8299] EXT4-fs: Ignoring removed orlov option
[  329.361055][ T8299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.024550][   T27] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  331.785813][   T27] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  332.340548][   T27] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  332.936875][   T27] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  332.948210][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  333.083110][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  333.097047][   T27] usb 6-1: string descriptor 0 read error: -71
[  333.103734][   T27] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  333.113175][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.124230][   T27] usb 6-1: config 0 descriptor??
[  333.130965][   T27] usb 6-1: can't set config #0, error -71
[  333.287928][   T27] usb 6-1: USB disconnect, device number 3
[  333.370254][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.841313][ T8326] loop4: detected capacity change from 0 to 1024
[  333.873438][ T8326] EXT4-fs: Ignoring removed orlov option
[  334.565670][ T8326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.921001][ T7423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.877000][ T8366] loop3: detected capacity change from 0 to 1024
[  339.013488][ T8366] EXT4-fs: Ignoring removed orlov option
[  339.121813][ T8366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.152495][    T8] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  340.355517][ T8380] loop5: detected capacity change from 0 to 1024
[  340.380515][ T8380] EXT4-fs: Ignoring removed orlov option
[  340.453297][ T8380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.572885][    T8] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[  340.591455][    T8] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  340.601395][    T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  340.621140][ T8372] loop4: detected capacity change from 0 to 32768
[  340.656556][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  340.685423][ T8372] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  340.689702][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  340.720692][ T8372] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  340.742481][ T8372] BTRFS info (device loop4): turning off barriers
[  340.751990][ T8372] BTRFS info (device loop4): setting nodatasum
[  340.759514][ T8372] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  340.770069][ T8372] BTRFS info (device loop4): use zstd compression, level 3
[  340.777885][ T8372] BTRFS info (device loop4): using free space tree
[  340.819282][    T8] usb 3-1: language id specifier not provided by device, defaulting to English
[  340.849305][    T8] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  340.919364][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.972571][    T8] usb 3-1: Manufacturer: 牢
[  341.034107][    T8] usb 3-1: config 0 descriptor??
[  341.108132][    T8] hub 3-1:0.0: bad descriptor, ignoring hub
[  341.122279][    T8] hub: probe of 3-1:0.0 failed with error -5
[  341.135634][    T8] input: 牢 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12
[  342.084478][ T6111] usb 3-1: USB disconnect, device number 5
[  342.096030][ T8372] BTRFS error (device loop4): open_ctree failed: -4
[  342.340150][ T8404] loop2: detected capacity change from 0 to 1024
[  342.348959][ T8404] EXT4-fs: Ignoring removed orlov option
[  342.385592][ T7600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.495591][ T8404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.832404][   T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  343.308324][ T8411] loop5: detected capacity change from 0 to 2048
[  343.373146][ T8411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  343.763002][   T27] usb 5-1: Using ep0 maxpacket: 16
[  343.821796][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.236555][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.397197][   T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  344.412325][   T27] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  344.422647][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.448427][   T27] usb 5-1: config 0 descriptor??
[  344.448990][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.486473][   T27] usbhid 5-1:0.0: can't add hid device: -71
[  346.504488][   T27] usbhid: probe of 5-1:0.0 failed with error -71
[  346.511415][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.514527][ T8426] loop5: detected capacity change from 0 to 1024
[  346.590036][   T27] usb 5-1: USB disconnect, device number 3
[  346.597994][ T8426] EXT4-fs: Ignoring removed orlov option
[  346.898680][ T8426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.241951][ T8438] loop3: detected capacity change from 0 to 1024
[  348.254198][ T8438] EXT4-fs: Ignoring removed orlov option
[  348.422888][ T8438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.697517][ T8443] loop4: detected capacity change from 0 to 1024
[  348.705190][ T8443] EXT4-fs: Ignoring removed orlov option
[  349.709148][ T8443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.289332][ T7600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.563704][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.566467][ T7423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.744955][ T8464] loop2: detected capacity change from 0 to 1024
[  352.784866][ T8464] EXT4-fs: Ignoring removed orlov option
[  352.821119][ T8466] loop3: detected capacity change from 0 to 1024
[  352.975350][ T8466] EXT4-fs: Ignoring removed orlov option
[  353.025294][ T8464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.053544][ T8466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.194394][ T8474] loop4: detected capacity change from 0 to 2048
[  353.234625][ T8474] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  357.067185][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.069655][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.813585][ T8496] loop3: detected capacity change from 0 to 1024
[  358.831509][ T8496] EXT4-fs: Ignoring removed orlov option
[  359.014380][ T8496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.725944][ T8510] loop4: detected capacity change from 0 to 2048
[  362.511035][ T8518] loop5: detected capacity change from 0 to 1024
[  362.518563][ T8518] EXT4-fs: Ignoring removed orlov option
[  362.529895][ T8510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  362.635258][ T8518] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5.
