last executing test programs:

4m4.653057818s ago: executing program 1 (id=1022):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x80010, 0xffffffffffffffff, 0x6feb2000)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
sendto$inet(r3, &(0x7f0000000340)='2', 0x1, 0x4008040, 0x0, 0x0)
close(r3)

3m53.175382778s ago: executing program 1 (id=1044):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x25, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000040))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r4, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff})
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
connect$ax25(r5, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
add_key$keyring(&(0x7f0000009080), 0x0, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)

3m52.073147999s ago: executing program 1 (id=1047):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x80010, 0xffffffffffffffff, 0x6feb2000)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
sendto$inet(r3, &(0x7f0000000340)='2', 0x1, 0x4008040, 0x0, 0x0)
close(r3)

3m51.129164133s ago: executing program 1 (id=1049):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create(0x9)
sendmmsg$unix(r1, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18, 0x4000010}}], 0x1, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
accept4$tipc(r3, &(0x7f0000000280)=@name, &(0x7f0000000340)=0x10, 0x400)
pread64(r5, 0x0, 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0xf, 0x0, 0x2, 0x80})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00'})
setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0)
read$fb(r3, &(0x7f00000003c0)=""/181, 0xb5)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$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")
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3})
keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x0, @desc1})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f0000000200)={{}, 0x0, 0x8000000, 0x401, {0x0, 0x3}, 0x1, 0x800})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048c1}, 0x4054)

3m47.342689649s ago: executing program 1 (id=1057):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create(0x9)
sendmmsg$unix(r1, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18, 0x4000010}}], 0x1, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
accept4$tipc(r3, &(0x7f0000000280)=@name, &(0x7f0000000340)=0x10, 0x400)
pread64(r5, 0x0, 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0xf, 0x0, 0x2, 0x80})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00'})
setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$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")
keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r7 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x0, @desc1})
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000200)={{}, 0x0, 0x8000000, 0x401, {0x0, 0x3}, 0x1, 0x800})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048c1}, 0x4054)

3m40.78797941s ago: executing program 1 (id=1069):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x70)

3m25.469327763s ago: executing program 32 (id=1069):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x70)

32.928282807s ago: executing program 3 (id=1407):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x25, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}]}}]}, 0x45c}}, 0x0)

23.658072255s ago: executing program 5 (id=1424):
r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x8, 0x367}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000400))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x30, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0)
io_uring_enter(r0, 0x2b82, 0x4000, 0xf, 0x0, 0x0)

22.422683719s ago: executing program 3 (id=1427):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x14, 0x5, "35abdaa7ee"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19.052539031s ago: executing program 5 (id=1438):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r5=>0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0xfff}, 0x8)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

17.244275515s ago: executing program 3 (id=1439):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000a00)='\x00', 0xa89a5489e6a765d0)
mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x21820, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES8=r1])
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r4, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000980)={{}, {0x7}, 0x8, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000800)="4f525f1af43876e17212c725d35923e788274abfbc3207d86fc5f94a179acc7f5d19ba6274b3004b349db4b321e337448f320d8dd862f034108f6d6f518fe12880fb9f13cd631b58dff6e20a203fab759c7557a6d27bea867452", 0x5a, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000049000000000000000c3c0000ea9102d9a7b26f04e28590070986c27d5d0a0300a97687671e8f60c60172f2609e9a69dca2e79572bedecd32a06b20bd0c41401fe82c86db887f679f8c000000"], 0xaa})
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendto(r1, &(0x7f0000000ac0)="d551856fbc3cc2d57c01a3496f3aa4a26170f812315b6dde0914f8624c59a3bc854d629a931039ea1d0f9d4d04815ecf9ff4a58cf726c9e765ad12b771ac68a0", 0x40, 0x80, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xd6_\xa0\xf6\xdf\xdf\xfd\xcb;\xa5\xe7:L\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\x03\xff\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\x9f~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xc9\xe1\x9a#+\xcf7\x98\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1aD\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W`D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\\\x03\xb3a%\xb9\xe9\x9ag+\xb3&\x19\xd20\r\xcd>\x1d\x1ac\xa4\xc1\x18\xd8\xbf=~\xcd\x0em\xd5;\xf6|\xca6\xde@e\x96ru\x87|s\xe3\xee\x1d\x83\x91&}\xa9\xa3\xb7\xba\'y/\xf6\a\x92\v\xb9\\0[\xc3(\xa4UH\xc9<\xa7:\x9f1\xa3\xd7\xb4&\xd2(\xa1\x1b|\x81\x8c\x86]\x1e\xb4\x84\xcc6U\x06\xcb\xbd\\R\nh\xc9\xa9F\x83|{\xc8ukgf!\x91\xfb\xf2\x1f\xffMpgB\xbc\xabPN\x9e\xd9\x9fc\xfd\x19X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x88a[\xa2QO\xd7\x10\xdb\x8d\x03\xee\x7fj\xf6b7\xb3\x05\x96\x8d\"r\xe0\x18723\xf2F\x026\xe3\x95Y9\xe4\xff\x0e\xf7\xcd\x9d\x9e\xc0\xfe\x17m\x12\xb3\xdc\x1b.\xf3\xd6\xec\x93\xecP\xef#\x9e>\x84\x15DF\xdd\xf5z\xca\xd2\x8d\x9e\xbeD\xb7\x94[\v\xee\x8b\x15N\xae\x1e', 0x40, 0xa8, 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c05)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000001200)={0x1, 0x1, 0x0, 0x1, 0x4})

17.153947856s ago: executing program 5 (id=1441):
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
creat(&(0x7f0000000440)='./file0\x00', 0x0)
syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendfile(r3, r3, 0x0, 0x40008)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

16.756229534s ago: executing program 4 (id=1443):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r5=>0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0xfff}, 0x8)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

13.902639163s ago: executing program 4 (id=1445):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x9e, &(0x7f0000000080)={&(0x7f00000007c0)={0x3f0, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3a4, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2e8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2a0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

13.011298528s ago: executing program 2 (id=1447):
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x5e4b, &(0x7f0000000040)={0x0, 0x4b70, 0x20, 0x0, 0x1c4})
mmap(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"84ca18eaa852b1a3bb3e80fe4eee1e4efbe55b52637d7e57c6f18b1d38286e1e4f37d997fe32fe60b40690718c3efe462c935f0d40f1aeeffa2cf8101f28571b6dfc5560095636dd10ace18ee9c6b5b854d8d974d1c26b1a3b9900a365d717934bb0a489f0cebb1597f4e2bb5cfd0c5629f0a6a86e104c0b6c74dd41f07312910c778d23ee7e0c3a8c94ed8226925f0f05f288604684d76c58a0c09601ce1f11a06333743f6997026ef3edbcb9f3adc11f921bc91f7f9e8715fb886e1ff8544885de0da0b5fcd763e5539dd92ae1a27b5cda25329f8577cec548db45330209382208cd9e77998ccd3eb075cdf236c2166b13b7caf92272da52deb450f8544e3a4b95f3dead6c76ccd8943dff073a601d53b43d9394a9552ab9f78023b2b6b3db61d3d8ed662359066df8f0d398307ba15450c47bb2b97fd48f8e4a59c997b7d15d790978d3352ec552310bd219e72f997b04cc0d8c7afb392a36cc9b17fb5ab09647fc59984c2ee3a882d102cfe3bf29aeab03813d822cb9b1997876e0e603a099aed4dad75b83669b90dd808302b7c0bf5f88d020aa3d9beba2374670572ad0de5e4c78067e74f96a2baa3ec401520e7e4c2ff4cdb809b16d376fa622ebee5db6b8670ed68706e179b58de0aaaa3e43fb5d2a45582196aaf3aa232151aafbf7265d7c339a4f3b9d3f942aae8a4397db047abad9dfa7cd220a105e6d8faf25ff9312228b287db69b0f4f50b092f80e4336a2e327ba613f221e1fc859305b1b0b04c450952852653e200e6bd0293a1e1921b1292fa09dfba00cae70a01b590189f6a391fd4445abeea55e9c54d9f975227021d08b1861b8279edf51612e238cb36494ef745f3e1eb778ab341a8a36495695f29a60d717a4f5d534a00a2a3d020e61884201b33ce2e1c0420a05b5de2d3034f8bc14cc864b7d9394a1fda8db1e24bd14bf912656874e47cd30210c25107ea9b8d21d3b7198b0936acf0f15db949dbf22d51fc289cda1a550f3cba42e42184e5d61d61f2293735557f67d54bc3b4aba898119c3645c233ee02c4ab4b1b900e9aebdc2b772bb933d002a2b7ca954373e37eefa4377a93b16f8cd17613d714592afdc410ac705cb9798be70a8e64193214342992392c42475bbf9f33ad2d678e62af6f01b9f202a86fc549ed233724021ef50a0c82c6b3a51817c63d6dd706d9dae6e8b1fb61ffdcd59af94a92733c1b763007ef78e2d90bbdcde589b8f40e067a127841eb469d8aff8cee7d03d11ab2a6ddf0184301e11eec507393aa6df565e2503f5bb3210726f0b9bd49c6caf8ba93e709049fb4c9eaf9f66bae4d8749a2989214c0c2290b2841368481d67d5a6c6a6126b696a554132656c9ef3d4054349c2a312a1ef427f3b1ec6d3b2a8cfdbc722373932a2892f0333d879800b7cfaa94259a2c301ff48c575279da1de8198"})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000033c0), 0x0, 0x2, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4)
syz_emit_ethernet(0x7e, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x141802, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r1, &(0x7f0000000200), 0x12)

10.154418245s ago: executing program 2 (id=1451):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r5=>0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0xfff}, 0x8)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

9.238154135s ago: executing program 3 (id=1452):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8.992867715s ago: executing program 4 (id=1454):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x8)
write(r0, &(0x7f0000000240)="92", 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setgroups(0x0, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)

8.964685479s ago: executing program 5 (id=1455):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r5=>0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0xfff}, 0x8)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

8.716881757s ago: executing program 3 (id=1456):
syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x2801cb0, 0x0, 0x0, 0x0, &(0x7f0000002980))
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
creat(0x0, 0x1af)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0)

7.941323037s ago: executing program 4 (id=1458):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r5=>0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0xfff}, 0x8)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

7.86249219s ago: executing program 0 (id=1459):
syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x2801cb0, 0x0, 0x0, 0x0, &(0x7f0000002980))
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0)
creat(0x0, 0x1af)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0)

3.698576007s ago: executing program 3 (id=1460):
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
creat(&(0x7f0000000440)='./file0\x00', 0x0)
syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendfile(r3, r3, 0x0, 0x40008)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

3.242187672s ago: executing program 4 (id=1461):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x210000)
r1 = syz_usb_connect(0x5, 0x46, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xa, 0xa2, 0x1, 0x20, 0x257a, 0x1604, 0x85c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x6d, 0xf9, 0xc0, 0x2, "", [{{0x9, 0x4, 0x7b, 0x8, 0x3, 0x79, 0x66, 0xa8, 0x5, [], [{{0x9, 0x5, 0xc, 0x18, 0x400, 0x9, 0x3, 0x6}}, {{0x9, 0x5, 0x88, 0x2, 0x400, 0xb, 0x2, 0x4}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x1, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x1}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001440)={0x14, 0x0, 0x0}, &(0x7f0000001740)={0x44, &(0x7f0000001480)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGID(r0, 0x80084502, 0x0)

3.241057682s ago: executing program 0 (id=1462):
io_uring_setup(0x5e4b, &(0x7f0000000040)={0x0, 0x4b70, 0x20, 0x0, 0x1c4})
mmap(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000033c0), 0x0, 0x2, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x19, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x6}})
syz_emit_ethernet(0x7e, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x141802, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r1, &(0x7f0000000200), 0x12)

3.191431291s ago: executing program 2 (id=1463):
syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x2801cb0, 0x0, 0x0, 0x0, &(0x7f0000002980))
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0)
creat(0x0, 0x1af)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0)

3.130363749s ago: executing program 0 (id=1464):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x8)
write(r1, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
socket$igmp(0x2, 0x3, 0x2)
tee(r0, r3, 0x8f5, 0x0)

3.093240421s ago: executing program 5 (id=1465):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r5=>0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0xfff}, 0x8)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

1.694804072s ago: executing program 0 (id=1466):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.567468225s ago: executing program 2 (id=1467):
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x5e4b, &(0x7f0000000040)={0x0, 0x4b70, 0x20, 0x0, 0x1c4})
mmap(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000033c0), 0x0, 0x2, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x19, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x6}})
syz_emit_ethernet(0x7e, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x141802, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r1, &(0x7f0000000200), 0x12)

1.270185763s ago: executing program 2 (id=1468):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100))
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r5=>0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0xfff}, 0x8)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

1.235872496s ago: executing program 0 (id=1469):
syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x8, 0x367}, &(0x7f0000000140)=<r0=>0x0, &(0x7f0000000400))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0)

231.716978ms ago: executing program 2 (id=1470):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c", 0x16}, {&(0x7f0000000500)}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b1", 0x1e}, {0x0}, {&(0x7f0000000880)="e3d83bc2e8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a77236f7505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9ca106b78fe38a06f7de1ef35b4bd939065bf85002f0a4791b82fcc99e223417515bfde1bcae74cbf1338437ce59d009b5d9862a685186e47c6670b327ae679f99eac336919a4e0c736a264324a93f885b14a6be53d89866", 0xaf}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa5517808ef38b13d6189f619adbf33ba19eb2180096e9fb245e9d154ff05cb5e3eb3a2ba2653aa8c75de5988bc816fe3f97e3ac9", 0x60}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3"], 0x188}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1})
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00')
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda2681", 0x28}, {&(0x7f0000000ac0)}], 0x5, 0x4d9e, 0x8)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

