last executing test programs:

50m26.465895457s ago: executing program 32 (id=21):
syz_mount_image$xfs(&(0x7f0000000080), &(0x7f00000096c0)='./file0\x00', 0x2000800, &(0x7f00000000c0)={[{@logbsize={'logbsize', 0x3d, [0x38, 0x67]}}, {@ikeep}, {@noalign}, {@swalloc}]}, 0x1, 0x96a4, &(0x7f000001c440)="$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")
truncate(&(0x7f0000009480)='./file2\x00', 0x1bf8)

49m43.644688153s ago: executing program 4 (id=87):
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000100)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
r1 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil)
shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0)
epoll_pwait(r2, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x9, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x84042, 0xc2)
write$P9_RUNLINKAT(r3, 0x0, 0x0)
remap_file_pages(&(0x7f00003f1000/0x4000)=nil, 0x4000, 0x3000002, 0x2, 0x20)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

49m39.844665245s ago: executing program 4 (id=92):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001f80)={r1, 0x20, &(0x7f0000001fc0)={&(0x7f0000002000)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002140)={0xaa, 0x100})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000002180)={{&(0x7f0000085000/0x2000)=nil, 0x2000}, 0x2})

49m35.603657206s ago: executing program 4 (id=104):
r0 = socket(0x2, 0x3, 0x6)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x5, 0xbc, &(0x7f0000000580)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640), 0x10}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000006c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x5)
socket$inet6(0xa, 0x2, 0x0)
add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000740)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000940)="306663353a313232373a620afaf66463", 0x10)

49m33.913198197s ago: executing program 2 (id=107):
r0 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r1 = socket(0x2, 0x801, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x2d, @remote, 0x6}]}, &(0x7f0000000180)=0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)}, {0x0}], 0x2)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000440)=0x9a4, 0x4)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000480)='xfrm0\x00', 0x10)
connect$inet(r4, &(0x7f00000004c0)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000200)=[{{&(0x7f0000000540)={0x2, 0x1000, @broadcast}, 0x10, 0x0}}], 0x1, 0x0)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000004, &(0x7f00000000c0)=[{0x10, 0x3, 0xffffffffffffffff}, {0x5, 0x1000}], 0x2, 0xbff, 0x7, 0x0, 0x2c, 0x5f})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x4, 0x4c8, [0x200000000600, 0x0, 0x0, 0x2000000006d8, 0x2000000009d8], 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]}, 0x553)

49m33.829884369s ago: executing program 4 (id=109):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2048c4, &(0x7f0000000480)={[{@fat=@debug}, {@uni_xlate}, {@fat=@nfs}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0xe5}}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@numtail}, {@numtail}]}, 0x0, 0x2c7, &(0x7f0000000540)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000840)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x93085, 0x0)
mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020)

49m33.569678145s ago: executing program 2 (id=110):
capset(0x0, &(0x7f0000000480)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000001680)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000016c0), 0x0, 0x10, &(0x7f0000001700), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48)

49m33.282185362s ago: executing program 4 (id=112):
setns(0xc9, 0x0)
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0xa8000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000640)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5420, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000001a40)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001b00)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0})
r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01)
write$sndseq(r5, &(0x7f0000001bc0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
r6 = gettid()
r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000001780)={{0xfffffffe, 0x0, 0x6, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, r6, 0x0, 0x800000, 'syz1\x00', 0x0})
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000001900)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000540)={0x7}, 0x8)

49m33.240962353s ago: executing program 2 (id=113):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x8000000078b})

49m30.242449855s ago: executing program 2 (id=120):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2048c4, &(0x7f0000000480)={[{@fat=@debug}, {@uni_xlate}, {@fat=@nfs}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0xe5}}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@numtail}, {@numtail}]}, 0x0, 0x2c7, &(0x7f0000000540)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000840)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x93085, 0x0)
mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020)

49m30.084686329s ago: executing program 4 (id=121):
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
acct(&(0x7f0000000000)='./bus\x00')

49m27.743818785s ago: executing program 33 (id=121):
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
acct(&(0x7f0000000000)='./bus\x00')

49m27.729803295s ago: executing program 2 (id=125):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x201, 0x1d})
fcntl$lock(r0, 0x6, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000180)={0x6, 'veth0_macvtap\x00', {0xe}, 0x101})
sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000540)='GPL\x00'}, 0x80)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000580)={r4}, 0x8)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0))
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r7}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x40)
bpf$ITER_CREATE(0xb, &(0x7f0000000880), 0x0)

49m27.53949396s ago: executing program 2 (id=128):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00')
getuid()
read(r0, 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0)

49m26.813798167s ago: executing program 34 (id=128):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00')
getuid()
read(r0, 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0)

49m26.795749097s ago: executing program 3 (id=130):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x7, 0x2a6, &(0x7f0000000640)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx")
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x178)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ec0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
personality(0x619641b6fb4b8591)
syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f0000000280)='./file1\x00', 0x200802, &(0x7f0000000500)=ANY=[], 0x9, 0x20e, &(0x7f0000001940)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4050)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0x1d}, 0x28)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146)
uname(&(0x7f0000000240)=""/7)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=r0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2800091, &(0x7f00000082c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004eca8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd158133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd1e6e194a04db64a13f8c019f54bcb0fc4d3b629670d76e9512b4a630436da7310", @ANYRES32, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32], 0x55, 0x1c8, &(0x7f0000001bc0)="$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")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000028b80)='.\x00', &(0x7f0000028bc0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x6000)
chown(&(0x7f0000028c40)='./file0\x00', r3, 0xee01)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})

49m25.501286858s ago: executing program 3 (id=131):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r1, 0x5170c560dce29b81, 0x44, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4)

49m25.212647015s ago: executing program 3 (id=132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='environ\x00')
mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000300)='ecryptfs\x00', 0x0, &(0x7f0000000340)='ecryptfs_sig=0123456789abcdef,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough\x00')

49m24.19233279s ago: executing program 3 (id=133):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2048c4, &(0x7f0000000480)={[{@fat=@debug}, {@uni_xlate}, {@fat=@nfs}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0xe5}}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@numtail}, {@numtail}]}, 0x0, 0x2c7, &(0x7f0000000540)="$eJzs3E1rE10UwPHTpG3SljZZlAeeBx486EY3Qxs/QZAWxIBSG1EXwtRONGTMhJkYiYjtzq1fwk1x6UpB/QLduHMvbooguOlCHMnLtGM6raFv0zb/H5S5vWfOzB3uTDlzobNx++WjSskzSmZdEmmVhMiqbIpkW62uoe420W6PStiqXJr48fn/m3fuXssXCnMLqvP5xcs5VZ069/7Js9fnP9Ynbr2ZepeS9ey9je+5L+v/rP+78WsxOLojYuqS49TNJdvS5bJXMVRv2JbpWVquepZbV1PdIF6ynVqtqWZ1eXK85lqep2a1qRWrqXVH625TzQdmuaqGYejkuAya5J5R/9XOvuLawoKZP7oR4ZiNRXW6bt5MRgaLa8cxKAAAcLLEVf8/LHta9rTqtOr7Per/hITjf6n/RQa6/t+v2u6hyHoSp0ur/m89DYl0b4T6HwAAAAAAAAAAAAAAAAAAAACA02DT9zO+72eCbfCTEpG0iAS/75KeOObh4pAdcP5xyoX+cS8tYr9oFBvFzrYTz5ekLLZYMjMi8rN9P7SkfL/Tnr9amJvRtqx8sFe6+SuNYlJSQX4gu5Xvh/NnO/kazl+RERkPnz8nGZmOzs9F5DeKo3Lxgp/qntkSQzLy6b44Ysty+77ezn8+q3rleqEnf6y9HwAAAAAAZ4GhW3a8v7fjhgZrfD3xTuf2+oBkQusDfsT6QM/79bD8NxzfdQMAAAAAMEi8UamYtm25XvPpWW8EH7M9lAOKxH056X53HhaRbs/bkzIX/TQSItIbGtnRE91IHmyWv4n8+VxMxz7d+274ya179evjzhPQT3qcf5UAAAAAHIWg6B+KeyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAywfr8iFuy/n4+QBbmp2K4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBl+BwAA//+KNRQm")
r0 = syz_open_procfs(0x0, &(0x7f0000000840)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x93085, 0x0)
mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020)

49m23.877546027s ago: executing program 3 (id=136):
membarrier(0x10, 0x0)

49m22.428390153s ago: executing program 3 (id=139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4008000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)

49m22.10679744s ago: executing program 35 (id=139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4008000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)

47m27.303874062s ago: executing program 5 (id=383):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x1, 0x8, 0x9}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

47m26.99180439s ago: executing program 5 (id=386):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, '\x00', "59fd4d7ba4efd381f62a75b2daaff4e321bccef0fe33f7926d750d72aac6ded4", "89a2f763"}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102"], 0x100}, 0x0)

47m26.790628685s ago: executing program 5 (id=389):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4)

47m22.512753647s ago: executing program 5 (id=396):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2ddc4a, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

47m21.337831855s ago: executing program 5 (id=397):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, '\x00', "59fd4d7ba4efd381f62a75b2daaff4e321bccef0fe33f7926d750d72aac6ded4", "89a2f763"}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000"], 0x100}, 0x0)

47m18.680659079s ago: executing program 5 (id=400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB="500000000102010000000000080000003c0001800c000280050001"], 0x50}}, 0x0)

47m17.083623947s ago: executing program 36 (id=400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB="500000000102010000000000080000003c0001800c000280050001"], 0x50}}, 0x0)

45m23.53670437s ago: executing program 7 (id=653):
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r1, 0x2, 0x7fff)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000019380)=0x7)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000001c0)={0xb, {0x1, 0xa, 0x6, 0x5, 0x5, 0x7}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
dup3(r3, r3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)

45m21.455001709s ago: executing program 7 (id=655):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084)
r4 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"fc7fbced01eb1b00000000000000000700", 0xffffffffffffffff, <r7=>0xffffffffffffffff})
ppoll(&(0x7f0000000500)=[{r7, 0x200}], 0x1, 0x0, 0x0, 0x0)

45m17.194310742s ago: executing program 7 (id=663):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x210, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x92012, r0, 0x26000)

45m16.763103662s ago: executing program 7 (id=666):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x38ff817, 0x0)
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f0000000600)='./file0/../file0\x00', 0x1)

45m16.523440338s ago: executing program 7 (id=667):
r0 = socket$inet(0x2, 0x3, 0x5)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000480)={'syztnl2\x00', <r1=>0x0, 0x2100, 0x0, 0xfffffffd, 0xfffffffc, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000780)={'gre0\x00', r1, 0x10, 0x0, 0xb0, 0x4, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x85f, 0x0, 0xfa, 0x2f, 0x0, @empty, @rand_addr=0x64010100}}}})

45m16.00296732s ago: executing program 7 (id=669):
mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000b0000/0x2000)=nil)

45m14.462969017s ago: executing program 37 (id=669):
mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000b0000/0x2000)=nil)

34m9.505726704s ago: executing program 8 (id=2135):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001b80)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x8, &(0x7f000001ab80)=0x80000000000003)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001abc0), 0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

34m5.163836508s ago: executing program 8 (id=2138):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_usbip_server_init(0x4)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_emit_ethernet(0xfeb8, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

34m3.232740604s ago: executing program 8 (id=2139):
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={r1, &(0x7f00000009c0), &(0x7f0000000a00)=@tcp6=r0, 0x1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c00)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={r2, r4, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)

34m2.912579161s ago: executing program 8 (id=2141):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x108)
close(r1)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0x29, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x279, @remote}}, 0x1000, 0xffff}, 0x90)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x4, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x25}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d80)=ANY=[@ANYRES64=r5, @ANYRES8=r4], 0x20)
bind$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @any, 0x1}, 0xa)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa)
shutdown(r6, 0x1)

34m2.677206197s ago: executing program 8 (id=2143):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f00000193c0)=0x80000000000003)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000019400), 0x88b02, 0x0)
write$P9_RSTATu(r5, &(0x7f0000019440)=ANY=[], 0x230)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019480), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000194c0), 0x2982, 0x0)
r7 = syz_open_dev$dri(0x0, 0x0, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000019540), 0x0, 0x0)
dup3(r8, r7, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000019600)={0x1f, @none, 0x3}, 0xa)

34m1.103783424s ago: executing program 8 (id=2145):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001b80)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x8, &(0x7f000001ab80)=0x80000000000003)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001abc0), 0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

33m45.919472594s ago: executing program 38 (id=2145):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001b80)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x8, &(0x7f000001ab80)=0x80000000000003)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f000001abc0), 0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
mount(0x0, &(0x7f000001ac00)='./dev\x00', &(0x7f000001ac40)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000001ac80)='./dev/kmsg\x00', 0x81, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

27.425018231s ago: executing program 9 (id=4876):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0xc, 0x24}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0)

23.415398948s ago: executing program 9 (id=4881):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

21.125641332s ago: executing program 0 (id=4883):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

20.916598118s ago: executing program 1 (id=4884):
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r3, &(0x7f00000005c0)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f00000195c0)=0x7)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000019600))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80782, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x2)

20.868059569s ago: executing program 6 (id=4885):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001440)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000001480)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x10000, 0x1, 0x44, "4f7ad0a9c5e53371311819a29e66e61f325afc587b22fda9e2481d451ec655d0", 0x31303453})
sched_setscheduler(r1, 0x2, &(0x7f00000014c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000001500), 0x0, 0x0)
read$msr(r4, &(0x7f0000001540)=""/102392, 0x18ff8)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x21)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

19.329014656s ago: executing program 1 (id=4886):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x1ff)
recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0)
keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000001c0)={0x80, 0x0, 0x0, 0x5, 0x4})
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c", 0x79}], 0x1}, 0x4000800)

17.462784781s ago: executing program 6 (id=4887):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x0, 0x10, &(0x7f00000007c0), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000880)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x10a, 0x0, &(0x7f00000008c0)="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", &(0x7f0000000a00)}, 0x50)

15.524127447s ago: executing program 9 (id=4888):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000006c0)='./file0\x00')
r0 = fspick(0xffffffffffffff9c, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

14.520673691s ago: executing program 6 (id=4889):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019500)=0x80000000000003)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0)

14.373226235s ago: executing program 1 (id=4890):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
getpid()
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000003c0)=[0x6])
unshare(0x40400)

14.288023617s ago: executing program 9 (id=4891):
r0 = open(0x0, 0x5ca00, 0x70)
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000180)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
unlinkat(r0, 0x0, 0x0)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
shutdown(r4, 0x6a4b6563aabf59b5)
syz_open_dev$video4linux(&(0x7f0000000200), 0x3, 0x100)

14.281658987s ago: executing program 0 (id=4892):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r2, r1})

12.754457614s ago: executing program 1 (id=4893):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
inotify_init()
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1413, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x2020000}, 0x20000000)

11.745266418s ago: executing program 9 (id=4894):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x400c080)
socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000840)={0x0, &(0x7f0000000880)})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r6, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r5, &(0x7f0000000440)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r5, &(0x7f0000000480), 0x3fffffffffffe3d, 0xf5)
close_range(r4, 0xffffffffffffffff, 0x0)