[  362.871714][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.916071][ T8522] loop4: detected capacity change from 0 to 1024
[  362.919894][ T8523] loop2: detected capacity change from 0 to 512
[  362.944819][ T8522] EXT4-fs: Ignoring removed orlov option
[  363.081858][ T8522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  364.289659][ T8533] loop2: detected capacity change from 0 to 32768
[  364.419587][ T8533] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  364.460442][ T7423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.474393][   T28] audit: type=1800 audit(1760384985.275:6): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.426" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  364.512054][ T8533] 
[  364.514455][ T8533] ======================================================
[  364.521640][ T8533] WARNING: possible circular locking dependency detected
[  364.528814][ T8533] syzkaller #0 Not tainted
[  364.533252][ T8533] ------------------------------------------------------
[  364.540485][ T8533] syz.2.426/8533 is trying to acquire lock:
[  364.546388][ T8533] ffff8880778fa658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360
[  364.559683][ T8533] 
[  364.559683][ T8533] but task is already holding lock:
[  364.567169][ T8533] ffff88805ca7ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0
[  364.577923][ T8533] 
[  364.577923][ T8533] which lock already depends on the new lock.
[  364.577923][ T8533] 
[  364.588353][ T8533] 
[  364.588353][ T8533] the existing dependency chain (in reverse order) is:
[  364.597405][ T8533] 
[  364.597405][ T8533] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}:
[  364.605254][ T8533]        down_read+0x46/0x2e0
[  364.609988][ T8533]        ocfs2_init_acl+0x2fa/0x720
[  364.615217][ T8533]        ocfs2_mknod+0x12e5/0x20f0
[  364.620456][ T8533]        ocfs2_create+0x196/0x410
[  364.625684][ T8533]        path_openat+0x1277/0x3190
[  364.630822][ T8533]        do_filp_open+0x1c5/0x3d0
[  364.635882][ T8533]        do_sys_openat2+0x12c/0x1c0
[  364.641345][ T8533]        __x64_sys_openat+0x139/0x160
[  364.647042][ T8533]        do_syscall_64+0x55/0xb0
[  364.652102][ T8533]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  364.658564][ T8533] 
[  364.658564][ T8533] -> #4 (jbd2_handle){++++}-{0:0}:
[  364.666070][ T8533]        start_this_handle+0x1e9d/0x20c0
[  364.671927][ T8533]        jbd2__journal_start+0x2bb/0x5b0
[  364.677720][ T8533]        jbd2_journal_start+0x2a/0x40
[  364.683158][ T8533]        ocfs2_start_trans+0x376/0x6c0
[  364.688663][ T8533]        ocfs2_mknod+0xe47/0x20f0
[  364.693804][ T8533]        ocfs2_create+0x196/0x410
[  364.698938][ T8533]        path_openat+0x1277/0x3190
[  364.704082][ T8533]        do_filp_open+0x1c5/0x3d0
[  364.709328][ T8533]        do_sys_openat2+0x12c/0x1c0
[  364.714572][ T8533]        __x64_sys_openat+0x139/0x160
[  364.719966][ T8533]        do_syscall_64+0x55/0xb0
[  364.724925][ T8533]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  364.731444][ T8533] 
[  364.731444][ T8533] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  364.739980][ T8533]        down_read+0x46/0x2e0
[  364.744696][ T8533]        ocfs2_start_trans+0x36a/0x6c0
[  364.750181][ T8533]        ocfs2_mknod+0xe47/0x20f0
[  364.755339][ T8533]        ocfs2_create+0x196/0x410
[  364.760464][ T8533]        path_openat+0x1277/0x3190
[  364.765597][ T8533]        do_filp_open+0x1c5/0x3d0
[  364.770643][ T8533]        do_sys_openat2+0x12c/0x1c0
[  364.775868][ T8533]        __x64_sys_openat+0x139/0x160