119.025255ms ago: executing program 4 (id=1471):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r6=>0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000200)={r6, 0xfff}, 0x8)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

27.344656ms ago: executing program 5 (id=1472):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020}, 0x2020)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = userfaultfd(0x801)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100))
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r4=>0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)={r4, 0xfff}, 0x8)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

0s ago: executing program 0 (id=1473):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a08018, &(0x7f0000000000)={[{@noblock_validity}, {@delalloc}]}, 0x3, 0x49e, &(0x7f0000002140)="$eJzs3E1sFFUcAPD/breFQoGKIvKh1q9I/KC0fMjBi0YTD5qY6AG91VIIUsTQmghpbDUGj4bEOzGeTLx546QXo55MvOrdkBDTC/iRuGZm35R+d9vudpX9/ZKF9+a9mXkf87pv3rQTQNvqy/4pRfRExC9ZuJxHZ1RTpizfremJ4T+mJ4ZLUa2+9nspT7s5PTFc5C3260mRA+WI8sel2LfIeccuXjo7NDo6ciHF+8fPvds/dvHS02fODZ0eOT3yzuDx40cODzxzbPBoQ+q5LSvr3g/O79/z0htXXhk+ceWtH76qFGWdV49G6Yu+OW0522ONPlmLbZsVLlVaWBBWpSMisu7qzMf/juiI2523I178qKWFA5qqWq1Wt6fw5MLkqSpwBytF3VkrTS0IsMGKL/qb090RMTHcjPvg/7Ibz9VugLJ630qfWkolyilP57z720banNZNTkz9eTXyftjUVu0PAGy8b7L5z1O1+U/xqaX0xr2z8m3P14OzrRF3RcTOiLg7Iu6JiF0Red7dEXHfKs/fNy++cP5Zvr6mitUpm/89m55tzZ3/pdnfP9XejhTbFt3RG52lU2dGRw6lNjkQnZuy+MAy5/j2hZ8/XSqtL2L3tdpU/Go2B8zOX8wFUzmuVzbN3efk0PjQ+mp9240P8zXAyYX1v/3kKgvtiYi9azh+Nm8+88SX+5dK70tz3+KzsP7LaMBzpurnEY/X+n8qlqn//OeT3Snt2ODR/s0xOnKov7gqFvrxp8uvLnX+ddW/AbL+37Lo9T9T/97S7Oe1Y6s/x+VfP1nynmbl+s9c/28WW7Lrv6v0eh7uqm36ujOldZVenr093h8aH78wWOxZmYnn/w9E3OjZFfHI4uN/Z22XvCX2RUR2Ed8fEQ9ExIOp7A9FxMORH2Ixk7ci4vvnH317LfUvr9CujZD1/8k5/R9pWWCp/l99oOPsd9fWUv+arP+P5KEDaUs9P//qLeA6mw8AAAD+N3qiVD6Y1ht6olw+eDBia762u6U8en5s/MlT59/762Ttd+V7o7NcrHTV1oNr66EDaW24iA/Oix9O68afdXTn8S3p2TfQOlvT+O+aN/4zv3W0unRA01V8GUPb8vea0L6Mf2hfxj+0r3rHf7XJ5QA23mLjf5GXgQB3IPN/aF91j/8vTjW3IMCG8/0P7cv4h7a0nr/rv3MDvdGQ40w2uHm7GnCc0lT9L0dYNhDlPFCdbGF//Z1ew1Jf5uaVp3hbxsqZi/eUtPoKXznQup9JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjfRvAAAA//+yWeDS")

kernel console output (not intermixed with test programs):