11.516629463s ago: executing program 0 (id=4895):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0)
read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000019540)=0x7)
futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000019580), 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}]}, &(0x7f00000000c0)=0x10)

9.207795419s ago: executing program 0 (id=4896):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

8.774431589s ago: executing program 6 (id=4897):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000780), 0x0, 0x10, &(0x7f00000007c0), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000880)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x10b, 0x0, &(0x7f00000008c0)="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", &(0x7f0000000a00)}, 0x50)

6.824081546s ago: executing program 1 (id=4898):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x1ff)
recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0)
keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000001c0)={0x80, 0x0, 0x0, 0x5, 0x4})
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c", 0x79}], 0x1}, 0x4000800)

5.00384716s ago: executing program 0 (id=4899):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008a000000b70000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@loopback, 0x4e23, 0xb, 0x4e23, 0x7, 0xa, 0xa0, 0xa0, 0x17}, {0x4, 0x9d, 0x101, 0x8, 0x3, 0x0, 0x1}, {0xfffffffffffffffa, 0x0, 0x709e, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x34ff, 0x4, 0x1, 0x0, 0x2, 0x7, 0x5}}, 0xe8)
mount(0x0, &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000640)=0x4)
r4 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0)
read$msr(r4, &(0x7f0000002480)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001b480)=0x410000002)
r5 = syz_open_procfs$namespace(0x0, &(0x7f000001b4c0)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$pokeuser(0x6, r6, 0x358, 0xffff8881f5c0a000)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f000001b540)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f000001b580)={0x2020}, 0x2020)
inotify_init1(0x0)

3.34499151s ago: executing program 9 (id=4900):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.708708105s ago: executing program 6 (id=4901):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000003c0)=[0x6])
unshare(0x40400)

1.214967221s ago: executing program 6 (id=4902):
syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7)

704.256213ms ago: executing program 1 (id=4903):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0)
write$uinput_user_dev(r4, &(0x7f0000019340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r4, 0x5501)

0s ago: executing program 0 (id=4904):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$inet(r0, &(0x7f0000003a00)={0x0, 0xff00, &(0x7f0000003a40)=[{&(0x7f0000003a80)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004)

kernel console output (not intermixed with test programs):