[  364.781255][ T8533]        do_syscall_64+0x55/0xb0
[  364.786299][ T8533]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  364.792727][ T8533] 
[  364.792727][ T8533] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  364.800232][ T8533]        ocfs2_start_trans+0x26b/0x6c0
[  364.805925][ T8533]        ocfs2_mknod+0xe47/0x20f0
[  364.810977][ T8533]        ocfs2_create+0x196/0x410
[  364.816020][ T8533]        path_openat+0x1277/0x3190
[  364.821173][ T8533]        do_filp_open+0x1c5/0x3d0
[  364.826260][ T8533]        do_sys_openat2+0x12c/0x1c0
[  364.831485][ T8533]        __x64_sys_openat+0x139/0x160
[  364.836875][ T8533]        do_syscall_64+0x55/0xb0
[  364.841834][ T8533]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  364.848377][ T8533] 
[  364.848377][ T8533] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}:
[  364.859106][ T8533]        down_write+0x97/0x1f0
[  364.863920][ T8533]        ocfs2_reserve_local_alloc_bits+0x126/0x24b0
[  364.870616][ T8533]        ocfs2_reserve_clusters_with_limit+0x1bf/0xba0
[  364.877591][ T8533]        ocfs2_mknod+0xdee/0x20f0
[  364.882640][ T8533]        ocfs2_create+0x196/0x410
[  364.887699][ T8533]        path_openat+0x1277/0x3190
[  364.892833][ T8533]        do_filp_open+0x1c5/0x3d0
[  364.897892][ T8533]        do_sys_openat2+0x12c/0x1c0
[  364.903117][ T8533]        __x64_sys_openat+0x139/0x160
[  364.908508][ T8533]        do_syscall_64+0x55/0xb0
[  364.913597][ T8533]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  364.920142][ T8533] 
[  364.920142][ T8533] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  364.930704][ T8533]        __lock_acquire+0x2ddb/0x7c80
[  364.936106][ T8533]        lock_acquire+0x197/0x410
[  364.941245][ T8533]        down_write+0x97/0x1f0
[  364.946049][ T8533]        ocfs2_reserve_suballoc_bits+0x165/0x4360
[  364.952492][ T8533]        ocfs2_reserve_new_metadata_blocks+0x404/0x940
[  364.959382][ T8533]        ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0
[  364.965558][ T8533]        ocfs2_xattr_set+0xb6d/0x11f0
[  364.971044][ T8533]        __vfs_setxattr+0x431/0x470
[  364.976262][ T8533]        __vfs_setxattr_noperm+0x12d/0x5e0
[  364.982102][ T8533]        vfs_setxattr+0x16c/0x2f0
[  364.987144][ T8533]        path_setxattr+0x362/0x550
[  364.992278][ T8533]        __x64_sys_setxattr+0xbb/0xd0
[  364.997670][ T8533]        do_syscall_64+0x55/0xb0
[  365.002640][ T8533]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.009076][ T8533] 
[  365.009076][ T8533] other info that might help us debug this:
[  365.009076][ T8533] 
[  365.019472][ T8533] Chain exists of:
[  365.019472][ T8533]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem
[  365.019472][ T8533] 
[  365.035417][ T8533]  Possible unsafe locking scenario:
[  365.035417][ T8533] 
[  365.042884][ T8533]        CPU0                    CPU1
[  365.048384][ T8533]        ----                    ----
[  365.053758][ T8533]   lock(&oi->ip_xattr_sem);
[  365.058368][ T8533]                                lock(jbd2_handle);
[  365.064967][ T8533]                                lock(&oi->ip_xattr_sem);
[  365.072288][ T8533]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  365.079600][ T8533] 
[  365.079600][ T8533]  *** DEADLOCK ***
[  365.079600][ T8533] 
[  365.087857][ T8533] 3 locks held by syz.2.426/8533:
[  365.092997][ T8533]  #0: ffff888052fb0418 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  365.102383][ T8533]  #1: ffff88805ca7d118 (&sb->s_type->i_mutex_key#28){+.+.}-{3:3}, at: vfs_setxattr+0x145/0x2f0