[ T7026] FAT-fs (loop3): Directory bread(block 73) failed
[  308.004355][ T7020] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  308.042630][ T6972] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  308.380311][ T7018] REISERFS (device loop1): using ordered data mode
[  308.470416][ T7020] REISERFS (device loop2): using ordered data mode
[  308.477054][ T7020] reiserfs: using flush barriers
[  308.499935][ T7018] reiserfs: using flush barriers
[  308.569633][ T7018] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  308.641260][ T4911] option 5-1:109.4: GSM modem (1-port) converter detected
[  308.658957][ T7020] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  308.742793][ T4911] option 5-1:109.205: GSM modem (1-port) converter detected
[  308.770371][ T7018] REISERFS (device loop1): checking transaction log (loop1)
[  309.073582][ T7020] REISERFS (device loop2): checking transaction log (loop2)
[  309.353682][ T4911] option 5-1:109.27: GSM modem (1-port) converter detected
[  309.373582][ T7020] REISERFS (device loop2): Using r5 hash to sort names
[  309.402672][ T7018] REISERFS (device loop1): Using r5 hash to sort names
[  309.403377][ T7020] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  309.422960][ T7018] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  309.428161][ T7020] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  309.470770][ T7018] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  309.527334][ T4911] usb 5-1: USB disconnect, device number 11
[  309.913661][ T4911] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  309.931118][ T4911] option 5-1:109.123: device disconnected
[  309.938076][ T4911] option 5-1:109.251: device disconnected
[  310.017927][ T4911] option 5-1:109.4: device disconnected
[  310.065226][ T4911] option 5-1:109.205: device disconnected
[  310.124778][ T4911] option 5-1:109.27: device disconnected
[  310.590448][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'.
[  312.809772][ T4231] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  313.073025][ T4231] usb 4-1: Using ep0 maxpacket: 32
[  313.110893][ T7066] loop2: detected capacity change from 0 to 8192
[  313.189983][ T7066] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  313.199992][ T4231] usb 4-1: config 109 has an invalid interface number: 123 but max is 3
[  313.208355][ T4231] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  313.238759][ T7061] loop1: detected capacity change from 0 to 32768
[  313.253100][ T7069] loop4: detected capacity change from 0 to 8192
[  313.254777][ T7066] REISERFS (device loop2): using ordered data mode
[  313.292031][ T7069] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  313.296882][ T4231] usb 4-1: config 109 has an invalid interface number: 251 but max is 3
[  313.310429][ T7069] REISERFS (device loop4): using ordered data mode
[  313.328539][ T7069] reiserfs: using flush barriers
[  313.336440][ T7066] reiserfs: using flush barriers
[  313.348120][ T7069] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  313.364986][ T4231] usb 4-1: config 109 has an invalid interface number: 4 but max is 3
[  313.373669][ T4231] usb 4-1: config 109 has an invalid interface number: 205 but max is 3
[  313.382462][ T4231] usb 4-1: config 109 has an invalid interface number: 27 but max is 3
[  313.391307][ T4231] usb 4-1: config 109 has 5 interfaces, different from the descriptor's value: 4
[  313.395080][ T7066] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  313.400970][ T4231] usb 4-1: config 109 has no interface number 0
[  313.400996][ T4231] usb 4-1: config 109 has no interface number 1
[  313.401013][ T4231] usb 4-1: config 109 has no interface number 2
[  313.401030][ T4231] usb 4-1: config 109 has no interface number 3
[  313.443443][ T7061] XFS (loop1): Mounting V5 Filesystem
[  313.443481][ T4231] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  313.470102][ T7066] REISERFS (device loop2): checking transaction log (loop2)
[  313.478214][ T7069] REISERFS (device loop4): checking transaction log (loop4)
[  313.506463][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  313.518638][ T7066] REISERFS (device loop2): Using r5 hash to sort names
[  313.526765][ T7066] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  313.541544][ T7069] REISERFS (device loop4): Using r5 hash to sort names
[  313.548937][ T7069] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  313.550982][ T7066] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  313.563173][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  313.572403][ T7069] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  313.582769][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  313.603860][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  313.615088][ T4231] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024
[  313.625619][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  313.637292][ T4231] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8
[  313.639993][ T7061] XFS (loop1): Ending clean mount
[  313.658176][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping
[  313.676852][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  313.834733][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  313.846308][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping
[  314.024256][ T4231] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024
[  314.035333][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping
[  314.126130][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[  314.140397][ T4231] usb 4-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  314.154730][ T4231] usb 4-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30
[  314.186562][ T4231] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64
[  314.244594][ T4231] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping
[  314.261376][ T7084] No such timeout policy "syz1"
[  314.266422][ T4231] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  314.293830][ T4231] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping
[  314.344689][ T4231] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  314.386293][ T4231] usb 4-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67
[  314.431405][ T4231] usb 4-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  314.459727][ T4231] usb 4-1: config 109 interface 123 has no altsetting 0
[  314.466738][ T4231] usb 4-1: config 109 interface 251 has no altsetting 0
[  314.491456][ T4231] usb 4-1: config 109 interface 4 has no altsetting 0
[  314.663652][ T4231] usb 4-1: config 109 interface 205 has no altsetting 0
[  314.671214][ T4231] usb 4-1: config 109 interface 27 has no altsetting 0
[  314.722497][ T4193] XFS (loop1): Unmounting Filesystem
[  314.794539][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'.
[  315.113865][ T7095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  315.397764][ T4231] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7
[  315.471518][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.514517][ T4231] usb 4-1: Product: 絏ଇᗒ
[  315.589909][ T4231] usb 4-1: can't set config #109, error -71
[  315.650120][ T4231] usb 4-1: USB disconnect, device number 10
[  315.778859][ T7103] loop4: detected capacity change from 0 to 256
[  317.157911][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  317.158095][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  317.383027][ T7103] FAT-fs (loop4): Directory bread(block 64) failed
[  317.390147][ T7103] FAT-fs (loop4): Directory bread(block 65) failed
[  317.397148][ T7103] FAT-fs (loop4): Directory bread(block 66) failed
[  317.403984][ T7103] FAT-fs (loop4): Directory bread(block 67) failed
[  317.411036][ T7103] FAT-fs (loop4): Directory bread(block 68) failed
[  317.418380][ T7103] FAT-fs (loop4): Directory bread(block 69) failed
[  317.425534][ T7103] FAT-fs (loop4): Directory bread(block 70) failed
[  317.432316][ T7103] FAT-fs (loop4): Directory bread(block 71) failed
[  317.439221][ T7103] FAT-fs (loop4): Directory bread(block 72) failed
[  317.446017][ T7103] FAT-fs (loop4): Directory bread(block 73) failed
[  319.789791][ T7118] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.682'.
[  320.594371][ T7131] loop0: detected capacity change from 0 to 32768
[  320.677275][ T7131] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.686 (7131)
[  320.695691][ T7131] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  320.704616][ T7131] BTRFS info (device loop0): using free space tree
[  320.711196][ T7131] BTRFS info (device loop0): has skinny extents
[  321.019743][ T1111] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  321.088924][ T7131] BTRFS info (device loop0): enabling ssd optimizations
[  321.413311][ T1111] usb 3-1: Using ep0 maxpacket: 32
[  322.103627][ T1111] usb 3-1: config 109 has an invalid interface number: 123 but max is 3
[  322.144168][ T1111] usb 3-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  322.179837][ T1111] usb 3-1: config 109 has an invalid interface number: 251 but max is 3
[  322.249775][ T1111] usb 3-1: config 109 has an invalid interface number: 4 but max is 3
[  322.284228][ T7160] loop4: detected capacity change from 0 to 8192
[  322.293435][ T1111] usb 3-1: config 109 has an invalid interface number: 205 but max is 3
[  322.329766][ T1111] usb 3-1: config 109 has an invalid interface number: 27 but max is 3
[  322.356241][ T7160] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  322.376412][ T1111] usb 3-1: config 109 has 5 interfaces, different from the descriptor's value: 4
[  322.388650][ T7160] REISERFS (device loop4): using ordered data mode
[  322.399799][ T1111] usb 3-1: config 109 has no interface number 0
[  322.407087][ T1111] usb 3-1: config 109 has no interface number 1
[  322.416873][ T1111] usb 3-1: config 109 has no interface number 2
[  322.426057][ T1111] usb 3-1: config 109 has no interface number 3
[  322.432932][ T1111] usb 3-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  322.449840][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  322.461240][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  322.472728][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  322.481781][ T7160] reiserfs: using flush barriers
[  322.484135][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  322.500363][ T1111] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024
[  322.511659][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  322.523485][ T1111] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8
[  322.534268][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping
[  322.550516][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  322.568169][ T7160] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  322.576367][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  322.636278][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping
[  322.676271][ T1111] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024
[  322.677180][ T7160] REISERFS (device loop4): checking transaction log (loop4)
[  322.702678][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping
[  322.744913][ T7160] REISERFS (device loop4): Using r5 hash to sort names
[  322.750092][ T1111] usb 3-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[  322.784014][ T7160] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  322.788895][ T1111] usb 3-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  322.854764][ T1111] usb 3-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30
[  322.876464][ T7160] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  322.887931][ T1111] usb 3-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64
[  322.929782][ T1111] usb 3-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping
[  323.004294][ T1111] usb 3-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  323.039718][ T1111] usb 3-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping
[  323.075358][ T1111] usb 3-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  323.097432][ T1111] usb 3-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67
[  323.219859][ T1111] usb 3-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  323.232225][ T1111] usb 3-1: config 109 interface 123 has no altsetting 0
[  323.239865][ T1111] usb 3-1: config 109 interface 251 has no altsetting 0
[  323.246837][ T1111] usb 3-1: config 109 interface 4 has no altsetting 0
[  323.254812][ T1111] usb 3-1: config 109 interface 205 has no altsetting 0
[  323.269710][ T1111] usb 3-1: config 109 interface 27 has no altsetting 0
[  323.685860][ T1111] usb 3-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7
[  323.697592][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.710333][ T1111] usb 3-1: Product: 絏ଇᗒ
[  323.715184][ T1111] usb 3-1: SerialNumber: 次낔銗⮬◙ロⳤᖎ쿭礴﨎⫅ѡ쎤똼ᬆ捭婹啘Ꭸቶꭢ飶搢遄禕὿鍢옹칷␰톲쒘쉖눿筶먴䦦쐷ೢᎌ烲᪇閐凎黡돀运⧬ꍼ趎㚳౥鲵핲쐚㝵ỳ튓蚶ꙙ똠稓뜤磈띬蘿耀歸ﯘ傫鉕㳜펶怅ဒ뻍繈眘駱着鲈
[  323.829867][ T1111] usb 3-1: can't set config #109, error -71
[  323.843954][ T1111] usb 3-1: USB disconnect, device number 9
[  324.089867][ T7175] fuse: Unknown parameter 'grou00000000000000000000'
[  324.271373][ T7177] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.696'.
[  325.350480][ T7168] loop1: detected capacity change from 0 to 32768
[  326.559904][ T7168] XFS (loop1): Mounting V5 Filesystem
[  327.130210][ T7168] XFS (loop1): log mount failed
[  327.254352][ T7206] loop4: detected capacity change from 0 to 8192
[  327.262794][ T7211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  327.327900][ T7206] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  327.431835][ T7206] REISERFS (device loop4): using ordered data mode
[  327.438589][ T7206] reiserfs: using flush barriers
[  327.532066][ T7206] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  327.603229][ T7206] REISERFS (device loop4): checking transaction log (loop4)
[  327.627015][ T7206] REISERFS (device loop4): Using r5 hash to sort names
[  327.653787][ T7206] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  327.712718][ T7206] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  328.849894][    T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  329.109916][    T7] usb 2-1: Using ep0 maxpacket: 32
[  329.230329][    T7] usb 2-1: config 109 has an invalid interface number: 123 but max is 3
[  329.575287][    T7] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  329.585414][    T7] usb 2-1: config 109 has an invalid interface number: 251 but max is 3
[  329.595548][    T7] usb 2-1: config 109 has an invalid interface number: 4 but max is 3
[  329.605680][    T7] usb 2-1: config 109 has an invalid interface number: 205 but max is 3
[  329.615820][    T7] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  329.625941][    T7] usb 2-1: config 109 has an invalid interface number: 27 but max is 3
[  329.664281][    T7] usb 2-1: config 109 has 5 interfaces, different from the descriptor's value: 4
[  329.719518][    T7] usb 2-1: config 109 has no interface number 0
[  329.735272][    T7] usb 2-1: config 109 has no interface number 1
[  329.742250][    T7] usb 2-1: config 109 has no interface number 2
[  329.748724][    T7] usb 2-1: config 109 has no interface number 3
[  329.773998][    T7] usb 2-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  329.807683][    T7] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  329.857751][    T7] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  329.886104][    T7] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  330.023394][    T7] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  330.131487][    T7] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024
[  330.157575][ T7236] fuse: Unknown parameter 'grou00000000000000000000'
[  330.232184][ T7234] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.711'.
[  330.247421][    T7] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  330.297725][    T7] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8
[  330.326183][    T7] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping
[  330.344306][    T7] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  330.374813][    T7] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  330.405622][    T7] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping
[  330.428161][    T7] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024
[  330.451715][    T7] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping
[  330.473250][    T7] usb 2-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[  330.503325][    T7] usb 2-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  330.539141][    T7] usb 2-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30
[  330.582125][    T7] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64
[  330.759276][    T7] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping
[  331.199511][    T7] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  331.245227][    T7] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping
[  331.275540][    T7] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  331.326327][    T7] usb 2-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67
[  331.375617][    T7] usb 2-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  331.399742][    T7] usb 2-1: config 109 interface 123 has no altsetting 0
[  331.489299][    T7] usb 2-1: config 109 interface 251 has no altsetting 0
[  331.504753][    T7] usb 2-1: config 109 interface 4 has no altsetting 0
[  331.519943][    T7] usb 2-1: config 109 interface 205 has no altsetting 0
[  331.542427][    T7] usb 2-1: config 109 interface 27 has no altsetting 0
[  331.609078][ T7250] loop1: detected capacity change from 0 to 256
[  333.039911][    T7] usb 2-1: string descriptor 0 read error: -71
[  333.047374][    T7] usb 2-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7
[  333.165301][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.300641][    T7] usb 2-1: can't set config #109, error -71
[  333.313733][    T7] usb 2-1: USB disconnect, device number 10
[  334.454247][ T7250] FAT-fs (loop1): Directory bread(block 64) failed
[  334.461250][ T7250] FAT-fs (loop1): Directory bread(block 65) failed
[  334.468477][ T7250] FAT-fs (loop1): Directory bread(block 66) failed
[  334.475312][ T7250] FAT-fs (loop1): Directory bread(block 67) failed
[  334.482411][ T7250] FAT-fs (loop1): Directory bread(block 68) failed
[  334.489155][ T7250] FAT-fs (loop1): Directory bread(block 69) failed
[  334.496287][ T7250] FAT-fs (loop1): Directory bread(block 70) failed
[  334.503795][ T7250] FAT-fs (loop1): Directory bread(block 71) failed
[  334.510875][ T7250] FAT-fs (loop1): Directory bread(block 72) failed
[  334.518540][ T7250] FAT-fs (loop1): Directory bread(block 73) failed