 0
[ 2117.493004][T15024] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 2117.535052][T15024] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[ 2117.570439][T15024] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[ 2122.134530][T21387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3564'.
[ 2122.176893][T21387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2123.677819][T15151] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 2123.903015][T15151] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 2123.956835][T15151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2123.993965][T15151] usb 2-1: Product: syz
[ 2124.011314][T15151] usb 2-1: Manufacturer: syz
[ 2124.015992][T15151] usb 2-1: SerialNumber: syz
[ 2124.062933][T15151] usb 2-1: config 0 descriptor??
[ 2124.111219][T15151] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 2124.152569][T15151] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2124.193310][T15151] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 2124.223232][T15151] usb 2-1: media controller created
[ 2125.672237][T15151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2125.888563][T15151] DVB: Unable to find symbol mt352_attach()
[ 2127.535067][T15151] DVB: Unable to find symbol nxt6000_attach()
[ 2127.555965][T15151] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 2127.602172][T15151] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19
[ 2127.668405][T15151] dvb-usb: schedule remote query interval to 1000 msecs.
[ 2127.675517][T15151] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 2127.727733][T15151] dvb-usb: bulk message failed: -22 (7/0)
[ 2127.762393][T15151] dvb-usb: bulk message failed: -22 (7/0)
[ 2127.868134][T15151] usb 2-1: USB disconnect, device number 5
[ 2128.801062][T15151] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 2135.274365][T21460] loop6: detected capacity change from 0 to 1024
[ 2136.107175][T21460] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[ 2136.184684][T21460] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.3568: lblock 2 mapped to illegal pblock 2 (length 1)
[ 2136.199052][T21460] Quota error (device loop6): qtree_write_dquot: dquota write failed
[ 2136.207190][T21460] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.3568: lblock 0 mapped to illegal pblock 48 (length 1)
[ 2136.221773][T21460] Quota error (device loop6): v2_write_file_info: Can't write info structure
[ 2136.231162][T21460] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.3568: Failed to acquire dquot type 0
[ 2136.242799][T21460] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem
[ 2136.252522][T21460] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3568: mark_inode_dirty error
[ 2136.278081][T21460] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[ 2136.288443][T21460] EXT4-fs (loop6): 1 orphan inode deleted
[ 2136.294997][T21460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2136.446750][T16774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2136.457838][   T33] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 2136.528880][   T33] Quota error (device loop6): remove_tree: Can't read quota data block 1
[ 2136.548361][   T33] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0
[ 2136.575832][T16774] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 2136.618533][T16774] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem
[ 2136.632574][T16774] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[ 2138.456831][T21474] bridge9: entered promiscuous mode
[ 2138.462421][T21474] bridge9: entered allmulticast mode
[ 2142.437887][T20989] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 2142.497973][T21489] loop6: detected capacity change from 0 to 1764
[ 2143.986328][T21484] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2144.099028][T20989] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 2144.120397][T21494] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2144.127742][T20989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2144.167765][T20989] usb 2-1: Product: syz
[ 2144.172014][T20989] usb 2-1: Manufacturer: syz
[ 2144.176647][T20989] usb 2-1: SerialNumber: syz
[ 2144.236827][T20989] usb 2-1: config 0 descriptor??
[ 2145.709364][T20989] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 2145.770877][T20989] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2145.813104][T20989] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 2145.845706][T20989] usb 2-1: media controller created
[ 2145.948870][T20989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2146.194490][T21507] loop6: detected capacity change from 0 to 64
[ 2146.461768][T21507] syz.6.3590: attempt to access beyond end of device
[ 2146.461768][T21507] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2146.476259][T21507] Buffer I/O error on dev loop6, logical block 134217734, async page read
[ 2146.793238][T21507] Trying to free block not in datazone
[ 2147.061719][T20989] DVB: Unable to find symbol mt352_attach()
[ 2147.218172][T20989] DVB: Unable to find symbol nxt6000_attach()
[ 2147.224341][T20989] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 2147.283828][T20989] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20
[ 2147.328700][T20989] dvb-usb: schedule remote query interval to 1000 msecs.
[ 2147.335887][T20989] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 2147.356587][T20989] dvb-usb: bulk message failed: -22 (7/0)
[ 2147.376852][T20989] dvb-usb: bulk message failed: -22 (7/0)
[ 2147.397342][T20989] usb 2-1: USB disconnect, device number 6
[ 2148.905683][T20989] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 2149.169786][T21521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2151.637558][T21533] loop0: detected capacity change from 0 to 1024
[ 2152.454931][T21533] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[ 2152.487737][T21533] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.3589: lblock 2 mapped to illegal pblock 2 (length 1)
[ 2152.509332][T21533] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 2152.518144][T21533] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.3589: lblock 0 mapped to illegal pblock 48 (length 1)
[ 2152.554717][T21533] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 2152.563832][T21533] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.3589: Failed to acquire dquot type 0
[ 2152.575581][T21533] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[ 2152.585441][T21533] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3589: mark_inode_dirty error
[ 2152.598094][T21533] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[ 2152.608375][T21533] EXT4-fs (loop0): 1 orphan inode deleted
[ 2152.615697][T21533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2152.791863][T15024] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2152.840430][T12350] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[ 2152.893222][T12350] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 2152.928305][T12350] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0
[ 2152.968244][T15024] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 2152.991593][T15024] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[ 2153.002868][T15024] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[ 2158.648638][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2159.855557][T21577] loop6: detected capacity change from 0 to 1024
[ 2160.657956][T21577] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[ 2160.709317][T21577] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.3607: lblock 2 mapped to illegal pblock 2 (length 1)
[ 2160.723776][T21577] Quota error (device loop6): qtree_write_dquot: dquota write failed
[ 2160.732053][T21577] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.3607: lblock 0 mapped to illegal pblock 48 (length 1)
[ 2160.751875][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.758291][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2160.769914][T21577] Quota error (device loop6): v2_write_file_info: Can't write info structure
[ 2160.778762][T21577] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.3607: Failed to acquire dquot type 0
[ 2160.797847][T21577] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem
[ 2160.808397][T21577] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3607: mark_inode_dirty error
[ 2160.820884][T21577] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[ 2160.831199][T21577] EXT4-fs (loop6): 1 orphan inode deleted
[ 2160.837880][T21577] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2160.994665][T16774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2161.008030][ T3467] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1)
[ 2161.051732][ T3467] Quota error (device loop6): remove_tree: Can't read quota data block 1
[ 2161.067953][ T3467] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:11: Failed to release dquot type 0
[ 2161.100465][T16774] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 2161.148064][T16774] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem
[ 2161.174594][T16774] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[ 2161.608501][T21585] loop1: detected capacity change from 0 to 64
[ 2161.974614][T21585] syz.1.3601: attempt to access beyond end of device
[ 2161.974614][T21585] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2161.988414][T21585] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2162.013126][T21585] Trying to free block not in datazone
[ 2163.952835][T21591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2170.139433][T21622] loop1: detected capacity change from 0 to 64
[ 2170.526441][T21622] syz.1.3617: attempt to access beyond end of device
[ 2170.526441][T21622] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2170.540735][T21622] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2170.563542][T21622] Trying to free block not in datazone
[ 2171.499771][T21624] loop6: detected capacity change from 0 to 1024
[ 2172.154853][T21624] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[ 2172.180051][T21624] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.3616: lblock 2 mapped to illegal pblock 2 (length 1)
[ 2172.194351][T21624] Quota error (device loop6): qtree_write_dquot: dquota write failed
[ 2172.202529][T21624] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.3616: lblock 0 mapped to illegal pblock 48 (length 1)
[ 2172.217450][T21624] Quota error (device loop6): v2_write_file_info: Can't write info structure
[ 2172.226347][T21624] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.3616: Failed to acquire dquot type 0
[ 2172.238090][T21624] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem
[ 2172.257089][T21624] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3616: mark_inode_dirty error
[ 2172.272523][T21624] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[ 2172.283539][T21624] EXT4-fs (loop6): 1 orphan inode deleted
[ 2172.290426][T21624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2172.441209][T16774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2172.473480][   T33] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[ 2172.547898][   T33] Quota error (device loop6): remove_tree: Can't read quota data block 1
[ 2172.556426][   T33] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0
[ 2172.753068][T16774] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 2172.863558][T16774] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem
[ 2172.986848][T16774] EXT4-fs error (device loop6): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[ 2173.520918][T21637] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[ 2175.097818][T21637] siw: device registration error -19
[ 2188.509294][T21692] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3630'.
[ 2188.598527][T21692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2194.995728][T21712] loop6: detected capacity change from 0 to 1764
[ 2195.052628][T21713] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2195.205429][T21712] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2197.076644][T21726] loop6: detected capacity change from 0 to 512
[ 2197.118101][T21726] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 2198.657809][T21726] EXT4-fs (loop6): 1 truncate cleaned up
[ 2198.665067][T21726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2198.722313][   T27] audit: type=1800 audit(1792128113.777:33): pid=21726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3642" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 2198.790333][T16774] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2198.906988][T21736] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 2203.509266][T21755] loop6: detected capacity change from 0 to 1764
[ 2203.620696][T21756] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2203.722475][T21755] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2210.966135][T21788] loop0: detected capacity change from 0 to 1764
[ 2211.193625][T21788] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2214.908124][T16159] Bluetooth: hci1: command 0x0405 tx timeout
[ 2222.116588][T21835] loop6: detected capacity change from 0 to 1764
[ 2222.198139][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2222.204515][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2222.365918][T21838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3664'.
[ 2222.438687][T21838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2224.347714][T21852] loop6: detected capacity change from 0 to 64
[ 2225.278791][T21851] syz.6.3669: attempt to access beyond end of device
[ 2225.278791][T21851] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2225.292401][T21851] Buffer I/O error on dev loop6, logical block 134217734, async page read
[ 2225.319819][T21851] Trying to free block not in datazone
[ 2231.403865][T21878] loop0: detected capacity change from 0 to 1764
[ 2231.484826][T21879] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2231.584943][T21878] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2234.038463][T21895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3680'.
[ 2234.049961][T21895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2236.692193][T21907] db_root: cannot open: /dev/sequencer2
[ 2236.698014][T21907] db_root: not a directory: /dev/sequencer2
[ 2237.334440][T21918] loop0: detected capacity change from 0 to 1764
[ 2237.399670][T21911] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2237.469377][T21918] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2238.183198][T21932] loop1: detected capacity change from 0 to 512
[ 2238.239339][T21932] EXT4-fs (loop1): revision level too high, forcing read-only mode
[ 2238.266164][T21932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[ 2239.678719][T21932] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 2239.777900][T21932] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #13: comm syz.1.3682: iget: bad i_size value: 12154761577498
[ 2240.477763][T21940] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3690'.
[ 2240.492478][T21939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2241.185617][T21932] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.3682: couldn't read orphan inode 13 (err -117)
[ 2241.308569][T21932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 2242.956761][T15241] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2247.404032][T21971] loop1: detected capacity change from 0 to 1764
[ 2248.427726][T21978] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3700'.
[ 2248.458905][T21978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2249.829084][T21971] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2251.488083][T21987] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 2260.253715][T22022] syz.0.3710: attempt to access beyond end of device
[ 2260.253715][T22022] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0
[ 2260.267888][T22022] hfs: can't find a HFS filesystem on dev nbd0
[ 2261.491709][T22019] loop9: detected capacity change from 0 to 1764
[ 2261.537146][T22025] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 2261.599912][T22026] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2261.674906][T22019] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2264.307682][ T5924] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 2266.269607][ T5924] usb 10-1: config 0 has an invalid interface number: 50 but max is 0
[ 2266.287758][ T5924] usb 10-1: config 0 has no interface number 0
[ 2266.298189][ T5924] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2266.334956][ T5924] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 2266.356801][ T5924] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2266.377900][ T5924] usb 10-1: Product: syz
[ 2266.383211][ T5924] usb 10-1: Manufacturer: syz
[ 2266.397905][ T5924] usb 10-1: SerialNumber: syz
[ 2266.409952][ T5924] usb 10-1: config 0 descriptor??
[ 2266.432946][ T5924] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0
[ 2266.926763][T22050] syz.6.3717: attempt to access beyond end of device
[ 2266.926763][T22050] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2266.940385][T22050] gfs2: error 10 reading superblock
[ 2267.761289][    C0] usb 10-1: yurex_control_callback - control failed: -2
[ 2268.042951][ T5924] usb 10-1: USB disconnect, device number 24
[ 2269.457667][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2269.489857][ T5924] yurex 10-1:0.50: USB YUREX #0 now disconnected
[ 2276.303125][T22100] loop0: detected capacity change from 0 to 64
[ 2276.851321][T22100] syz.0.3734: attempt to access beyond end of device
[ 2276.851321][T22100] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2276.865208][T22100] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2276.885326][T22100] Trying to free block not in datazone
[ 2283.632040][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.644382][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2285.867726][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2288.227390][T22167] loop9: detected capacity change from 0 to 64
[ 2288.292922][T22167] syz.9.3746: attempt to access beyond end of device
[ 2288.292922][T22167] loop9: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2288.307191][T22167] Buffer I/O error on dev loop9, logical block 134217734, async page read
[ 2288.331724][T22167] Trying to free block not in datazone
[ 2289.234657][T22175] db_root: cannot open: /dev/sequencer2
[ 2289.240505][T22175] db_root: not a directory: /dev/sequencer2
[ 2290.631458][T22186] loop1: detected capacity change from 0 to 64
[ 2291.700660][T22185] syz.1.3752: attempt to access beyond end of device
[ 2291.700660][T22185] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2291.715006][T22185] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2291.728702][T22185] Trying to free block not in datazone
[ 2291.802641][T22189] syz.6.3755: attempt to access beyond end of device
[ 2291.802641][T22189] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2291.816263][T22189] gfs2: error 10 reading superblock
[ 2294.647381][T22198] syz.1.3756: attempt to access beyond end of device
[ 2294.647381][T22198] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0
[ 2294.661495][T22198] hfs: can't find a HFS filesystem on dev nbd1
[ 2296.891621][T22206] db_root: cannot open: /dev/sequencer2
[ 2296.897726][T22206] db_root: not a directory: /dev/sequencer2
[ 2300.587727][T20989] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 2300.809836][T20989] usb 10-1: Using ep0 maxpacket: 32
[ 2300.832350][T20989] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 2300.846958][T20989] usb 10-1: config 0 has no interface number 0
[ 2300.866635][T20989] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 2300.887309][T20989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2300.912809][T20989] usb 10-1: Product: syz
[ 2300.917135][T20989] usb 10-1: Manufacturer: syz
[ 2300.938327][T20989] usb 10-1: SerialNumber: syz
[ 2300.951423][T20989] usb 10-1: config 0 descriptor??
[ 2300.963904][T20989] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 2300.973168][T20989] usb 10-1: selecting invalid altsetting 1
[ 2300.979400][T20989] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 2300.991083][T20989] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2301.002581][T20989] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 2301.012293][T20989] usb 10-1: media controller created
[ 2301.066957][T20989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2301.294055][T22237] syz.0.3769: attempt to access beyond end of device
[ 2301.294055][T22237] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0
[ 2301.307722][T22237] hfs: can't find a HFS filesystem on dev nbd0
[ 2305.177713][T20989] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 2305.220719][T20989] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 2305.241206][T22223] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[ 2305.459005][ T5922] usb 10-1: USB disconnect, device number 25
[ 2309.891438][T22269] db_root: cannot open: /dev/sequencer2
[ 2309.897172][T22269] db_root: not a directory: /dev/sequencer2
