last executing test programs: 6m24.069250495s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d600", 0x43}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m23.51842699s ago: executing program 1 (id=8): setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000340)=0x4020, 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB]) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4004}}}, 0x24}}, 0x40) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) 6m22.345012167s ago: executing program 4 (id=5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001b80)='pimreg1\x00') 6m21.05821842s ago: executing program 1 (id=10): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$FUSE(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) writev(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r2, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 6m19.059334656s ago: executing program 1 (id=14): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) writev(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 6m18.739986839s ago: executing program 1 (id=15): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000001b80)='pimreg1\x00') 6m6.488371039s ago: executing program 32 (id=5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001b80)='pimreg1\x00') 6m2.674463848s ago: executing program 33 (id=15): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000001b80)='pimreg1\x00') 4m20.385219519s ago: executing program 6 (id=228): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x9) sendmmsg$unix(r1, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18, 0x4000010}}], 0x1, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) accept4$tipc(r3, &(0x7f0000000280)=@name, &(0x7f0000000340)=0x10, 0x400) pread64(r5, 0x0, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0xf, 0x0, 0x2, 0x80}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00'}) setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0) read$fb(r3, &(0x7f00000003c0)=""/181, 0xb5) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$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") keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f0000000200)={{}, 0x0, 0x8000000, 0x401, {0x0, 0x3}, 0x1, 0x800}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048c1}, 0x4054) 4m12.603835336s ago: executing program 6 (id=242): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x70) 4m11.521733712s ago: executing program 6 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x20000) 4m11.13255355s ago: executing program 6 (id=248): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0xed, 0x6be8, 0x48, @rand_addr=' \x01\x00', @private0, 0x7, 0x10, 0x8, 0x2}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@enum={0x5}, @union={0x6, 0x0, 0x0, 0x5, 0x1, 0x1}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e]}}, &(0x7f0000000640)=""/160, 0x43, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x18, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m10.661282373s ago: executing program 6 (id=250): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x15, '\x00', @buffer={"010d1de90c61b857c2eb1b10777c84e1e74ff47695c6b9f70f72ad6cc5f48537", 0x20}, 0x7a7ce1c2}, {0x25, '\x00', @buffer={"cc80b535afe2bc85b5f410ddd0fc1e4b439761ee6f9df9f87f79fc6cdbb27e15", 0x20}, 0x802}]}) 4m10.023587391s ago: executing program 6 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2c41, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000005c00)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r4, 0xfffffffffffffffd, 0xbb) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/55, 0x37) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r2, r5, 0x0, 0x1) 3m54.423682576s ago: executing program 34 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2c41, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000005c00)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r4, 0xfffffffffffffffd, 0xbb) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/55, 0x37) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r2, r5, 0x0, 0x1) 19.112132272s ago: executing program 5 (id=720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 18.197697683s ago: executing program 5 (id=722): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 16.390323598s ago: executing program 0 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="e1f027bd7000bbdbdf250600b60008000100", @ANYRES32=0x0, @ANYBLOB="08000e"], 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040000) 14.972402024s ago: executing program 0 (id=726): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 13.027106861s ago: executing program 5 (id=732): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x9e, &(0x7f0000000080)={&(0x7f00000007c0)={0x3f0, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3a4, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2e8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2a0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 12.932529571s ago: executing program 3 (id=733): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 11.325849978s ago: executing program 7 (id=734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 10.792990997s ago: executing program 7 (id=735): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020}, 0x2020) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)={r4, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 9.591004128s ago: executing program 7 (id=736): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x14, 0x5, "35abdaa7ee"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.363082891s ago: executing program 0 (id=737): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 8.952743706s ago: executing program 3 (id=738): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 8.703331194s ago: executing program 5 (id=739): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x9e, &(0x7f0000000080)={&(0x7f00000007c0)={0x3f0, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3a4, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2e8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2a0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 6.46681221s ago: executing program 3 (id=741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xffe0}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.431090726s ago: executing program 3 (id=742): syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x86, &(0x7f00000002c0)={[{}, {@usrjquota_file, 0x4}, {@grpjquota}, {@usrjquota_file}, {@usrjquota, 0x3d}]}, 0xfc, 0x110a, &(0x7f0000006580)="$eJzs2LFqFEEYB/D/7B2YbmXTL4IWFhISzs4qRYRrrW1EUpkqV0UE8V18HEllH/IAFgFLYWQ3t0YkEDBnJPD7wcwO38438005EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj0Yui2m6SbIk2SkvT96fI8ST/FH36ZNSl5dbhcHRwvXq6SzMbpZWhD1pCWbu/xVrfoFt1e93x7/0m3Onn/7s3R0eHxepmSPmcXmz9IWddzra3N7wcAAAD3Rb219s8l53e7PwAAAHCTjT4mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyF2l6NuyQ/aq1pkpSk70+X50n6/1kgAAAAcGslTV6318UzPgNceZavbRnjU/tehjm7+TzmP7izmgEAAOD+md84o/x2H3+aeWqtH6d/jzLPzs7leP3Jt/1kdnKQ3V938k9jf3bx4e3USp39g7MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9mBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAOClAAAA///LONy9") socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 4.615127146s ago: executing program 2 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.518444277s ago: executing program 7 (id=744): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 4.430888478s ago: executing program 2 (id=745): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x109540) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xe7d, 0x3ff, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2.788312137s ago: executing program 7 (id=746): syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x86, &(0x7f00000002c0)={[{}, {@usrjquota_file, 0x4}, {@grpjquota}, {@usrjquota_file}, {@usrjquota, 0x3d}]}, 0xfc, 0x110a, &(0x7f0000006580)="$eJzs2LFqFEEYB/D/7B2YbmXTL4IWFhISzs4qRYRrrW1EUpkqV0UE8V18HEllH/IAFgFLYWQ3t0YkEDBnJPD7wcwO38438005EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj0Yui2m6SbIk2SkvT96fI8ST/FH36ZNSl5dbhcHRwvXq6SzMbpZWhD1pCWbu/xVrfoFt1e93x7/0m3Onn/7s3R0eHxepmSPmcXmz9IWddzra3N7wcAAAD3Rb219s8l53e7PwAAAHCTjT4mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyF2l6NuyQ/aq1pkpSk70+X50n6/1kgAAAAcGslTV6318UzPgNceZavbRnjU/tehjm7+TzmP7izmgEAAOD+md84o/x2H3+aeWqtH6d/jzLPzs7leP3Jt/1kdnKQ3V938k9jf3bx4e3USp39g7MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9mBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAOClAAAA///LONy9") socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.730927345s ago: executing program 2 (id=747): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)={r5, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 2.536991355s ago: executing program 5 (id=748): syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x86, &(0x7f00000002c0)={[{}, {@usrjquota_file, 0x4}, {@grpjquota}, {@usrjquota_file}, {@usrjquota, 0x3d}]}, 0xfc, 0x110a, &(0x7f0000006580)="$eJzs2LFqFEEYB/D/7B2YbmXTL4IWFhISzs4qRYRrrW1EUpkqV0UE8V18HEllH/IAFgFLYWQ3t0YkEDBnJPD7wcwO38438005EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj0Yui2m6SbIk2SkvT96fI8ST/FH36ZNSl5dbhcHRwvXq6SzMbpZWhD1pCWbu/xVrfoFt1e93x7/0m3Onn/7s3R0eHxepmSPmcXmz9IWddzra3N7wcAAAD3Rb219s8l53e7PwAAAHCTjT4mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyF2l6NuyQ/aq1pkpSk70+X50n6/1kgAAAAcGslTV6318UzPgNceZavbRnjU/tehjm7+TzmP7izmgEAAOD+md84o/x2H3+aeWqtH6d/jzLPzs7leP3Jt/1kdnKQ3V938k9jf3bx4e3USp39g7MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9mBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAOClAAAA///LONy9") syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.45927971s ago: executing program 2 (id=749): syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x86, &(0x7f00000002c0)={[{}, {@usrjquota_file, 0x4}, {@grpjquota}, {@usrjquota_file}, {@usrjquota, 0x3d}]}, 0xfc, 0x110a, &(0x7f0000006580)="$eJzs2LFqFEEYB/D/7B2YbmXTL4IWFhISzs4qRYRrrW1EUpkqV0UE8V18HEllH/IAFgFLYWQ3t0YkEDBnJPD7wcwO38438005EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj0Yui2m6SbIk2SkvT96fI8ST/FH36ZNSl5dbhcHRwvXq6SzMbpZWhD1pCWbu/xVrfoFt1e93x7/0m3Onn/7s3R0eHxepmSPmcXmz9IWddzra3N7wcAAAD3Rb219s8l53e7PwAAAHCTjT4mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyF2l6NuyQ/aq1pkpSk70+X50n6/1kgAAAAcGslTV6318UzPgNceZavbRnjU/tehjm7+TzmP7izmgEAAOD+md84o/x2H3+aeWqtH6d/jzLPzs7leP3Jt/1kdnKQ3V938k9jf3bx4e3USp39g7MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9mBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAOClAAAA///LONy9") syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.410159559s ago: executing program 0 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a000000110003"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.990513502s ago: executing program 0 (id=751): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x109540) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0xe7d, 0x3ff, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 1.175316083s ago: executing program 2 (id=752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0009df6187ea928a3385a8ba1400000000000000000000001d000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2b", 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 1.173313323s ago: executing program 3 (id=753): r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x8, 0x367}, &(0x7f0000000140), &(0x7f0000000400)) getpid() socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b82, 0x4000, 0xf, 0x0, 0x0) 1.057065508s ago: executing program 0 (id=754): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source', &(0x7f0000000140)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd\xfb\xdee\x81\x80\xff2vw \xb4^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x91\x82j.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+\xack. \xf9\x06\xcf\xb8\xe5$\xee\xb3\x01\r\xee\x8e\xc2y\x80\xb2l{!w\x17-!\x19\xd2;[\x91T\x96\xe8/\xad\xf3Y\x18\xbf\xcb\xbb\x8b\x847}\xc2P\x02e\x9e\x99\xdeU', 0x0) readv(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/245, 0xf5}], 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 268.796415ms ago: executing program 2 (id=755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x4, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xea}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1, 0x4b}}]}, 0x78}, 0x1, 0x7}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TDX_INIT_VM(r2, 0xc004aeba, &(0x7f0000000740)={0x1, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x1000000000000, 0x0, &(0x7f0000ffa000/0x4000)=nil) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000340)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000240)=@x86={0x0, 0xe, 0x3, 0x0, 0x1, 0x4, 0xee, 0x5e, 0x3, 0x4, 0x2, 0x0, 0x0, 0x76, 0x7, 0x7, 0x4, 0x5, 0x5, '\x00', 0x5, 0x7}) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x147, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x15ca, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x135, 0x3, 0x1, 0x5, 0xe0, 0x0, {0x8, 0xb, 0x2, 0x0, 0x1, 0x1, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x50, 0x9}, [@sample_rate={0x13, 0x24, 0xd, 0x1, 0x0, 0x3, [0x0, 0x0, 0x1, 0x1, 0x0, 0x1]}, @effect_unit={0xb, 0x24, 0x7, 0x6, 0x0, 0x6, [0x0, 0x2]}, @multiply_unit={0x7, 0x24, 0xc, 0x7, 0xa, 0x3, 0x6}, @effect_unit={0xf, 0x24, 0x7, 0x3, 0x4, 0x3, [0x0, 0x2, 0x3, 0x0]}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x101, 0x1, 0x3, 0x80, 0x101, 0xb}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x6, 'l\b'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x7fff, 0x8, 0xc}, @as_header={0x10, 0x24, 0x1, 0x2, 0xff, 0x2, 0x3, 0xe, 0x0, 0xbb}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x8, 0x7, "0f4485b7"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x1cfd, 0x9, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0xa3, 0x80, 0xf7}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x3, 0x7, {0x8, 0x25, 0x1, 0x0, 0x3, 0x8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7f}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}, @as_header={0x10, 0x24, 0x1, 0x1, 0x8, 0x0, 0x1, 0x8, 0x10, 0x12}, @as_header={0x10, 0x24, 0x1, 0xff, 0x1, 0x1, 0x1001, 0x0, 0x401, 0x5}, @as_header={0x10, 0x24, 0x1, 0x3, 0x9, 0x3, 0x1002, 0x9, 0x742, 0x7}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x5, 0x5, "5416bdd4f93edd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0xf7, 0x10, 0x5, {0x8, 0x25, 0x1, 0x1, 0x3c, 0x7, 0x4}}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) 121.242034ms ago: executing program 7 (id=756): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 102.971251ms ago: executing program 5 (id=757): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x14, 0x5, "35abdaa7ee"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=758): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020}, 0x2020) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)={r4, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) kernel console output (not intermixed with test programs): T4235] usb 4-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 147.877604][ T4235] usb 4-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 147.938833][ T4235] usb 4-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 147.985174][ T4235] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 148.038879][ T4235] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 148.077911][ T4235] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 148.090414][ T5043] fuse: Invalid rootmode [ 148.097939][ T4235] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 148.109692][ T4235] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 148.181002][ T4235] usb 4-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67 [ 148.200250][ T4235] usb 4-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 148.214346][ T4235] usb 4-1: config 109 interface 123 has no altsetting 0 [ 148.222778][ T4235] usb 4-1: config 109 interface 251 has no altsetting 0 [ 148.230350][ T4235] usb 4-1: config 109 interface 4 has no altsetting 0 [ 148.237247][ T4235] usb 4-1: config 109 interface 205 has no altsetting 0 [ 148.244726][ T4235] usb 4-1: config 109 interface 27 has no altsetting 0 [ 148.848136][ T4235] usb 4-1: string descriptor 0 read error: -71 [ 148.867576][ T4235] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 148.876909][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.130038][ T4235] usb 4-1: can't set config #109, error -71 [ 149.149355][ T4235] usb 4-1: USB disconnect, device number 2 [ 149.197831][ T5063] loop5: detected capacity change from 0 to 8 [ 150.463494][ T5064] loop3: detected capacity change from 0 to 2048 [ 151.266615][ T5064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.568457][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 154.438837][ T5118] Zero length message leads to an empty skb [ 154.679715][ T5115] loop3: detected capacity change from 0 to 32768 [ 156.151086][ T5115] XFS (loop3): Mounting V5 Filesystem [ 156.260671][ T5138] netlink: 16 bytes leftover after parsing attributes in process `syz.5.169'. [ 156.714591][ T5115] XFS (loop3): Ending clean mount [ 156.732998][ T5115] XFS (loop3): Quotacheck needed: Please wait. [ 156.905763][ T5115] XFS (loop3): Quotacheck: Done. [ 157.389883][ T5147] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.399359][ T5147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.406948][ T5147] IPv6: NLM_F_CREATE should be set when creating new route [ 157.560129][ T26] audit: type=1800 audit(1772395915.826:4): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.165" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 157.824239][ T4186] XFS (loop3): Unmounting Filesystem [ 159.713249][ T5165] loop5: detected capacity change from 0 to 164 [ 159.739054][ T5169] loop6: detected capacity change from 0 to 2048 [ 159.818125][ T5165] ======================================================= [ 159.818125][ T5165] WARNING: The mand mount option has been deprecated and [ 159.818125][ T5165] and is ignored by this kernel. Remove the mand [ 159.818125][ T5165] option from the mount to silence this warning. [ 159.818125][ T5165] ======================================================= [ 159.979580][ T5169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.575632][ T5189] loop5: detected capacity change from 0 to 2048 [ 164.099568][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 164.419758][ T5189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.571049][ T26] audit: type=1800 audit(1772395923.866:5): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.182" name="file1" dev="loop5" ino=1415 res=0 errno=0 [ 166.855286][ T5207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.292024][ T5216] loop3: detected capacity change from 0 to 32768 [ 167.497471][ T5220] loop6: detected capacity change from 0 to 32768 [ 167.736050][ T5216] XFS (loop3): Mounting V5 Filesystem [ 167.899066][ T5216] XFS (loop3): Ending clean mount [ 167.907274][ T5216] XFS (loop3): Quotacheck needed: Please wait. [ 167.946512][ T5220] XFS (loop6): Mounting V5 Filesystem [ 167.963222][ T5216] XFS (loop3): Quotacheck: Done. [ 168.222275][ T5220] XFS (loop6): Ending clean mount [ 168.231846][ T5220] XFS (loop6): Quotacheck needed: Please wait. [ 168.405833][ T26] audit: type=1800 audit(1772395926.676:6): pid=5256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.187" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 168.683768][ T5220] XFS (loop6): Quotacheck: Done. [ 168.924918][ T4186] XFS (loop3): Unmounting Filesystem [ 170.704684][ T4394] XFS (loop6): Unmounting Filesystem [ 172.668123][ T5285] overlayfs: missing 'lowerdir' [ 174.467682][ T5312] dlm: no local IP address has been set [ 174.487579][ T5312] dlm: cannot start dlm midcomms -107 [ 174.551724][ T5290] syz.2.198 (5290) used greatest stack depth: 21008 bytes left [ 174.764430][ T5317] loop0: detected capacity change from 0 to 512 [ 176.176522][ T5317] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.201: inode has both inline data and extents flags [ 176.191058][ T5317] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.201: couldn't read orphan inode 15 (err -117) [ 176.206026][ T5317] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 176.887576][ T5323] SET target dimension over the limit! [ 177.218722][ T5326] loop3: detected capacity change from 0 to 32768 [ 177.430106][ T5326] XFS (loop3): Mounting V5 Filesystem [ 177.566161][ T5326] XFS (loop3): Ending clean mount [ 177.580338][ T5326] XFS (loop3): Quotacheck needed: Please wait. [ 178.346344][ T5326] XFS (loop3): Quotacheck: Done. [ 178.708180][ T26] audit: type=1800 audit(1772395936.986:7): pid=5345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.193" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 178.772570][ T5335] dlm: no local IP address has been set [ 178.779078][ T5335] dlm: cannot start dlm midcomms -107 [ 179.102036][ T4186] XFS (loop3): Unmounting Filesystem [ 179.525688][ T5353] loop5: detected capacity change from 0 to 32768 [ 179.783700][ T5353] XFS (loop5): Mounting V5 Filesystem [ 179.940732][ T5353] XFS (loop5): Ending clean mount [ 179.960235][ T5353] XFS (loop5): Quotacheck needed: Please wait. [ 180.014476][ T5353] XFS (loop5): Quotacheck: Done. [ 180.996763][ T26] audit: type=1800 audit(1772395939.126:8): pid=5374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.205" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 181.309910][ T5376] overlayfs: missing 'lowerdir' [ 182.365014][ T4390] XFS (loop5): Unmounting Filesystem [ 182.737279][ T5381] loop6: detected capacity change from 0 to 32768 [ 183.064386][ T5381] XFS (loop6): Mounting V5 Filesystem [ 183.351221][ T5381] XFS (loop6): Ending clean mount [ 183.359150][ T5381] XFS (loop6): Quotacheck needed: Please wait. [ 183.480727][ T5381] XFS (loop6): Quotacheck: Done. [ 184.453131][ T26] audit: type=1800 audit(1772395942.746:9): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.209" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0 [ 184.846672][ T4394] XFS (loop6): Unmounting Filesystem [ 185.156900][ T5415] loop3: detected capacity change from 0 to 32768 [ 185.244755][ T5417] loop5: detected capacity change from 0 to 2048 [ 185.284496][ T5415] XFS (loop3): Mounting V5 Filesystem [ 185.355567][ T5417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.525224][ T5415] XFS (loop3): Ending clean mount [ 185.547111][ T5415] XFS (loop3): Quotacheck needed: Please wait. [ 185.617748][ T5415] XFS (loop3): Quotacheck: Done. [ 186.198554][ T26] audit: type=1800 audit(1772395944.436:10): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.215" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 186.454705][ T4186] XFS (loop3): Unmounting Filesystem [ 186.688141][ T4955] Bluetooth: hci3: command 0x0406 tx timeout [ 186.713709][ T4955] Bluetooth: hci1: command 0x0406 tx timeout [ 186.745256][ T4955] Bluetooth: hci2: command 0x0406 tx timeout [ 186.890229][ T5453] loop6: detected capacity change from 0 to 32768 [ 187.117728][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 187.183157][ T5453] XFS (loop6): Mounting V5 Filesystem [ 187.367516][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 187.469193][ T5453] XFS (loop6): Ending clean mount [ 187.478041][ T5453] XFS (loop6): Quotacheck needed: Please wait. [ 187.487558][ T4230] usb 1-1: config 109 has an invalid interface number: 123 but max is 3 [ 187.495953][ T4230] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 187.540921][ T4230] usb 1-1: config 109 has an invalid interface number: 251 but max is 3 [ 187.567898][ T4230] usb 1-1: config 109 has an invalid interface number: 4 but max is 3 [ 187.582937][ T4230] usb 1-1: config 109 has an invalid interface number: 205 but max is 3 [ 187.619980][ T4230] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 187.657439][ T4230] usb 1-1: config 109 has an invalid interface number: 27 but max is 3 [ 187.666446][ T4230] usb 1-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 188.392664][ T4230] usb 1-1: config 109 has no interface number 0 [ 188.542104][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 188.984836][ T4230] usb 1-1: config 109 has no interface number 1 [ 189.035123][ T4230] usb 1-1: config 109 has no interface number 2 [ 189.042355][ T4230] usb 1-1: config 109 has no interface number 3 [ 189.303938][ T4230] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 189.315241][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 189.327514][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 189.338498][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 189.398501][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 189.688122][ T5488] loop3: detected capacity change from 0 to 32768 [ 189.696264][ T4230] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 189.707516][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 189.731807][ T4230] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 189.752705][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 189.764384][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 189.775758][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 189.787735][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 189.799953][ T4230] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 189.811047][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 189.822646][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 189.837124][ T4230] usb 1-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 189.851648][ T4230] usb 1-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 189.864012][ T4230] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 189.876186][ T4230] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 189.889524][ T4230] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 189.901631][ T4230] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 189.922957][ T4230] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 189.960000][ T4230] usb 1-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67 [ 189.985797][ T5499] loop5: detected capacity change from 0 to 512 [ 190.021010][ T4230] usb 1-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 191.828240][ T5500] loop0: detected capacity change from 0 to 512 [ 191.841075][ T5499] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.226: inode has both inline data and extents flags [ 191.909588][ T5500] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.227: inode has both inline data and extents flags [ 191.924223][ T5500] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.227: couldn't read orphan inode 15 (err -117) [ 191.938930][ T5500] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 193.095648][ T4230] usb 1-1: config 109 interface 123 has no altsetting 0 [ 193.102996][ T4230] usb 1-1: config 109 interface 251 has no altsetting 0 [ 193.110646][ T4230] usb 1-1: config 109 interface 4 has no altsetting 0 [ 193.117598][ T5499] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.226: couldn't read orphan inode 15 (err -117) [ 193.130017][ T4230] usb 1-1: config 109 interface 205 has no altsetting 0 [ 193.137272][ T5499] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 193.147524][ T4230] usb 1-1: config 109 interface 27 has no altsetting 0 [ 193.166257][ T5488] XFS (loop3): Mounting V5 Filesystem [ 193.207538][ T4230] usb 1-1: string descriptor 0 read error: -71 [ 193.216513][ T4230] usb 1-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 193.235969][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.268653][ T5453] XFS (loop6): Quotacheck: Done. [ 193.277807][ T4230] usb 1-1: can't set config #109, error -71 [ 193.366858][ T4230] usb 1-1: USB disconnect, device number 3 [ 193.381005][ T5488] XFS (loop3): log mount failed [ 193.400181][ T4394] XFS (loop6): Unmounting Filesystem [ 194.374087][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380676][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.131618][ T5522] loop3: detected capacity change from 0 to 2048 [ 195.613013][ T5522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.472909][ T5534] loop5: detected capacity change from 0 to 32768 [ 196.556538][ T5539] IPv6: NLM_F_CREATE should be specified when creating new route [ 196.564758][ T5539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.572118][ T5539] IPv6: NLM_F_CREATE should be set when creating new route [ 197.439663][ T5546] fuse: Bad value for 'fd' [ 197.517906][ T5551] loop6: detected capacity change from 0 to 512 [ 197.975529][ T5551] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.228: inode has both inline data and extents flags [ 197.989824][ T5551] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.228: couldn't read orphan inode 15 (err -117) [ 198.002426][ T5551] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 198.060334][ T5540] syz.2.236 (5540) used greatest stack depth: 20624 bytes left [ 198.718174][ T5534] XFS (loop5): Mounting V5 Filesystem [ 198.801077][ T5534] XFS (loop5): Ending clean mount [ 198.808709][ T5534] XFS (loop5): Quotacheck needed: Please wait. [ 198.967691][ T5567] loop0: detected capacity change from 0 to 512 [ 200.405862][ T5534] XFS (loop5): Quotacheck: Done. [ 200.442507][ T4390] XFS (loop5): Unmounting Filesystem [ 200.504542][ T5567] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.239: inode has both inline data and extents flags [ 200.519838][ T5567] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.239: couldn't read orphan inode 15 (err -117) [ 200.534488][ T5567] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 201.530482][ T5583] dlm: no local IP address has been set [ 201.536345][ T5583] dlm: cannot start dlm midcomms -107 [ 202.327750][ T5592] loop3: detected capacity change from 0 to 32768 [ 202.789300][ T5592] XFS (loop3): Mounting V5 Filesystem [ 203.164057][ T5616] sd 0:0:1:0: PR command failed: 2 [ 203.169561][ T5616] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 203.176319][ T5616] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 203.218093][ T5612] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 203.390824][ T5592] XFS (loop3): Ending clean mount [ 203.400129][ T5592] XFS (loop3): Quotacheck needed: Please wait. [ 203.492867][ T5592] XFS (loop3): Quotacheck: Done. [ 204.212640][ T26] audit: type=1800 audit(1772395962.146:11): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.245" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 204.298648][ T4186] XFS (loop3): Unmounting Filesystem [ 204.650118][ T5639] overlayfs: missing 'lowerdir' [ 205.992350][ T5643] loop5: detected capacity change from 0 to 32768 [ 206.141983][ T5647] loop0: detected capacity change from 0 to 32768 [ 206.276073][ T5643] XFS (loop5): Mounting V5 Filesystem [ 206.381977][ T5647] XFS (loop0): Mounting V5 Filesystem [ 206.574306][ T5647] XFS (loop0): Ending clean mount [ 206.584735][ T5647] XFS (loop0): Quotacheck needed: Please wait. [ 206.678004][ T5643] XFS (loop5): Ending