[  335.168198][ T7252] loop0: detected capacity change from 0 to 8192
[  335.235765][ T7263] fuse: Unknown parameter 'grou00000000000000000000'
[  335.297406][ T7252] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  335.310663][ T5225] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  335.349530][ T7252] REISERFS (device loop0): using ordered data mode
[  335.380657][ T7252] reiserfs: using flush barriers
[  335.393046][ T7252] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  335.425942][ T7252] REISERFS (device loop0): checking transaction log (loop0)
[  335.447534][ T7252] REISERFS (device loop0): Using r5 hash to sort names
[  335.455245][ T7252] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  335.470497][ T7252] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  335.749762][ T5225] usb 2-1: Using ep0 maxpacket: 32
[  335.854332][ T7275] No such timeout policy "syz1"
[  336.015767][ T7276] loop4: detected capacity change from 0 to 8
[  336.083002][ T5225] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  336.263361][ T5225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.672895][ T5225] usb 2-1: Product: syz
[  336.677130][ T5225] usb 2-1: Manufacturer: syz
[  336.685846][ T5225] usb 2-1: SerialNumber: syz
[  336.699494][ T5225] usb 2-1: config 0 descriptor??
[  336.752960][ T7278] tipc: Failed to remove unknown binding: 66,0,0/16388:1736918824/1736918826
[  336.772779][ T5225] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  336.987392][ T7254] udc-core: couldn't find an available UDC or it's busy
[  337.045498][ T7254] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  337.285159][ T7269] loop3: detected capacity change from 0 to 32768
[  337.606520][ T5225] gspca_ov534_9: reg_w failed -71
[  337.620742][ T7269] XFS (loop3): Mounting V5 Filesystem
[  338.413111][ T7269] XFS (loop3): Ending clean mount
[  338.512135][ T4190] XFS (loop3): Unmounting Filesystem
[  339.492031][ T5225] gspca_ov534_9: Unknown sensor 0000
[  339.492098][ T5225] ov534_9: probe of 2-1:0.0 failed with error -22
[  339.509021][ T5225] usb 2-1: USB disconnect, device number 11
[  339.568401][ T7309] fuse: Unknown parameter 'group_i00000000000000000000'
[  339.853066][ T7314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  340.076307][ T7316] loop4: detected capacity change from 0 to 8192
[  340.155548][ T7316] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  340.249227][ T7316] REISERFS (device loop4): using ordered data mode
[  340.669892][ T7316] reiserfs: using flush barriers
[  340.989764][ T7316] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  341.060686][ T7316] REISERFS (device loop4): checking transaction log (loop4)
[  341.069367][ T7316] REISERFS (device loop4): Using r5 hash to sort names
[  341.110092][ T7316] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  341.299782][ T7316] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  341.769978][ T7332] loop4: detected capacity change from 0 to 8
[  344.208184][ T7335] loop2: detected capacity change from 0 to 32768
[  344.575529][ T7335] XFS (loop2): Mounting V5 Filesystem
[  344.674317][ T7354] fuse: Unknown parameter 'group_i00000000000000000000'
[  344.711231][ T7335] XFS (loop2): Ending clean mount
[  344.775902][ T4192] XFS (loop2): Unmounting Filesystem
[  344.921532][ T7364] tipc: Failed to remove unknown binding: 66,0,0/16388:464174445/464174447
[  345.089832][ T1111] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  345.147220][ T7366] loop1: detected capacity change from 0 to 8192
[  345.202276][ T7366] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  345.212515][ T7366] REISERFS (device loop1): using ordered data mode
[  345.219627][ T7366] reiserfs: using flush barriers
[  345.233414][ T7366] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  345.244547][ T7371] loop2: detected capacity change from 0 to 16
[  345.250789][ T7366] REISERFS (device loop1): checking transaction log (loop1)
[  345.272464][ T7366] REISERFS (device loop1): Using r5 hash to sort names
[  345.284548][ T7371] erofs: (device loop2): mounted with root inode @ nid 36.
[  345.300063][ T7366] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  345.314336][ T7366] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  345.339901][ T1111] usb 5-1: Using ep0 maxpacket: 32
[  345.834102][ T7379] loop3: detected capacity change from 0 to 512
[  345.953870][ T1111] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  346.046140][ T7382] No such timeout policy "syz1"
[  346.313979][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.889791][ T1111] usb 5-1: Product: syz
[  346.900025][ T1111] usb 5-1: Manufacturer: syz
[  346.905173][ T1111] usb 5-1: SerialNumber: syz
[  346.991144][ T1111] usb 5-1: config 0 descriptor??
[  347.061104][ T7379] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  347.080032][ T1111] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  347.170081][ T7379] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.274166][ T7360] udc-core: couldn't find an available UDC or it's busy
[  347.292742][ T7360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  347.529844][ T1111] gspca_ov534_9: reg_w failed -71
[  347.674613][ T7392] device syzkaller0 entered promiscuous mode
[  348.092340][ T7400] fuse: Unknown parameter 'group_i00000000000000000000'
[  348.130624][ T7402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  348.169768][ T1111] gspca_ov534_9: Unknown sensor 0000
[  348.169834][ T1111] ov534_9: probe of 5-1:0.0 failed with error -22
[  348.204212][ T1111] usb 5-1: USB disconnect, device number 12
[  348.881412][ T7403] loop4: detected capacity change from 0 to 32768
[  349.005931][ T7403] XFS (loop4): Mounting V5 Filesystem
[  349.090806][ T7403] XFS (loop4): Ending clean mount
[  349.171389][ T4186] XFS (loop4): Unmounting Filesystem
[  349.719319][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'.
[  350.383298][ T7424] loop0: detected capacity change from 0 to 8192
[  350.560571][ T7424] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  350.570327][ T7424] REISERFS (device loop0): using ordered data mode
[  350.576944][ T7424] reiserfs: using flush barriers
[  350.601535][ T7424] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  350.630020][ T7424] REISERFS (device loop0): checking transaction log (loop0)
[  350.686149][ T7424] REISERFS (device loop0): Using r5 hash to sort names
[  350.693859][ T7424] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  350.718659][ T7424] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  352.878471][ T7448] fuse: Unknown parameter 'group_id00000000000000000000'
[  355.242898][ T7451] loop3: detected capacity change from 0 to 32768
[  355.438300][ T7451] XFS (loop3): Mounting V5 Filesystem
[  355.760971][ T7451] XFS (loop3): Ending clean mount
[  355.818573][ T4190] XFS (loop3): Unmounting Filesystem
[  356.045668][ T7500] loop0: detected capacity change from 0 to 16
[  356.074677][ T1111] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  356.126086][ T7500] erofs: (device loop0): mounted with root inode @ nid 36.
[  356.339909][ T1111] usb 5-1: Using ep0 maxpacket: 32
[  357.920526][ T1111] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  357.936951][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.030290][ T7529] No such timeout policy "syz1"
[  358.154948][ T1111] usb 5-1: Product: syz
[  358.159247][ T1111] usb 5-1: Manufacturer: syz
[  358.164066][ T1111] usb 5-1: SerialNumber: syz
[  358.185251][ T1111] usb 5-1: config 0 descriptor??
[  359.032420][ T1111] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  359.059241][ T1111] gspca_ov534_9: reg_w failed -71
[  359.720054][ T1111] gspca_ov534_9: Unknown sensor 0000
[  359.720197][ T1111] ov534_9: probe of 5-1:0.0 failed with error -22
[  359.765477][ T1111] usb 5-1: USB disconnect, device number 13
[  359.944215][ T7535] loop3: detected capacity change from 0 to 32768
[  360.264072][ T7535] XFS (loop3): Mounting V5 Filesystem
[  360.547168][ T7566] No such timeout policy "syz1"
[  361.563068][ T7535] XFS (loop3): Ending clean mount
[  361.833665][ T4190] XFS (loop3): Unmounting Filesystem
[  364.176343][ T7582] No such timeout policy "syz1"
[  366.334503][ T7601] No such timeout policy "syz1"
[  370.636260][ T4955] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  372.289842][ T4955] usb 4-1: Using ep0 maxpacket: 32
[  373.563413][ T4955] usb 4-1: unable to read config index 0 descriptor/start: -71
[  373.812775][ T4955] usb 4-1: can't read configurations, error -71
[  374.217904][ T7678] loop3: detected capacity change from 0 to 4096
[  374.462505][ T7678] ntfs: volume version 3.1.
[  374.478062][ T7678] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  374.489694][ T7678] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  374.501325][ T7678] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  374.611611][ T7678] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  374.632813][ T7678] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  374.643487][ T7678] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  375.939795][ T5106] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  376.319696][ T5106] usb 2-1: Using ep0 maxpacket: 32
[  376.790052][ T5106] usb 2-1: config 109 has an invalid interface number: 123 but max is 3
[  376.890508][ T5106] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  377.039811][ T5106] usb 2-1: config 109 has an invalid interface number: 251 but max is 3
[  377.111815][ T5106] usb 2-1: config 109 has an invalid interface number: 4 but max is 3
[  377.141598][ T5106] usb 2-1: config 109 has an invalid interface number: 205 but max is 3
[  377.160120][ T5106] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  377.169235][ T5106] usb 2-1: config 109 has an invalid interface number: 27 but max is 3
[  378.081260][ T5106] usb 2-1: config 109 has 5 interfaces, different from the descriptor's value: 4
[  378.092344][ T5106] usb 2-1: config 109 has no interface number 0
[  378.098929][ T5106] usb 2-1: config 109 has no interface number 1
[  378.107231][ T5106] usb 2-1: config 109 has no interface number 2
[  378.114763][ T5106] usb 2-1: config 109 has no interface number 3
[  378.122511][ T5106] usb 2-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  378.691113][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  378.808150][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  378.814667][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  378.889561][ T7709] loop4: detected capacity change from 0 to 8
[  378.939464][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  378.951660][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  379.228370][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  379.244064][ T5106] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024
[  380.243717][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  380.907334][ T5106] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8
[  380.917490][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping
[  380.928553][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  380.940116][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  380.951127][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping
[  380.963125][ T5106] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024
[  380.973700][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping
[  381.002822][ T5106] usb 2-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[  381.086112][ T5106] usb 2-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  381.105625][ T5106] usb 2-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30
[  381.118705][ T5106] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64
[  381.154690][ T5106] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping
[  381.169841][ T5106] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  381.186567][ T5106] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping
[  381.199083][ T5106] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  381.219018][ T5106] usb 2-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67
[  381.376668][ T5106] usb 2-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  381.388138][ T5106] usb 2-1: config 109 interface 123 has no altsetting 0
[  381.401526][ T5106] usb 2-1: config 109 interface 251 has no altsetting 0
[  381.408716][ T5106] usb 2-1: config 109 interface 4 has no altsetting 0
[  381.995874][ T5106] usb 2-1: config 109 interface 205 has no altsetting 0
[  382.017856][ T5106] usb 2-1: config 109 interface 27 has no altsetting 0
[  382.254315][ T5106] usb 2-1: string descriptor 0 read error: -71
[  382.280983][ T5106] usb 2-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7
[  382.738893][ T7745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  382.940575][ T5106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.991705][ T5106] usb 2-1: can't set config #109, error -71
[  383.002007][ T5106] usb 2-1: USB disconnect, device number 12
[  383.519756][ T4231] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  383.829772][ T4231] usb 4-1: Using ep0 maxpacket: 32
[  383.980398][ T4231] usb 4-1: config 109 has an invalid interface number: 123 but max is 3
[  384.129847][ T4231] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  384.139010][ T4231] usb 4-1: config 109 has an invalid interface number: 251 but max is 3
[  384.148056][ T4231] usb 4-1: config 109 has an invalid interface number: 4 but max is 3
[  384.159734][ T4231] usb 4-1: config 109 has an invalid interface number: 205 but max is 3
[  384.168220][ T4231] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  384.177225][ T4231] usb 4-1: config 109 has an invalid interface number: 27 but max is 3
[  384.187381][ T4231] usb 4-1: config 109 has 5 interfaces, different from the descriptor's value: 4
[  384.196667][ T4231] usb 4-1: config 109 has no interface number 0
[  384.233682][ T4231] usb 4-1: config 109 has no interface number 1
[  384.249678][ T4231] usb 4-1: config 109 has no interface number 2
[  384.278055][ T4231] usb 4-1: config 109 has no interface number 3
[  384.297114][ T4231] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  384.318895][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  384.339689][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  384.359716][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  384.557606][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  384.624264][ T4231] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024
[  384.637406][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  385.986003][ T4231] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8
[  386.108496][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping
[  386.278152][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  386.448418][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  387.201164][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping
[  387.212990][ T4231] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024
[  387.223590][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping
[  387.234962][ T4231] usb 4-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[  387.249080][ T4231] usb 4-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  387.287865][ T4231] usb 4-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30
[  387.299496][ T4231] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64
[  387.403341][ T4231] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping
[  387.414720][ T4231] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  387.426319][ T4231] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping
[  387.438085][ T4231] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  387.449557][ T4231] usb 4-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67
[  387.820712][ T4231] usb 4-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  387.832668][ T4231] usb 4-1: config 109 interface 123 has no altsetting 0
[  387.840811][ T4231] usb 4-1: config 109 interface 251 has no altsetting 0
[  387.848005][ T4231] usb 4-1: config 109 interface 4 has no altsetting 0
[  387.860916][ T4231] usb 4-1: config 109 interface 205 has no altsetting 0
[  387.868308][ T4231] usb 4-1: config 109 interface 27 has no altsetting 0
[  388.010539][ T4231] usb 4-1: string descriptor 0 read error: -71
[  388.018023][ T4231] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7
[  388.030231][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.069985][ T4231] usb 4-1: can't set config #109, error -71
[  388.099013][ T4231] usb 4-1: USB disconnect, device number 13
[  388.215899][ T7801] loop1: detected capacity change from 0 to 8
[  389.025320][ T7807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  391.161055][ T4914] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  392.359820][ T4914] usb 4-1: Using ep0 maxpacket: 32
[  392.769965][ T4914] usb 4-1: config 109 has an invalid interface number: 123 but max is 3
[  392.809195][ T4914] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  392.856163][ T4914] usb 4-1: config 109 has an invalid interface number: 251 but max is 3
[  392.894696][ T4914] usb 4-1: config 109 has an invalid interface number: 4 but max is 3
[  392.924147][ T4914] usb 4-1: config 109 has an invalid interface number: 205 but max is 3
[  393.771724][ T4914] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  393.785076][ T4914] usb 4-1: config 109 has an invalid interface number: 27 but max is 3
[  393.793745][ T4914] usb 4-1: config 109 has 5 interfaces, different from the descriptor's value: 4
[  393.812740][ T4914] usb 4-1: config 109 has no interface number 0
[  393.819129][ T4914] usb 4-1: config 109 has no interface number 1
[  393.825723][ T4914] usb 4-1: config 109 has no interface number 2
[  393.851473][ T4914] usb 4-1: config 109 has no interface number 3
[  394.085711][ T4914] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  394.105739][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  394.118747][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  394.133381][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  394.150278][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  394.226035][ T7862] loop3: detected capacity change from 0 to 4096
[  394.751767][ T7856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  395.214765][ T7862] ntfs: volume version 3.1.
[  395.223110][ T7862] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  395.234405][ T7862] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  395.380732][ T4914] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024