[ 2311.217934][T22278] syz.1.3779: attempt to access beyond end of device
[ 2311.217934][T22278] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0
[ 2311.233792][T22278] hfs: can't find a HFS filesystem on dev nbd1
[ 2312.746697][T22282] loop9: detected capacity change from 0 to 8192
[ 2312.819743][T22282] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[ 2312.847966][T22282] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 2312.862405][T22282]  loop9: unable to read partition table
[ 2312.876455][T22282] loop_reread_partitions: partition scan of loop9 () failed (rc=-5)
[ 2321.258768][T22318] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3787'.
[ 2321.270756][T22318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2328.126257][T22340] loop0: detected capacity change from 0 to 64
[ 2328.167876][T22340] syz.0.3795: attempt to access beyond end of device
[ 2328.167876][T22340] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2328.181881][T22340] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2328.202332][T22340] Trying to free block not in datazone
[ 2336.655813][T22385] loop0: detected capacity change from 0 to 64
[ 2337.682946][T22382] syz.0.3806: attempt to access beyond end of device
[ 2337.682946][T22382] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2337.696677][T22382] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2337.714118][T22382] Trying to free block not in datazone
[ 2339.118070][T22398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3800'.
[ 2339.538846][T22378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2344.170867][T22421] loop9: detected capacity change from 0 to 64
[ 2345.967771][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2345.974329][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2346.048662][T22418] syz.9.3818: attempt to access beyond end of device
[ 2346.048662][T22418] loop9: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2346.062765][T22418] Buffer I/O error on dev loop9, logical block 134217734, async page read
[ 2346.075136][T22418] Trying to free block not in datazone
[ 2347.715737][T22447] syz.9.3825: attempt to access beyond end of device
[ 2347.715737][T22447] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2347.729636][T22447] gfs2: error 10 reading superblock
[ 2351.391013][T22477] syz.0.3835: attempt to access beyond end of device
[ 2351.391013][T22477] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2351.404639][T22477] gfs2: error 10 reading superblock
[ 2352.455551][T22484] loop9: detected capacity change from 0 to 64
[ 2352.492925][T22484] syz.9.3830: attempt to access beyond end of device
[ 2352.492925][T22484] loop9: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2352.507436][T22484] Buffer I/O error on dev loop9, logical block 134217734, async page read
[ 2352.528558][T22484] Trying to free block not in datazone
[ 2353.243538][T22487] syz.6.3836: attempt to access beyond end of device
[ 2353.243538][T22487] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2353.256984][T22487] gfs2: error 10 reading superblock
[ 2357.197965][T20988] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 2357.517568][T20988] usb 7-1: Using ep0 maxpacket: 32
[ 2357.535909][T20988] usb 7-1: no configurations
[ 2357.541061][T20988] usb 7-1: can't read configurations, error -22
[ 2357.710340][T20988] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 2357.719454][T22511] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3842'.
[ 2357.765819][T22511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2357.897939][T20988] usb 7-1: Using ep0 maxpacket: 32
[ 2357.908292][T20988] usb 7-1: no configurations
[ 2357.912970][T20988] usb 7-1: can't read configurations, error -22
[ 2357.935490][T20988] usb usb7-port1: attempt power cycle
[ 2358.367866][T20988] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 2358.432975][T20988] usb 7-1: device descriptor read/8, error -71
[ 2358.779451][T22514] DRBG: could not allocate digest TFM handle: hmac(sha512)
[ 2359.214583][T22535] syz.0.3847: attempt to access beyond end of device
[ 2359.214583][T22535] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2359.228168][T22535] gfs2: error 10 reading superblock
[ 2359.313987][T22538] loop9: detected capacity change from 0 to 64
[ 2359.453869][T22538] syz.9.3846: attempt to access beyond end of device
[ 2359.453869][T22538] loop9: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2359.468681][T22538] Buffer I/O error on dev loop9, logical block 134217734, async page read
[ 2359.489342][T22538] Trying to free block not in datazone
[ 2364.804425][T22566] loop6: detected capacity change from 0 to 64
[ 2364.859986][T22566] syz.6.3854: attempt to access beyond end of device
[ 2364.859986][T22566] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2364.873845][T22566] Buffer I/O error on dev loop6, logical block 134217734, async page read
[ 2364.898629][T22566] Trying to free block not in datazone
[ 2365.748465][T22569] FAULT_INJECTION: forcing a failure.
[ 2365.748465][T22569] name failslab, interval 1, probability 0, space 0, times 0
[ 2365.817759][T22569] CPU: 1 PID: 22569 Comm: syz.0.3856 Not tainted syzkaller #0
[ 2365.825311][T22569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2365.835426][T22569] Call Trace:
[ 2365.838748][T22569]  <TASK>
[ 2365.841724][T22569]  dump_stack_lvl+0x18c/0x250
[ 2365.846454][T22569]  ? show_regs_print_info+0x20/0x20
[ 2365.851766][T22569]  ? load_image+0x420/0x420
[ 2365.856276][T22569]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2365.861319][T22569]  ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0
[ 2365.867997][T22569]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 2365.873979][T22569]  should_fail_ex+0x394/0x4c0
[ 2365.878775][T22569]  should_failslab+0x9/0x20
[ 2365.883298][T22569]  slab_pre_alloc_hook+0x59/0x300
[ 2365.888426][T22569]  ? pcpu_alloc+0x11e7/0x1880
[ 2365.893127][T22569]  ? percpu_ref_init+0xc3/0x340
[ 2365.897999][T22569]  __kmem_cache_alloc_node+0x53/0x250
[ 2365.903436][T22569]  ? percpu_ref_init+0xc3/0x340
[ 2365.908304][T22569]  ? blk_timeout_work+0x10/0x10
[ 2365.913183][T22569]  kmalloc_trace+0x2a/0xe0
[ 2365.917615][T22569]  percpu_ref_init+0xc3/0x340
[ 2365.922332][T22569]  blk_alloc_queue+0x369/0x4c0
[ 2365.927128][T22569]  __blk_mq_alloc_disk+0x47/0x190
[ 2365.932190][T22569]  ? loop_add+0x2f7/0x990
[ 2365.936606][T22569]  loop_add+0x322/0x990
[ 2365.940784][T22569]  loop_control_ioctl+0x128/0x590
[ 2365.945918][T22569]  ? loop_set_hw_queue_depth+0x110/0x110
[ 2365.951602][T22569]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 2365.956548][T22569]  ? security_file_ioctl+0x80/0xa0
[ 2365.961675][T22569]  ? loop_set_hw_queue_depth+0x110/0x110
[ 2365.967318][T22569]  __se_sys_ioctl+0xfd/0x170
[ 2365.971923][T22569]  do_syscall_64+0x55/0xb0
[ 2365.976346][T22569]  ? clear_bhb_loop+0x40/0x90
[ 2365.981026][T22569]  ? clear_bhb_loop+0x40/0x90
[ 2365.985728][T22569]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2365.991646][T22569] RIP: 0033:0x7f3354b9e559
[ 2365.996087][T22569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2366.015713][T22569] RSP: 002b:00007f3355a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2366.024141][T22569] RAX: ffffffffffffffda RBX: 00007f3354e25fa0 RCX: 00007f3354b9e559
[ 2366.032123][T22569] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004
[ 2366.040113][T22569] RBP: 00007f3354c358b0 R08: 0000000000000000 R09: 0000000000000000
[ 2366.048281][T22569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2366.056424][T22569] R13: 00007f3354e26038 R14: 00007f3354e25fa0 R15: 00007ffdcf3b1818
[ 2366.064408][T22569]  </TASK>
[ 2366.755778][T22580] loop0: detected capacity change from 0 to 64
[ 2366.812466][T22580] syz.0.3858: attempt to access beyond end of device
[ 2366.812466][T22580] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2366.826396][T22580] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2366.850713][T22580] Trying to free block not in datazone
[ 2372.589840][ T5922] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 2372.729267][T22609] loop6: detected capacity change from 0 to 256
[ 2372.967622][ T5922] usb 10-1: Using ep0 maxpacket: 32
[ 2372.977697][ T5922] usb 10-1: no configurations
[ 2372.983279][ T5922] usb 10-1: can't read configurations, error -22
[ 2373.197938][ T5922] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 2373.667577][ T5922] usb 10-1: Using ep0 maxpacket: 32
[ 2373.838921][ T5922] usb 10-1: no configurations
[ 2373.854001][ T5922] usb 10-1: can't read configurations, error -22
[ 2373.894775][ T5922] usb usb10-port1: attempt power cycle
[ 2375.577540][ T5922] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 2376.967673][ T5922] usb 10-1: device descriptor read/8, error -71
[ 2382.287674][ T5922] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 2382.507865][ T5922] usb 2-1: Using ep0 maxpacket: 32
[ 2382.521590][ T5922] usb 2-1: no configurations
[ 2382.526267][ T5922] usb 2-1: can't read configurations, error -22
[ 2382.697656][ T5922] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 2382.898643][ T5922] usb 2-1: Using ep0 maxpacket: 32
[ 2382.911572][ T5922] usb 2-1: no configurations
[ 2382.918546][ T5922] usb 2-1: can't read configurations, error -22
[ 2382.925194][ T5922] usb usb2-port1: attempt power cycle
[ 2383.916017][T17076] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 2384.109940][T17076] usb 10-1: Using ep0 maxpacket: 16
[ 2384.174436][T17076] usb 10-1: config 0 has no interfaces?
[ 2384.302740][T17076] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[ 2384.424576][T17076] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2384.529076][T17076] usb 10-1: SerialNumber: syz
[ 2384.712920][T17076] usb 10-1: config 0 descriptor??
[ 2385.054997][ T5922] usb 10-1: USB disconnect, device number 30
[ 2390.547889][ T5841] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 2390.778198][ T5841] usb 1-1: Using ep0 maxpacket: 32
[ 2390.784637][ T5841] usb 1-1: no configurations
[ 2390.808307][ T5841] usb 1-1: can't read configurations, error -22
[ 2391.077641][ T5841] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 2392.517587][ T5841] usb 1-1: Using ep0 maxpacket: 32
[ 2392.528153][ T5841] usb 1-1: no configurations
[ 2392.533091][ T5841] usb 1-1: can't read configurations, error -22
[ 2392.542443][ T5841] usb usb1-port1: attempt power cycle
[ 2392.967817][ T5841] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 2393.001384][ T5841] usb 1-1: Using ep0 maxpacket: 32
[ 2393.010582][ T5841] usb 1-1: no configurations
[ 2393.015330][ T5841] usb 1-1: can't read configurations, error -22
[ 2393.168001][ T5841] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 2394.632472][ T5841] usb 1-1: device descriptor read/8, error -71
[ 2394.778048][ T5841] usb usb1-port1: unable to enumerate USB device
[ 2397.291391][T22734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3897'.
[ 2397.429144][T22734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2402.237835][T20989] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 2402.463876][T20989] usb 2-1: Using ep0 maxpacket: 32
[ 2402.480190][T20989] usb 2-1: no configurations
[ 2402.484822][T20989] usb 2-1: can't read configurations, error -22
[ 2402.677682][T20989] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 2402.887945][T20989] usb 2-1: Using ep0 maxpacket: 32
[ 2402.898516][T20989] usb 2-1: no configurations
[ 2402.903195][T20989] usb 2-1: can't read configurations, error -22
[ 2402.918668][T20989] usb usb2-port1: attempt power cycle
[ 2405.477978][T20989] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 2405.570245][T20989] usb 2-1: device descriptor read/8, error -71
[ 2406.502150][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.508720][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2412.858684][T22810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3910'.
[ 2412.870081][T22810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2415.167612][T20988] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 2415.367723][T20988] usb 2-1: Using ep0 maxpacket: 32
[ 2415.483947][T20988] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 2415.497677][T20988] usb 2-1: can't read configurations, error -61
[ 2417.047202][T20988] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 2417.361191][T22833] syz.1.3919: attempt to access beyond end of device
[ 2417.361191][T22833] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2417.377871][T22833] gfs2: error 10 reading superblock
[ 2417.437596][T20988] usb 2-1: device not accepting address 15, error -71
[ 2418.121986][T20988] usb usb2-port1: attempt power cycle
[ 2419.360121][T22844] syz_tun: entered allmulticast mode
[ 2422.301208][T22866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3922'.
[ 2422.313944][T22866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2430.728719][T22910] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3935'.
[ 2430.740836][T22910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2435.097340][T22927] loop0: detected capacity change from 0 to 64
[ 2435.135570][T22927] syz.0.3942: attempt to access beyond end of device
[ 2435.135570][T22927] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2435.150584][T22927] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2435.177860][T22927] Trying to free block not in datazone
[ 2436.497588][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2438.899987][T22955] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3947'.
[ 2438.941311][T22955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.014427][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2451.198075][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2454.563410][T23027] sctp: [Deprecated]: syz.1.3964 (pid 23027) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2454.563410][T23027] Use struct sctp_sack_info instead
[ 2454.979358][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2455.170546][T23021] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3960'.
[ 2455.230118][T23021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2455.680988][T23035] syz.0.3961: attempt to access beyond end of device
[ 2455.680988][T23035] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2455.694467][T23035] gfs2: error 10 reading superblock
[ 2464.227805][T23069] FAULT_INJECTION: forcing a failure.
[ 2464.227805][T23069] name failslab, interval 1, probability 0, space 0, times 0
[ 2464.346616][T23071] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3975'.
[ 2464.538960][T23069] CPU: 0 PID: 23069 Comm: syz.1.3976 Not tainted syzkaller #0
[ 2464.546499][T23069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2464.556769][T23069] Call Trace:
[ 2464.560090][T23069]  <TASK>
[ 2464.563052][T23069]  dump_stack_lvl+0x18c/0x250
[ 2464.567852][T23069]  ? show_regs_print_info+0x20/0x20
[ 2464.573083][T23069]  ? load_image+0x420/0x420
[ 2464.577732][T23069]  ? __might_sleep+0xe0/0xe0
[ 2464.582379][T23069]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2464.587653][T23069]  should_fail_ex+0x394/0x4c0
[ 2464.592372][T23069]  should_failslab+0x9/0x20
[ 2464.597068][T23069]  slab_pre_alloc_hook+0x59/0x300
[ 2464.602100][T23069]  kmem_cache_alloc+0x5a/0x2c0
[ 2464.606893][T23069]  ? security_file_alloc+0x34/0x120
[ 2464.612121][T23069]  security_file_alloc+0x34/0x120
[ 2464.617449][T23069]  init_file+0x94/0x1f0
[ 2464.621735][T23069]  alloc_empty_file+0xb7/0x1d0
[ 2464.626562][T23069]  alloc_file+0x5b/0x600
[ 2464.630860][T23069]  alloc_file_pseudo+0x184/0x210
[ 2464.635818][T23069]  ? fput+0x1a0/0x1a0
[ 2464.639831][T23069]  ? anon_inode_make_secure_inode+0xfb/0x160
[ 2464.645887][T23069]  ? do_compat_epoll_pwait+0x1c0/0x1c0
[ 2464.651474][T23069]  ? __might_fault+0xaa/0x120
[ 2464.656475][T23069]  __anon_inode_getfile+0x129/0x200
[ 2464.661733][T23069]  io_uring_create+0xbec/0x1330
[ 2464.666700][T23069]  __se_sys_io_uring_setup+0x29f/0x2b0
[ 2464.672219][T23069]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 2464.677830][T23069]  ? lockdep_hardirqs_on+0x98/0x150
[ 2464.683096][T23069]  do_syscall_64+0x55/0xb0
[ 2464.687553][T23069]  ? clear_bhb_loop+0x40/0x90
[ 2464.692274][T23069]  ? clear_bhb_loop+0x40/0x90
[ 2464.696992][T23069]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2464.702942][T23069] RIP: 0033:0x7f579659e559
[ 2464.707434][T23069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2464.727096][T23069] RSP: 002b:00007f5797481fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2464.735571][T23069] RAX: ffffffffffffffda RBX: 00002000000005c0 RCX: 00007f579659e559
[ 2464.743601][T23069] RDX: 0000200000000680 RSI: 00002000000005c0 RDI: 0000000000001c0b
[ 2464.745681][T23071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2464.751696][T23069] RBP: 00007f57966358b0 R08: 0000000000000000 R09: 0000000000000000
[ 2464.751717][T23069] R10: 00002000000006c0 R11: 0000000000000206 R12: 0000200000000680
[ 2464.751732][T23069] R13: 00002000000006c0 R14: 0000200000000640 R15: 00007ffedffe7b68
[ 2464.751767][T23069]  </TASK>
[ 2466.945929][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2467.087958][T23088] loop0: detected capacity change from 0 to 4096
[ 2467.192588][T23088] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[ 2467.211449][T23088] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID.
[ 2467.232770][T23088] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 2467.314282][T23088]  loop0:
[ 2467.694088][T23096] syz.9.3974: attempt to access beyond end of device
[ 2467.694088][T23096] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2467.708262][T23096] gfs2: error 10 reading superblock
[ 2467.946263][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.952677][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2469.015337][T23104] loop6: detected capacity change from 0 to 4096
[ 2469.053606][T23104] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512).
[ 2469.308142][T23104] ntfs3: loop6: Failed to initialize $Extend/$ObjId.
[ 2469.915761][T23109] syz_tun: entered allmulticast mode
[ 2471.367607][T23121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2472.113011][T23120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3989'.
[ 2474.674742][T23138] syz.9.3992: attempt to access beyond end of device
[ 2474.674742][T23138] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2474.688204][T23138] gfs2: error 10 reading superblock
[ 2477.642342][T23151] syz.1.3996: attempt to access beyond end of device
[ 2477.642342][T23151] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2477.655616][T23151] gfs2: error 10 reading superblock
[ 2480.485986][T23175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3999'.
[ 2480.497336][T23175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2484.683731][T23186] loop9: detected capacity change from 0 to 64
[ 2484.898994][T23185] syz.9.4003: attempt to access beyond end of device
[ 2484.898994][T23185] loop9: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2484.913192][T23185] Buffer I/O error on dev loop9, logical block 134217734, async page read
[ 2484.950563][T23185] Trying to free block not in datazone
[ 2487.671748][T23203] syz.0.4006: attempt to access beyond end of device
[ 2487.671748][T23203] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2487.685356][T23203] gfs2: error 10 reading superblock
[ 2494.361990][T23239] syz.0.4017: attempt to access beyond end of device
[ 2494.361990][T23239] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2494.375498][T23239] gfs2: error 10 reading superblock
[ 2501.015307][T23275] syz.1.4027: attempt to access beyond end of device
[ 2501.015307][T23275] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2501.028945][T23275] gfs2: error 10 reading superblock
[ 2510.122315][T23309] syz.1.4037: attempt to access beyond end of device
[ 2510.122315][T23309] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2510.135862][T23309] gfs2: error 10 reading superblock
[ 2520.065182][T23359] syz.9.4046: attempt to access beyond end of device
[ 2520.065182][T23359] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2520.078849][T23359] gfs2: error 10 reading superblock
[ 2521.376351][T23370] loop0: detected capacity change from 0 to 64
[ 2521.411548][T23370] syz.0.4048: attempt to access beyond end of device
[ 2521.411548][T23370] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2521.425327][T23370] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2521.446627][T23370] Trying to free block not in datazone
[ 2529.060977][T23398] loop9: detected capacity change from 0 to 64
[ 2529.330699][T23397] syz.9.4062: attempt to access beyond end of device
[ 2529.330699][T23397] loop9: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2529.344861][T23397] Buffer I/O error on dev loop9, logical block 134217734, async page read
[ 2529.361915][T23397] Trying to free block not in datazone
[ 2529.429305][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.435702][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2532.190611][T23405] loop9: detected capacity change from 0 to 32768
[ 2532.214957][T23405] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop9 scanned by syz.9.4064 (23405)