[  365.112998][ T8533]  #2: ffff88805ca7ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0
[  365.123049][ T8533] 
[  365.123049][ T8533] stack backtrace:
[  365.128960][ T8533] CPU: 1 PID: 8533 Comm: syz.2.426 Not tainted syzkaller #0
[  365.136348][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  365.146455][ T8533] Call Trace:
[  365.149766][ T8533]  <TASK>
[  365.152715][ T8533]  dump_stack_lvl+0x16c/0x230
[  365.157416][ T8533]  ? load_image+0x3b0/0x3b0
[  365.161938][ T8533]  ? show_regs_print_info+0x20/0x20
[  365.167489][ T8533]  ? print_circular_bug+0x12b/0x1a0
[  365.172780][ T8533]  check_noncircular+0x2bd/0x3c0
[  365.177839][ T8533]  ? print_deadlock_bug+0x5d0/0x5d0
[  365.183122][ T8533]  ? lockdep_lock+0xe0/0x220
[  365.187741][ T8533]  ? _find_first_zero_bit+0xd3/0x100
[  365.193248][ T8533]  __lock_acquire+0x2ddb/0x7c80
[  365.198151][ T8533]  ? ocfs2_get_system_file_inode+0x1e3/0x7b0
[  365.204227][ T8533]  ? __lock_acquire+0x7c80/0x7c80
[  365.209283][ T8533]  ? verify_lock_unused+0x140/0x140
[  365.214520][ T8533]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  365.220185][ T8533]  ? do_raw_spin_lock+0x121/0x2c0
[  365.225244][ T8533]  ? mutex_unlock+0x10/0x10
[  365.229785][ T8533]  lock_acquire+0x197/0x410
[  365.234311][ T8533]  ? ocfs2_reserve_suballoc_bits+0x165/0x4360
[  365.240408][ T8533]  ? ocfs2_get_system_file_inode+0x1f1/0x7b0
[  365.246547][ T8533]  ? __might_sleep+0xe0/0xe0
[  365.251178][ T8533]  ? read_lock_is_recursive+0x20/0x20
[  365.256567][ T8533]  ? ocfs2_fast_symlink_read_folio+0x530/0x530
[  365.262736][ T8533]  ? check_noncircular+0x175/0x3c0
[  365.267894][ T8533]  ? verify_lock_unused+0x140/0x140
[  365.273117][ T8533]  down_write+0x97/0x1f0
[  365.277393][ T8533]  ? ocfs2_reserve_suballoc_bits+0x165/0x4360
[  365.283483][ T8533]  ? down_read_killable+0x340/0x340
[  365.288800][ T8533]  ocfs2_reserve_suballoc_bits+0x165/0x4360
[  365.294748][ T8533]  ? mark_lock+0x94/0x320
[  365.299100][ T8533]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  365.305193][ T8533]  ? lock_chain_count+0x20/0x20
[  365.310096][ T8533]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  365.316038][ T8533]  ? ocfs2_block_group_search+0x470/0x470
[  365.321785][ T8533]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  365.328134][ T8533]  ? _raw_spin_unlock+0x40/0x40
[  365.333000][ T8533]  ? stack_trace_save+0x9c/0xe0
[  365.337866][ T8533]  ? stack_trace_snprint+0xf0/0xf0
[  365.343092][ T8533]  ? __stack_depot_save+0x560/0x630
[  365.348393][ T8533]  ? kasan_set_track+0x5f/0x70
[  365.353172][ T8533]  ? kasan_set_track+0x4e/0x70
[  365.357957][ T8533]  ? __kasan_kmalloc+0x8f/0xa0
[  365.362761][ T8533]  ? ocfs2_reserve_new_metadata_blocks+0x114/0x940
[  365.369290][ T8533]  ? ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0
[  365.375115][ T8533]  ? ocfs2_xattr_set+0xb6d/0x11f0
[  365.380161][ T8533]  ? __vfs_setxattr+0x431/0x470
[  365.385194][ T8533]  ? __vfs_setxattr_noperm+0x12d/0x5e0
[  365.390675][ T8533]  ? vfs_setxattr+0x16c/0x2f0
[  365.395459][ T8533]  ? path_setxattr+0x362/0x550
[  365.400258][ T8533]  ? __x64_sys_setxattr+0xbb/0xd0
[  365.405302][ T8533]  ? do_syscall_64+0x55/0xb0
[  365.409912][ T8533]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.416379][ T8533]  ocfs2_reserve_new_metadata_blocks+0x404/0x940
[  365.422741][ T8533]  ? ocfs2_init_steal_slots+0x160/0x160
[  365.428391][ T8533]  ? ocfs2_xattr_block_set+0x2b40/0x2b40
[  365.434173][ T8533]  ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0
[  365.439856][ T8533]  ? ocfs2_xattr_set+0xb33/0x11f0