[  395.923207][ T7862] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  395.939759][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  395.951182][ T4914] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8
[  395.963667][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping
[  395.975650][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  396.058193][ T7862] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  396.079960][ T7862] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  396.090410][ T7862] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  396.161746][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  396.188697][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping
[  396.207018][ T4914] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024
[  396.217603][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping
[  396.243449][ T4914] usb 4-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[  396.404831][ T4914] usb 4-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  396.418270][ T4914] usb 4-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30
[  396.430522][ T4914] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64
[  396.442204][ T4914] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping
[  396.954630][ T4914] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  396.966199][ T4914] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping
[  396.977333][ T4914] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  396.989406][ T4914] usb 4-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67
[  397.002902][ T4914] usb 4-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  397.014195][ T4914] usb 4-1: config 109 interface 123 has no altsetting 0
[  397.021545][ T4914] usb 4-1: config 109 interface 251 has no altsetting 0
[  397.028509][ T4914] usb 4-1: config 109 interface 4 has no altsetting 0
[  397.035600][ T4914] usb 4-1: config 109 interface 205 has no altsetting 0
[  397.043135][ T4914] usb 4-1: config 109 interface 27 has no altsetting 0
[  397.089819][ T4914] usb 4-1: string descriptor 0 read error: -71
[  397.101305][ T4914] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7
[  397.117854][ T4914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.178047][ T7881] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  397.199997][ T4914] usb 4-1: can't set config #109, error -71
[  398.146956][ T4914] usb 4-1: USB disconnect, device number 14
[  398.434553][ T7893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.943516][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'.
[  399.979029][ T7893] tipc: Resetting bearer <eth:syzkaller0>
[  400.015595][ T7891] tipc: Disabling bearer <eth:syzkaller0>
[  401.170889][ T7927] loop1: detected capacity change from 0 to 8
[  401.212210][ T7930] loop4: detected capacity change from 0 to 8
[  403.500811][ T7946] loop3: detected capacity change from 0 to 4096
[  404.149005][ T7940] loop1: detected capacity change from 0 to 32768
[  404.337043][ T7946] ntfs: volume version 3.1.
[  404.344198][ T7946] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  404.402333][ T7946] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  404.414175][ T7946] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  404.478791][ T7946] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  404.822212][ T7946] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  404.832944][ T7946] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  406.172589][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.916'.
[  410.381642][ T8008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.414593][ T8008] device syzkaller0 entered promiscuous mode
[  410.730683][ T8013] loop1: detected capacity change from 0 to 32768
[  410.792537][ T8016] loop3: detected capacity change from 0 to 8
[  410.801864][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'.
[  410.966478][ T7999] tipc: Resetting bearer <eth:syzkaller0>
[  411.576005][ T7999] tipc: Disabling bearer <eth:syzkaller0>
[  411.672039][ T8013] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.925 (8013)
[  411.957339][ T8027] overlayfs: failed to clone upperpath
[  412.328276][ T8013] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  412.337131][ T8013] BTRFS info (device loop1): enabling disk space caching
[  412.344933][ T8013] BTRFS info (device loop1): force clearing of disk cache
[  412.352675][ T8013] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  412.362506][ T8013] BTRFS info (device loop1): use zstd compression, level 3
[  412.369903][ T8013] BTRFS info (device loop1): disk space caching is enabled
[  412.377212][ T8013] BTRFS info (device loop1): has skinny extents
[  414.178407][ T8013] BTRFS info (device loop1): enabling ssd optimizations
[  414.191614][ T8013] BTRFS info (device loop1): clearing free space tree
[  414.199245][ T8013] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  414.209455][ T8013] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  414.226841][ T5026] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  416.843941][ T4268] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop1 scanned by udevd (4268)
[  416.861142][ T8090] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  416.945452][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'.
[  417.839828][ T5025] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  419.806309][ T8118] loop3: detected capacity change from 0 to 2048
[  420.331479][ T5025] usb 5-1: Using ep0 maxpacket: 32
[  420.717188][ T8118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  421.180031][ T5025] usb 5-1: unable to read config index 0 descriptor/start: -71
[  421.187657][ T5025] usb 5-1: can't read configurations, error -71
[  421.420182][ T8134] loop1: detected capacity change from 0 to 164
[  426.470076][ T8153] loop1: detected capacity change from 0 to 2048
[  426.513063][ T8155] loop4: detected capacity change from 0 to 2048
[  427.106708][ T8155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  427.129313][ T8157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.152118][ T8157] device syzkaller0 entered promiscuous mode
[  427.168146][ T8153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  427.279875][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'.
[  427.933206][ T8157] tipc: Resetting bearer <eth:syzkaller0>
[  428.555899][ T8156] tipc: Resetting bearer <eth:syzkaller0>
[  428.582281][ T8156] tipc: Disabling bearer <eth:syzkaller0>
[  431.091431][ T8187] loop3: detected capacity change from 0 to 32768
[  431.558020][ T8195] loop4: detected capacity change from 0 to 2048
[  431.680613][ T8195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  432.503330][ T8187] XFS (loop3): Mounting V5 Filesystem
[  432.524060][ T8199] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  433.820420][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'.
[  433.829988][ T8187] XFS (loop3): AIL initialisation failed: error -12
[  434.375562][ T8187] XFS (loop3): log mount failed
[  436.813814][ T8239] netlink: 'syz.4.977': attribute type 1 has an invalid length.
[  437.109856][ T8244] loop3: detected capacity change from 0 to 32768
[  437.309019][ T8244] XFS (loop3): Mounting V5 Filesystem
[  437.497723][ T8259] sd 0:0:1:0: PR command failed: 2
[  437.503057][ T8259] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  437.510135][ T8259] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  437.558623][ T8261] loop1: detected capacity change from 0 to 512
[  438.909035][ T8261] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.979: inode has both inline data and extents flags
[  438.923438][ T8261] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.979: couldn't read orphan inode 15 (err -117)
[  438.937232][ T8272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  438.970637][ T8261] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  439.035216][ T8244] XFS (loop3): Ending clean mount
[  439.046915][ T8244] XFS (loop3): Quotacheck needed: Please wait.
[  439.514430][ T8244] XFS (loop3): Quotacheck: Done.
[  439.880323][   T26] audit: type=1800 audit(1772395934.374:61): pid=8275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.976" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0
[  440.182769][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  440.189116][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  440.228658][ T4190] XFS (loop3): Unmounting Filesystem
[  441.815216][ T8288] loop1: detected capacity change from 0 to 2048
[  441.933540][ T8288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  443.150658][ T8297] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  443.340863][ T8302] loop3: detected capacity change from 0 to 32768
[  443.460691][ T8302] XFS (loop3): Mounting V5 Filesystem
[  443.710158][ T8302] XFS (loop3): Ending clean mount
[  443.721073][ T8302] XFS (loop3): Quotacheck needed: Please wait.
[  443.907835][ T8321] loop1: detected capacity change from 0 to 32768
[  443.932347][ T8302] XFS (loop3): Quotacheck: Done.
[  444.449187][   T26] audit: type=1800 audit(1772395938.714:62): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.990" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  444.645560][ T4190] XFS (loop3): Unmounting Filesystem
[  444.701369][ T8321] XFS (loop1): Mounting V5 Filesystem
[  444.901316][ T8321] XFS (loop1): Ending clean mount
[  444.909261][ T8321] XFS (loop1): Quotacheck needed: Please wait.
[  444.943733][ T8321] XFS (loop1): Quotacheck: Done.
[  445.150204][ T5025] Bluetooth: hci2: command 0x0401 tx timeout
[  445.592454][   T26] audit: type=1800 audit(1772395939.744:63): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.993" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0
[  445.868514][ T4193] XFS (loop1): Unmounting Filesystem
[  446.009990][ T8349] loop4: detected capacity change from 0 to 512
[  448.130278][ T8349] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.999: inode has both inline data and extents flags
[  448.286181][ T8349] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.999: couldn't read orphan inode 15 (err -117)
[  448.318608][ T8349] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  449.604341][ T8368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  450.475381][ T8370] loop1: detected capacity change from 0 to 32768
[  450.753884][ T8376] fuse: Bad value for 'fd'
[  450.760431][ T8374] loop4: detected capacity change from 0 to 32768
[  450.828849][ T8370] XFS (loop1): Mounting V5 Filesystem
[  450.850560][ T8374] XFS (loop4): Mounting V5 Filesystem
[  451.029824][ T8374] XFS (loop4): Ending clean mount
[  451.038409][ T8374] XFS (loop4): Quotacheck needed: Please wait.
[  451.057761][ T8370] XFS (loop1): Ending clean mount
[  451.073431][ T8370] XFS (loop1): Quotacheck needed: Please wait.
[  451.310191][ T8397] overlayfs: missing 'lowerdir'
[  452.497432][ T8374] XFS (loop4): Quotacheck: Done.
[  453.385438][ T8402] overlayfs: missing 'lowerdir'
[  453.819855][   T26] audit: type=1800 audit(1772395947.864:64): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1005" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0
[  454.751476][ T8370] XFS (loop1): Quotacheck: Done.
[  454.881632][ T4186] XFS (loop4): Unmounting Filesystem
[  454.909745][ T4193] XFS (loop1): Unmounting Filesystem
[  455.255827][ T8419] overlayfs: missing 'lowerdir'
[  457.499435][ T8436] dlm: no local IP address has been set
[  457.505501][ T8436] dlm: cannot start dlm midcomms -107
[  458.060373][ T8440] loop4: detected capacity change from 0 to 32768
[  458.320217][ T8440] XFS (loop4): Mounting V5 Filesystem
[  458.403030][ T8440] XFS (loop4): Ending clean mount
[  458.410056][ T8440] XFS (loop4): Quotacheck needed: Please wait.
[  458.513015][ T8440] XFS (loop4): Quotacheck: Done.
[  459.267016][ T4186] XFS (loop4): Unmounting Filesystem
[  460.589405][ T8472] loop3: detected capacity change from 0 to 24
[  462.500146][ T8472] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  463.363993][ T8472] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  463.979468][ T8489] loop3: detected capacity change from 0 to 512
[  465.340308][ T8489] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1035: inode has both inline data and extents flags
[  465.356200][ T8489] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1035: couldn't read orphan inode 15 (err -117)
[  465.369768][ T8489] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  466.504559][ T8499] overlayfs: missing 'lowerdir'
[  467.855746][ T8506] fuse: Bad value for 'fd'
[  468.825243][ T8514] loop4: detected capacity change from 0 to 32768
[  469.038577][ T8514] XFS (loop4): Mounting V5 Filesystem
[  469.170113][ T8514] XFS (loop4): Ending clean mount
[  469.179534][ T8514] XFS (loop4): Quotacheck needed: Please wait.
[  469.338058][ T8514] XFS (loop4): Quotacheck: Done.
[  469.559240][ T8527] loop3: detected capacity change from 0 to 32768
[  469.700210][   T26] audit: type=1800 audit(1772395964.204:65): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1040" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  470.097357][ T4186] XFS (loop4): Unmounting Filesystem
[  470.445694][ T8527] XFS (loop3): Mounting V5 Filesystem
[  470.589783][ T8527] XFS (loop3): Ending clean mount
[  470.597607][ T8527] XFS (loop3): Quotacheck needed: Please wait.
[  471.734129][ T8527] XFS (loop3): Quotacheck: Done.
[  471.754093][   T26] audit: type=1800 audit(1772395966.274:66): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1041" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  471.944227][ T8556] loop1: detected capacity change from 0 to 512
[  473.347814][ T8556] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1049: inode has both inline data and extents flags
[  473.362397][ T8556] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1049: couldn't read orphan inode 15 (err -117)
[  473.382421][ T8556] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  473.817923][ T4190] XFS (loop3): Unmounting Filesystem
[  475.444486][ T8582] netlink: 'syz.3.1056': attribute type 1 has an invalid length.
[  475.539168][ T8583] overlayfs: missing 'lowerdir'
[  475.569972][ T8583] loop4: detected capacity change from 0 to 24
[  477.370702][ T8583] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  477.382698][ T8583] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  477.478191][ T8583] VFS: Lookup of 'file0' in romfs loop4 would have caused loop
[  478.779565][ T8594] loop1: detected capacity change from 0 to 512
[  478.894092][ T8594] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1057: inode has both inline data and extents flags
[  478.909943][ T8594] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1057: couldn't read orphan inode 15 (err -117)
[  478.922770][ T8594] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  479.928504][ T8604] loop4: detected capacity change from 0 to 32768
[  480.099844][ T8604] XFS (loop4): Mounting V5 Filesystem
[  480.145208][ T8604] XFS (loop4): Ending clean mount
[  480.153677][ T8604] XFS (loop4): Quotacheck needed: Please wait.
[  481.973717][ T8632] loop3: detected capacity change from 0 to 32768
[  482.006510][ T8604] XFS (loop4): Quotacheck: Done.
[  482.618536][   T26] audit: type=1800 audit(1772395976.784:67): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1059" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  482.733277][ T4186] XFS (loop4): Unmounting Filesystem
[  482.793002][ T8632] XFS (loop3): Mounting V5 Filesystem
[  482.868952][ T8649] dlm: no local IP address has been set
[  482.956170][ T8649] dlm: cannot start dlm midcomms -107
[  482.991235][ T8632] XFS (loop3): Ending clean mount
[  483.002400][ T8632] XFS (loop3): Quotacheck needed: Please wait.
[  483.048292][ T8632] XFS (loop3): Quotacheck: Done.
[  483.313193][   T26] audit: type=1800 audit(1772395977.814:68): pid=8655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1068" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  483.647696][ T4190] XFS (loop3): Unmounting Filesystem
[  488.514963][ T8681] loop3: detected capacity change from 0 to 32768
[  488.891892][ T8681] XFS (loop3): Mounting V5 Filesystem
[  489.003588][ T8691] loop4: detected capacity change from 0 to 32768
[  489.059056][ T8681] XFS (loop3): Ending clean mount
[  489.069352][ T8681] XFS (loop3): Quotacheck needed: Please wait.
[  489.489451][ T8691] XFS (loop4): Mounting V5 Filesystem
[  489.511217][ T8681] XFS (loop3): Quotacheck: Done.
[  490.357115][   T26] audit: type=1800 audit(1772395984.594:69): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1074" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  490.493972][ T4190] XFS (loop3): Unmounting Filesystem
[  490.716715][ T8715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  491.453107][ T8691] XFS (loop4): Ending clean mount
[  491.460705][ T8691] XFS (loop4): Quotacheck needed: Please wait.
[  491.510248][ T8691] XFS (loop4): Quotacheck: Done.
[  491.992930][   T26] audit: type=1800 audit(1772395986.304:70): pid=8720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1081" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  492.044726][ T8719] overlayfs: missing 'lowerdir'
[  492.252822][ T4186] XFS (loop4): Unmounting Filesystem
[  494.236725][ T8747] loop3: detected capacity change from 0 to 512
[  495.879748][ T8747] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1092: inode has both inline data and extents flags
[  495.895854][ T8747] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1092: couldn't read orphan inode 15 (err -117)
[  495.916122][ T8747] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  501.482304][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  501.488688][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  501.754819][ T8280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.961924][ T8280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.051736][ T4955] Bluetooth: hci4: command 0x0409 tx timeout
[  504.079930][ T8280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.346190][ T5225] Bluetooth: hci4: command 0x041b tx timeout
[  506.453938][ T8806] loop4: detected capacity change from 0 to 512
[  506.480115][ T8280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.609353][ T8806] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1108: inode has both inline data and extents flags
[  506.623119][ T8806] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1108: couldn't read orphan inode 15 (err -117)
[  506.640637][ T8806] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  506.744186][ T8819] loop3: detected capacity change from 0 to 512