[ 2532.282711][T23405] BTRFS info (device loop9): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 2532.317245][T23405] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[ 2532.332231][T23405] BTRFS info (device loop9): using free space tree
[ 2532.623098][T23439] syz.1.4061: attempt to access beyond end of device
[ 2532.623098][T23439] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2532.636518][T23439] gfs2: error 10 reading superblock
[ 2533.649999][T23405] BTRFS error (device loop9): open_ctree failed: -4
[ 2538.102195][T23467] input: syz1 as /devices/virtual/input/input21
[ 2539.127959][T21992] block nbd0: Receive control failed (result -32)
[ 2539.145385][ T5776] block nbd0: Receive control failed (result -32)
[ 2539.471541][T23480] syz.1.4078: attempt to access beyond end of device
[ 2539.471541][T23480] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2539.485655][T23480] gfs2: error 10 reading superblock
[ 2542.327342][T23491] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4080'.
[ 2542.339079][T23491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2549.405121][T23531] syz.9.4089: attempt to access beyond end of device
[ 2549.405121][T23531] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2549.419389][T23531] gfs2: error 10 reading superblock
[ 2554.984828][T23557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4091'.
[ 2554.996044][T23557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2556.022425][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2558.553176][T23579] syz.9.4101: attempt to access beyond end of device
[ 2558.553176][T23579] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2558.566515][T23579] gfs2: error 10 reading superblock
[ 2565.747779][T23603] Bluetooth: hci1: command 0x0405 tx timeout
[ 2566.029694][T23621] syz.9.4112: attempt to access beyond end of device
[ 2566.029694][T23621] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2566.042904][T23621] gfs2: error 10 reading superblock
[ 2570.011205][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2575.346374][T23603] Bluetooth: hci1: command 0x0405 tx timeout
[ 2582.217522][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2587.127530][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2591.709949][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2591.716332][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2594.019129][T23813] loop0: detected capacity change from 0 to 64
[ 2594.084362][T23813] syz.0.4161: attempt to access beyond end of device
[ 2594.084362][T23813] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2594.098970][T23813] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2594.110489][T23813] Trying to free block not in datazone
[ 2594.177620][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2594.824439][T23821] syz.6.4165: attempt to access beyond end of device
[ 2594.824439][T23821] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2594.838119][T23821] gfs2: error 10 reading superblock
[ 2601.206710][T23851] syz.0.4174: attempt to access beyond end of device
[ 2601.206710][T23851] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2601.220626][T23851] gfs2: error 10 reading superblock
[ 2606.577033][T23881] input: syz1 as /devices/virtual/input/input27
[ 2611.015334][T23914] syz.6.4183: attempt to access beyond end of device
[ 2611.015334][T23914] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2611.029050][T23914] gfs2: error 10 reading superblock
[ 2612.584193][T23603] Bluetooth: hci1: command 0x0405 tx timeout
[ 2619.094024][T23603] Bluetooth: hci1: command 0x0405 tx timeout
[ 2619.487771][T23958] input: syz1 as /devices/virtual/input/input28
[ 2619.655686][T23961] input: syz1 as /devices/virtual/input/input29
[ 2619.820572][T23964] syz.9.4198: attempt to access beyond end of device
[ 2619.820572][T23964] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2619.833963][T23964] gfs2: error 10 reading superblock
[ 2623.409045][T23984] loop1: detected capacity change from 0 to 64
[ 2624.588059][T23603] Bluetooth: hci1: command 0x0405 tx timeout
[ 2624.643557][T23976] syz.1.4201: attempt to access beyond end of device
[ 2624.643557][T23976] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2624.696051][T23976] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2624.758850][T23976] Trying to free block not in datazone
[ 2625.815567][T24002] input: syz1 as /devices/virtual/input/input30
[ 2629.157521][ T5924] usb 10-1: new full-speed USB device number 31 using dummy_hcd
[ 2629.352036][ T5924] usb 10-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2630.827431][ T5924] usb 10-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2630.980314][ T5924] usb 10-1: string descriptor 0 read error: -71
[ 2631.021748][ T5924] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2631.041365][ T5924] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2631.097708][ T5924] usb 10-1: can't set config #36, error -71
[ 2631.121480][ T5924] usb 10-1: USB disconnect, device number 31
[ 2633.360914][T24047] input: syz1 as /devices/virtual/input/input31
[ 2636.986041][T23603] Bluetooth: hci1: command 0x0405 tx timeout
[ 2639.864346][T24084] loop6: detected capacity change from 0 to 1764
[ 2639.957637][T24073] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2639.984902][T24086] loop0: detected capacity change from 0 to 4096
[ 2640.055051][T24086] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[ 2640.072539][T24086] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[ 2640.085429][T24086]  loop0:
[ 2640.702560][T24093] input: syz1 as /devices/virtual/input/input32
[ 2644.282956][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2644.956191][T24121] loop6: detected capacity change from 0 to 1764
[ 2645.148155][T23948] usb 10-1: new full-speed USB device number 32 using dummy_hcd
[ 2645.354638][T23948] usb 10-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2645.407860][T23948] usb 10-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2645.439913][T23948] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2645.484440][T23948] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2645.547294][T23948] usb 10-1: Manufacturer: syz
[ 2645.554128][T23948] usb 10-1: SerialNumber: syz
[ 2645.841523][T24131] loop0: detected capacity change from 0 to 64
[ 2645.885155][T24131] syz.0.4235: attempt to access beyond end of device
[ 2645.885155][T24131] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2645.899531][T24131] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2645.948211][T24131] Trying to free block not in datazone
[ 2646.162400][T23948] usb 10-1: USB disconnect, device number 32
[ 2646.804382][T24142] input: syz1 as /devices/virtual/input/input33
[ 2652.272812][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2652.279655][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2654.384371][T24179] loop9: detected capacity change from 0 to 1764
[ 2654.577672][T23603] Bluetooth: hci1: command 0x0405 tx timeout
[ 2656.234547][T20988] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[ 2656.470975][T20988] usb 7-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2656.488224][T20988] usb 7-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2656.519529][T20988] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2656.538463][T20988] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2656.546802][T20988] usb 7-1: Manufacturer: syz
[ 2656.562593][T20988] usb 7-1: SerialNumber: syz
[ 2657.455121][T20988] usb 7-1: USB disconnect, device number 30
[ 2660.354393][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2662.928982][T24229] loop1: detected capacity change from 0 to 1764
[ 2662.945010][T24230] loop9: detected capacity change from 0 to 64
[ 2663.032838][T24230] syz.9.4253: attempt to access beyond end of device
[ 2663.032838][T24230] loop9: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2663.122585][T24230] Buffer I/O error on dev loop9, logical block 134217734, async page read
[ 2663.300046][T24230] Trying to free block not in datazone
[ 2663.804899][T24242] syz.1.4264: attempt to access beyond end of device
[ 2663.804899][T24242] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2663.818675][T24242] gfs2: error 10 reading superblock
[ 2666.267556][T20988] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[ 2666.449306][T20988] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2666.477800][T20988] usb 2-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2666.512147][T20988] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2666.537880][T20988] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2666.546400][T20988] usb 2-1: Manufacturer: syz
[ 2667.957753][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2668.004872][T24261] loop0: detected capacity change from 0 to 1764
[ 2668.027462][T20988] usb 2-1: SerialNumber: syz
[ 2668.116961][T24232] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2668.128421][T20988] usb 2-1: can't set config #36, error -71
[ 2668.143867][T20988] usb 2-1: USB disconnect, device number 17
[ 2668.196433][T24269] overlayfs: missing 'lowerdir'
[ 2669.831242][T24284] syz.0.4275: attempt to access beyond end of device
[ 2669.831242][T24284] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2669.845285][T24284] gfs2: error 10 reading superblock
[ 2672.641058][T24302] loop0: detected capacity change from 0 to 64
[ 2672.759957][T24302] syz.0.4279: attempt to access beyond end of device
[ 2672.759957][T24302] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2672.903138][T24302] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2673.520868][T24302] Trying to free block not in datazone
[ 2674.029055][T24316] loop9: detected capacity change from 0 to 1764
[ 2674.072102][T24316] overlayfs: missing 'lowerdir'
[ 2674.746068][T24324] input: syz1 as /devices/virtual/input/input38
[ 2675.602088][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2675.790239][ T5841] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[ 2675.916967][T24330] syz.9.4286: attempt to access beyond end of device
[ 2675.916967][T24330] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2675.930676][T24330] gfs2: error 10 reading superblock
[ 2676.092890][ T5841] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2676.209478][ T5841] usb 2-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2676.372115][ T5841] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2676.478409][ T5841] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2676.581144][ T5841] usb 2-1: Manufacturer: syz
[ 2676.639763][ T5841] usb 2-1: SerialNumber: syz
[ 2678.737792][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2678.817580][ T5841] usb 2-1: USB disconnect, device number 18
[ 2679.368238][T24343] loop1: detected capacity change from 0 to 1764
[ 2679.528494][T24319] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2680.151562][T24343] overlayfs: missing 'lowerdir'
[ 2681.954463][T24359] input: syz1 as /devices/virtual/input/input39
[ 2682.809219][T23603] Bluetooth: hci1: command 0x0405 tx timeout
[ 2686.251180][T24381] syz.6.4295: attempt to access beyond end of device
[ 2686.251180][T24381] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2686.264689][T24381] gfs2: error 10 reading superblock
[ 2686.287485][T23948] usb 10-1: new full-speed USB device number 33 using dummy_hcd
[ 2687.058189][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2687.226876][T23948] usb 10-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2687.330118][T23948] usb 10-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2687.422099][T23948] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2687.504597][T23948] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2687.577990][T23948] usb 10-1: Manufacturer: syz
[ 2687.616182][T23948] usb 10-1: SerialNumber: syz
[ 2688.071443][T24393] loop1: detected capacity change from 0 to 1764
[ 2688.081649][T23948] usb 10-1: USB disconnect, device number 33
[ 2688.252556][T24393] overlayfs: missing 'lowerdir'
[ 2689.671043][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2692.090348][T24412] syz.9.4308: attempt to access beyond end of device
[ 2692.090348][T24412] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2692.103840][T24412] gfs2: error 10 reading superblock
[ 2693.458667][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2695.778355][T24433] input: syz1 as /devices/virtual/input/input40
[ 2695.850217][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2700.078274][ T5924] usb 10-1: new full-speed USB device number 34 using dummy_hcd
[ 2700.141770][T24455] loop1: detected capacity change from 0 to 1764
[ 2700.243410][T24455] overlayfs: missing 'lowerdir'
[ 2700.261041][ T5924] usb 10-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2700.272348][ T5924] usb 10-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2700.295262][ T5924] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2700.306579][ T5924] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2700.322500][ T5924] usb 10-1: Manufacturer: syz
[ 2700.331882][ T5924] usb 10-1: SerialNumber: syz
[ 2700.404564][T24459] syz.0.4317: attempt to access beyond end of device
[ 2700.404564][T24459] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2700.418291][T24459] gfs2: error 10 reading superblock
[ 2701.223816][ T5924] usb 10-1: USB disconnect, device number 34
[ 2703.588641][ T5776] Bluetooth: hci1: command 0x0405 tx timeout
[ 2706.747811][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2706.893199][T24496] loop0: detected capacity change from 0 to 1764
[ 2707.089021][T24496] overlayfs: missing 'lowerdir'
[ 2709.340244][T24517] syz.6.4328: attempt to access beyond end of device
[ 2709.340244][T24517] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2709.353780][T24517] gfs2: error 10 reading superblock
[ 2709.449153][T23948] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 2709.758998][T23948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2709.865875][T23948] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 2710.016911][T23948] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[ 2710.121447][T23948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2710.329221][T23948] rtsx_usb: probe of 2-1:1.0 failed with error -22
[ 2712.646295][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2713.539151][T23948] usb 2-1: USB disconnect, device number 19
[ 2714.106457][T24541] input: syz1 as /devices/virtual/input/input41
[ 2714.964367][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2714.971726][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2714.987930][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2717.517898][ T5922] usb 10-1: new full-speed USB device number 35 using dummy_hcd
[ 2718.621362][ T5922] usb 10-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2718.657427][ T5922] usb 10-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2718.679980][ T5922] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2718.712932][ T5922] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2718.730111][ T5922] usb 10-1: Manufacturer: syz
[ 2718.755566][ T5922] usb 10-1: SerialNumber: syz
[ 2718.795301][T24555] loop0: detected capacity change from 0 to 1764
[ 2718.816666][T24558] syz.1.4343: attempt to access beyond end of device
[ 2718.816666][T24558] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2718.830805][T24558] gfs2: error 10 reading superblock
[ 2719.799725][T24555] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2719.930086][T24555] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2720.033968][ T5922] usb 10-1: USB disconnect, device number 35
[ 2721.077636][ T5922] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 2721.414248][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2721.815833][ T5922] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 2722.017740][T24481] Bluetooth: hci1: command 0x0405 tx timeout
[ 2722.088399][ T5922] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[ 2722.124996][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2723.140328][T24589] input: syz1 as /devices/virtual/input/input42
[ 2724.168307][ T5922] rtsx_usb: probe of 2-1:1.0 failed with error -22
[ 2724.257788][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2725.625279][T23948] usb 2-1: USB disconnect, device number 20
[ 2728.067461][ T5841] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[ 2728.487101][T24609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4353'.
[ 2728.665919][ T5841] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2728.677119][ T5841] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2730.329637][ T5841] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2730.339406][ T5841] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2730.365529][ T5841] usb 1-1: Manufacturer: syz
[ 2730.370677][ T5841] usb 1-1: SerialNumber: syz
[ 2730.422135][T24614] loop1: detected capacity change from 0 to 1764
[ 2730.510428][T24614] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2730.542198][T24614] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2730.880894][ T5841] usb 1-1: USB disconnect, device number 21
[ 2733.400441][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2733.547448][T24456] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 2733.779733][T24456] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2733.797472][T24456] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 2733.821720][T24456] usb 7-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[ 2733.833745][T24456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2733.968207][T24456] rtsx_usb: probe of 7-1:1.0 failed with error -22
[ 2733.998244][T24648] loop9: detected capacity change from 0 to 512
[ 2734.042250][T24648] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 2734.101717][T24648] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #16: comm syz.9.4366: invalid indirect mapped block 4294967295 (level 0)
[ 2734.211247][T24648] EXT4-fs (loop9): Remounting filesystem read-only
[ 2734.236216][T24648] EXT4-fs (loop9): 1 orphan inode deleted
[ 2734.273886][T24652] loop1: detected capacity change from 0 to 1764
[ 2734.285400][T24648] EXT4-fs (loop9): 1 truncate cleaned up
[ 2734.299209][T24648] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2734.381987][T24652] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2734.396033][T24652] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2734.408384][T19466] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2736.400055][T24456] usb 7-1: USB disconnect, device number 31
[ 2736.477496][T23948] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[ 2736.827283][T24676] loop1: detected capacity change from 0 to 64
[ 2736.870965][T24676] syz.1.4369: attempt to access beyond end of device
[ 2736.870965][T24676] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2737.041700][T24676] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2737.187487][T24676] Trying to free block not in datazone
[ 2738.177538][T23948] usb 1-1: device not accepting address 22, error -71
[ 2738.261179][T24688] loop0: detected capacity change from 0 to 1764
[ 2738.391535][T24688] overlayfs: missing 'lowerdir'
[ 2741.955704][T24714] loop1: detected capacity change from 0 to 64
[ 2741.967748][T24456] usb 10-1: new full-speed USB device number 36 using dummy_hcd
[ 2741.991477][T24714] syz.1.4384: attempt to access beyond end of device
[ 2741.991477][T24714] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2742.005431][T24714] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2742.016900][T24714] Trying to free block not in datazone
[ 2742.236156][T24456] usb 10-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2742.264496][T24456] usb 10-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2742.312306][T24456] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2742.336911][T24456] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2742.367875][T24456] usb 10-1: Manufacturer: syz
[ 2742.372743][T24456] usb 10-1: SerialNumber: syz
[ 2742.756131][T24456] usb 10-1: USB disconnect, device number 36
[ 2744.277485][T23948] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 2744.479452][T23948] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2744.507310][T23948] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 2744.537047][T23948] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[ 2744.567179][T23948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2745.268448][T24732] input: syz1 as /devices/virtual/input/input47
[ 2745.838180][T23948] rtsx_usb: probe of 1-1:1.0 failed with error -22
[ 2746.041086][ T5841] usb 1-1: USB disconnect, device number 24
[ 2747.846106][T24742] input: syz1 as /devices/virtual/input/input49
[ 2749.668352][T24748] loop6: detected capacity change from 0 to 1764
[ 2749.756369][T24748] overlayfs: missing 'lowerdir'
[ 2753.597734][T24456] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[ 2753.809992][T24456] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2753.830554][T24456] usb 2-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2753.873747][T24456] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2753.887555][T24456] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2753.906429][T24456] usb 2-1: Manufacturer: syz