clean mount [ 206.718276][ T5647] XFS (loop0): Quotacheck: Done. [ 206.781043][ T5643] XFS (loop5): Quotacheck needed: Please wait. [ 207.236384][ T5680] loop3: detected capacity change from 0 to 32768 [ 207.276503][ T26] audit: type=1800 audit(1772395965.556:12): pid=5682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.257" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 207.539387][ T5643] XFS (loop5): Quotacheck: Done. [ 207.678513][ T4184] XFS (loop0): Unmounting Filesystem [ 208.102120][ T5680] XFS (loop3): Mounting V5 Filesystem [ 208.140142][ T26] audit: type=1800 audit(1772395966.176:13): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.256" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 208.239980][ T5680] XFS (loop3): Ending clean mount [ 208.249942][ T5680] XFS (loop3): Quotacheck needed: Please wait. [ 208.316893][ T5680] XFS (loop3): Quotacheck: Done. [ 208.569958][ T4390] XFS (loop5): Unmounting Filesystem [ 208.749005][ T26] audit: type=1800 audit(1772395966.956:14): pid=5702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.254" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 209.257754][ T4186] XFS (loop3): Unmounting Filesystem [ 210.481753][ T5733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.324813][ T5738] loop3: detected capacity change from 0 to 512 [ 211.465787][ T5738] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.268: inode has both inline data and extents flags [ 211.480413][ T5738] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.268: couldn't read orphan inode 15 (err -117) [ 211.494138][ T5738] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 212.574869][ T5746] loop5: detected capacity change from 0 to 32768 [ 212.695413][ T5750] loop0: detected capacity change from 0 to 512 [ 212.801873][ T5750] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.271: inode has both inline data and extents flags [ 212.816241][ T5750] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.271: couldn't read orphan inode 15 (err -117) [ 212.830965][ T5750] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 212.927212][ T5746] XFS (loop5): Mounting V5 Filesystem [ 213.591152][ T5746] XFS (loop5): Ending clean mount [ 213.605869][ T5746] XFS (loop5): Quotacheck needed: Please wait. [ 213.759656][ T5746] XFS (loop5): Quotacheck: Done. [ 214.070311][ T26] audit: type=1800 audit(1772395972.346:15): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.270" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0 [ 214.415051][ T4390] XFS (loop5): Unmounting Filesystem [ 216.057440][ T4230] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 216.337450][ T4230] usb 6-1: Using ep0 maxpacket: 32 [ 216.457623][ T4230] usb 6-1: config 109 has an invalid interface number: 123 but max is 3 [ 216.475837][ T4230] usb 6-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 216.535073][ T4230] usb 6-1: config 109 has an invalid interface number: 251 but max is 3 [ 216.553637][ T4230] usb 6-1: config 109 has an invalid interface number: 4 but max is 3 [ 216.599070][ T4230] usb 6-1: config 109 has an invalid interface number: 205 but max is 3 [ 216.618003][ T5814] fuse: Bad value for 'fd' [ 216.624538][ T4230] usb 6-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 216.653159][ T4230] usb 6-1: config 109 has an invalid interface number: 27 but max is 3 [ 216.676638][ T4230] usb 6-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 216.732394][ T4230] usb 6-1: config 109 has no interface number 0 [ 216.758945][ T4230] usb 6-1: config 109 has no interface number 1 [ 216.779944][ T4230] usb 6-1: config 109 has no interface number 2 [ 216.800071][ T4230] usb 6-1: config 109 has no interface number 3 [ 216.820063][ T4230] usb 6-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 216.843953][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 216.867649][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 216.892560][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 216.915895][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 216.972765][ T4955] Bluetooth: hci5: command 0x0406 tx timeout [ 216.979083][ T4955] Bluetooth: hci4: command 0x0406 tx timeout [ 217.024351][ T4230] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 217.035523][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 217.064554][ T4230] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 217.078427][ T5828] overlayfs: missing 'lowerdir' [ 217.083790][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 217.113639][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 217.156445][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 217.218222][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 217.272214][ T4230] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 217.305831][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 217.337197][ T4230] usb 6-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 217.382636][ T4230] usb 6-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 217.424851][ T4230] usb 6-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 217.462864][ T4230] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 217.497307][ T4230] usb 6-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 217.536189][ T4230] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 217.574287][ T4230] usb 6-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 217.606691][ T4230] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 217.647456][ T4230] usb 6-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67 [ 217.686583][ T4230] usb 6-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 217.724556][ T4230] usb 6-1: config 109 interface 123 has no altsetting 0 [ 217.748185][ T4230] usb 6-1: config 109 interface 251 has no altsetting 0 [ 217.770040][ T4230] usb 6-1: config 109 interface 4 has no altsetting 0 [ 217.792507][ T4230] usb 6-1: config 109 interface 205 has no altsetting 0 [ 217.817603][ T4230] usb 6-1: config 109 interface 27 has no altsetting 0 [ 218.197735][ T4230] usb 6-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 218.237898][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.245948][ T4230] usb 6-1: Product: 絏ଇᗒ [ 218.278693][ T4230] usb 6-1: SerialNumber: 次낔銗⮬◙ロⳤᖎ쿭礴﨎⫅ѡ쎤똼ᬆ捭婹啘Ꭸቶꭢ飶搢遄禕὿鍢옹칷␰톲쒘쉖눿筶먴䦦쐷ೢᎌ烲᪇閐凎黡돀运⧬ꍼ趎㚳౥鲵핲쐚㝵ỳ튓蚶ꙙ똠稓뜤磈띬蘿耀歸ﯘ傫鉕㳜펶怅ဒ뻍繈眘駱着鲈 [ 218.428682][ T5798] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 218.949321][ T4230] option 6-1:109.123: GSM modem (1-port) converter detected [ 218.997654][ T4230] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 219.171305][ T4230] option 6-1:109.251: GSM modem (1-port) converter detected [ 219.369420][ T5797] udc-core: couldn't find an available UDC or it's busy [ 219.388749][ T5797] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 219.644484][ T5797] udc-core: couldn't find an available UDC or it's busy [ 219.662428][ T5797] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 219.698613][ T5797] udc-core: couldn't find an available UDC or it's busy [ 219.737553][ T5797] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 219.799075][ T4230] option 6-1:109.4: GSM modem (1-port) converter detected [ 219.938370][ T4230] option 6-1:109.205: GSM modem (1-port) converter detected [ 220.155220][ T4230] option 6-1:109.27: GSM modem (1-port) converter detected [ 220.662840][ T4230] usb 6-1: USB disconnect, device number 2 [ 221.165068][ T4230] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 221.441188][ T4230] option 6-1:109.123: device disconnected [ 221.448383][ T4230] option 6-1:109.251: device disconnected [ 221.455203][ T4230] option 6-1:109.4: device disconnected [ 221.779791][ T4955] Bluetooth: hci0: command 0x0409 tx timeout [ 221.788708][ T4230] option 6-1:109.205: device disconnected [ 221.805749][ T4230] option 6-1:109.27: device disconnected [ 222.840064][ T5880] fuse: Bad value for 'fd' [ 222.888088][ T4461] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.037067][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 223.251298][ T5897] loop3: detected capacity change from 0 to 512 [ 224.441158][ T4942] Bluetooth: hci0: command 0x041b tx timeout [ 224.538550][ T5897] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.296: inode has both inline data and extents flags [ 224.555551][ T5897] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.296: couldn't read orphan inode 15 (err -117) [ 224.570528][ T5897] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 224.706417][ T4461] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.086813][ T4461] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.301176][ T5917] loop0: detected capacity change from 0 to 32768 [ 226.450860][ T4461] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.473677][ T5917] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 226.484928][ T5917] JBD2: Ignoring recovery information on journal [ 226.585871][ T5917] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 226.819700][ T4942] Bluetooth: hci0: command 0x040f tx timeout [ 228.699236][ T5934] loop3: detected capacity change from 0 to 512 [ 229.045561][ T4942] Bluetooth: hci0: command 0x0419 tx timeout [ 230.128146][ T5934] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.300: inode has both inline data and extents flags [ 230.142730][ T5934] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.300: couldn't read orphan inode 15 (err -117) [ 230.162910][ T5934] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 230.693033][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.708146][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 230.807591][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.863862][ T5843] device bridge_slave_0 entered promiscuous mode [ 230.868689][ T5942] loop5: detected capacity change from 0 to 32768 [ 231.019082][ T5942] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 231.036296][ T5942] JBD2: Ignoring recovery information on journal [ 231.099460][ T5961] fuse: Unknown parameter '00000000000000000000003' [ 231.100285][ T5942] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 232.233581][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.249451][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.257738][ T4390] ocfs2: Unmounting device (7,5) on (node local) [ 232.299126][ T5843] device bridge_slave_1 entered promiscuous mode [ 232.395552][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.465144][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.614582][ T5843] team0: Port device team_slave_0 added [ 232.807926][ T5843] team0: Port device team_slave_1 added [ 232.877945][ T2351] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 232.938102][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.945651][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.982853][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.025747][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.052017][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.125299][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.301776][ T2351] usb 1-1: Using ep0 maxpacket: 32 [ 233.718166][ T2351] usb 1-1: config 109 has an invalid interface number: 123 but max is 3 [ 233.804360][ T2351] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 234.092444][ T2351] usb 1-1: config 109 has an invalid interface number: 251 but max is 3 [ 234.122081][ T2351] usb 1-1: config 109 has an invalid interface number: 4 but max is 3 [ 234.147506][ T2351] usb 1-1: config 109 has an invalid interface number: 205 but max is 3 [ 234.165638][ T2351] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 234.208954][ T2351] usb 1-1: config 109 has an invalid interface number: 27 but max is 3 [ 234.264129][ T2351] usb 1-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 234.337497][ T2351] usb 1-1: config 109 has no interface number 0 [ 234.343804][ T2351] usb 1-1: config 109 has no interface number 1 [ 234.387547][ T2351] usb 1-1: config 109 has no interface number 2 [ 234.404345][ T2351] usb 1-1: config 109 has no interface number 3 [ 234.411766][ T2351] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 234.431779][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 234.445681][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 234.465585][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 234.476941][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 234.488837][ T2351] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 234.499960][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 234.511081][ T2351] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 234.521267][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 234.532425][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 234.543556][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 234.555099][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 234.566446][ T2351] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 234.577059][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 234.588676][ T2351] usb 1-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 234.603084][ T2351] usb 1-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 234.616449][ T2351] usb 1-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 234.627923][ T2351] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 234.639306][ T2351] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 234.650611][ T2351] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 234.662158][ T2351] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 234.673290][ T2351] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 234.684559][ T2351] usb 1-1: config 109 interface 205 altsetting 55 has 7 endpoint descriptors, different from the interface descriptor's value: 67 [ 234.698649][ T2351] usb 1-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 234.709791][ T2351] usb 1-1: config 109 interface 123 has no altsetting 0 [ 234.717410][ T2351] usb 1-1: config 109 interface 251 has no altsetting 0 [ 234.724385][ T2351] usb 1-1: config 109 interface 4 has no altsetting 0 [ 234.731227][ T2351] usb 1-1: config 109 interface 205 has no altsetting 0 [ 234.738460][ T2351] usb 1-1: config 109 interface 27 has no altsetting 0 [ 234.747779][ T5996] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.755721][ T5996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.763151][ T5996] IPv6: NLM_F_CREATE should be set when creating new route [ 234.864775][ T6020] fuse: Unknown parameter '00000000000000000000003' [ 234.866428][ T5843] device hsr_slave_0 entered promiscuous mode [ 234.881110][ T5843] device hsr_slave_1 entered promiscuous mode [ 235.437612][ T2351] usb 1-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 235.640536][ T6034] loop0: detected capacity change from 0 to 32768 [ 235.693459][ T2351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.952774][ T6034] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 235.964566][ T6034] JBD2: Ignoring recovery information on journal [ 235.990548][ T6030] loop5: detected capacity change from 0 to 512 [ 235.993645][ T2351] usb 1-1: Product: 絏ଇᗒ [ 236.031358][ T6030] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.318: inode has both inline data and extents flags [ 236.075973][ T6034] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 236.107537][ T2351] usb 1-1: SerialNumber: 次낔銗⮬◙ロⳤᖎ쿭礴﨎⫅ѡ쎤똼ᬆ捭婹啘Ꭸቶꭢ飶搢遄禕὿鍢옹칷␰톲쒘쉖눿筶먴䦦쐷ೢᎌ烲᪇閐凎黡돀运⧬ꍼ趎㚳౥鲵핲쐚㝵ỳ튓蚶ꙙ똠稓뜤磈띬蘿耀歸ﯘ傫鉕㳜펶怅ဒ뻍繈眘駱着鲈 [ 236.377530][ T6030] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.318: couldn't read orphan inode 15 (err -117) [ 236.887288][ T6030] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 236.937593][ T2351] usb 1-1: can't set config #109, error -71 [ 236.954195][ T2351] usb 1-1: USB disconnect, device number 4 [ 237.052898][ T5843] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 237.094202][ T5843] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 237.126935][ T5843] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 237.159924][ T5843] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 237.670697][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.785365][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.795076][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.806685][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.879505][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.888787][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.898071][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.905299][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.983786][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.004086][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.053806][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.061097][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.107285][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.860785][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.941766][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.979499][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.033309][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.203346][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.049344][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.108472][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.163468][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.198344][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.221678][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.253267][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.347716][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.357533][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.366695][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.781356][ T4461] device hsr_slave_0 left promiscuous mode [ 241.818117][ T4461] device hsr_slave_1 left promiscuous mode [ 241.835883][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.862210][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.879595][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.900219][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.917224][ T4461] device bridge_slave_1 left promiscuous mode [ 241.932206][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.119177][ T4461] device bridge_slave_0 left promiscuous mode [ 242.128810][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.190486][ T4461] device veth1_macvtap left promiscuous mode [ 242.209622][ T4461] device veth0_macvtap left promiscuous mode [ 242.230098][ T4461] device veth1_vlan left promiscuous mode [ 242.252430][ T4461] device veth0_vlan left promiscuous mode [ 242.302931][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 242.851925][ T6121] loop0: detected capacity change from 0 to 32768 [ 242.952716][ T6121] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 242.963537][ T6121] JBD2: Ignoring recovery information on journal [ 243.007577][ T6121] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 243.721507][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 244.070353][ T4461] team0 (unregistering): Port device team_slave_1 removed [ 245.293275][ T4461] team0 (unregistering): Port device team_slave_0 removed [ 245.345080][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.607717][ T4461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.505668][ T4461] bond0 (unregistering): Released all slaves [ 247.648439][ T6155] loop3: detected capacity change from 0 to 1024 [ 247.672295][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.697730][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.713260][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.565523][ T6177] loop5: detected capacity change from 0 to 32768 [ 249.971524][ T6177] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 249.990117][ T6177] JBD2: Ignoring recovery information on journal [ 251.158584][ T6177] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 251.228508][ T6192] loop3: detected capacity change from 0 to 512 [ 251.270252][ T6192] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.352: inode has both inline data and extents flags [ 251.320239][ T6192] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.352: couldn't read orphan inode 15 (err -117) [ 251.335478][ T6192] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 251.386325][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.417962][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.523959][ T4390] ocfs2: Unmounting device (7,5) on (node local) [ 252.588423][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.628017][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.678359][ T5843] device veth0_vlan entered promiscuous mode [ 252.687008][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.738197][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.782379][ T5843] device veth1_vlan entered promiscuous mode [ 252.935739][ T5843] device veth0_macvtap entered promiscuous mode [ 252.978065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.986899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.067658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.108718][ T5843] device veth1_macvtap entered promiscuous mode [ 253.209706][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.189519][ T6228] loop3: detected capacity change from 0 to 512 [ 255.238897][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.419677][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.601351][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.758061][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.813206][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.820617][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.961048][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.480128][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.491998][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.505470][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.619863][ T6234] loop5: detected capacity change from 0 to 512 [ 257.184979][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.937509][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.005537][ T6234] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.364: inode has both inline data and extents flags [ 258.019824][ T6234] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.364: couldn't read orphan inode 15 (err -117) [ 258.034332][ T6234] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 258.206991][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.390149][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.781131][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.961947][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.972687][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.986636][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.001550][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.011772][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.022809][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.034557][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.049223][ T6248] loop0: detected capacity change from 0 to 1024 [ 260.264134][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.306391][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.964465][ T5843] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.985807][ T5843] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.996783][ T5843] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.011110][ T5843] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.206939][ T4829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.223154][ T4829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.645560][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.845291][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.871517][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.918712][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.458363][ T6289] loop7: detected capacity change from 0 to 32768 [ 262.638802][ T6289] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 262.651500][ T6289] JBD2: Ignoring recovery information on journal [ 262.870339][ T6289] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 264.910202][ T6318] loop3: detected capacity change from 0 to 1024 [ 265.601114][ T5843] ocfs2: Unmounting device (7,7) on (node local) [ 265.617796][ T4214] hfsplus: b-tree write err: -5, ino 4 [ 266.031672][ T6330] loop3: detected capacity change from 0 to 512 [ 266.221745][ T6330] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.385: inode has both inline data and extents flags [ 266.240306][ T6330] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.385: couldn't read orphan inode 15 (err -117) [ 266.253247][ T6330] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 268.688625][ T6355] loop0: detected capacity change from 0 to 1024 [ 269.200707][ T6373] hfsplus: found bad thread record in catalog [ 269.634540][ T1182] hfsplus: b-tree write err: -5, ino 4 [ 269.703400][ T6372] loop3: detected capacity change from 0 to 512 [ 270.126973][ T6372] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.393: inode has both inline data and extents flags [ 270.141604][ T6372] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.393: couldn't read orphan inode 15 (err -117) [ 270.156273][ T6372] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 271.479848][ T6378] loop5: detected capacity change from 0 to 512 [ 272.485658][ T6378] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.396: inode has both inline data and extents flags [ 272.502176][ T6378] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.396: couldn't read orphan inode 15 (err -117) [ 272.518678][ T6378] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 275.209318][ T6382] loop0: detected capacity change from 0 to 1024 [ 275.300205][ T6384] loop7: detected capacity change from 0 to 512 [ 275.454723][ T6384] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.397: inode has both inline data and extents flags [ 275.593336][ T6384] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.397: couldn't read orphan inode 15 (err -117) [ 275.681410][ T6384] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 276.581792][ T6401] loop0: detected capacity change from 0 to 512 [ 276.724033][ T6401] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.398: inode has both inline data and extents flags [ 276.738505][ T6401] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.398: couldn't read orphan inode 15 (err -117) [ 276.754462][ T6401] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 277.566007][ T6405] loop3: detected capacity change from 0 to 32768 [ 277.664339][ T6405] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 277.681703][ T6405] JBD2: Ignoring recovery information on journal [ 277.852707][ T6405] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 280.338205][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 280.437639][ T6424] loop7: detected capacity change from 0 to 1024 [ 281.650261][ T6436] hfsplus: found bad thread record in catalog [ 282.004691][ T4419] hfsplus: b-tree write err: -5, ino 4 [ 282.449264][ T6447] loop7: detected capacity change from 0 to 32768 [ 282.538856][ T6447] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 282.549205][ T6447] JBD2: Ignoring recovery information on journal [ 282.597445][ T6447] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 282.680986][ T6456] loop0: detected capacity change from 0 to 512 [ 284.279250][ T6456] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.409: inode has both inline data and extents flags [ 284.293648][ T6456] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.409: couldn't read orphan inode 15 (err -117) [ 284.307779][ T6456] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 286.225464][ T5843] ocfs2: Unmounting device (7,7) on (node local) [ 286.514843][ T6477] loop7: detected capacity change from 0 to 1024 [ 286.715111][ T6469] loop3: detected capacity change from 0 to 4096 [ 287.724150][ T6483] loop0: detected capacity change from 0 to 512 [ 287.779968][ T144] hfsplus: b-tree write err: -5, ino 4 [ 288.082900][ T6469] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 288.243825][ T6484] loop5: detected capacity change from 0 to 512 [ 288.440285][ T6483] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.415: inode has both inline data and extents flags [ 288.458595][ T6483] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.415: couldn't read orphan inode 15 (err -117) [ 288.471877][ T6483] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 288.852172][ T6484] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.416: inode has both inline data and extents flags [ 288.872386][ T6484] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.416: couldn't read orphan inode 15 (err -117) [ 288.889486][ T6484] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 289.902001][ T6511] SET target dimension over the limit! [ 290.168309][ T6516] loop5: detected capacity change from 0 to 1024 [ 291.670820][ T6526] loop0: detected capacity change from 0 to 512 [ 291.905448][ T6526] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.424: inode has both inline data and extents flags [ 292.637794][ T6526] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.424: couldn't read orphan inode 15 (err -117) [ 292.657630][ T6526] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 293.375077][ T6539] loop3: detected capacity change from 0 to 512 [ 296.351898][ T6539] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.427: inode has both inline data and extents flags [ 296.487519][ T6539] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.427: couldn't read orphan inode 15 (err -117) [ 296.555570][ T6539] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 296.929645][ T6561] loop3: detected capacity change from 0 to 512 [ 298.432499][ T6560] loop0: detected capacity change from 0 to 512 [ 298.444139][ T6561] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.432: inode has both inline data and extents flags [ 298.459233][ T6561] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.432: couldn't read orphan inode 15 (err -117) [ 298.472929][ T6561] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 298.658889][ T6560] EXT4-fs (loop0): Test dummy encryption mode enabled [ 298.771506][ T6560] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.431: inode has both inline data and extents flags [ 298.919044][ T6560] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.431: couldn't read orphan inode 15 (err -117) [ 299.026673][ T6560] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 299.878875][ T6583] loop7: detected capacity change from 0 to 32768 [ 300.084759][ T6583] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 300.095161][ T6583] JBD2: Ignoring recovery information on journal [ 300.988451][ T6583] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 302.155994][ T5843] ocfs2: Unmounting device (7,7) on (node local) [ 302.787421][ T4936] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 303.037493][ T4936] usb 8-1: Using ep0 maxpacket: 32 [ 303.317560][ T4936] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 303.326650][ T4936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.367464][ T4936] usb 8-1: Product: syz [ 303.371685][ T4936] usb 8-1: Manufacturer: syz [ 303.376396][ T4936] usb 8-1: SerialNumber: syz [ 303.446610][ T4936] usb 8-1: config 0 descriptor?? [ 303.495632][ T4936] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 303.751223][ T6605] udc-core: couldn't find an available UDC or it's busy [ 303.787615][ T6605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 304.097546][ T4936] gspca_ov534_9: reg_w failed -71 [ 307.037420][ T4936] gspca_ov534_9: Unknown sensor 0000 [ 307.037493][ T4936] ov534_9: probe of 8-1:0.0 failed with error -22 [ 307.180752][ T6639] loop3: detected capacity change from 0 to 1024 [ 307.196838][ T4936] usb 8-1: USB disconnect, device number 2 [ 308.024397][ T6650] loop0: detected capacity change from 0 to 32768 [ 308.429050][ T6650] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 308.440661][ T6650] JBD2: Ignoring recovery information on journal [ 308.557706][ T1107] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 308.899885][ T6671] hfsplus: found bad thread record in catalog [ 308.958249][ T6650] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 309.377403][ T1107] usb 6-1: Using ep0 maxpacket: 32 [ 309.465006][ T4829] hfsplus: b-tree write err: -5, ino 4 [ 309.674532][ T1107] usb 6-1: config 109 has an invalid interface number: 123 but max is 3 [ 309.684524][ T1107] usb 6-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 309.707389][ T1107] usb 6-1: config 109 has an invalid interface number: 251 but max is 3 [ 309.715799][ T1107] usb 6-1: config 109 has an invalid interface number: 4 but max is 3 [ 310.468816][ T1107] usb 6-1: config 109 has an invalid interface number: 205 but max is 3 [ 310.478875][ T1107] usb 6-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 310.488037][ T1107] usb 6-1: config 109 has an invalid interface number: 27 but max is 3 [ 310.496407][ T1107] usb 6-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 310.505719][ T1107] usb 6-1: config 109 has no interface number 0 [ 310.512129][ T1107] usb 6-1: config 109 has no interface number 1 [ 310.518455][ T1107] usb 6-1: config 109 has no interface number 2 [ 310.534420][ T1107] usb 6-1: config 109 has no interface number 3 [ 310.555676][ T1107] usb 6-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 310.591799][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 310.636269][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 310.696690][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 310.735283][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 310.755137][ T1107] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 310.771778][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 310.793405][ T1107] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 310.815214][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 310.836496][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 310.862159][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 310.953289][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 310.987428][ T1107] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 311.007567][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 311.022250][ T1107] usb 6-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 311.040733][ T1107] usb 6-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 311.054454][ T1107] usb 6-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 311.066437][ T1107] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 311.081725][ T1107] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 311.096250][ T1107] usb 6-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 311.118601][ T1107] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 311.136136][ T1107] usb 6-1: config 109 interface 205 altsetting 55 has 7 endpoint descriptors, different from the interface descriptor's value: 67 [ 311.161639][ T1107] usb 6-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 311.195932][ T1107] usb 6-1: config 109 interface 123 has no altsetting 0 [ 311.226154][ T1107] usb 6-1: config 109 interface 251 has no altsetting 0 [ 311.248204][ T1107] usb 6-1: config 109 interface 4 has no altsetting 0 [ 311.258680][ T1107] usb 6-1: config 109 interface 205 has no altsetting 0 [ 311.266187][ T1107] usb 6-1: config 109 interface 27 has no altsetting 0 [ 311.337675][ T1107] usb 6-1: string descriptor 0 read error: -71 [ 311.349498][ T1107] usb 6-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 311.391987][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.524276][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 311.562247][ T1107] usb 6-1: can't set config #109, error -71 [ 311.572543][ T1107] usb 6-1: USB disconnect, device number 3 [ 314.157439][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 314.457429][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 314.577914][ T4232] usb 4-1: config 109 has an invalid interface number: 123 but max is 3 [ 314.621556][ T4232] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 314.837449][ T4232] usb 4-1: config 109 has an invalid interface number: 251 but max is 3 [ 314.882114][ T4232] usb 4-1: config 109 has an invalid interface number: 4 but max is 3 [ 314.921128][ T4232] usb 4-1: config 109 has an invalid interface number: 205 but max is 3 [ 314.964912][ T4232] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 315.027424][ T4232] usb 4-1: config 109 has an invalid interface number: 27 but max is 3 [ 315.035735][ T4232] usb 4-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 315.077639][ T4232] usb 4-1: config 109 has no interface number 0 [ 315.084131][ T4232] usb 4-1: config 109 has no interface number 1 [ 315.085749][ T6767] loop0: detected capacity change from 0 to 512 [ 315.131939][ T4232] usb 4-1: config 109 has no interface number 2 [ 315.157713][ T4232] usb 4-1: config 109 has no interface number 3 [ 315.172687][ T4232] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 315.194918][ T6767] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 315.203567][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 315.207263][ T6767] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 315.223470][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 315.228526][ T6767] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.472: Corrupt directory, running e2fsck is recommended [ 315.263999][ T6767] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 315.272467][ T6767] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.472: corrupted in-inode xattr [ 315.298556][ T6767] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.472: couldn't read orphan inode 15 (err -117) [ 315.311741][ T6767] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 315.383179][ T6767] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 315.395617][ T6767] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 315.405887][ T6767] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.472: Corrupt directory, running e2fsck is recommended [ 315.420656][ T6767] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.472: path /107/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 315.459858][ T6767] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 22: comm syz.0.472: path /107/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 315.484338][ T6767] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 8: comm syz.0.472: path /107/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 316.177830][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 316.189263][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 316.207422][ T4232] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 316.237467][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 316.294332][ T4232] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 316.353712][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 316.374551][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 316.405229][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 316.424965][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 316.436766][ T4232] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 316.453631][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 316.476175][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 316.490442][ T4232] usb 4-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 316.507487][ T4232] usb 4-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 316.519561][ T4232] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 316.543629][ T4232] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 316.580378][ T4232] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 316.612451][ T4232] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 316.634607][ T4232] usb 4-1: config 109 interface 205 altsetting 55 has 7 endpoint descriptors, different from the interface descriptor's value: 67 [ 316.658958][ T4232] usb 4-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 316.688845][ T4232] usb 4-1: config 109 interface 123 has no altsetting 0 [ 316.711307][ T4232] usb 4-1: config 109 interface 251 has no altsetting 0 [ 316.890977][ T4232] usb 4-1: config 109 interface 4 has no altsetting 0 [ 318.037092][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.068514][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.140894][ T4232] usb 4-1: config 109 interface 205 has no altsetting 0 [ 318.154036][ T4232] usb 4-1: config 109 interface 27 has no altsetting 0 [ 318.365868][ T4232] usb 4-1: string descriptor 0 read error: -71 [ 318.372661][ T4232] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 318.382380][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.437609][ T4232] usb 4-1: can't set config #109, error -71 [ 318.474486][ T4232] usb 4-1: USB disconnect, device number 3 [ 318.647550][ T4235] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 318.837604][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 318.917643][ T4235] usb 6-1: Using ep0 maxpacket: 32 [ 319.107548][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 319.208615][ T4235] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 319.227702][ T4232] usb 4-1: config 109 has an invalid interface number: 123 but max is 3 [ 319.274157][ T4232] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 319.359561][ T4235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.391987][ T4235] usb 6-1: Product: syz [ 319.397740][ T4232] usb 4-1: config 109 has an invalid interface number: 251 but max is 3 [ 319.538202][ T4235] usb 6-1: Manufacturer: syz [ 319.554406][ T4235] usb 6-1: SerialNumber: syz [ 319.559502][ T4232] usb 4-1: config 109 has an invalid interface number: 4 but max is 3 [ 319.617706][ T4235] usb 6-1: config 0 descriptor?? [ 319.633812][ T4232] usb 4-1: config 109 has an invalid interface number: 205 but max is 3 [ 319.748395][ T4232] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 319.896075][ T6842] loop0: detected capacity change from 0 to 32768 [ 319.939937][ T4232] usb 4-1: config 109 has an invalid interface number: 27 but max is 3 [ 320.109912][ T4232] usb 4-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 320.188297][ T4232] usb 4-1: config 109 has no interface number 0 [ 320.387480][ T4232] usb 4-1: config 109 has no interface number 1 [ 320.394056][ T4232] usb 4-1: config 109 has no interface number 2 [ 320.488805][ T4232] usb 4-1: config 109 has no interface number 3 [ 320.499322][ T4232] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 320.511163][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 320.532822][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 320.578474][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 320.602295][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 320.626173][ T4232] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 320.641428][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 320.652954][ T4232] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 320.663628][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 320.716321][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 320.728089][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 320.739998][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 320.752227][ T4232] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 320.763060][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 320.774591][ T4232] usb 4-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 320.796870][ T4232] usb 4-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 320.817631][ T4232] usb 4-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 320.834116][ T4232] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 320.847281][ T4232] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 320.872305][ T4232] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 320.892218][ T4232] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 320.917790][ T4232] usb 4-1: config 109 interface 205 altsetting 55 has 7 endpoint descriptors, different from the interface descriptor's value: 67 [ 320.932173][ T4232] usb 4-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 320.944349][ T4232] usb 4-1: config 109 interface 123 has no altsetting 0 [ 320.951709][ T4232] usb 4-1: config 109 interface 251 has no altsetting 0 [ 320.959397][ T4232] usb 4-1: config 109 interface 4 has no altsetting 0 [ 320.966396][ T4232] usb 4-1: config 109 interface 205 has no altsetting 0 [ 320.974217][ T4232] usb 4-1: config 109 interface 27 has no altsetting 0 [ 320.992679][ T6842] XFS (loop0): Mounting V5 Filesystem [ 321.027973][ T4235] usb 6-1: can't set config #0, error -71 [ 321.119417][ T4235] usb 6-1: USB disconnect, device number 4 [ 321.211304][ T6842] XFS (loop0): Ending clean mount [ 321.232079][ T6842] XFS (loop0): Quotacheck needed: Please wait. [ 321.337702][ T4232] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 321.346985][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.393407][ T4232] usb 4-1: Product: 絏ଇᗒ [ 321.427427][ T4232] usb 4-1: SerialNumber: 次낔銗⮬◙ロⳤᖎ쿭礴﨎⫅ѡ쎤똼ᬆ捭婹啘Ꭸቶꭢ飶搢遄禕὿鍢옹칷␰톲쒘쉖눿筶먴䦦쐷ೢᎌ烲᪇閐凎黡돀运⧬ꍼ趎㚳౥鲵핲쐚㝵ỳ튓蚶ꙙ똠稓뜤磈띬蘿耀歸ﯘ傫鉕㳜펶怅ဒ뻍繈眘駱着鲈 [ 322.099250][ T6842] XFS (loop0): Quotacheck: Done. [ 322.239036][ T4232] usb 4-1: can't set config #109, error -71 [ 322.265728][ T4232] usb 4-1: USB disconnect, device number 4 [ 322.462573][ T26] audit: type=1800 audit(1772396080.746:16): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.491" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 323.727848][ T4184] XFS (loop0): Unmounting Filesystem [ 324.144749][ T6890] loop5: detected capacity change from 0 to 512 [ 324.514722][ T6890] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 324.527209][ T6890] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 324.537657][ T6890] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.499: Corrupt directory, running e2fsck is recommended [ 324.563615][ T6890] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 324.572585][ T6890] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.499: corrupted in-inode xattr [ 324.590061][ T6890] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.499: couldn't read orphan inode 15 (err -117) [ 324.610595][ T6890] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 324.985814][ T6890] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 324.997632][ T6890] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 325.008093][ T6890] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.499: Corrupt directory, running e2fsck is recommended [ 325.021464][ T6890] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.499: path /70/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 325.047745][ T6890] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 22: comm syz.5.499: path /70/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 325.068232][ T6890] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 8: comm syz.5.499: path /70/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 325.206588][ T6904] loop7: detected capacity change from 0 to 512 [ 325.398795][ T6904] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 325.410784][ T6904] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 325.421456][ T6904] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.502: Corrupt directory, running e2fsck is recommended [ 325.456280][ T6904] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 325.468957][ T6914] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 325.484422][ T6904] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.502: corrupted in-inode xattr [ 325.504895][ T6904] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.502: couldn't read orphan inode 15 (err -117) [ 325.525653][ T6904] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 325.968791][ T6904] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 325.980500][ T6904] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 325.990935][ T6904] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.502: Corrupt directory, running e2fsck is recommended [ 326.004360][ T6904] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.502: path /27/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 326.033354][ T6904] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 22: comm syz.7.502: path /27/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 326.054185][ T6904] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 8: comm syz.7.502: path /27/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 326.411340][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 326.690246][ T6939] loop3: detected capacity change from 0 to 32768 [ 326.738863][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 326.775651][ T6939] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 326.788302][ T6939] JBD2: Ignoring recovery information on journal [ 326.857615][ T23] usb 6-1: config 109 has an invalid interface number: 123 but max is 3 [ 326.877914][ T23] usb 6-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 326.990987][ T23] usb 6-1: config 109 has an invalid interface number: 251 but max is 3 [ 326.999883][ T23] usb 6-1: config 109 has an invalid interface number: 4 but max is 3 [ 327.008805][ T23] usb 6-1: config 109 has an invalid interface number: 205 but max is 3 [ 327.017727][ T23] usb 6-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 327.031869][ T6939] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 327.757438][ T23] usb 6-1: config 109 has an invalid interface number: 27 but max is 3 [ 327.801980][ T23] usb 6-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 327.830072][ T23] usb 6-1: config 109 has no interface number 0 [ 327.837765][ T23] usb 6-1: config 109 has no interface number 1 [ 327.845100][ T23] usb 6-1: config 109 has no interface number 2 [ 327.853153][ T23] usb 6-1: config 109 has no interface number 3 [ 327.860549][ T23] usb 6-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 327.873449][ T23] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 327.886164][ T23] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 327.931579][ T23] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 327.952923][ T6952] loop0: detected capacity change from 0 to 512 [ 329.301200][ T23] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 329.622631][ T23] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 330.434395][ T23] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 330.450162][ T23] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 330.458569][ T4186] ocfs2: Unmounting device (7,3) on (node local) [ 330.497346][ T23] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 330.533654][ T23] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 330.727425][ T23] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 330.799402][ T23] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 330.835715][ T23] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 330.892363][ T23] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 330.933847][ T23] usb 6-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 331.124138][ T23] usb 6-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 331.423215][ T6976] loop3: detected capacity change from 0 to 32768 [ 331.452127][ T23] usb 6-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 331.579341][ T23] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 331.675981][ T23] usb 6-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 331.687632][ T23] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 331.699785][ T23] usb 6-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 331.711538][ T23] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 331.723642][ T23] usb 6-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67 [ 331.738060][ T23] usb 6-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 331.751466][ T23] usb 6-1: config 109 interface 123 has no altsetting 0 [ 331.783891][ T23] usb 6-1: config 109 interface 251 has no altsetting 0 [ 331.813352][ T6976] XFS (loop3): Mounting V5 Filesystem [ 331.867461][ T23] usb 6-1: config 109 interface 4 has no altsetting 0 [ 331.884077][ T23] usb 6-1: config 109 interface 205 has no altsetting 0 [ 331.907397][ T23] usb 6-1: config 109 interface 27 has no altsetting 0 [ 331.947468][ T23] usb 6-1: string descriptor 0 read error: -71 [ 331.953759][ T23] usb 6-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 331.963990][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.007589][ T23] usb 6-1: can't set config #109, error -71 [ 332.027444][ T23] usb 6-1: USB disconnect, device number 5 [ 332.071948][ T6976] XFS (loop3): Ending clean mount [ 332.087152][ T6976] XFS (loop3): Quotacheck needed: Please wait. [ 332.347258][ T6976] XFS (loop3): Quotacheck: Done. [ 332.601866][ T26] audit: type=1800 audit(1772396090.876:17): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.514" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 333.006906][ T4186] XFS (loop3): Unmounting Filesystem [ 333.355504][ T4236] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 333.547628][ T2351] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 333.886057][ T4236] usb 1-1: Using ep0 maxpacket: 32 [ 334.257626][ T2351] usb 8-1: Using ep0 maxpacket: 32 [ 335.588148][ T4236] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 335.726433][ T2351] usb 8-1: config 109 has an invalid interface number: 123 but max is 3 [ 335.747373][ T7049] loop3: detected capacity change from 0 to 512 [ 336.594890][ T7049] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.530: inode has both inline data and extents flags [ 336.609623][ T7049] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.530: couldn't read orphan inode 15 (err -117) [ 336.623498][ T7049] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 337.099129][ T2351] usb 8-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 337.108451][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.116812][ T4236] usb 1-1: Product: syz [ 337.121115][ T2351] usb 8-1: config 109 has an invalid interface number: 251 but max is 3 [ 337.130112][ T4236] usb 1-1: Manufacturer: syz [ 337.135569][ T4236] usb 1-1: SerialNumber: syz [ 337.140393][ T2351] usb 8-1: config 109 has an invalid interface number: 4 but max is 3 [ 337.150891][ T4236] usb 1-1: config 0 descriptor?? [ 337.156241][ T2351] usb 8-1: config 109 has an invalid interface number: 205 but max is 3 [ 337.164809][ T2351] usb 8-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 337.174370][ T2351] usb 8-1: config 109 has an invalid interface number: 27 but max is 3 [ 337.182772][ T2351] usb 8-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 337.196726][ T2351] usb 8-1: config 109 has no interface number 0 [ 337.203665][ T2351] usb 8-1: config 109 has no interface number 1 [ 337.210147][ T2351] usb 8-1: config 109 has no interface number 2 [ 337.216878][ T2351] usb 8-1: config 109 has no interface number 3 [ 337.230991][ T2351] usb 8-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 337.242866][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 337.263352][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 337.391392][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 337.424185][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 337.476472][ T2351] usb 8-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 337.616377][ T7073] loop7: detected capacity change from 0 to 512 [ 338.990239][ T7073] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.533: inode has both inline data and extents flags [ 339.005753][ T7073] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.533: couldn't read orphan inode 15 (err -117) [ 339.020530][ T7073] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 339.507466][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 339.522586][ T2351] usb 8-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 339.533526][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 339.545075][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 339.556502][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 339.567766][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 339.579704][ T2351] usb 8-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 339.597190][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 339.608877][ T2351] usb 8-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 339.622872][ T2351] usb 8-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 339.644316][ T2351] usb 8-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 339.666765][ T2351] usb 8-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 339.699458][ T2351] usb 8-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 339.744549][ T2351] usb 8-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 339.793862][ T2351] usb 8-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 339.805558][ T2351] usb 8-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 339.822345][ T2351] usb 8-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67 [ 339.843246][ T2351] usb 8-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 339.857226][ T2351] usb 8-1: config 109 interface 123 has no altsetting 0 [ 339.869014][ T2351] usb 8-1: config 109 interface 251 has no altsetting 0 [ 339.881085][ T2351] usb 8-1: config 109 interface 4 has no altsetting 0 [ 339.892115][ T2351] usb 8-1: config 109 interface 205 has no altsetting 0 [ 339.904243][ T2351] usb 8-1: config 109 interface 27 has no altsetting 0 [ 339.986858][ T2351] usb 8-1: string descriptor 0 read error: -71 [ 339.997710][ T4236] usb 1-1: can't set config #0, error -71 [ 340.032053][ T4236] usb 1-1: USB disconnect, device number 5 [ 340.104838][ T2351] usb 8-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 340.185167][ T2351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.256184][ T2351] usb 8-1: can't set config #109, error -71 [ 340.305206][ T2351] usb 8-1: USB disconnect, device number 3 [ 340.509592][ T7095] loop5: detected capacity change from 0 to 512 [ 341.965705][ T7095] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.539: inode has both inline data and extents flags [ 341.980019][ T7095] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.539: couldn't read orphan inode 15 (err -117) [ 341.994122][ T7095] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 342.180402][ T7094] loop7: detected capacity change from 0 to 32768 [ 342.224512][ T7094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.537 (7094) [ 342.374492][ T7094] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 342.383667][ T7094] BTRFS info (device loop7): setting nodatacow, compression disabled [ 342.391815][ T7094] BTRFS info (device loop7): enabling auto defrag [ 342.398539][ T7094] BTRFS info (device loop7): max_inline at 0 [ 342.404838][ T7094] BTRFS info (device loop7): using free space tree [ 342.411940][ T7094] BTRFS info (device loop7): has skinny extents [ 343.321939][ T4232] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 343.650551][ T7094] BTRFS error (device loop7): open_ctree failed: -12 [ 343.761503][ T4266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by udevd (4266) [ 343.947584][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 344.168607][ T4232] usb 1-1: config 109 has an invalid interface number: 123 but max is 3 [ 344.177211][ T4232] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 344.187720][ T4232] usb 1-1: config 109 has an invalid interface number: 251 but max is 3 [ 344.196726][ T4232] usb 1-1: config 109 has an invalid interface number: 4 but max is 3 [ 344.205802][ T4232] usb 1-1: config 109 has an invalid interface number: 205 but max is 3 [ 344.215307][ T4232] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 344.224952][ T4232] usb 1-1: config 109 has an invalid interface number: 27 but max is 3 [ 344.234073][ T4232] usb 1-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 344.257348][ T4232] usb 1-1: config 109 has no interface number 0 [ 344.263796][ T4232] usb 1-1: config 109 has no interface number 1 [ 344.286155][ T4232] usb 1-1: config 109 has no interface number 2 [ 344.316957][ T4232] usb 1-1: config 109 has no interface number 3 [ 344.324147][ T4232] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 344.336017][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 344.347929][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 344.359894][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 344.377340][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 344.409046][ T4232] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 344.447464][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 344.511521][ T4232] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 344.523082][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 344.534903][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 344.557447][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 344.587543][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 344.607342][ T4232] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 344.656905][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 344.695242][ T4232] usb 1-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 344.732984][ T4232] usb 1-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 344.812748][ T4232] usb 1-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 344.872648][ T4232] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 344.906685][ T4232] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 344.944864][ T4232] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 344.945314][ T4937] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 344.976092][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 345.094674][ T4232] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 345.106496][ T4232] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 345.122809][ T4232] usb 1-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67 [ 345.137454][ T4232] usb 1-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 345.173207][ T4232] usb 1-1: config 109 interface 123 has no altsetting 0 [ 345.184127][ T4232] usb 1-1: config 109 interface 251 has no altsetting 0 [ 345.195636][ T4232] usb 1-1: config 109 interface 4 has no altsetting 0 [ 345.197421][ T4937] usb 8-1: Using ep0 maxpacket: 32 [ 345.203109][ T4232] usb 1-1: config 109 interface 205 has no altsetting 0 [ 345.215282][ T4232] usb 1-1: config 109 interface 27 has no altsetting 0 [ 345.492514][ T4937] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 345.512230][ T4937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.558395][ T4937] usb 8-1: Product: syz [ 345.562625][ T4937] usb 8-1: Manufacturer: syz [ 345.605909][ T4937] usb 8-1: SerialNumber: syz [ 345.660183][ T4937] usb 8-1: config 0 descriptor?? [ 345.705251][ T4937] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 345.717475][ T4232] usb 1-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 345.746373][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.873836][ T7180] loop3: detected capacity change from 0 to 1024 [ 346.017144][ T7179] loop0: detected capacity change from 0 to 32768 [ 346.025295][ T4232] usb 1-1: Product: 絏ଇᗒ [ 346.027632][ T7144] udc-core: couldn't find an available UDC or it's busy [ 346.048145][ T4232] usb 1-1: can't set config #109, error -71 [ 346.066575][ T7144] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 346.076680][ T4232] usb 1-1: USB disconnect, device number 6 [ 346.130670][ T7179] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 346.139835][ T7179] BTRFS info (device loop0): setting nodatacow, compression disabled [ 346.148208][ T7179] BTRFS info (device loop0): enabling auto defrag [ 346.154856][ T7179] BTRFS info (device loop0): max_inline at 0 [ 346.160974][ T7179] BTRFS info (device loop0): using free space tree [ 346.167501][ T7179] BTRFS info (device loop0): has skinny extents [ 346.397479][ T4937] gspca_ov534_9: reg_w failed -71 [ 346.577111][ T7192] hfsplus: found bad thread record in catalog [ 347.006695][ T4212] hfsplus: b-tree write err: -5, ino 4 [ 347.354864][ T7220] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 347.457657][ T7223] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 347.647384][ T4937] gspca_ov534_9: Unknown sensor 0000 [ 347.647456][ T4937] ov534_9: probe of 8-1:0.0 failed with error -22 [ 347.821646][ T4937] usb 8-1: USB disconnect, device number 4 [ 351.936643][ T4232] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 352.016694][ T7256] loop3: detected capacity change from 0 to 1024 [ 352.046367][ T7263] loop7: detected capacity change from 0 to 1024 [ 352.917500][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 353.197673][ T4232] usb 6-1: config 109 has an invalid interface number: 123 but max is 3 [ 353.216797][ T4232] usb 6-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 353.247860][ T4232] usb 6-1: config 109 has an invalid interface number: 251 but max is 3 [ 353.256620][ T4232] usb 6-1: config 109 has an invalid interface number: 4 but max is 3 [ 353.265968][ T4232] usb 6-1: config 109 has an invalid interface number: 205 but max is 3 [ 353.274945][ T4232] usb 6-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 353.422930][ T7276] hfsplus: found bad thread record in catalog [ 353.825242][ T4232] usb 6-1: config 109 has an invalid interface number: 27 but max is 3 [ 353.836819][ T4232] usb 6-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 353.846841][ T4232] usb 6-1: config 109 has no interface number 0 [ 353.853414][ T4232] usb 6-1: config 109 has no interface number 1 [ 353.859906][ T4232] usb 6-1: config 109 has no interface number 2 [ 353.866510][ T4232] usb 6-1: config 109 has no interface number 3 [ 353.873038][ T4232] usb 6-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 353.884824][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 353.896174][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 353.907723][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 353.919061][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 353.930303][ T4232] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 353.940854][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 353.951840][ T4232] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 353.962667][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 353.974062][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 353.985929][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 353.997087][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 354.016603][ T4232] usb 6-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 354.027498][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 354.045945][ T4232] usb 6-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 354.059935][ T4232] usb 6-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 354.073926][ T4232] usb 6-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 354.086368][ T4232] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 354.098525][ T4232] usb 6-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 354.110306][ T4232] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 354.122264][ T4232] usb 6-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 354.137389][ T4232] usb 6-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 354.155400][ T4232] usb 6-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67 [ 354.176395][ T4232] usb 6-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 354.224565][ T4232] usb 6-1: config 109 interface 123 has no altsetting 0 [ 354.231859][ T4232] usb 6-1: config 109 interface 251 has no altsetting 0 [ 354.239208][ T4232] usb 6-1: config 109 interface 4 has no altsetting 0 [ 354.246125][ T4232] usb 6-1: config 109 interface 205 has no altsetting 0 [ 354.253315][ T4232] usb 6-1: config 109 interface 27 has no altsetting 0 [ 354.301642][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 354.592440][ T4232] usb 6-1: string descriptor 0 read error: -71 [ 354.621481][ T154] hfsplus: b-tree write err: -5, ino 4 [ 354.831453][ T4232] usb 6-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 355.025441][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.081926][ T4232] usb 6-1: can't set config #109, error -71 [ 356.159434][ T7290] loop3: detected capacity change from 0 to 512 [ 357.487711][ T7290] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.571: inode has both inline data and extents flags [ 357.502115][ T7290] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.571: couldn't read orphan inode 15 (err -117) [ 357.516144][ T7290] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 357.598082][ T4232] usb 6-1: USB disconnect, device number 6 [ 358.839656][ T7302] loop0: detected capacity change from 0 to 1024 [ 359.196953][ T7308] loop5: detected capacity change from 0 to 32768 [ 360.090054][ T7308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.580 (7308) [ 360.202207][ T7308] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 360.211043][ T7308] BTRFS info (device loop5): setting nodatacow, compression disabled [ 360.219270][ T7308] BTRFS info (device loop5): enabling auto defrag [ 360.225906][ T7308] BTRFS info (device loop5): max_inline at 0 [ 360.232161][ T7308] BTRFS info (device loop5): using free space tree [ 360.238718][ T7308] BTRFS info (device loop5): has skinny extents [ 360.288027][ T7315] loop7: detected capacity change from 0 to 1024 [ 360.848266][ T7135] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 363.047730][ T7135] usb 1-1: Using ep0 maxpacket: 32 [ 363.153472][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 364.231728][ T7135] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 364.502076][ T7135] usb 1-1: can't read configurations, error -71 [ 365.519934][ T7378] loop7: detected capacity change from 0 to 512 [ 366.337156][ T7378] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.590: inode has both inline data and extents flags [ 366.355212][ T7378] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.590: couldn't read orphan inode 15 (err -117) [ 366.370210][ T7378] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 367.332503][ T7394] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 367.402791][ T4266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (4266) [ 370.677560][ T4230] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 371.575082][ T7425] loop7: detected capacity change from 0 to 32768 [ 371.707618][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 372.007532][ T4236] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 373.068169][ T4230] usb 1-1: config 109 has an invalid interface number: 123 but max is 3 [ 373.247518][ T4230] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 373.385466][ T4230] usb 1-1: config 109 has an invalid interface number: 251 but max is 3 [ 373.417422][ T4236] usb 6-1: Using ep0 maxpacket: 32 [ 373.527751][ T4230] usb 1-1: config 109 has an invalid interface number: 4 but max is 3 [ 373.684636][ T4230] usb 1-1: config 109 has an invalid interface number: 205 but max is 3 [ 373.845561][ T4230] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 373.999608][ T4230] usb 1-1: config 109 has an invalid interface number: 27 but max is 3 [ 374.180915][ T4230] usb 1-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 374.293692][ T4230] usb 1-1: config 109 has no interface number 0 [ 374.406612][ T4230] usb 1-1: config 109 has no interface number 1 [ 374.413410][ T4230] usb 1-1: config 109 has no interface number 2 [ 374.432805][ T4230] usb 1-1: config 109 has no interface number 3 [ 375.307418][ T4230] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 375.372618][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 375.425998][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 375.480425][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 375.693260][ T7453] loop0: detected capacity change from 0 to 32768 [ 375.739187][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 375.805138][ T7451] SET target dimension over the limit! [ 375.875004][ T4230] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 377.504991][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 377.769683][ T4230] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 377.907674][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 378.064665][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 378.264000][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 378.390181][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 378.455840][ T4230] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 378.471336][ T4236] usb 6-1: device descriptor read/all, error -110 [ 378.530974][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 378.587513][ T4230] usb 1-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 378.699350][ T4236] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 378.743374][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.751034][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.447366][ T4230] usb 1-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 379.452703][ T7468] loop3: detected capacity change from 0 to 1024 [ 379.669821][ T7476] loop0: detected capacity change from 0 to 32768 [ 379.735640][ T4230] usb 1-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 379.781339][ T4230] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 379.857382][ T4230] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 380.057498][ T4230] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 380.110663][ T4230] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 380.252308][ T4230] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 380.695118][ T7486] loop7: detected capacity change from 0 to 32768 [ 380.707542][ T4230] usb 1-1: config 109 interface 205 altsetting 55 has 8 endpoint descriptors, different from the interface descriptor's value: 67 [ 380.722627][ T4230] usb 1-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 380.746459][ T4230] usb 1-1: config 109 interface 123 has no altsetting 0 [ 380.757660][ T4230] usb 1-1: config 109 interface 251 has no altsetting 0 [ 380.764980][ T4230] usb 1-1: config 109 interface 4 has no altsetting 0 [ 380.772573][ T4230] usb 1-1: config 109 interface 205 has no altsetting 0 [ 380.788282][ T4230] usb 1-1: config 109 interface 27 has no altsetting 0 [ 380.875981][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 380.894297][ T4230] usb 1-1: string descriptor 0 read error: -71 [ 381.022563][ T7490] loop0: detected capacity change from 0 to 32768 [ 381.062818][ T4230] usb 1-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 381.142256][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.315191][ T4230] usb 1-1: can't set config #109, error -71 [ 381.403650][ T4230] usb 1-1: USB disconnect, device number 9 [ 386.235655][ T7561] loop5: detected capacity change from 0 to 32768 [ 387.101507][ T7561] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 387.110505][ T7561] BTRFS info (device loop5): setting nodatacow, compression disabled [ 387.118639][ T7561] BTRFS info (device loop5): enabling auto defrag [ 387.125160][ T7561] BTRFS info (device loop5): max_inline at 0 [ 387.131255][ T7561] BTRFS info (device loop5): using free space tree [ 387.137795][ T7561] BTRFS info (device loop5): has skinny extents [ 391.504278][ T7610] loop7: detected capacity change from 0 to 32768 [ 391.560553][ T7610] BTRFS warning: duplicate device /dev/loop7 devid 1 generation 8 scanned by syz.7.637 (7610) [ 394.029199][ T4266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by udevd (4266) [ 395.226548][ T7629] loop0: detected capacity change from 0 to 32768 [ 399.994735][ T7681] loop3: detected capacity change from 0 to 32768 [ 420.767615][ T1107] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 424.577769][ T1107] usb 8-1: device descriptor read/all, error -71 [ 425.807989][ T7843] ptrace attach of "./syz-executor exec"[7844] was attempted by "./syz-executor exec"[7843] [ 425.827497][ T7140] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 426.217494][ T7140] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.097400][ T7140] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 427.212018][ T7140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.398888][ T7140] usb 6-1: config 0 descriptor?? [ 427.460126][ T7140] pwc: Askey VC010 type 2 USB webcam detected. [ 428.347525][ T7140] pwc: send_video_command error -71 [ 428.353208][ T7140] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 428.804413][ T7140] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 428.819017][ T7140] usb 6-1: USB disconnect, device number 9 [ 429.729937][ T7910] IPv6: NLM_F_CREATE should be specified when creating new route [ 429.738047][ T7910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.745613][ T7910] IPv6: NLM_F_CREATE should be set when creating new route [ 430.995142][ T7933] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.219136][ T7946] loop0: detected capacity change from 0 to 8192 [ 434.397202][ T7965] SET target dimension over the limit! [ 434.416195][ T7946] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 434.527969][ T7946] REISERFS (device loop0): using ordered data mode [ 434.587179][ T7946] reiserfs: using flush barriers [ 434.732516][ T7946] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 435.648003][ T7946] REISERFS (device loop0): checking transaction log (loop0) [ 435.752741][ T7946] REISERFS (device loop0): Using r5 hash to sort names [ 435.778338][ T7946] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 435.808797][ T7946] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 439.208775][ T7998] IPv6: NLM_F_CREATE should be specified when creating new route [ 440.131808][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.138294][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.037071][ T8002] loop7: detected capacity change from 0 to 8192 [ 441.290887][ T8002] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 441.337889][ T8002] REISERFS (device loop7): using ordered data mode [ 441.369119][ T8002] reiserfs: using flush barriers [ 441.463003][ T8002] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 441.635692][ T8002] REISERFS (device loop7): checking transaction log (loop7) [ 441.708571][ T8002] REISERFS (device loop7): Using r5 hash to sort names [ 441.736393][ T8002] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 441.832363][ T8002] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 442.625673][ T8024] netlink: 48 bytes leftover after parsing attributes in process `syz.7.734'. [ 442.679468][ T8024] netlink: 48 bytes leftover after parsing attributes in process `syz.7.734'. [ 443.964842][ T8028] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 444.458911][ T4957] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 444.928010][ T4957] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.944828][ T4957] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 444.988605][ T4957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.031113][ T4957] usb 8-1: config 0 descriptor?? [ 446.986567][ T4957] pwc: Askey VC010 type 2 USB webcam detected. [ 447.317597][ T4957] pwc: recv_control_msg error -32 req 02 val 2b00 [ 447.416914][ T8051] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.116535][ T4957] pwc: recv_control_msg error -32 req 02 val 2700 [ 448.187446][ T4957] pwc: recv_control_msg error -32 req 02 val 2c00 [ 448.237401][ T4957] pwc: recv_control_msg error -32 req 04 val 1000 [ 448.297465][ T4957] pwc: recv_control_msg error -32 req 04 val 1300 [ 448.367885][ T4957] pwc: recv_control_msg error -32 req 04 val 1400 [ 448.637652][ T4957] pwc: recv_control_msg error -32 req 02 val 2100 [ 448.678082][ T4957] pwc: recv_control_msg error -32 req 04 val 1500 [ 448.727684][ T4957] pwc: recv_control_msg error -32 req 02 val 2500 [ 448.778189][ T4957] pwc: recv_control_msg error -32 req 02 val 2400 [ 448.827380][ T4957] pwc: recv_control_msg error -32 req 02 val 2600 [ 449.087413][ T4957] pwc: recv_control_msg error -71 req 02 val 2800 [ 449.117451][ T4957] pwc: recv_control_msg error -71 req 04 val 1100 [ 449.138698][ T4957] pwc: recv_control_msg error -71 req 04 val 1200 [ 449.235139][ T4957] pwc: Registered as video103. [ 449.267799][ T4957] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input8 [ 450.696010][ T8060] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 450.729758][ T4957] usb 8-1: USB disconnect, device number 7 [ 450.774025][ T8054] loop3: detected capacity change from 0 to 8192 [ 451.075708][ T8054] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 451.141244][ T8054] REISERFS (device loop3): using ordered data mode [ 451.150258][ T8054] reiserfs: using flush barriers [ 451.164659][ T8054] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 451.174150][ T8065] loop7: detected capacity change from 0 to 8192 [ 451.270592][ T8054] REISERFS (device loop3): checking transaction log (loop3) [ 451.285665][ T8070] loop5: detected capacity change from 0 to 8192 [ 451.374855][ T8054] REISERFS (device loop3): Using r5 hash to sort names [ 451.386730][ T8054] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 451.407433][ T8065] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 451.417044][ T8070] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 451.493958][ T8065] REISERFS (device loop7): using ordered data mode [ 451.508357][ T8070] REISERFS (device loop5): using ordered data mode [ 451.515084][ T8070] reiserfs: using flush barriers [ 451.557411][ T8065] reiserfs: using flush barriers [ 451.567507][ T8054] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 451.612652][ T8065] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 451.644536][ T8070] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 451.707769][ T8065] REISERFS (device loop7): checking transaction log (loop7) [ 451.738689][ T8070] REISERFS (device loop5): checking transaction log (loop5) [ 451.809124][ T8070] REISERFS (device loop5): Using r5 hash to sort names [ 451.816261][ T8065] REISERFS (device loop7): Using r5 hash to sort names [ 451.830183][ T8070] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 451.895753][ T8065] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 451.897563][ T8070] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 451.927526][ T8065] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 453.837683][ T8099] ================================================================== [ 453.846277][ T8099] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 453.853623][ T8099] Read of size 8 at addr ffff888027eed018 by task syz.3.758/8099 [ 453.861364][ T8099] [ 453.863704][ T8099] CPU: 0 PID: 8099 Comm: syz.3.758 Not tainted syzkaller #0 [ 453.871178][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.881706][ T8099] Call Trace: [ 453.885219][ T8099] [ 453.888196][ T8099] dump_stack_lvl+0x188/0x250 [ 453.893018][ T8099] ? show_regs_print_info+0x20/0x20 [ 453.898349][ T8099] ? _printk+0xda/0x130 [ 453.902706][ T8099] ? dvb_device_open+0xc6/0x370 [ 453.907597][ T8099] ? load_image+0x400/0x400 [ 453.912209][ T8099] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 453.917696][ T8099] print_address_description+0x60/0x2d0 [ 453.923278][ T8099] ? dvb_device_open+0xc6/0x370 [ 453.928251][ T8099] kasan_report+0xdf/0x130 [ 453.932795][ T8099] ? dvb_device_open+0xc6/0x370 [ 453.937682][ T8099] dvb_device_open+0xc6/0x370 [ 453.942385][ T8099] ? do_raw_spin_unlock+0x11d/0x230 [ 453.947611][ T8099] chrdev_open+0x5c5/0x6a0 [ 453.952110][ T8099] ? cd_forget+0x160/0x160 [ 453.956556][ T8099] ? fsnotify_perm+0x3a7/0x560 [ 453.961438][ T8099] ? cd_forget+0x160/0x160 [ 453.965962][ T8099] do_dentry_open+0x7ff/0xf80 [ 453.970688][ T8099] path_openat+0x26f5/0x2fa0 [ 453.975427][ T8099] ? verify_lock_unused+0x140/0x140 [ 453.980650][ T8099] ? slab_post_alloc_hook+0x4c/0x380 [ 453.986313][ T8099] ? do_filp_open+0x410/0x410 [ 453.991381][ T8099] do_filp_open+0x1e2/0x410 [ 453.996002][ T8099] ? vfs_tmpfile+0x300/0x300 [ 454.000743][ T8099] ? _raw_spin_unlock+0x24/0x40 [ 454.005788][ T8099] ? alloc_fd+0x598/0x630 [ 454.010250][ T8099] do_sys_openat2+0x150/0x4b0 [ 454.014967][ T8099] ? __lock_acquire+0x7d10/0x7d10 [ 454.020105][ T8099] ? do_sys_open+0xe0/0xe0 [ 454.024592][ T8099] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 454.030774][ T8099] ? lock_chain_count+0x20/0x20 [ 454.035689][ T8099] ? vtime_user_exit+0x2c8/0x3e0 [ 454.040745][ T8099] __x64_sys_openat+0x135/0x160 [ 454.045807][ T8099] do_syscall_64+0x4c/0xa0 [ 454.050286][ T8099] ? clear_bhb_loop+0x30/0x80 [ 454.055076][ T8099] ? clear_bhb_loop+0x30/0x80 [ 454.059789][ T8099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 454.066073][ T8099] RIP: 0033:0x7f11b5be0fce [ 454.070530][ T8099] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 454.090566][ T8099] RSP: 002b:00007f11b3e37b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 454.099339][ T8099] RAX: ffffffffffffffda RBX: 00007f11b3e386c0 RCX: 00007f11b5be0fce [ 454.107713][ T8099] RDX: 0000000000000002 RSI: 00007f11b3e37c00 RDI: ffffffffffffff9c [ 454.115705][ T8099] RBP: 00007f11b3e37c00 R08: 0000000000000000 R09: 0000000000000000 [ 454.123872][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 454.131953][ T8099] R13: 00007f11b5e9a218 R14: 00007f11b5e9a180 R15: 00007ffc5c910ce8 [ 454.140098][ T8099] [ 454.143275][ T8099] [ 454.145628][ T8099] Allocated by task 1: [ 454.149720][ T8099] __kasan_kmalloc+0xb5/0xf0 [ 454.154436][ T8099] dvb_register_device+0x311/0x2170 [ 454.159673][ T8099] dvb_register_frontend+0x645/0x920 [ 454.165059][ T8099] vidtv_bridge_probe+0x9a1/0xf70 [ 454.170194][ T8099] platform_probe+0x137/0x1c0 [ 454.175006][ T8099] really_probe+0x284/0xc80 [ 454.179620][ T8099] __driver_probe_device+0x18c/0x330 [ 454.185085][ T8099] driver_probe_device+0x4f/0x420 [ 454.190214][ T8099] __driver_attach+0x46b/0x670 [ 454.195093][ T8099] bus_for_each_dev+0x182/0x1f0 [ 454.200226][ T8099] bus_add_driver+0x30a/0x5a0 [ 454.205322][ T8099] driver_register+0x32d/0x430 [ 454.210206][ T8099] vidtv_bridge_init+0x39/0x70 [ 454.215002][ T8099] do_one_initcall+0x272/0x730 [ 454.220089][ T8099] do_initcall_level+0x137/0x1f0 [ 454.225350][ T8099] do_initcalls+0x4b/0x90 [ 454.229972][ T8099] kernel_init_freeable+0x3e9/0x570 [ 454.235293][ T8099] kernel_init+0x19/0x1b0 [ 454.240086][ T8099] ret_from_fork+0x1f/0x30 [ 454.244612][ T8099] [ 454.246957][ T8099] Freed by task 8060: [ 454.251122][ T8099] kasan_set_track+0x4b/0x70 [ 454.255825][ T8099] kasan_set_free_info+0x1f/0x40 [ 454.260791][ T8099] ____kasan_slab_free+0xd5/0x110 [ 454.265925][ T8099] slab_free_freelist_hook+0xea/0x170 [ 454.271328][ T8099] kfree+0xef/0x2a0 [ 454.275156][ T8099] dvb_device_open+0x2e7/0x370 [ 454.279940][ T8099] chrdev_open+0x5c5/0x6a0 [ 454.284385][ T8099] do_dentry_open+0x7ff/0xf80 [ 454.289089][ T8099] path_openat+0x26f5/0x2fa0 [ 454.293783][ T8099] do_filp_open+0x1e2/0x410 [ 454.298450][ T8099] do_sys_openat2+0x150/0x4b0 [ 454.303289][ T8099] __x64_sys_openat+0x135/0x160 [ 454.308157][ T8099] do_syscall_64+0x4c/0xa0 [ 454.312689][ T8099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 454.318878][ T8099] [ 454.321214][ T8099] The buggy address belongs to the object at ffff888027eed000 [ 454.321214][ T8099] which belongs to the cache kmalloc-256 of size 256 [ 454.335371][ T8099] The buggy address is located 24 bytes inside of [ 454.335371][ T8099] 256-byte region [ffff888027eed000, ffff888027eed100) [ 454.349310][ T8099] The buggy address belongs to the page: [ 454.355119][ T8099] page:ffffea00009fbb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27eec [ 454.365394][ T8099] head:ffffea00009fbb00 order:1 compound_mapcount:0 [ 454.372099][ T8099] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 454.380208][ T8099] raw: 00fff00000010200 ffffea0000a52400 0000000400000004 ffff888016c41b40 [ 454.388816][ T8099] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 454.397597][ T8099] page dumped because: kasan: bad access detected [ 454.404074][ T8099] page_owner tracks the page as allocated [ 454.409884][ T8099] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2823, ts 14387919976, free_ts 0 [ 454.428517][ T8099] get_page_from_freelist+0x1bbd/0x1ca0 [ 454.434196][ T8099] __alloc_pages+0x1ee/0x480 [ 454.438840][ T8099] new_slab+0xc0/0x4b0 [ 454.443046][ T8099] ___slab_alloc+0x80a/0xdd0 [ 454.448120][ T8099] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 454.453607][ T8099] kthread+0x10b/0x520 [ 454.457779][ T8099] ret_from_fork+0x1f/0x30 [ 454.462243][ T8099] page_owner free stack trace missing [ 454.467829][ T8099] [ 454.470165][ T8099] Memory state around the buggy address: [ 454.475811][ T8099] ffff888027eecf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 454.484065][ T8099] ffff888027eecf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 454.492244][ T8099] >ffff888027eed000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 454.500328][ T8099] ^ [ 454.505197][ T8099] ffff888027eed080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 454.513273][ T8099] ffff888027eed100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 454.521346][ T8099] ================================================================== [ 454.529415][ T8099] Disabling lock debugging due to kernel taint [ 454.537701][ T8099] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 454.544924][ T8099] CPU: 0 PID: 8099 Comm: syz.3.758 Tainted: G B syzkaller #0 [ 454.553625][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.563711][ T8099] Call Trace: [ 454.567013][ T8099] [ 454.570391][ T8099] dump_stack_lvl+0x188/0x250 [ 454.575093][ T8099] ? show_regs_print_info+0x20/0x20 [ 454.580329][ T8099] ? load_image+0x400/0x400 [ 454.584874][ T8099] panic+0x2e5/0x810 [ 454.588799][ T8099] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 454.595065][ T8099] ? bpf_jit_dump+0xd0/0xd0 [ 454.599590][ T8099] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 454.605671][ T8099] ? _raw_spin_unlock+0x40/0x40 [ 454.610537][ T8099] ? dvb_device_open+0xc6/0x370 [ 454.615411][ T8099] check_panic_on_warn+0x80/0xa0 [ 454.620581][ T8099] ? dvb_device_open+0xc6/0x370 [ 454.625653][ T8099] end_report+0x6d/0xf0 [ 454.629961][ T8099] kasan_report+0x102/0x130 [ 454.634481][ T8099] ? dvb_device_open+0xc6/0x370 [ 454.639350][ T8099] dvb_device_open+0xc6/0x370 [ 454.644170][ T8099] ? do_raw_spin_unlock+0x11d/0x230 [ 454.649471][ T8099] chrdev_open+0x5c5/0x6a0 [ 454.653923][ T8099] ? cd_forget+0x160/0x160 [ 454.658529][ T8099] ? fsnotify_perm+0x3a7/0x560 [ 454.663313][ T8099] ? cd_forget+0x160/0x160 [ 454.667743][ T8099] do_dentry_open+0x7ff/0xf80 [ 454.672445][ T8099] path_openat+0x26f5/0x2fa0 [ 454.677320][ T8099] ? verify_lock_unused+0x140/0x140 [ 454.682544][ T8099] ? slab_post_alloc_hook+0x4c/0x380 [ 454.687931][ T8099] ? do_filp_open+0x410/0x410 [ 454.692633][ T8099] do_filp_open+0x1e2/0x410 [ 454.697157][ T8099] ? vfs_tmpfile+0x300/0x300 [ 454.701773][ T8099] ? _raw_spin_unlock+0x24/0x40 [ 454.706641][ T8099] ? alloc_fd+0x598/0x630 [ 454.711000][ T8099] do_sys_openat2+0x150/0x4b0 [ 454.715701][ T8099] ? __lock_acquire+0x7d10/0x7d10 [ 454.721070][ T8099] ? do_sys_open+0xe0/0xe0 [ 454.725502][ T8099] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 454.731588][ T8099] ? lock_chain_count+0x20/0x20 [ 454.736466][ T8099] ? vtime_user_exit+0x2c8/0x3e0 [ 454.741851][ T8099] __x64_sys_openat+0x135/0x160 [ 454.746813][ T8099] do_syscall_64+0x4c/0xa0 [ 454.751381][ T8099] ? clear_bhb_loop+0x30/0x80 [ 454.756106][ T8099] ? clear_bhb_loop+0x30/0x80 [ 454.760820][ T8099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 454.766741][ T8099] RIP: 0033:0x7f11b5be0fce [ 454.771278][ T8099] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 454.791191][ T8099] RSP: 002b:00007f11b3e37b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 454.799639][ T8099] RAX: ffffffffffffffda RBX: 00007f11b3e386c0 RCX: 00007f11b5be0fce [ 454.807766][ T8099] RDX: 0000000000000002 RSI: 00007f11b3e37c00 RDI: ffffffffffffff9c [ 454.815868][ T8099] RBP: 00007f11b3e37c00 R08: 0000000000000000 R09: 0000000000000000 [ 454.823865][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 454.831918][ T8099] R13: 00007f11b5e9a218 R14: 00007f11b5e9a180 R15: 00007ffc5c910ce8 [ 454.840236][ T8099] [ 454.843821][ T8099] Kernel Offset: disabled [ 454.848245][ T8099] Rebooting in 86400 seconds..