[  508.280313][ T8819] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1111: inode has both inline data and extents flags
[  508.298071][ T8819] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1111: couldn't read orphan inode 15 (err -117)
[  508.314472][ T8819] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  508.677574][ T4914] Bluetooth: hci4: command 0x040f tx timeout
[  509.023195][ T8826] loop4: detected capacity change from 0 to 512
[  510.407462][ T8826] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1112: inode has both inline data and extents flags
[  510.421852][ T8826] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1112: couldn't read orphan inode 15 (err -117)
[  510.435131][ T8826] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  511.019369][    T7] Bluetooth: hci4: command 0x0419 tx timeout
[  511.769164][ T8784] chnl_net:caif_netlink_parms(): no params data found
[  514.527205][ T8280] tipc: Left network mode
[  515.237912][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.273465][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.304856][ T8784] device bridge_slave_0 entered promiscuous mode
[  515.374112][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.448523][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.497314][ T8784] device bridge_slave_1 entered promiscuous mode
[  515.758765][ T8869] loop4: detected capacity change from 0 to 32768
[  515.808947][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.828377][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.003487][ T8868] loop3: detected capacity change from 0 to 32768
[  516.356995][ T8868] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  516.368385][ T8868] JBD2: Ignoring recovery information on journal
[  516.473755][ T8868] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  516.515670][ T8869] XFS (loop4): Mounting V5 Filesystem
[  516.557838][ T8784] team0: Port device team_slave_0 added
[  516.631700][ T8784] team0: Port device team_slave_1 added
[  516.705544][ T8869] XFS (loop4): Ending clean mount
[  516.731335][ T8869] XFS (loop4): Quotacheck needed: Please wait.
[  516.866027][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  517.590038][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.649288][ T8869] XFS (loop4): Quotacheck: Done.
[  517.837395][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  517.870830][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  517.963472][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  517.976504][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.385444][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.660401][   T26] audit: type=1800 audit(1772396013.184:71): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1122" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  519.423281][ T8784] device hsr_slave_0 entered promiscuous mode
[  519.445933][ T8784] device hsr_slave_1 entered promiscuous mode
[  519.640069][ T8905] loop3: detected capacity change from 0 to 32768
[  519.656271][ T8784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  519.664482][ T8784] Cannot create hsr debugfs directory
[  520.339028][ T8905] XFS (loop3): Mounting V5 Filesystem
[  520.434204][ T8905] XFS (loop3): Ending clean mount
[  520.444535][ T8905] XFS (loop3): Quotacheck needed: Please wait.
[  520.530491][ T8905] XFS (loop3): Quotacheck: Done.
[  520.704417][   T26] audit: type=1800 audit(1772396015.224:72): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1126" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  520.802993][ T4190] XFS (loop3): Unmounting Filesystem
[  521.810585][ T8943] loop3: detected capacity change from 0 to 512
[  523.031817][ T8280] device hsr_slave_0 left promiscuous mode
[  523.088839][ T8943] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1129: inode has both inline data and extents flags
[  523.103587][ T8943] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1129: couldn't read orphan inode 15 (err -117)
[  523.117089][ T8943] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  523.580678][ T8280] device hsr_slave_1 left promiscuous mode
[  523.592641][ T8280] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.631070][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.688084][ T8280] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.704035][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.723250][ T8280] device bridge_slave_1 left promiscuous mode
[  523.742742][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.763313][ T4186] XFS (loop4): Unmounting Filesystem
[  523.802143][ T8280] device bridge_slave_0 left promiscuous mode
[  523.808520][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.621555][ T8280] device veth1_macvtap left promiscuous mode
[  524.628146][ T8280] device veth0_macvtap left promiscuous mode
[  524.652058][ T8280] device veth1_vlan left promiscuous mode
[  524.668163][ T8280] device veth0_vlan left promiscuous mode
[  524.717128][ T8960] SET target dimension over the limit!
[  525.119470][ T8966] SET target dimension over the limit!
[  525.138025][ T8968] loop4: detected capacity change from 0 to 1024
[  526.064202][ T8973] loop4: detected capacity change from 0 to 32768
[  526.139162][ T8973] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  526.148838][ T8280] team0 (unregistering): Port device team_slave_1 removed
[  526.160190][ T8973] JBD2: Ignoring recovery information on journal
[  526.219497][ T8973] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  526.430282][ T8280] team0 (unregistering): Port device team_slave_0 removed
[  527.331425][ T8280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.355975][ T8280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  527.396874][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  527.515917][ T8979] loop4: detected capacity change from 0 to 1024
[  527.690591][ T8280] bond0 (unregistering): Released all slaves
[  527.948285][ T8784] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  528.039492][ T8784] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  528.138300][ T8784] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  528.642310][ T8784] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  530.616732][ T8993] loop3: detected capacity change from 0 to 32768
[  530.977744][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0
[  530.995287][ T8784] 8021q: adding VLAN 0 to HW filter on device team0
[  531.025267][ T8993] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  531.031562][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  531.043634][ T8993] JBD2: Ignoring recovery information on journal
[  531.048195][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  531.078213][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  531.088653][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  531.104794][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.112029][ T4394] bridge0: port 1(bridge_slave_0) entered forwarding state
[  531.166624][ T8993] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  531.227795][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  531.241342][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  531.874492][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.881670][ T4394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  531.902367][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  532.080244][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  532.089304][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  532.234197][ T9010] loop4: detected capacity change from 0 to 512
[  532.332093][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  532.344862][ T9010] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1148: inode has both inline data and extents flags
[  532.359691][ T9010] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1148: couldn't read orphan inode 15 (err -117)
[  532.372152][ T9010] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  532.460985][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  532.470205][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  532.479297][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  532.532664][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  532.545645][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  532.554492][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  532.566358][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  532.609247][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  532.705269][ T8784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  536.056370][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  536.265852][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  536.277718][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  536.340107][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.599785][ T4908] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  537.990932][ T4908] usb 4-1: Using ep0 maxpacket: 32
[  538.110171][ T4908] usb 4-1: config 109 has an invalid interface number: 123 but max is 3
[  538.126142][ T4908] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  538.145578][ T4908] usb 4-1: config 109 has an invalid interface number: 251 but max is 3
[  538.176121][ T4908] usb 4-1: config 109 has an invalid interface number: 4 but max is 3
[  538.193256][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  538.205771][ T4908] usb 4-1: config 109 has an invalid interface number: 205 but max is 3
[  538.209187][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  538.234852][ T4908] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping
[  538.264558][ T4908] usb 4-1: config 109 has an invalid interface number: 27 but max is 3
[  538.293862][ T4908] usb 4-1: config 109 has 5 interfaces, different from the descriptor's value: 4
[  538.317924][ T4908] usb 4-1: config 109 has no interface number 0
[  538.342028][ T4908] usb 4-1: config 109 has no interface number 1
[  538.402239][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  538.411363][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  538.423353][ T8784] device veth0_vlan entered promiscuous mode
[  538.425786][ T4908] usb 4-1: config 109 has no interface number 2
[  538.431399][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  538.453894][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  538.457035][ T4908] usb 4-1: config 109 has no interface number 3
[  538.485590][ T4908] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  538.518206][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  539.105217][ T8784] device veth1_vlan entered promiscuous mode
[  539.239694][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  539.278620][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  539.280574][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  539.301663][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping
[  539.313032][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  539.325596][ T4908] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024
[  539.336231][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  539.344189][ T8784] device veth0_macvtap entered promiscuous mode
[  539.347172][ T4908] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8
[  539.363585][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping
[  539.387352][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  539.390015][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  539.417438][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  539.419611][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  539.437032][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping
[  539.448646][ T4908] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024
[  539.459005][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping
[  539.481087][ T4908] usb 4-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[  539.501403][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  539.517640][ T4908] usb 4-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  539.549280][ T4908] usb 4-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30
[  539.593025][ T8784] device veth1_macvtap entered promiscuous mode
[  539.613538][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.624592][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.644768][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.646615][ T4908] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64
[  539.670635][ T4908] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping
[  539.700302][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.714371][ T4908] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  539.754331][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.761368][ T4908] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping
[  539.782936][ T4908] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  539.797987][ T4908] usb 4-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67
[  539.799627][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.817402][ T4908] usb 4-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  539.840191][ T4908] usb 4-1: config 109 interface 123 has no altsetting 0
[  539.847402][ T4908] usb 4-1: config 109 interface 251 has no altsetting 0
[  539.861407][ T4908] usb 4-1: config 109 interface 4 has no altsetting 0
[  539.868525][ T4908] usb 4-1: config 109 interface 205 has no altsetting 0
[  539.876741][ T4908] usb 4-1: config 109 interface 27 has no altsetting 0
[  539.887803][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  539.900317][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.919803][ T4908] usb 4-1: string descriptor 0 read error: -71
[  539.928320][ T4908] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7
[  539.953322][ T4908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.960325][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  539.990577][ T4908] usb 4-1: can't set config #109, error -71
[  540.008155][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  540.012458][ T4908] usb 4-1: USB disconnect, device number 15
[  540.048600][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  540.073838][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  540.109121][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.149680][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.169765][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.204493][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.236444][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.283380][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.334041][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.380315][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.402167][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  540.439384][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  540.468550][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  540.499077][ T8784] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  540.521548][ T8784] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  540.546408][ T8784] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  540.552919][ T9113] loop3: detected capacity change from 0 to 4096
[  540.565573][ T8784] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  540.594190][ T9113] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  541.651457][ T4623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.659414][ T4623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.734249][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  541.917653][ T9131] loop4: detected capacity change from 0 to 32768
[  541.968026][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.990325][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.997983][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  542.069962][ T9131] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  542.089353][ T9131] JBD2: Ignoring recovery information on journal
[  542.318546][ T9131] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  543.028170][ T9159] loop3: detected capacity change from 0 to 512
[  545.195959][ T9164] loop5: detected capacity change from 0 to 512
[  546.174895][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  546.569337][ T9159] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1179: inode has both inline data and extents flags
[  546.644732][ T9159] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1179: couldn't read orphan inode 15 (err -117)
[  546.928004][ T9164] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1095: inode has both inline data and extents flags
[  546.945194][ T9159] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  547.538129][ T9164] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1095: couldn't read orphan inode 15 (err -117)
[  547.684474][ T9164] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  547.797103][ T9194] loop4: detected capacity change from 0 to 1024
[  547.973750][ T9200] loop3: detected capacity change from 0 to 512
[  548.011175][ T9200] EXT4-fs (loop3): Test dummy encryption mode enabled
[  548.076116][ T9200] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1186: inode has both inline data and extents flags
[  548.305181][ T9200] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1186: couldn't read orphan inode 15 (err -117)
[  548.821772][ T9208] loop5: detected capacity change from 0 to 512
[  550.230239][ T9208] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1189: inode has both inline data and extents flags
[  550.245907][ T9208] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1189: couldn't read orphan inode 15 (err -117)
[  550.261642][ T9208] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  550.363575][ T9200] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,,errors=continue. Quota mode: writeback.
[  550.578438][ T6639] hfsplus: b-tree write err: -5, ino 4
[  552.343646][ T9200] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  552.520931][ T9243] loop5: detected capacity change from 0 to 1024
[  554.454314][ T4623] hfsplus: b-tree write err: -5, ino 4
[  555.395184][    T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  555.478715][ T9284] loop5: detected capacity change from 0 to 1024
[  555.669715][    T7] usb 5-1: Using ep0 maxpacket: 32
[  557.337955][ T6639] hfsplus: b-tree write err: -5, ino 4
[  557.530066][    T7] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  557.612548][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.706276][    T7] usb 5-1: config 0 descriptor??
[  557.755200][    T7] usb 5-1: can't set config #0, error -71