[ 2753.916323][T24456] usb 2-1: SerialNumber: syz
[ 2755.550659][T24778] input: syz1 as /devices/virtual/input/input50
[ 2755.850209][T23948] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 2756.416860][T24786] input: syz1 as /devices/virtual/input/input51
[ 2757.579243][T24456] usb 2-1: USB disconnect, device number 21
[ 2762.829080][T24815] loop0: detected capacity change from 0 to 1764
[ 2762.908086][T24816] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2763.043351][T24815] overlayfs: missing 'lowerdir'
[ 2763.737846][T23948] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 2765.310612][T23948] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2765.321203][T23948] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2765.340401][T23948] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2765.356990][T23948] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2765.389005][T23948] usb 7-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[ 2765.410079][T23948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2765.548395][T23948] rtsx_usb: probe of 7-1:1.0 failed with error -90
[ 2767.798572][ T5841] usb 7-1: USB disconnect, device number 33
[ 2767.929652][T24853] loop0: detected capacity change from 0 to 1764
[ 2767.987118][T24853] overlayfs: missing 'workdir'
[ 2768.009250][T24856]  loop0:
[ 2769.617732][T24481] Bluetooth: hci1: command 0x0405 tx timeout
[ 2769.669943][ T5924] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[ 2770.218047][ T5924] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2770.247398][ T5924] usb 2-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2770.259237][ T5924] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2770.277660][ T5924] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2770.285979][ T5924] usb 2-1: Manufacturer: syz
[ 2770.311173][ T5924] usb 2-1: SerialNumber: syz
[ 2770.679433][ T5924] usb 2-1: USB disconnect, device number 22
[ 2771.282180][T24886] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 2771.581884][T24891] loop0: detected capacity change from 0 to 1764
[ 2771.649792][T24854] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2771.745733][T24891] overlayfs: missing 'workdir'
[ 2773.297448][T24481] Bluetooth: hci1: command 0x0405 tx timeout
[ 2775.658068][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2775.664451][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2776.227652][ T5924] usb 7-1: new full-speed USB device number 34 using dummy_hcd
[ 2776.430370][ T5924] usb 7-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2776.464333][ T5924] usb 7-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2776.491739][ T5924] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2776.511116][ T5924] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2776.530141][ T5924] usb 7-1: Manufacturer: syz
[ 2776.534797][ T5924] usb 7-1: SerialNumber: syz
[ 2778.660739][ T5924] usb 7-1: USB disconnect, device number 34
[ 2779.683238][T24923] loop1: detected capacity change from 0 to 1764
[ 2780.149198][T24908] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2780.554266][T24931] overlayfs: missing 'workdir'
[ 2782.297429][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2786.777944][T24972] loop1: detected capacity change from 0 to 1764
[ 2787.852699][T24975] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2788.342787][ T5924] usb 10-1: new full-speed USB device number 37 using dummy_hcd
[ 2788.557633][ T5924] usb 10-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2788.587796][ T5924] usb 10-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2788.728235][ T5924] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2788.847497][T21992] Bluetooth: hci1: command 0x0405 tx timeout
[ 2788.859436][ T5924] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2788.868133][ T5924] usb 10-1: Manufacturer: syz
[ 2788.872963][ T5924] usb 10-1: SerialNumber: syz
[ 2789.339634][ T5924] usb 10-1: USB disconnect, device number 37
[ 2789.815874][T25000] loop1: detected capacity change from 0 to 64
[ 2789.851455][T25000] syz.1.4457: attempt to access beyond end of device
[ 2789.851455][T25000] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2789.865586][T25000] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2789.878339][T25000] Trying to free block not in datazone
[ 2790.516763][T24481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2790.574287][T24481] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2790.585311][T24481] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2790.607067][T24481] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2790.614914][T24481] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2790.622445][T24481] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2790.823024][T25011] loop0: detected capacity change from 0 to 4096
[ 2790.893440][T25011]  loop0:
[ 2792.277710][T25005] rxe_eth0 speed is unknown, defaulting to 1000
[ 2794.047553][T24481] Bluetooth: hci3: command tx timeout
[ 2794.123802][T25031] loop9: detected capacity change from 0 to 1764
[ 2794.333548][T24975] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2795.367482][ T5924] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[ 2795.384049][T25005] chnl_net:caif_netlink_parms(): no params data found
[ 2795.579760][ T5924] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 2795.604201][ T5924] usb 2-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[ 2795.636932][ T5924] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 2795.677430][ T5924] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 2795.685942][ T5924] usb 2-1: Manufacturer: syz
[ 2796.487470][ T5924] usb 2-1: SerialNumber: syz
[ 2796.520532][T24481] Bluetooth: hci3: command tx timeout
[ 2798.581895][T24481] Bluetooth: hci3: command tx timeout
[ 2798.594945][T25005] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2798.602715][T25005] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2798.618267][T25005] bridge_slave_0: entered allmulticast mode
[ 2798.630339][T25005] bridge_slave_0: entered promiscuous mode
[ 2798.730834][T25005] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2798.757484][T25005] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2798.802538][T25005] bridge_slave_1: entered allmulticast mode
[ 2798.859042][T25005] bridge_slave_1: entered promiscuous mode
[ 2798.885304][ T5924] usb 2-1: USB disconnect, device number 23
[ 2799.345389][T25005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2799.409667][T25005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2799.554860][T22360] hsr_slave_0: left promiscuous mode
[ 2799.610035][T22360] hsr_slave_1: left promiscuous mode
[ 2799.654805][T22360] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2799.678293][T22360] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2799.693784][T22360] bridge_slave_1: left allmulticast mode
[ 2799.707576][T22360] bridge_slave_1: left promiscuous mode
[ 2799.713423][T22360] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2799.749046][T22360] bridge_slave_0: left allmulticast mode
[ 2799.754863][T22360] bridge_slave_0: left promiscuous mode
[ 2799.793576][T22360] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2800.134676][T25097] loop9: detected capacity change from 0 to 1764
[ 2800.215311][T24975] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2800.248703][T24990] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 2800.464326][T24990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2800.482242][T24990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2800.507390][T24990] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2800.519774][T24990] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2800.556622][T24990] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[ 2800.667353][T24481] Bluetooth: hci3: command tx timeout
[ 2801.352866][T24990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2801.897197][T25112] input: syz1 as /devices/virtual/input/input56
[ 2803.239568][T24990] rtsx_usb: probe of 2-1:1.0 failed with error -90
[ 2803.309512][T25021] usb 2-1: USB disconnect, device number 24
[ 2804.068009][T22360] team0 (unregistering): Port device team_slave_1 removed
[ 2804.201515][T22360] team0 (unregistering): Port device team_slave_0 removed
[ 2804.297228][T22360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2804.427890][T22360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2804.695056][T25127] loop6: detected capacity change from 0 to 1764
[ 2804.764792][T24975] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2804.839529][T25127] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2805.264856][T25131] kvm: pic: non byte write
[ 2805.339623][T22360] bond0 (unregistering): Released all slaves
[ 2806.250966][T25005] team0: Port device team_slave_0 added
[ 2806.299967][T25005] team0: Port device team_slave_1 added
[ 2806.470120][T25005] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2806.510827][T25005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2806.587365][T25005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2806.631448][T25005] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2806.638739][T25005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2806.666138][T25005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2806.758720][T23948] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 2806.834282][T25005] hsr_slave_0: entered promiscuous mode
[ 2806.895341][T25005] hsr_slave_1: entered promiscuous mode
[ 2806.903324][T25005] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2806.911710][T25005] Cannot create hsr debugfs directory
[ 2806.959810][T23948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2806.970800][T23948] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2807.007711][T23948] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2807.047363][T23948] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2807.067107][T23948] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[ 2807.103902][T23948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2807.268276][T23948] rtsx_usb: probe of 2-1:1.0 failed with error -90
[ 2807.432199][T25164] loop6: detected capacity change from 0 to 1764
[ 2807.541759][T25164] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2808.184395][T25005] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2809.151290][T25005] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2809.387602][T25005] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2809.521259][T25005] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2809.549606][T25021] usb 2-1: USB disconnect, device number 25
[ 2809.890666][T25005] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2810.013115][T25005] 8021q: adding VLAN 0 to HW filter on device team0
[ 2810.049436][T18302] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2810.056657][T18302] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2810.083961][T25200] loop1: detected capacity change from 0 to 1764
[ 2810.124102][T18287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2810.131331][T18287] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2810.235690][T25200] overlayfs: failed to get index nlink (file0/file1, err=-61)
[ 2811.646368][T24990] hid-generic 0005:0B57:4155.0003: unknown main item tag 0x0
[ 2811.708789][T24990] hid-generic 0005:0B57:4155.0003: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2811.882992][T25227] input: syz1 as /devices/virtual/input/input57
[ 2812.474957][T25230] fido_id[25230]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory
[ 2812.500654][T25005] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2812.586140][T25240] syz.9.4504: attempt to access beyond end of device
[ 2812.586140][T25240] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2812.599694][T25240] gfs2: error 10 reading superblock
[ 2814.810888][T25005] veth0_vlan: entered promiscuous mode
[ 2814.879985][T25005] veth1_vlan: entered promiscuous mode
[ 2815.221654][T25254] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 2816.461417][T25005] veth0_macvtap: entered promiscuous mode
[ 2816.493931][T25005] veth1_macvtap: entered promiscuous mode
[ 2816.592433][T25005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2816.644238][T25005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2816.673221][T25005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2816.718904][T25005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2816.735288][T25005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2816.747010][T25005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2816.760107][T25005] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2816.785251][T25005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2816.838138][T25005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2816.852868][T25005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2816.882741][T25005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2816.915300][T25005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2816.956708][T25005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2816.990606][T25005] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2817.071236][T25005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2817.121540][T25005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2817.157362][T25005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2817.166233][T25005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2817.543509][T25274] syz.6.4512: attempt to access beyond end of device
[ 2817.543509][T25274] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2817.557179][T25274] gfs2: error 10 reading superblock
[ 2817.705168][T18287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2817.747890][T18287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2817.841146][T18287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2817.862160][T18287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2818.011168][T25284] syz.1.4514: attempt to access beyond end of device
[ 2818.011168][T25284] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2818.024636][T25284] gfs2: error 10 reading superblock
[ 2819.181223][ T5924] hid-generic 0005:0B57:4155.0004: unknown main item tag 0x0
[ 2819.332993][ T5924] hid-generic 0005:0B57:4155.0004: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2822.378158][T25322] syz.1.4520: attempt to access beyond end of device
[ 2822.378158][T25322] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2822.477853][T25322] gfs2: error 10 reading superblock
[ 2822.842102][T25333] syz.9.4523: attempt to access beyond end of device
[ 2822.842102][T25333] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2822.855438][T25333] gfs2: error 10 reading superblock
[ 2824.317506][T24990] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[ 2824.537412][T24990] usb 10-1: Using ep0 maxpacket: 8
[ 2824.590986][T24990] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 2824.789588][ T5841] hid-generic 0005:0B57:4155.0005: unknown main item tag 0x0
[ 2824.836069][T24990] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2825.023401][ T5841] hid-generic 0005:0B57:4155.0005: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2825.037517][T24990] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2825.239687][T24990] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2825.255710][T25363] loop6: detected capacity change from 0 to 64
[ 2825.273461][T25363] syz.6.4527: attempt to access beyond end of device
[ 2825.273461][T25363] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2825.287715][T25363] Buffer I/O error on dev loop6, logical block 134217734, async page read
[ 2825.302674][T25363] Trying to free block not in datazone
[ 2825.443288][T24990] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2825.799904][T24990] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2825.824777][T25371] syz.1.4532: attempt to access beyond end of device
[ 2825.824777][T25371] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2825.839175][T25371] gfs2: error 10 reading superblock
[ 2825.862702][T25361] fido_id[25361]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory
[ 2825.958314][T24990] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2826.253046][T24990] usb 10-1: usb_control_msg returned -32
[ 2826.289698][T24990] usbtmc 10-1:16.0: can't read capabilities
[ 2827.417578][T25385] usbtmc 10-1:16.0: usb_clear_halt returned -32
[ 2827.620729][T24990] usb 10-1: USB disconnect, device number 38
[ 2830.250660][ T5841] hid-generic 0005:0B57:4155.0006: unknown main item tag 0x0
[ 2830.557801][T25409] input: syz1 as /devices/virtual/input/input58
[ 2830.639039][ T5841] hid-generic 0005:0B57:4155.0006: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2831.390868][T25415] syz.9.4542: attempt to access beyond end of device
[ 2831.390868][T25415] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2831.404090][T25415] gfs2: error 10 reading superblock
[ 2831.571863][T25411] fido_id[25411]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory
[ 2835.882725][T24990] hid-generic 0005:0B57:4155.0007: unknown main item tag 0x0
[ 2835.927194][T24990] hid-generic 0005:0B57:4155.0007: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2836.631694][T25467] input: syz1 as /devices/virtual/input/input59
[ 2836.838525][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2836.844918][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2837.248723][T25463] fido_id[25463]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory
[ 2838.171384][T25474] syz.6.4552: attempt to access beyond end of device
[ 2838.171384][T25474] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2838.185353][T25474] gfs2: error 10 reading superblock
[ 2838.408634][T25476] loop1: detected capacity change from 0 to 64
[ 2838.421282][T25476] syz.1.4553: attempt to access beyond end of device
[ 2838.421282][T25476] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2838.435267][T25476] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2838.454219][T25476] Trying to free block not in datazone
[ 2841.869869][T24990] hid-generic 0005:0B57:4155.0008: unknown main item tag 0x0
[ 2842.127257][T24990] hid-generic 0005:0B57:4155.0008: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2843.641350][T25512] input: syz1 as /devices/virtual/input/input60
[ 2846.032823][T25523] syz.6.4563: attempt to access beyond end of device
[ 2846.032823][T25523] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2846.046320][T25523] gfs2: error 10 reading superblock
[ 2849.232235][T25548] input: syz1 as /devices/virtual/input/input61
[ 2851.196785][T25558] syz.9.4575: attempt to access beyond end of device
[ 2851.196785][T25558] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2851.210441][T25558] gfs2: error 10 reading superblock
[ 2851.548963][T24990] hid-generic 0005:0B57:4155.0009: unknown main item tag 0x0
[ 2851.655896][T24990] hid-generic 0005:0B57:4155.0009: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2853.821383][T25573] fido_id[25573]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory
[ 2854.161201][T25588] loop0: detected capacity change from 0 to 64
[ 2854.195525][T25588] syz.0.4573: attempt to access beyond end of device
[ 2854.195525][T25588] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2854.209373][T25588] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2854.227644][T25588] Trying to free block not in datazone
[ 2855.215727][T25593] input: syz1 as /devices/virtual/input/input62
[ 2856.150759][T25598] syz.9.4584: attempt to access beyond end of device
[ 2856.150759][T25598] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2856.164121][T25598] gfs2: error 10 reading superblock
[ 2857.444844][T25616] loop9: detected capacity change from 0 to 64
[ 2857.900907][T25614] syz.9.4587: attempt to access beyond end of device
[ 2857.900907][T25614] loop9: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2857.914590][T25614] Buffer I/O error on dev loop9, logical block 134217734, async page read
[ 2857.934587][T25614] Trying to free block not in datazone
[ 2859.844074][T25626] input: syz1 as /devices/virtual/input/input63
[ 2860.348382][T25635] syz.9.4594: attempt to access beyond end of device
[ 2860.348382][T25635] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2861.144512][T25635] gfs2: error 10 reading superblock
[ 2862.667182][T25650] loop6: detected capacity change from 0 to 24
[ 2862.704176][T25650] MTD: Attempt to mount non-MTD device "/dev/loop6"
[ 2862.756425][T25650] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2865.108142][T25664] loop1: detected capacity change from 0 to 64
[ 2866.519884][T25661] syz.1.4598: attempt to access beyond end of device
[ 2866.519884][T25661] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2866.536823][T25661] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2866.549812][T25661] Trying to free block not in datazone
[ 2871.247890][T25702] syz.0.4605: attempt to access beyond end of device
[ 2871.247890][T25702] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2871.277804][T25702] gfs2: error 10 reading superblock