[  365.444898][ T8533]  ? ocfs2_prepare_refcount_xattr+0xf20/0xf20
[  365.450987][ T8533]  ? ocfs2_truncate_log_needs_flush+0x135/0x2e0
[  365.457277][ T8533]  ? ocfs2_remove_btree_range+0x1480/0x1480
[  365.463266][ T8533]  ? down_write+0x162/0x1f0
[  365.467797][ T8533]  ? down_read_killable+0x340/0x340
[  365.473134][ T8533]  ? up_write+0x1c3/0x410
[  365.477481][ T8533]  ocfs2_xattr_set+0xb6d/0x11f0
[  365.482363][ T8533]  ? __ocfs2_xattr_set_handle+0xf10/0xf10
[  365.488192][ T8533]  ? __lock_acquire+0x1334/0x7c80
[  365.493497][ T8533]  ? verify_lock_unused+0x140/0x140
[  365.498817][ T8533]  ? aa_get_newest_label+0xf8/0x5c0
[  365.504031][ T8533]  ? end_current_label_crit_section+0x170/0x170
[  365.510479][ T8533]  ? evm_protected_xattr_common+0x170/0x190
[  365.516413][ T8533]  ? evm_protect_xattr+0x534/0x7a0
[  365.521549][ T8533]  ? ocfs2_xattr_security_get+0x40/0x40
[  365.527461][ T8533]  __vfs_setxattr+0x431/0x470
[  365.532208][ T8533]  __vfs_setxattr_noperm+0x12d/0x5e0
[  365.537618][ T8533]  vfs_setxattr+0x16c/0x2f0
[  365.542144][ T8533]  ? xattr_permission+0x470/0x470
[  365.547258][ T8533]  ? __mnt_want_write+0x223/0x2a0
[  365.552306][ T8533]  ? path_setxattr+0x314/0x550
[  365.557102][ T8533]  path_setxattr+0x362/0x550
[  365.561721][ T8533]  ? simple_xattrs_free+0x150/0x150
[  365.566984][ T8533]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  365.573078][ T8533]  ? lock_chain_count+0x20/0x20
[  365.577954][ T8533]  __x64_sys_setxattr+0xbb/0xd0
[  365.582826][ T8533]  do_syscall_64+0x55/0xb0
[  365.587275][ T8533]  ? clear_bhb_loop+0x40/0x90
[  365.592025][ T8533]  ? clear_bhb_loop+0x40/0x90
[  365.596750][ T8533]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.602672][ T8533] RIP: 0033:0x7f887298eec9
[  365.607113][ T8533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.626944][ T8533] RSP: 002b:00007f8873767038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  365.635555][ T8533] RAX: ffffffffffffffda RBX: 00007f8872be5fa0 RCX: 00007f887298eec9
[  365.643565][ T8533] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 00002000000000c0
[  365.651566][ T8533] RBP: 00007f8872a11f91 R08: 0000000000000000 R09: 0000000000000000
[  365.659595][ T8533] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[  365.667596][ T8533] R13: 00007f8872be6038 R14: 00007f8872be5fa0 R15: 00007ffcd60ae268
[  365.675594][ T8533]  </TASK>
[  365.762153][   T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  365.827452][ T5794] ocfs2: Unmounting device (7,2) on (node local)
[  365.972274][   T27] usb 6-1: Using ep0 maxpacket: 16
[  365.981082][   T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  365.991896][   T27] usb 6-1: config 0 has no interfaces?
[  366.007338][   T27] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  366.027196][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.048549][   T27] usb 6-1: Product: syz
[  366.065286][   T27] usb 6-1: Manufacturer: syz
[  366.079573][   T27] usb 6-1: SerialNumber: syz
[  366.099167][   T27] usb 6-1: config 0 descriptor??
[  366.216586][ T8546] loop4: detected capacity change from 0 to 65536
[  366.237446][ T8546] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  366.257433][ T8546] XFS (loop4): Ending clean mount
[  366.269912][ T8546] XFS (loop4): Quotacheck needed: Please wait.
[  366.289301][ T8546] XFS (loop4): Quotacheck: Done.
[  366.318224][   T27] usb 6-1: USB disconnect, device number 4
[  366.335296][ T7423] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  370.842285][ T5804] Bluetooth: hci1: command 0x0406 tx timeout