[  557.785046][    T7] usb 5-1: USB disconnect, device number 17
[  559.326050][ T9319] loop5: detected capacity change from 0 to 1024
[  559.487655][ T9325] loop3: detected capacity change from 0 to 1024
[  559.819954][ T9334] SET target dimension over the limit!
[  560.261082][ T9344] hfsplus: found bad thread record in catalog
[  562.914570][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  562.920966][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  564.524151][ T4682] hfsplus: b-tree write err: -5, ino 4
[  564.835985][ T4682] hfsplus: b-tree write err: -5, ino 4
[  565.187270][ T9382] loop4: detected capacity change from 0 to 32768
[  565.320261][ T9382] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  565.332763][ T9382] JBD2: Ignoring recovery information on journal
[  565.409886][ T9382] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  566.533084][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  568.056481][ T9430] xt_TCPMSS: Only works on TCP SYN packets
[  569.158046][ T9436] loop4: detected capacity change from 0 to 32768
[  569.302485][ T9441] loop5: detected capacity change from 0 to 512
[  570.888591][ T9436] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  570.900065][ T9436] JBD2: Ignoring recovery information on journal
[  570.950611][ T9436] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  571.171311][ T9441] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  572.030827][ T9441] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  572.063359][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  572.309822][ T9441] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1235: Corrupt directory, running e2fsck is recommended
[  572.542059][ T9441] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  572.559810][ T9441] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.1235: corrupted in-inode xattr
[  572.820883][ T9441] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1235: couldn't read orphan inode 15 (err -117)
[  572.880346][ T9441] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  575.882869][ T9476] loop4: detected capacity change from 0 to 512
[  577.383150][ T9476] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  577.395273][ T9476] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  577.405535][ T9476] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1241: Corrupt directory, running e2fsck is recommended
[  577.431649][ T9476] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  577.445555][ T9476] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.1241: corrupted in-inode xattr
[  577.460427][ T9476] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1241: couldn't read orphan inode 15 (err -117)
[  577.475081][ T9476] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  577.892832][ T9483] loop5: detected capacity change from 0 to 1024
[  578.292882][ T9490] hfsplus: found bad thread record in catalog
[  578.819929][  T154] hfsplus: b-tree write err: -5, ino 4
[  578.936733][ T9493] loop3: detected capacity change from 0 to 512
[  580.517241][ T9493] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1244: inode has both inline data and extents flags
[  580.531021][ T9493] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1244: couldn't read orphan inode 15 (err -117)
[  580.544357][ T9493] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  580.679049][ T9502] loop5: detected capacity change from 0 to 1024
[  581.080118][ T9506] hfsplus: found bad thread record in catalog
[  582.686299][ T4675] hfsplus: b-tree write err: -5, ino 4
[  584.578963][ T9526] loop4: detected capacity change from 0 to 1024
[  584.967006][ T9530] loop5: detected capacity change from 0 to 32768
[  584.990245][ T9530] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  585.003071][ T9530] JBD2: Ignoring recovery information on journal
[  585.445119][ T9530] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  585.631175][ T9535] loop3: detected capacity change from 0 to 32768
[  585.845174][ T9541] loop4: detected capacity change from 0 to 1024
[  585.859373][ T9535] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  585.869901][ T9535] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  586.741582][ T9535] JBD2: Ignoring recovery information on journal
[  586.836543][ T9535] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  587.519930][ T8784] ocfs2: Unmounting device (7,5) on (node local)
[  589.792435][  T154] hfsplus: b-tree write err: -5, ino 4
[  589.805624][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  590.265235][ T9562] loop4: detected capacity change from 0 to 32768
[  590.771207][ T9569] loop3: detected capacity change from 0 to 1024
[  590.791492][ T9562] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  590.803306][ T9562] JBD2: Ignoring recovery information on journal
[  590.877638][ T9562] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  592.818149][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  594.312346][ T9604] loop4: detected capacity change from 0 to 512
[  596.016281][ T9604] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  596.028013][ T9604] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  596.038177][ T9604] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1269: Corrupt directory, running e2fsck is recommended
[  596.054666][ T9604] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  596.070194][ T9604] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.1269: corrupted in-inode xattr
[  596.083257][ T9604] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1269: couldn't read orphan inode 15 (err -117)
[  596.095997][ T9604] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  596.392140][ T9604] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  596.404387][ T9604] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  596.414768][ T9604] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1269: Corrupt directory, running e2fsck is recommended
[  596.884840][ T9604] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1269: path /229/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  596.956053][ T9604] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 22: comm syz.4.1269: path /229/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0
[  597.285460][ T9629] loop3: detected capacity change from 0 to 1024
[  598.420930][ T9641] loop4: detected capacity change from 0 to 512
[  598.495248][ T9641] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  598.507410][ T9641] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  598.518031][ T9641] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1275: Corrupt directory, running e2fsck is recommended
[  598.538317][ T9641] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  598.547580][ T9641] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.1275: corrupted in-inode xattr
[  598.562633][ T9641] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1275: couldn't read orphan inode 15 (err -117)
[  598.576434][ T9641] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  598.680994][ T9641] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  598.693111][ T9641] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  598.703305][ T9641] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1275: Corrupt directory, running e2fsck is recommended
[  598.719043][ T9641] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1275: path /230/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  599.496755][ T9649] hfsplus: found bad thread record in catalog
[  600.192786][ T3049] hfsplus: b-tree write err: -5, ino 4
[  601.480336][ T9671] loop4: detected capacity change from 0 to 512
[  603.048169][ T9671] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  603.059893][ T9671] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  603.070424][ T9671] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1283: Corrupt directory, running e2fsck is recommended
[  603.252988][ T9671] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  603.261462][ T9671] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.1283: corrupted in-inode xattr
[  603.274530][ T9671] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1283: couldn't read orphan inode 15 (err -117)
[  603.287240][ T9671] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  603.741360][ T9671] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  603.753218][ T9671] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  603.763746][ T9671] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1283: Corrupt directory, running e2fsck is recommended
[  603.779065][ T9671] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1283: path /232/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  604.060368][ T9671] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 22: comm syz.4.1283: path /232/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0
[  604.080718][ T9671] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 8: comm syz.4.1283: path /232/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  604.503401][ T9703] loop3: detected capacity change from 0 to 1024
[  606.203347][ T9711] loop5: detected capacity change from 0 to 512
[  606.394135][ T9711] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  606.405999][ T9711] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  606.416840][ T9711] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1292: Corrupt directory, running e2fsck is recommended
[  606.432141][ T9711] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  606.901672][ T9711] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.1292: corrupted in-inode xattr
[  606.967805][ T9711] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1292: couldn't read orphan inode 15 (err -117)
[  606.987143][ T9711] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  607.534824][ T9711] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  607.546878][ T9711] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  607.557125][ T9711] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1292: Corrupt directory, running e2fsck is recommended
[  607.570203][ T9711] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.1292: path /15/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  607.591511][ T9711] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 22: comm syz.5.1292: path /15/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0
[  607.612189][ T9711] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 8: comm syz.5.1292: path /15/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  607.902727][ T9719] loop4: detected capacity change from 0 to 32768
[  608.176876][ T9723] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  608.762528][ T9719] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  608.774806][ T9719] JBD2: Ignoring recovery information on journal
[  608.875501][ T9719] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  609.163428][ T9730] loop5: detected capacity change from 0 to 32768
[  609.264975][ T9730] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  609.275860][ T9730] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  609.291640][ T9730] JBD2: Ignoring recovery information on journal
[  609.324737][ T3049] hfsplus: b-tree write err: -5, ino 4
[  609.377417][ T9730] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  610.405853][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  611.317453][ T8784] ocfs2: Unmounting device (7,5) on (node local)
[  611.413615][ T9759] loop3: detected capacity change from 0 to 512
[  612.791935][ T9759] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1304: inode has both inline data and extents flags
[  612.806502][ T9759] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1304: couldn't read orphan inode 15 (err -117)
[  612.822032][ T9759] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  613.629027][ T9769] loop4: detected capacity change from 0 to 512
[  613.930929][ T9769] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  613.942588][ T9769] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  613.952878][ T9769] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1303: Corrupt directory, running e2fsck is recommended
[  613.970018][ T9769] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  613.978527][ T9769] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.1303: corrupted in-inode xattr
[  613.991266][ T9769] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1303: couldn't read orphan inode 15 (err -117)
[  614.004033][ T9769] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback.
[  614.115988][ T9769] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  614.127558][ T9769] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  614.137692][ T9769] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1303: Corrupt directory, running e2fsck is recommended
[  614.150667][ T9769] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1303: path /235/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  614.173844][ T9769] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 22: comm syz.4.1303: path /235/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0
[  614.195056][ T9769] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 8: comm syz.4.1303: path /235/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  614.485193][ T9786] loop3: detected capacity change from 0 to 1024
[  614.525675][ T9788] loop4: detected capacity change from 0 to 1024
[  614.629654][ T9794] loop5: detected capacity change from 0 to 512
[  615.222614][ T9794] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1310: inode has both inline data and extents flags
[  615.238646][ T9794] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1310: couldn't read orphan inode 15 (err -117)
[  615.253576][ T9794] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  616.984771][ T4271] hfsplus: b-tree write err: -5, ino 4
[  616.991900][ T8280] hfsplus: b-tree write err: -5, ino 4
[  618.101896][ T9822] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  618.322033][ T9830] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  619.649340][ T9838] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  622.082111][ T9863] loop3: detected capacity change from 0 to 512
[  623.527425][ T9863] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1324: inode has both inline data and extents flags
[  623.542621][ T9863] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1324: couldn't read orphan inode 15 (err -117)
[  623.556691][ T9863] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  624.288535][ T9873] loop4: detected capacity change from 0 to 32768
[  624.355054][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  624.361664][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  624.422969][ T9873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1326 (9873)
[  624.539650][ T9873] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  624.548505][ T9873] BTRFS info (device loop4): setting nodatacow, compression disabled
[  624.556973][ T9873] BTRFS info (device loop4): enabling auto defrag
[  624.563721][ T9873] BTRFS info (device loop4): max_inline at 0
[  624.569837][ T9873] BTRFS info (device loop4): using free space tree
[  624.576433][ T9873] BTRFS info (device loop4): has skinny extents
[  626.809101][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  627.323574][ T9921] loop5: detected capacity change from 0 to 512
[  628.641379][ T9921] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1331: inode has both inline data and extents flags
[  628.656254][ T9921] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1331: couldn't read orphan inode 15 (err -117)
[  628.670712][ T9921] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  629.079048][ T9920] loop3: detected capacity change from 0 to 1024
[  630.368969][ T9931] hfsplus: found bad thread record in catalog
[  630.593600][  T144] hfsplus: b-tree write err: -5, ino 4
[  632.051139][ T9944] loop3: detected capacity change from 0 to 1024
[  633.414599][ T9964] loop3: detected capacity change from 0 to 512
[  635.282159][ T9964] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1342: inode has both inline data and extents flags
[  635.299430][ T9964] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1342: couldn't read orphan inode 15 (err -117)
[  635.319842][ T9964] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  635.466480][ T9977] loop5: detected capacity change from 0 to 1024
[  637.051753][ T4573] hfsplus: b-tree write err: -5, ino 4
[  638.404997][T10020] loop3: detected capacity change from 0 to 1024
[  638.518260][T10025] loop4: detected capacity change from 0 to 1024
[  638.911273][T10031] hfsplus: found bad thread record in catalog
[  639.392146][ T4573] hfsplus: b-tree write err: -5, ino 4
[  639.598491][T10033] SET target dimension over the limit!
[  639.691643][T10037] hfsplus: found bad thread record in catalog
[  640.037050][T10018] loop5: detected capacity change from 0 to 32768
[  640.079854][T10018] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1353 (10018)
[  640.218453][T10018] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  640.259035][T10018] BTRFS info (device loop5): setting nodatacow, compression disabled
[  640.311162][T10018] BTRFS info (device loop5): enabling auto defrag
[  640.350097][T10018] BTRFS info (device loop5): max_inline at 0
[  640.386803][T10018] BTRFS info (device loop5): using free space tree
[  640.409701][T10018] BTRFS info (device loop5): has skinny extents
[  640.973055][T10039] ptrace attach of "./syz-executor exec"[10042] was attempted by "./syz-executor exec"[10039]
[  641.330242][T10018] BTRFS error (device loop5): open_ctree failed: -12
[  642.028634][T10083] loop5: detected capacity change from 0 to 32768
[  642.077859][T10083] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1361 (10083)
[  642.101653][T10083] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  642.110485][T10083] BTRFS info (device loop5): setting nodatacow, compression disabled
[  642.118646][T10083] BTRFS info (device loop5): enabling auto defrag
[  642.125219][T10083] BTRFS info (device loop5): max_inline at 0
[  642.131606][T10083] BTRFS info (device loop5): using free space tree
[  642.138116][T10083] BTRFS info (device loop5): has skinny extents
[  642.611383][ T4373] hfsplus: b-tree write err: -5, ino 4
[  642.725856][T10079] loop3: detected capacity change from 0 to 32768
[  644.322784][T10079] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.1360 (10079)
[  645.907232][T10115] loop4: detected capacity change from 0 to 32768