[ 2878.234161][T25727] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4619'.
[ 2878.839858][T25733] loop1: detected capacity change from 0 to 64
[ 2879.034488][T25733] syz.1.4615: attempt to access beyond end of device
[ 2879.034488][T25733] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2879.049367][T25733] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2879.078430][T25733] Trying to free block not in datazone
[ 2881.850534][T25750] syz.1.4622: attempt to access beyond end of device
[ 2881.850534][T25750] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2881.864720][T25750] gfs2: error 10 reading superblock
[ 2885.806344][T25772] kAFS: No cell specified
[ 2888.421267][T25790] loop0: detected capacity change from 0 to 64
[ 2888.439792][T25790] syz.0.4631: attempt to access beyond end of device
[ 2888.439792][T25790] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2888.453602][T25790] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2888.513176][T25790] Trying to free block not in datazone
[ 2889.694436][T25802] loop6: detected capacity change from 0 to 64
[ 2889.745798][T25802] syz.6.4628: attempt to access beyond end of device
[ 2889.745798][T25802] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2889.759615][T25802] Buffer I/O error on dev loop6, logical block 134217734, async page read
[ 2889.772707][T25802] Trying to free block not in datazone
[ 2891.675990][T25808] input: syz1 as /devices/virtual/input/input66
[ 2891.690818][T25810] kAFS: No cell specified
[ 2896.856478][T25836] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4644'.
[ 2897.231412][T25847] syz.6.4646: attempt to access beyond end of device
[ 2897.231412][T25847] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2898.819543][T25847] gfs2: error 10 reading superblock
[ 2898.819684][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2898.853818][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2900.110714][T25857] input: syz1 as /devices/virtual/input/input68
[ 2900.628790][T25869] loop1: detected capacity change from 0 to 2048
[ 2900.734607][T25869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2900.965920][T25875] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4654'.
[ 2902.994736][T25879] syz.6.4656: attempt to access beyond end of device
[ 2902.994736][T25879] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2903.008870][T25879] gfs2: error 10 reading superblock
[ 2904.258891][T25883] input: syz1 as /devices/virtual/input/input69
[ 2905.578968][T25887] input: syz1 as /devices/virtual/input/input70
[ 2907.954832][T25899] loop1: detected capacity change from 0 to 64
[ 2907.992715][T25899] syz.1.4663: attempt to access beyond end of device
[ 2907.992715][T25899] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2908.006526][T25899] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 2908.029601][T25899] Trying to free block not in datazone
[ 2908.869151][T25901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4664'.
[ 2909.404597][T25917] syz.0.4666: attempt to access beyond end of device
[ 2909.404597][T25917] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2909.418184][T25917] gfs2: error 10 reading superblock
[ 2909.829208][T25919] input: syz1 as /devices/virtual/input/input72
[ 2910.013055][T25921] input: syz1 as /devices/virtual/input/input73
[ 2912.292877][T24199] syz_tun (unregistering): left allmulticast mode
[ 2912.802397][   T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2913.058998][T21992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2913.083901][T21992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2913.097627][T21992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2913.118748][T21992] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2913.147435][T21992] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2913.186835][T21992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2913.252797][   T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2914.516117][   T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2914.703764][T25932] rxe_eth0 speed is unknown, defaulting to 1000
[ 2915.090377][   T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2916.449059][T24481] Bluetooth: hci0: command tx timeout
[ 2917.449975][T25932] chnl_net:caif_netlink_parms(): no params data found
[ 2918.511049][T25960] input: syz1 as /devices/virtual/input/input75
[ 2918.529875][T24481] Bluetooth: hci0: command tx timeout
[ 2919.102738][T25970] loop9: detected capacity change from 0 to 64
[ 2919.243253][T25970] syz.9.4673: attempt to access beyond end of device
[ 2919.243253][T25970] loop9: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2919.257597][T25970] Buffer I/O error on dev loop9, logical block 134217734, async page read
[ 2919.293791][T25970] Trying to free block not in datazone
[ 2919.882331][T25932] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2919.945971][T25932] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2919.978424][T25932] bridge_slave_0: entered allmulticast mode
[ 2920.026846][T25932] bridge_slave_0: entered promiscuous mode
[ 2920.055289][T25932] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2920.107515][T25932] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2920.137738][T25932] bridge_slave_1: entered allmulticast mode
[ 2920.193434][T25932] bridge_slave_1: entered promiscuous mode
[ 2921.329338][T24481] Bluetooth: hci0: command tx timeout
[ 2921.591732][T25932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2921.632893][T25932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2923.401186][T24481] Bluetooth: hci0: command tx timeout
[ 2923.444812][T25932] team0: Port device team_slave_0 added
[ 2924.551801][T25932] team0: Port device team_slave_1 added
[ 2924.658732][T25932] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2924.665799][T25932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2924.737336][T25932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2924.908398][T25932] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2924.937713][T25932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2925.018053][T25932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2926.744221][T25932] hsr_slave_0: entered promiscuous mode
[ 2926.792326][T25932] hsr_slave_1: entered promiscuous mode
[ 2926.887435][T25932] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2926.895106][T25932] Cannot create hsr debugfs directory
[ 2927.188489][   T33] hsr_slave_0: left promiscuous mode
[ 2927.227561][   T33] hsr_slave_1: left promiscuous mode
[ 2927.268611][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2927.307750][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2927.321022][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2927.337470][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2927.378287][   T33] bridge_slave_1: left allmulticast mode
[ 2927.384017][   T33] bridge_slave_1: left promiscuous mode
[ 2927.423132][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2927.454985][   T33] bridge_slave_0: left allmulticast mode
[ 2927.460962][   T33] bridge_slave_0: left promiscuous mode
[ 2927.466749][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2927.602647][   T33] veth1_macvtap: left promiscuous mode
[ 2927.613603][   T33] veth0_macvtap: left promiscuous mode
[ 2927.622818][   T33] veth1_vlan: left promiscuous mode
[ 2927.640772][   T33] veth0_vlan: left promiscuous mode
[ 2927.848994][T20988] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 2928.037399][T20988] usb 7-1: Using ep0 maxpacket: 8
[ 2928.047539][T20988] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 2928.055800][T20988] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2928.095219][T20988] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2928.107695][T20988] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2928.118167][T20988] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2928.175909][T20988] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2929.060247][T26037] input: syz1 as /devices/virtual/input/input77
[ 2929.118066][T20988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2929.377654][T20988] usb 7-1: usb_control_msg returned -32
[ 2929.385048][T20988] usbtmc 7-1:16.0: can't read capabilities
[ 2933.194060][   T33] team0 (unregistering): Port device team_slave_1 removed
[ 2933.314610][   T33] team0 (unregistering): Port device team_slave_0 removed
[ 2933.431062][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2933.549057][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2933.566033][T20988] infiniband syz1: ib_query_port failed (-19)
[ 2934.957667][   T33] bond0 (unregistering): Released all slaves
[ 2935.190414][ T5841] infiniband syz1: ib_query_port failed (-19)
[ 2935.618039][T26043] usbtmc 7-1:16.0: usb_control_msg returned -110
[ 2935.729295][ T5922] usb 7-1: USB disconnect, device number 35
[ 2938.693126][T26091] loop6: detected capacity change from 0 to 64
[ 2938.986132][T26091] syz.6.4696: attempt to access beyond end of device
[ 2938.986132][T26091] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2939.000077][T26091] Buffer I/O error on dev loop6, logical block 134217734, async page read
[ 2939.027218][T26091] Trying to free block not in datazone
[ 2939.567076][T25932] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2939.636329][T25932] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2940.437886][T26095] afs: Unknown parameter 'dy'
[ 2940.506147][T25932] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2940.558039][T25932] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2941.271133][T25932] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2941.296020][T25932] 8021q: adding VLAN 0 to HW filter on device team0
[ 2941.353253][T18287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2941.360529][T18287] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2941.425261][T22360] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2941.432487][T22360] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2941.598023][ T5841] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 2941.662372][T25932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2941.800303][ T5841] usb 7-1: Using ep0 maxpacket: 8
[ 2941.811953][ T5841] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 2941.836003][ T5841] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2941.877747][ T5841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2941.920275][ T5841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2941.960199][ T5841] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2942.008187][ T5841] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2942.035367][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2942.307947][ T5841] usb 7-1: usb_control_msg returned -32
[ 2942.362259][ T5841] usbtmc 7-1:16.0: can't read capabilities
[ 2942.541956][T25932] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2942.674457][T25932] veth0_vlan: entered promiscuous mode
[ 2942.725048][T25932] veth1_vlan: entered promiscuous mode
[ 2942.867211][T25932] veth0_macvtap: entered promiscuous mode
[ 2942.925215][T25932] veth1_macvtap: entered promiscuous mode
[ 2944.725506][T25932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2944.814236][T25932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2944.849763][T25932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2944.880400][T25932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2944.918710][T25932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2944.963360][T25932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2945.011858][T25932] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2945.051894][T25932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2945.090631][T25932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2945.131664][T25932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2945.170630][T25932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2945.206966][T25932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2945.247666][T25932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2945.269057][T25932] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2945.318736][T25932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2945.327677][T25932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2945.336600][T25932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2945.346371][T25932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2945.722873][T25410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2945.757494][T25410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2945.844733][T22360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2945.867383][T22360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2946.307688][T26168] kAFS: No cell specified
[ 2947.825818][T26133] usbtmc 7-1:16.0: usb_control_msg returned -110
[ 2947.936095][T26151] usb 7-1: USB disconnect, device number 36
[ 2948.067938][T26178] afs: Unknown parameter 'dy'
[ 2951.257576][T26204] loop0: detected capacity change from 0 to 64
[ 2951.316568][T26204] syz.0.4713: attempt to access beyond end of device
[ 2951.316568][T26204] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2951.330364][T26204] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2951.355178][T26204] Trying to free block not in datazone
[ 2959.653921][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2959.662403][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2965.473237][T26279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4724'.
[ 2968.470624][T26295] input: syz1 as /devices/virtual/input/input81
[ 2977.055633][T26150] hid-generic 0005:0B57:4155.000A: unknown main item tag 0x0
[ 2977.075207][T26150] hid-generic 0005:0B57:4155.000A: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2978.336116][T26359] input: syz1 as /devices/virtual/input/input82
[ 2986.722187][T26150] hid-generic 0005:0B57:4155.000B: unknown main item tag 0x0
[ 2986.763596][T26150] hid-generic 0005:0B57:4155.000B: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2992.817675][T26429] input: syz1 as /devices/virtual/input/input83
[ 2992.927182][ T5841] hid-generic 0005:0B57:4155.000C: unknown main item tag 0x0
[ 2992.939069][ T5841] hid-generic 0005:0B57:4155.000C: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2995.605665][T26449] loop0: detected capacity change from 0 to 64
[ 2995.675473][T26449] syz.0.4763: attempt to access beyond end of device
[ 2995.675473][T26449] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 2995.689403][T26449] Buffer I/O error on dev loop0, logical block 134217734, async page read
[ 2995.709772][T26449] Trying to free block not in datazone
[ 3001.849794][T26481] input: syz1 as /devices/virtual/input/input84
[ 3002.442703][T20989] hid-generic 0005:0B57:4155.000D: unknown main item tag 0x0
[ 3002.592646][T20989] hid-generic 0005:0B57:4155.000D: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 3004.573337][T26495] fido_id[26495]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory
[ 3007.922481][T26515] input: syz1 as /devices/virtual/input/input85
[ 3011.164947][T26151] hid-generic 0005:0B57:4155.000E: unknown main item tag 0x0
[ 3011.266347][T26151] hid-generic 0005:0B57:4155.000E: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 3019.318232][T24481] Bluetooth: hci3: command 0x0406 tx timeout
[ 3020.695930][T26567] input: syz1 as /devices/virtual/input/input86
[ 3020.905876][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 3020.912518][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 3023.203957][ T5841] hid-generic 0005:0B57:4155.000F: unknown main item tag 0x0
[ 3023.214033][ T5841] hid-generic 0005:0B57:4155.000F: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 3024.904708][T26577] fido_id[26577]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory
[ 3026.794352][T26600] input: syz1 as /devices/virtual/input/input87
[ 3031.697893][ T5924] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 3033.716515][T26639] loop1: detected capacity change from 0 to 64
[ 3033.749705][T26639] syz.1.4812: attempt to access beyond end of device
[ 3033.749705][T26639] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[ 3033.763672][T26639] Buffer I/O error on dev loop1, logical block 134217734, async page read
[ 3033.788887][T26639] Trying to free block not in datazone
[ 3035.127302][ T5924] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 3035.347295][ T5924] usb 2-1: Using ep0 maxpacket: 8
[ 3035.568357][T26654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4817'.
[ 3036.848933][ T5841] hid-generic 0005:0B57:4155.0010: unknown main item tag 0x0
[ 3036.911749][ T5841] hid-generic 0005:0B57:4155.0010: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 3037.030112][ T5924] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 3037.919829][ T5924] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3037.947271][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 3037.957089][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3038.097270][ T5924] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3038.114829][T26661] fido_id[26661]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory
[ 3038.207422][ T5924] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 3038.216741][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3038.254749][ T5924] usb 2-1: can't set config #16, error -71
[ 3038.288584][ T5924] usb 2-1: USB disconnect, device number 27
[ 3044.355505][T26150] hid-generic 0005:0B57:4155.0011: unknown main item tag 0x0
[ 3044.886724][T26150] hid-generic 0005:0B57:4155.0011: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 3045.160000][T20989] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 3047.557395][T20989] usb 2-1: device descriptor read/64, error -71
[ 3047.827387][T20989] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 3047.997488][T20989] usb 2-1: device descriptor read/64, error -71
[ 3048.178745][T26711] syz.1.4831: attempt to access beyond end of device
[ 3048.178745][T26711] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 3048.188234][T20989] usb usb2-port1: attempt power cycle
[ 3048.197628][T26711] gfs2: error 10 reading superblock
[ 3051.107592][T26720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4829'.
[ 3051.228078][T20989] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 3051.387715][T20989] usb 2-1: Using ep0 maxpacket: 8
[ 3051.404505][T20989] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 3051.433257][T20989] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3051.446117][T20989] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 3051.470841][T20989] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3051.488881][T20989] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3052.957384][T20989] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 3052.966521][T20989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3053.082703][T20989] usb 2-1: can't set config #16, error -71
[ 3053.111373][T20989] usb 2-1: USB disconnect, device number 30
[ 3053.661894][T26150] hid-generic 0005:0B57:4155.0012: unknown main item tag 0x0
[ 3053.794990][T26150] hid-generic 0005:0B57:4155.0012: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 3062.298842][T26761] syz.6.4840: attempt to access beyond end of device
[ 3062.298842][T26761] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 3062.312213][T26761] gfs2: error 10 reading superblock
[ 3063.449290][T26766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4842'.
[ 3064.797420][T23948] hid-generic 0005:0B57:4155.0013: unknown main item tag 0x0
[ 3065.020792][T23948] hid-generic 0005:0B57:4155.0013: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 3067.872722][T24129] syz_tun (unregistering): left allmulticast mode
[ 3069.733729][T26544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 3069.749473][T26544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 3069.759636][T26544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 3069.777642][T26544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 3069.786333][T26544] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 3069.794147][T26544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 3069.861092][T26799] rxe_eth0 speed is unknown, defaulting to 1000
[ 3070.386258][T26799] chnl_net:caif_netlink_parms(): no params data found
[ 3071.660322][T26799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3071.707723][T26799] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3071.715027][T26799] bridge_slave_0: entered allmulticast mode
[ 3071.769176][T26799] bridge_slave_0: entered promiscuous mode
[ 3071.799232][T26799] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3071.812707][T26799] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3071.830686][T26799] bridge_slave_1: entered allmulticast mode
[ 3071.868278][T26544] Bluetooth: hci2: command tx timeout
[ 3071.875714][T26799] bridge_slave_1: entered promiscuous mode
[ 3072.095643][T26799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3072.113761][T26799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3072.162527][T26799] team0: Port device team_slave_0 added