[  646.220219][T10115] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1368 (10115)
[  647.929714][ T9883] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (9883)
[  650.393896][ T9379] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (9379)
[  651.203389][T10135] IPv6: NLM_F_CREATE should be specified when creating new route
[  652.087913][T10138] loop3: detected capacity change from 0 to 32768
[  652.150797][T10138] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  652.167001][T10138] JBD2: Ignoring recovery information on journal
[  652.350974][T10138] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  654.545624][T10156] loop5: detected capacity change from 0 to 32768
[  654.719903][T10156] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  654.729106][T10156] BTRFS info (device loop5): setting nodatacow, compression disabled
[  654.737298][T10156] BTRFS info (device loop5): enabling auto defrag
[  654.744142][T10156] BTRFS info (device loop5): max_inline at 0
[  654.750151][T10156] BTRFS info (device loop5): using free space tree
[  654.756737][T10156] BTRFS info (device loop5): has skinny extents
[  655.766644][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  656.245194][T10181] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  660.706037][T10222] IPv6: NLM_F_CREATE should be specified when creating new route
[  662.097701][  T150] block nbd3: Attempted send on invalid socket
[  662.120027][  T150] blk_update_request: I/O error, dev nbd3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  662.122382][T10228] qnx4: unable to read the superblock
[  665.639632][T10077] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  665.850690][T10255] loop3: detected capacity change from 0 to 1024
[  665.892207][T10257] SET target dimension over the limit!
[  666.158938][T10077] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  666.169698][T10077] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  666.178871][T10077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.196911][T10077] usb 6-1: config 0 descriptor??
[  666.991192][T10077] pwc: Askey VC010 type 2 USB webcam detected.
[  667.232276][T10265] loop4: detected capacity change from 0 to 512
[  667.310197][T10077] pwc: recv_control_msg error -32 req 02 val 2b00
[  668.087600][T10265] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1403: inode has both inline data and extents flags
[  668.102282][T10265] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1403: couldn't read orphan inode 15 (err -117)
[  668.116907][T10265] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  669.279766][T10077] pwc: recv_control_msg error -32 req 02 val 2700
[  669.379717][T10077] pwc: recv_control_msg error -32 req 02 val 2c00
[  669.399742][T10077] pwc: recv_control_msg error -71 req 04 val 1000
[  669.419773][T10077] pwc: recv_control_msg error -71 req 04 val 1300
[  669.439749][T10077] pwc: recv_control_msg error -71 req 04 val 1400
[  669.459638][T10077] pwc: recv_control_msg error -71 req 02 val 2000
[  669.491948][T10077] pwc: recv_control_msg error -71 req 02 val 2100
[  669.520795][T10077] pwc: recv_control_msg error -71 req 04 val 1500
[  669.646177][T10077] pwc: recv_control_msg error -71 req 02 val 2500
[  669.669676][T10077] pwc: recv_control_msg error -71 req 02 val 2400
[  669.869827][T10077] pwc: recv_control_msg error -71 req 02 val 2600
[  669.878328][ T4682] hfsplus: b-tree write err: -5, ino 4
[  669.949744][T10077] pwc: recv_control_msg error -71 req 02 val 2900
[  670.039744][T10077] pwc: recv_control_msg error -71 req 02 val 2800
[  670.089768][T10077] pwc: recv_control_msg error -71 req 04 val 1100
[  670.208284][T10077] pwc: recv_control_msg error -71 req 04 val 1200
[  670.228539][T10077] pwc: Registered as video103.
[  670.250646][T10077] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7
[  671.290072][T10077] usb 6-1: USB disconnect, device number 2
[  671.364807][T10290] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  672.604841][ T4908] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  673.293863][T10316] loop5: detected capacity change from 0 to 32768
[  673.331031][ T4908] usb 5-1: Using ep0 maxpacket: 32
[  673.346143][T10316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1416 (10316)
[  673.371949][T10316] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  673.380808][T10316] BTRFS info (device loop5): setting nodatacow, compression disabled
[  673.389065][T10316] BTRFS info (device loop5): enabling auto defrag
[  673.395880][T10316] BTRFS info (device loop5): max_inline at 0
[  673.401889][T10316] BTRFS info (device loop5): using free space tree
[  673.408543][T10316] BTRFS info (device loop5): has skinny extents
[  674.579669][ T4908] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  674.610430][ T4908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.618478][ T4908] usb 5-1: Product: syz
[  674.633336][ T4908] usb 5-1: Manufacturer: syz
[  674.769667][ T4908] usb 5-1: config 0 descriptor??
[  675.178211][ T4908] usb 5-1: can't set config #0, error -71
[  676.788050][ T4908] usb 5-1: USB disconnect, device number 18
[  679.412600][T10364] ptrace attach of "./syz-executor exec"[10365] was attempted by "./syz-executor exec"[10364]
[  680.699699][    T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  681.129712][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  681.144666][    T7] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  681.360273][T10393] IPv6: NLM_F_CREATE should be specified when creating new route
[  682.431652][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.659228][    T7] usb 4-1: config 0 descriptor??
[  683.131872][    T7] pwc: Askey VC010 type 2 USB webcam detected.
[  683.649858][    T7] pwc: recv_control_msg error -32 req 02 val 2b00
[  683.710355][    T7] pwc: recv_control_msg error -32 req 02 val 2700
[  683.769742][    T7] pwc: recv_control_msg error -32 req 02 val 2c00
[  683.823115][    T7] pwc: recv_control_msg error -32 req 04 val 1000
[  683.882370][    T7] pwc: recv_control_msg error -32 req 04 val 1300
[  685.549705][    T7] pwc: recv_control_msg error -71 req 04 val 1400
[  685.589656][    T7] pwc: recv_control_msg error -71 req 02 val 2000
[  685.663663][    T7] pwc: recv_control_msg error -71 req 02 val 2100
[  685.769724][    T7] pwc: recv_control_msg error -71 req 04 val 1500
[  685.793820][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  685.800207][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  685.809833][    T7] pwc: recv_control_msg error -71 req 02 val 2500
[  685.839642][    T7] pwc: recv_control_msg error -71 req 02 val 2400
[  685.879680][    T7] pwc: recv_control_msg error -71 req 02 val 2600
[  686.051204][    T7] pwc: recv_control_msg error -71 req 02 val 2900
[  686.811771][    T7] pwc: recv_control_msg error -71 req 02 val 2800
[  686.920706][    T7] pwc: recv_control_msg error -71 req 04 val 1100
[  688.669690][    T7] pwc: recv_control_msg error -71 req 04 val 1200
[  688.710327][    T7] pwc: Registered as video103.
[  688.725016][    T7] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8
[  688.811834][    T7] usb 4-1: USB disconnect, device number 16
[  699.939637][    T7] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  701.495746][    T7] usb 5-1: Using ep0 maxpacket: 32
[  701.619825][    T7] usb 5-1: config 109 has an invalid interface number: 123 but max is 0
[  701.648225][    T7] usb 5-1: config 109 has no interface number 0
[  701.824249][    T7] usb 5-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  701.886622][T10519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  702.585835][    T7] usb 5-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024
[  702.639620][    T7] usb 5-1: config 109 interface 123 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  702.700766][    T7] usb 5-1: config 109 interface 123 has no altsetting 0
[  702.799720][    T7] usb 5-1: string descriptor 0 read error: -71
[  703.811658][T10527] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  703.821701][    T7] usb 5-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7
[  703.835324][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.864122][    T7] usb 5-1: can't set config #109, error -71
[  703.878897][    T7] usb 5-1: USB disconnect, device number 19
[  704.174875][T10534] ==================================================================
[  704.183802][T10534] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370
[  704.191040][T10534] Read of size 8 at addr ffff88802a0fb418 by task syz.4.1471/10534
[  704.199297][T10534] 
[  704.201737][T10534] CPU: 0 PID: 10534 Comm: syz.4.1471 Not tainted syzkaller #0
[  704.209480][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  704.219720][T10534] Call Trace:
[  704.223023][T10534]  <TASK>
[  704.226112][T10534]  dump_stack_lvl+0x188/0x250
[  704.230827][T10534]  ? show_regs_print_info+0x20/0x20
[  704.236056][T10534]  ? _printk+0xda/0x130
[  704.240345][T10534]  ? dvb_device_open+0xc6/0x370
[  704.245515][T10534]  ? load_image+0x400/0x400
[  704.250050][T10534]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  704.255653][T10534]  print_address_description+0x60/0x2d0
[  704.261502][T10534]  ? dvb_device_open+0xc6/0x370
[  704.266480][T10534]  kasan_report+0xdf/0x130
[  704.270919][T10534]  ? dvb_device_open+0xc6/0x370
[  704.275794][T10534]  dvb_device_open+0xc6/0x370
[  704.280494][T10534]  ? do_raw_spin_unlock+0x11d/0x230
[  704.285805][T10534]  chrdev_open+0x5c5/0x6a0
[  704.290250][T10534]  ? cd_forget+0x160/0x160
[  704.294702][T10534]  ? fsnotify_perm+0x3a7/0x560
[  704.299512][T10534]  ? cd_forget+0x160/0x160
[  704.304033][T10534]  do_dentry_open+0x7ff/0xf80
[  704.308925][T10534]  path_openat+0x26f5/0x2fa0
[  704.313577][T10534]  ? verify_lock_unused+0x140/0x140
[  704.319067][T10534]  ? slab_post_alloc_hook+0x4c/0x380
[  704.324399][T10534]  ? do_filp_open+0x410/0x410
[  704.329114][T10534]  do_filp_open+0x1e2/0x410
[  704.333742][T10534]  ? vfs_tmpfile+0x300/0x300
[  704.338380][T10534]  ? _raw_spin_unlock+0x24/0x40
[  704.343339][T10534]  ? alloc_fd+0x598/0x630
[  704.347820][T10534]  do_sys_openat2+0x150/0x4b0
[  704.352543][T10534]  ? __lock_acquire+0x7d10/0x7d10
[  704.357700][T10534]  ? do_sys_open+0xe0/0xe0
[  704.362157][T10534]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  704.368175][T10534]  ? lock_chain_count+0x20/0x20
[  704.373490][T10534]  ? vtime_user_exit+0x2c8/0x3e0
[  704.378453][T10534]  __x64_sys_openat+0x135/0x160
[  704.383331][T10534]  do_syscall_64+0x4c/0xa0
[  704.387770][T10534]  ? clear_bhb_loop+0x30/0x80
[  704.392555][T10534]  ? clear_bhb_loop+0x30/0x80
[  704.397258][T10534]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  704.403261][T10534] RIP: 0033:0x7f0195836fce
[  704.407702][T10534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  704.427357][T10534] RSP: 002b:00007f0193a8db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  704.435991][T10534] RAX: ffffffffffffffda RBX: 00007f0193a8e6c0 RCX: 00007f0195836fce
[  704.443989][T10534] RDX: 0000000000000002 RSI: 00007f0193a8dc00 RDI: ffffffffffffff9c
[  704.451981][T10534] RBP: 00007f0193a8dc00 R08: 0000000000000000 R09: 0000000000000000
[  704.459973][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  704.467961][T10534] R13: 00007f0195af0218 R14: 00007f0195af0180 R15: 00007ffccdfb2cf8
[  704.476061][T10534]  </TASK>
[  704.479186][T10534] 
[  704.481526][T10534] Allocated by task 1:
[  704.485607][T10534]  __kasan_kmalloc+0xb5/0xf0
[  704.490392][T10534]  dvb_register_device+0x311/0x2170
[  704.495624][T10534]  dvb_register_frontend+0x645/0x920
[  704.500932][T10534]  vidtv_bridge_probe+0x9a1/0xf70
[  704.506070][T10534]  platform_probe+0x137/0x1c0
[  704.510763][T10534]  really_probe+0x284/0xc80
[  704.515284][T10534]  __driver_probe_device+0x18c/0x330
[  704.520673][T10534]  driver_probe_device+0x4f/0x420
[  704.525745][T10534]  __driver_attach+0x46b/0x670
[  704.530824][T10534]  bus_for_each_dev+0x182/0x1f0
[  704.535695][T10534]  bus_add_driver+0x30a/0x5a0
[  704.540492][T10534]  driver_register+0x32d/0x430
[  704.545275][T10534]  vidtv_bridge_init+0x39/0x70
[  704.550153][T10534]  do_one_initcall+0x272/0x730
[  704.555022][T10534]  do_initcall_level+0x137/0x1f0
[  704.559984][T10534]  do_initcalls+0x4b/0x90
[  704.564435][T10534]  kernel_init_freeable+0x3e9/0x570
[  704.569649][T10534]  kernel_init+0x19/0x1b0
[  704.574001][T10534]  ret_from_fork+0x1f/0x30
[  704.578436][T10534] 
[  704.580772][T10534] Freed by task 10527:
[  704.584910][T10534]  kasan_set_track+0x4b/0x70
[  704.589516][T10534]  kasan_set_free_info+0x1f/0x40
[  704.594475][T10534]  ____kasan_slab_free+0xd5/0x110
[  704.599520][T10534]  slab_free_freelist_hook+0xea/0x170
[  704.605122][T10534]  kfree+0xef/0x2a0
[  704.608969][T10534]  dvb_device_open+0x2e7/0x370
[  704.613774][T10534]  chrdev_open+0x5c5/0x6a0
[  704.618218][T10534]  do_dentry_open+0x7ff/0xf80
[  704.622915][T10534]  path_openat+0x26f5/0x2fa0
[  704.627529][T10534]  do_filp_open+0x1e2/0x410
[  704.632051][T10534]  do_sys_openat2+0x150/0x4b0
[  704.636870][T10534]  __x64_sys_openat+0x135/0x160
[  704.641741][T10534]  do_syscall_64+0x4c/0xa0
[  704.646222][T10534]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  704.652325][T10534] 
[  704.654669][T10534] The buggy address belongs to the object at ffff88802a0fb400
[  704.654669][T10534]  which belongs to the cache kmalloc-256 of size 256
[  704.668998][T10534] The buggy address is located 24 bytes inside of
[  704.668998][T10534]  256-byte region [ffff88802a0fb400, ffff88802a0fb500)
[  704.682289][T10534] The buggy address belongs to the page:
[  704.687933][T10534] page:ffffea0000a83e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a0fa
[  704.698230][T10534] head:ffffea0000a83e80 order:1 compound_mapcount:0
[  704.704922][T10534] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  704.713156][T10534] raw: 00fff00000010200 ffffea0000a6ea80 0000000300000003 ffff888016c41b40
[  704.721882][T10534] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  704.730561][T10534] page dumped because: kasan: bad access detected
[  704.736986][T10534] page_owner tracks the page as allocated
[  704.742713][T10534] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2804, ts 13666226756, free_ts 0
[  704.761243][T10534]  get_page_from_freelist+0x1bbd/0x1ca0
[  704.767036][T10534]  __alloc_pages+0x1ee/0x480
[  704.771653][T10534]  new_slab+0xc0/0x4b0
[  704.775827][T10534]  ___slab_alloc+0x80a/0xdd0
[  704.780520][T10534]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  704.785907][T10534]  kthread+0x10b/0x520
[  704.790002][T10534]  ret_from_fork+0x1f/0x30
[  704.794455][T10534] page_owner free stack trace missing
[  704.799931][T10534] 
[  704.802445][T10534] Memory state around the buggy address:
[  704.808096][T10534]  ffff88802a0fb300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  704.816176][T10534]  ffff88802a0fb380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  704.824320][T10534] >ffff88802a0fb400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  704.832396][T10534]                             ^
[  704.837342][T10534]  ffff88802a0fb480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  704.845445][T10534]  ffff88802a0fb500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  704.853521][T10534] ==================================================================
[  704.861591][T10534] Disabling lock debugging due to kernel taint
[  704.868754][T10534] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  704.876318][T10534] CPU: 0 PID: 10534 Comm: syz.4.1471 Tainted: G    B             syzkaller #0
[  704.885181][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  704.895364][T10534] Call Trace:
[  704.898667][T10534]  <TASK>
[  704.901613][T10534]  dump_stack_lvl+0x188/0x250
[  704.906313][T10534]  ? show_regs_print_info+0x20/0x20
[  704.911636][T10534]  ? load_image+0x400/0x400
[  704.916308][T10534]  panic+0x2e5/0x810
[  704.920290][T10534]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  704.926469][T10534]  ? bpf_jit_dump+0xd0/0xd0
[  704.931092][T10534]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  704.937085][T10534]  ? _raw_spin_unlock+0x40/0x40
[  704.942050][T10534]  ? dvb_device_open+0xc6/0x370
[  704.946922][T10534]  check_panic_on_warn+0x80/0xa0
[  704.951874][T10534]  ? dvb_device_open+0xc6/0x370
[  704.956740][T10534]  end_report+0x6d/0xf0
[  704.961003][T10534]  kasan_report+0x102/0x130
[  704.965543][T10534]  ? dvb_device_open+0xc6/0x370
[  704.970407][T10534]  dvb_device_open+0xc6/0x370
[  704.975201][T10534]  ? do_raw_spin_unlock+0x11d/0x230
[  704.980591][T10534]  chrdev_open+0x5c5/0x6a0
[  704.985119][T10534]  ? cd_forget+0x160/0x160
[  704.989555][T10534]  ? fsnotify_perm+0x3a7/0x560
[  704.994333][T10534]  ? cd_forget+0x160/0x160
[  704.998768][T10534]  do_dentry_open+0x7ff/0xf80
[  705.003472][T10534]  path_openat+0x26f5/0x2fa0
[  705.008095][T10534]  ? verify_lock_unused+0x140/0x140
[  705.013322][T10534]  ? slab_post_alloc_hook+0x4c/0x380
[  705.018708][T10534]  ? do_filp_open+0x410/0x410
[  705.023404][T10534]  do_filp_open+0x1e2/0x410
[  705.027928][T10534]  ? vfs_tmpfile+0x300/0x300
[  705.032542][T10534]  ? _raw_spin_unlock+0x24/0x40
[  705.037405][T10534]  ? alloc_fd+0x598/0x630
[  705.041758][T10534]  do_sys_openat2+0x150/0x4b0
[  705.046563][T10534]  ? __lock_acquire+0x7d10/0x7d10
[  705.051621][T10534]  ? do_sys_open+0xe0/0xe0
[  705.056186][T10534]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  705.062282][T10534]  ? lock_chain_count+0x20/0x20
[  705.067149][T10534]  ? vtime_user_exit+0x2c8/0x3e0
[  705.072119][T10534]  __x64_sys_openat+0x135/0x160
[  705.077091][T10534]  do_syscall_64+0x4c/0xa0
[  705.081520][T10534]  ? clear_bhb_loop+0x30/0x80
[  705.086270][T10534]  ? clear_bhb_loop+0x30/0x80
[  705.091046][T10534]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  705.096964][T10534] RIP: 0033:0x7f0195836fce
[  705.101496][T10534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  705.121305][T10534] RSP: 002b:00007f0193a8db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  705.130193][T10534] RAX: ffffffffffffffda RBX: 00007f0193a8e6c0 RCX: 00007f0195836fce
[  705.138366][T10534] RDX: 0000000000000002 RSI: 00007f0193a8dc00 RDI: ffffffffffffff9c
[  705.146352][T10534] RBP: 00007f0193a8dc00 R08: 0000000000000000 R09: 0000000000000000
[  705.154545][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  705.162535][T10534] R13: 00007f0195af0218 R14: 00007f0195af0180 R15: 00007ffccdfb2cf8
[  705.170616][T10534]  </TASK>
[  705.174025][T10534] Kernel Offset: disabled
[  705.178352][T10534] Rebooting in 86400 seconds..