[ 3072.181313][T26820] syz.0.4853: attempt to access beyond end of device
[ 3072.181313][T26820] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 3072.194870][T26820] gfs2: error 10 reading superblock
[ 3072.884190][T26799] team0: Port device team_slave_1 added
[ 3073.060913][T26799] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3073.076474][T26799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3074.100956][T26544] Bluetooth: hci2: command tx timeout
[ 3074.230511][T26799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3074.246376][T26799] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3074.253590][T26799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3074.279939][T26799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3074.385130][T26799] hsr_slave_0: entered promiscuous mode
[ 3074.407995][T26799] hsr_slave_1: entered promiscuous mode
[ 3074.427377][T26799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3074.435015][T26799] Cannot create hsr debugfs directory
[ 3075.030879][T26799] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3077.183012][T26544] Bluetooth: hci2: command tx timeout
[ 3077.393063][T26799] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3077.796815][T26799] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3078.028790][T26799] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3079.695191][T26544] Bluetooth: hci2: command tx timeout
[ 3080.103921][T26799] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 3080.123194][T26799] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 3080.183415][T26799] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 3080.231631][T26799] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 3080.573787][T26799] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3080.630831][T26799] 8021q: adding VLAN 0 to HW filter on device team0
[ 3080.686265][T25549] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3080.693504][T25549] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3080.782369][T25410] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3080.789752][T25410] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3081.502543][T26856] syz.9.4861: attempt to access beyond end of device
[ 3081.502543][T26856] nbd9: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 3081.570243][T26856] gfs2: error 10 reading superblock
[ 3081.799531][T26799] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3083.180876][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 3083.187746][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 3085.982858][T26799] veth0_vlan: entered promiscuous mode
[ 3086.091972][T26799] veth1_vlan: entered promiscuous mode
[ 3086.232318][T26799] veth0_macvtap: entered promiscuous mode
[ 3086.263630][T26799] veth1_macvtap: entered promiscuous mode
[ 3086.327460][T26799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3086.348483][T26799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3086.367274][T26799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3086.393454][T26799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3089.219441][T26799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3089.294887][T26799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3089.337283][T26799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3089.361615][T26799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3089.486107][T26799] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3089.539992][T26799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3089.617267][T26799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3089.657312][T26799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3089.677305][T26799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3089.694298][T26799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3089.717276][T26799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3089.727166][T26799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3089.776154][T26799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3089.805347][T26799] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3089.883845][T26799] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3089.907793][T26799] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3089.916707][T26799] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3089.967452][T26799] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3090.269638][T18268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3090.307896][T18268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3090.419396][T18287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3090.458091][T18287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3096.020710][T26930] syz.0.4869: attempt to access beyond end of device
[ 3096.020710][T26930] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 3096.035046][T26930] gfs2: error 10 reading superblock
[ 3096.999673][T26935] loop0: detected capacity change from 0 to 8
[ 3097.100869][T26935] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 3097.168026][T26935] SQUASHFS error: Failed to read block 0x91: -5
[ 3097.177318][T26935] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 3097.236459][T26935] SQUASHFS error: Unable to read inode 0x11f
[ 3098.097636][T23948] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 3099.750355][T23948] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00
[ 3099.767394][T23948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3100.051716][T26951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4880'.
[ 3100.086658][T26951] sctp: [Deprecated]: syz.1.4880 (pid 26951) Use of int in max_burst socket option.
[ 3100.086658][T26951] Use struct sctp_assoc_value instead
[ 3100.095768][T26951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3100.101644][T26951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3100.662874][T23948] usb 2-1: Firmware version (0.0) predates our first public release.
[ 3100.671803][T23948] usb 2-1: Please update to version 0.2 or newer
[ 3102.125544][T23948] usb 2-1: USB disconnect, device number 31
[ 3108.638216][T26982] syz.1.4886: attempt to access beyond end of device
[ 3108.638216][T26982] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 3108.651433][T26982] gfs2: error 10 reading superblock
[ 3122.294801][T27027] syz.1.4898: attempt to access beyond end of device
[ 3122.294801][T27027] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 3122.308295][T27027] gfs2: error 10 reading superblock
[ 3123.263156][T27036] netlink: 'syz.0.4904': attribute type 10 has an invalid length.
[ 3123.287311][T27036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4904'.
[ 3123.304848][T27036] caif0: entered promiscuous mode
[ 3123.314861][T27036] caif0: entered allmulticast mode
[ 3123.331327][T27036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 3123.402827][T26544] 
[ 3123.405202][T26544] ======================================================
[ 3123.412212][T26544] WARNING: possible circular locking dependency detected
[ 3123.419225][T26544] syzkaller #0 Not tainted
[ 3123.423643][T26544] ------------------------------------------------------
[ 3123.430681][T26544] kworker/u5:1/26544 is trying to acquire lock:
[ 3123.436918][T26544] ffffffff8f364ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550
[ 3123.446232][T26544] 
[ 3123.446232][T26544] but task is already holding lock:
[ 3123.453691][T26544] ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0
[ 3123.463139][T26544] 
[ 3123.463139][T26544] which lock already depends on the new lock.
[ 3123.463139][T26544] 
[ 3123.473662][T26544] 
[ 3123.473662][T26544] the existing dependency chain (in reverse order) is:
[ 3123.482695][T26544] 
[ 3123.482695][T26544] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[ 3123.490457][T26544]        __mutex_lock+0x135/0xc80
[ 3123.495508][T26544]        hci_remote_features_evt+0x535/0x900
[ 3123.501498][T26544]        hci_event_packet+0x807/0x1280
[ 3123.506974][T26544]        hci_rx_work+0x43a/0xd60
[ 3123.512080][T26544]        process_scheduled_works+0xa60/0x1600
[ 3123.518162][T26544]        worker_thread+0xa5e/0xfe0
[ 3123.523282][T26544]        kthread+0x2fa/0x390
[ 3123.527880][T26544]        ret_from_fork+0x48/0x80
[ 3123.532845][T26544]        ret_from_fork_asm+0x11/0x20
[ 3123.538147][T26544] 
[ 3123.538147][T26544] -> #1 (&hdev->lock){+.+.}-{3:3}:
[ 3123.545462][T26544]        __mutex_lock+0x135/0xc80
[ 3123.550501][T26544]        l2cap_chan_connect+0xfc/0xe30
[ 3123.556007][T26544]        l2cap_sock_connect+0x586/0x760
[ 3123.561676][T26544]        kernel_connect+0x142/0x1c0
[ 3123.566899][T26544]        rfcomm_dlc_open+0xa1f/0xec0
[ 3123.572375][T26544]        rfcomm_sock_connect+0x2ed/0x600
[ 3123.578111][T26544]        __sys_connect+0x3da/0x470
[ 3123.583416][T26544]        __x64_sys_connect+0x7a/0x90
[ 3123.588735][T26544]        do_syscall_64+0x55/0xb0
[ 3123.593683][T26544]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 3123.600125][T26544] 
[ 3123.600125][T26544] -> #0 (rfcomm_mutex){+.+.}-{3:3}:
[ 3123.607784][T26544]        __lock_acquire+0x3a07/0x7eb0
[ 3123.613166][T26544]        lock_acquire+0x19e/0x420
[ 3123.618305][T26544]        __mutex_lock+0x135/0xc80
[ 3123.623336][T26544]        rfcomm_security_cfm+0x41/0x550
[ 3123.628988][T26544]        hci_encrypt_cfm+0x363/0x4d0
[ 3123.634283][T26544]        hci_encrypt_change_evt+0x5c3/0xe30
[ 3123.640184][T26544]        hci_event_packet+0x807/0x1280
[ 3123.645659][T26544]        hci_rx_work+0x43a/0xd60
[ 3123.650609][T26544]        process_scheduled_works+0xa60/0x1600
[ 3123.656687][T26544]        worker_thread+0xa5e/0xfe0
[ 3123.661808][T26544]        kthread+0x2fa/0x390
[ 3123.666403][T26544]        ret_from_fork+0x48/0x80
[ 3123.671422][T26544]        ret_from_fork_asm+0x11/0x20
[ 3123.676726][T26544] 
[ 3123.676726][T26544] other info that might help us debug this:
[ 3123.676726][T26544] 
[ 3123.686961][T26544] Chain exists of:
[ 3123.686961][T26544]   rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock
[ 3123.686961][T26544] 
[ 3123.699490][T26544]  Possible unsafe locking scenario:
[ 3123.699490][T26544] 
[ 3123.706949][T26544]        CPU0                    CPU1
[ 3123.712317][T26544]        ----                    ----
[ 3123.717723][T26544]   lock(hci_cb_list_lock);
[ 3123.722235][T26544]                                lock(&hdev->lock);
[ 3123.728829][T26544]                                lock(hci_cb_list_lock);
[ 3123.735855][T26544]   lock(rfcomm_mutex);
[ 3123.740037][T26544] 
[ 3123.740037][T26544]  *** DEADLOCK ***
[ 3123.740037][T26544] 
[ 3123.748184][T26544] 4 locks held by kworker/u5:1/26544:
[ 3123.753561][T26544]  #0: ffff88801f2f9138 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 3123.764818][T26544]  #1: ffffc9000bfefd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 3123.776840][T26544]  #2: ffff88805f7a40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_encrypt_change_evt+0x93/0xe30
[ 3123.786689][T26544]  #3: ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0
[ 3123.796454][T26544] 
[ 3123.796454][T26544] stack backtrace:
[ 3123.802349][T26544] CPU: 0 PID: 26544 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 3123.809991][T26544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 3123.820145][T26544] Workqueue: hci2 hci_rx_work
[ 3123.824846][T26544] Call Trace:
[ 3123.828132][T26544]  <TASK>
[ 3123.831071][T26544]  dump_stack_lvl+0x18c/0x250
[ 3123.835760][T26544]  ? load_image+0x420/0x420
[ 3123.840280][T26544]  ? show_regs_print_info+0x20/0x20
[ 3123.845612][T26544]  ? print_circular_bug+0x12b/0x1a0
[ 3123.850912][T26544]  check_noncircular+0x2fc/0x400
[ 3123.855865][T26544]  ? print_deadlock_bug+0x5d0/0x5d0
[ 3123.861093][T26544]  ? lockdep_lock+0xf5/0x230
[ 3123.865695][T26544]  ? _find_first_zero_bit+0xd6/0x100
[ 3123.870996][T26544]  __lock_acquire+0x3a07/0x7eb0
[ 3123.875868][T26544]  ? verify_lock_unused+0x140/0x140
[ 3123.881101][T26544]  ? l2cap_security_cfm+0x1277/0x1300
[ 3123.886493][T26544]  ? __lock_acquire+0x7eb0/0x7eb0
[ 3123.891537][T26544]  lock_acquire+0x19e/0x420
[ 3123.896050][T26544]  ? rfcomm_security_cfm+0x41/0x550
[ 3123.901265][T26544]  ? __might_sleep+0xe0/0xe0
[ 3123.905876][T26544]  ? read_lock_is_recursive+0x20/0x20
[ 3123.911349][T26544]  ? __mutex_trylock_common+0x160/0x270
[ 3123.916901][T26544]  __mutex_lock+0x135/0xc80
[ 3123.921422][T26544]  ? rfcomm_security_cfm+0x41/0x550
[ 3123.926638][T26544]  ? trace_contention_end+0x39/0xe0
[ 3123.931846][T26544]  ? __mutex_lock+0x30d/0xc80
[ 3123.936531][T26544]  ? rfcomm_security_cfm+0x41/0x550
[ 3123.941741][T26544]  ? mutex_lock_nested+0x20/0x20
[ 3123.946689][T26544]  ? hci_encrypt_cfm+0x2fe/0x4d0
[ 3123.951652][T26544]  ? mutex_lock_nested+0x20/0x20
[ 3123.956621][T26544]  ? __lock_acquire+0x7eb0/0x7eb0
[ 3123.961744][T26544]  rfcomm_security_cfm+0x41/0x550
[ 3123.966785][T26544]  ? hci_conn_hash_lookup_handle+0x20/0x240
[ 3123.972689][T26544]  ? rfcomm_send_msc+0x360/0x360
[ 3123.977638][T26544]  hci_encrypt_cfm+0x363/0x4d0
[ 3123.982505][T26544]  hci_encrypt_change_evt+0x5c3/0xe30
[ 3123.987890][T26544]  ? __skb_clone+0x446/0x6c0
[ 3123.992523][T26544]  ? hci_remote_name_evt+0x610/0x610
[ 3123.997829][T26544]  ? skb_pull_data+0xf0/0x1f0
[ 3124.002520][T26544]  ? hci_remote_name_evt+0x610/0x610
[ 3124.007815][T26544]  hci_event_packet+0x807/0x1280
[ 3124.012854][T26544]  ? __lock_acquire+0x7eb0/0x7eb0
[ 3124.017891][T26544]  ? lock_chain_count+0x20/0x20
[ 3124.022774][T26544]  ? bis_list+0x290/0x290
[ 3124.027116][T26544]  ? kcov_remote_start+0x513/0x810
[ 3124.032286][T26544]  ? lockdep_hardirqs_on+0x98/0x150
[ 3124.037518][T26544]  ? hci_send_to_monitor+0xd7/0x4f0
[ 3124.042734][T26544]  hci_rx_work+0x43a/0xd60
[ 3124.047194][T26544]  ? process_scheduled_works+0x975/0x1600
[ 3124.052928][T26544]  process_scheduled_works+0xa60/0x1600
[ 3124.058511][T26544]  ? worker_attach_to_pool+0x370/0x370
[ 3124.063987][T26544]  ? assign_work+0x3cc/0x5d0
[ 3124.068593][T26544]  worker_thread+0xa5e/0xfe0
[ 3124.073199][T26544]  ? _raw_spin_unlock+0x40/0x40
[ 3124.078243][T26544]  ? __kthread_parkme+0x71/0x1c0
[ 3124.083200][T26544]  kthread+0x2fa/0x390
[ 3124.087294][T26544]  ? pr_cont_work+0x550/0x550
[ 3124.091984][T26544]  ? kthread_blkcg+0xd0/0xd0
[ 3124.096587][T26544]  ret_from_fork+0x48/0x80
[ 3124.101016][T26544]  ? kthread_blkcg+0xd0/0xd0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 3124.105615][T26544]  ret_from_fork_asm+0x11/0x20
[ 3124.110409][T26544]  </TASK>
[ 3125.029674][T22360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3125.131147][T22360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3125.233851][T22360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3125.292861][T22360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3126.250614][T22360] hsr_slave_0: left promiscuous mode
[ 3126.257714][T22360] hsr_slave_1: left promiscuous mode
[ 3126.278241][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3126.285931][T22360] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3126.299049][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3126.306508][T22360] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3126.314692][T22360] bridge_slave_1: left allmulticast mode
[ 3126.320805][T22360] bridge_slave_1: left promiscuous mode
[ 3126.326583][T22360] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3126.344149][T22360] bridge_slave_0: left allmulticast mode
[ 3126.353611][T22360] bridge_slave_0: left promiscuous mode
[ 3126.360706][T22360] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3126.375209][T22360] veth1_macvtap: left promiscuous mode
[ 3126.381153][T22360] veth0_macvtap: left promiscuous mode
[ 3126.386797][T22360] veth1_vlan: left promiscuous mode
[ 3126.396244][T22360] veth0_vlan: left promiscuous mode
[ 3126.719175][T22360] team0 (unregistering): Port device team_slave_1 removed
[ 3126.770981][T22360] team0 (unregistering): Port device team_slave_0 removed
[ 3126.785976][T22360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3126.802470][T22360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3126.879191][T22360] bond0 (unregistering): Released all slaves
[ 3127.340625][T22360] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3127.426952][T22360] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3127.485793][T22360] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3127.543841][T22360] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3127.666400][T22360] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3127.748357][T22360] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3127.810781][T22360] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3127.880709][T22360] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3128.031434][T22360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3128.104272][T22360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3128.163421][T22360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3128.225913][T22360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3129.912574][T22360] hsr_slave_0: left promiscuous mode
[ 3129.919223][T22360] hsr_slave_1: left promiscuous mode
[ 3129.925163][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3129.934181][T22360] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3129.943591][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3129.951161][T22360] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3129.959088][T22360] bridge_slave_1: left allmulticast mode
[ 3129.964752][T22360] bridge_slave_1: left promiscuous mode
[ 3129.970532][T22360] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3129.979362][T22360] bridge_slave_0: left allmulticast mode
[ 3129.985010][T22360] bridge_slave_0: left promiscuous mode
[ 3129.990720][T22360] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3130.006008][T22360] hsr_slave_0: left promiscuous mode
[ 3130.011973][T22360] hsr_slave_1: left promiscuous mode
[ 3130.019198][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3130.026748][T22360] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3130.035376][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3130.042849][T22360] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3130.051760][T22360] bridge_slave_1: left allmulticast mode
[ 3130.057549][T22360] bridge_slave_1: left promiscuous mode
[ 3130.063201][T22360] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3130.071374][T22360] bridge_slave_0: left allmulticast mode
[ 3130.077031][T22360] bridge_slave_0: left promiscuous mode
[ 3130.082809][T22360] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3130.093642][T22360] hsr_slave_0: left promiscuous mode
[ 3130.099795][T22360] hsr_slave_1: left promiscuous mode
[ 3130.105546][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3130.112983][T22360] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3130.121662][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3130.132433][T22360] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3130.140611][T22360] bridge_slave_1: left allmulticast mode
[ 3130.146285][T22360] bridge_slave_1: left promiscuous mode
[ 3130.152162][T22360] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3130.160252][T22360] bridge_slave_0: left allmulticast mode
[ 3130.165897][T22360] bridge_slave_0: left promiscuous mode
[ 3130.171685][T22360] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3130.183945][T22360] veth1_macvtap: left promiscuous mode
[ 3130.189790][T22360] veth0_macvtap: left promiscuous mode
[ 3130.195454][T22360] veth1_vlan: left promiscuous mode
[ 3130.200891][T22360] veth0_vlan: left promiscuous mode
[ 3130.207289][T22360] veth1_macvtap: left promiscuous mode
[ 3130.212829][T22360] veth0_macvtap: left promiscuous mode
[ 3130.219315][T22360] veth1_vlan: left promiscuous mode
[ 3130.224658][T22360] veth0_vlan: left promiscuous mode
[ 3130.231685][T22360] veth1_macvtap: left promiscuous mode
[ 3130.237365][T22360] veth0_macvtap: left promiscuous mode
[ 3130.242930][T22360] veth1_vlan: left promiscuous mode
[ 3130.248527][T22360] veth0_vlan: left promiscuous mode
[ 3130.572526][T22360] team0 (unregistering): Port device team_slave_1 removed
[ 3130.611735][T22360] team0 (unregistering): Port device team_slave_0 removed
[ 3130.646616][T22360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3130.684565][T22360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3130.763673][T22360] bond0 (unregistering): Released all slaves
[ 3130.923373][T22360] team0 (unregistering): Port device team_slave_1 removed
[ 3130.963245][T22360] team0 (unregistering): Port device team_slave_0 removed
[ 3130.976525][T22360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3130.991061][T22360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3131.072134][T22360] bond0 (unregistering): Released all slaves
[ 3131.242176][T22360] team0 (unregistering): Port device team_slave_1 removed
[ 3131.265315][T22360] team0 (unregistering): Port device team_slave_0 removed
[ 3131.303236][T22360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3131.339241][T22360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3131.414376][T22360] bond0 (unregistering): Released all slaves