last executing test programs:

23m37.407284954s ago: executing program 32 (id=23):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48)
socket(0x41503864490ca358, 0x6, 0xffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc776000)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r4)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000014c0)=0x4d)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r6, &(0x7f00000000c0), 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
shutdown(r6, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000440)={&(0x7f000047b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0x8, &(0x7f00000007c0)=@raw=[@generic={0x20, 0xb, 0x4, 0x2, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0xa, 0x5, 0xd, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10000002}], &(0x7f0000000180)='GPL\x00', 0x8c, 0xd7, &(0x7f0000000880)=""/215, 0x41000, 0x22, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc453, &(0x7f00000000c0), 0x4, 0x55f, &(0x7f00000001c0)="$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")

23m33.262457156s ago: executing program 33 (id=29):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mmap(&(0x7f0000995000/0x3000)=nil, 0x3000, 0x200000a, 0x11, 0xffffffffffffffff, 0x10004000)
madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @private=0x80000000}})
r3 = gettid()
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0x2fff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_usb_connect(0x0, 0xfffffc4f, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
preadv(r5, &(0x7f00000001c0), 0x0, 0x185, 0x0)
timerfd_gettime(r5, &(0x7f0000000100))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
syz_open_dev$video(&(0x7f0000000000), 0x101, 0xc8380)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000011, 0x200000006c832, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

21m15.932548462s ago: executing program 6 (id=199):
socket(0x2, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndpcmc(0x0, 0x6, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2)
socket$kcm(0x29, 0x1, 0x0)
creat(0x0, 0x60)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1)
landlock_create_ruleset(0x0, 0x0, 0x3)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b10904000001030001000921010100"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x20, 0x23, 0x5, {0x5, 0x4, "10150f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000250900420073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x200800e4}, 0x8000)

21m9.932651942s ago: executing program 6 (id=208):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
open_tree(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, <r6=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
close_range(r2, r3, 0x0)
ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)

21m7.977590687s ago: executing program 6 (id=212):
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000080)=0x9, 0x8)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioprio_set$pid(0x3, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x90009427, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0000, 0x0)
ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x7})
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
bind$bt_sco(r1, &(0x7f0000000280), 0x8)
ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f0000000140)={'\x00', 0x20, 0x6, 0xfff, 0x9, 0x100, 0xffffffffffffffff})
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)

21m7.509114174s ago: executing program 6 (id=214):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="0100000000000000", 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x840, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0xe}, 0x46687ff1, 0x42, 0x0, 0x0, 0x401, 0x5, 0xe, 0xe, 0x3ff, &(0x7f00000003c0)})
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
syz_open_dev$cec(0x0, 0x0, 0x800)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'veth0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x1, {0x0, 0x0, 0x12, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfffffffffffffe40}}]}, 0x34}}, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82040)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000040)=0x1)
close_range(r1, r2, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="366667f30f011e0f22640fc77aeb0f06cb673e0f070f57df66b80500000066b9004000000f01c1f20f01439d0fc7b84992", 0x31}], 0x1, 0x44, 0x0, 0xfffffffffffffeb5)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0)

21m2.944710371s ago: executing program 2 (id=223):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x6, 0x10002)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa10b4b3cad0fe92d2"], 0x1a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn'])
chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x13, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)

21m2.747060852s ago: executing program 6 (id=226):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = io_uring_setup(0x36a3, 0x0)
msgget$private(0x0, 0x1)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)

21m1.054039222s ago: executing program 6 (id=227):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede)
fcntl$setpipe(r0, 0x407, 0x2000000)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4b, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x3, 0x0, 0x3, 0x0, 0x77f, 0x4000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
dup3(r2, r1, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private0, 0x1, 0x718, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x5, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x844)

21m0.39281514s ago: executing program 2 (id=228):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x6, 0x10002)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa10b4b3cad0fe92d2"], 0x1a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB])
chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x13, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0xd)

21m0.175466343s ago: executing program 2 (id=230):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
open_tree(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5, <r6=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r7, 0x89e1, 0x0)
close_range(r2, r3, 0x0)
ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)

20m58.248449585s ago: executing program 2 (id=232):
socket$kcm(0x10, 0x2, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0)
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_ethernet(0x4a, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r3, 0x9, 0x0)
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x3)
pipe(0x0)
socket$kcm(0x2d, 0x2, 0x0)

20m54.489649695s ago: executing program 2 (id=237):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = io_uring_setup(0x36a3, 0x0)
msgget$private(0x0, 0x1)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)

20m51.992548371s ago: executing program 2 (id=251):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000900)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x2, {0x3, 0x2, 0x8}})
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, <r8=>0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000340)={0x2c, 0x6, 0x0, 0x3b}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)="8e522109f1adb8740debe9ba1233ce33271b1976e4fc2747c5680271bcf803503e0cb142c608b33135cee1", 0x2b}, {0x0}, {&(0x7f0000000500)="0c8bf044acb227129c7ab0f6bacd7a19cfb0699242f04a3a0137bd8237e54bc72bda8f75cf5771aa7735a0c9e679d2c18b5b860af7396edddb4c3c66b3fb6329cbe378331333ab2cc3009de90c44c625198f75359b51bdc274931a305071378a682cc0f3f63691ffe16b7f53a87b7cf68b030bce61bf9312309be47954d4f74fde0c6a0bbb7733c2ac446612c850d8bb001a5fe1a16dfa597b652afafa280ddfe77590459aa3ea826f99ba4628187bf43f056dbb931428aa729bfdb30abb3a74b841af12b4dd8585632ceb0048218576d94470b2caa6", 0xd6}, {&(0x7f00000016c0)="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", 0x10f5}], 0x4, 0x0, 0x0, 0x20040091}, 0x8041)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300})
gettid()

20m45.518353559s ago: executing program 34 (id=227):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede)
fcntl$setpipe(r0, 0x407, 0x2000000)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x4b, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1}}, 0xe8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x3, 0x0, 0x3, 0x0, 0x77f, 0x4000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
dup3(r2, r1, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private0, 0x1, 0x718, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x5, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x844)

20m35.274020988s ago: executing program 35 (id=251):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000900)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x2, {0x3, 0x2, 0x8}})
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, <r8=>0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000340)={0x2c, 0x6, 0x0, 0x3b}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)="8e522109f1adb8740debe9ba1233ce33271b1976e4fc2747c5680271bcf803503e0cb142c608b33135cee1", 0x2b}, {0x0}, {&(0x7f0000000500)="0c8bf044acb227129c7ab0f6bacd7a19cfb0699242f04a3a0137bd8237e54bc72bda8f75cf5771aa7735a0c9e679d2c18b5b860af7396edddb4c3c66b3fb6329cbe378331333ab2cc3009de90c44c625198f75359b51bdc274931a305071378a682cc0f3f63691ffe16b7f53a87b7cf68b030bce61bf9312309be47954d4f74fde0c6a0bbb7733c2ac446612c850d8bb001a5fe1a16dfa597b652afafa280ddfe77590459aa3ea826f99ba4628187bf43f056dbb931428aa729bfdb30abb3a74b841af12b4dd8585632ceb0048218576d94470b2caa6", 0xd6}, {&(0x7f00000016c0)="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", 0x10f5}], 0x4, 0x0, 0x0, 0x20040091}, 0x8041)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300})
gettid()

15m15.385295273s ago: executing program 1 (id=664):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
shutdown(r1, 0x1)
poll(&(0x7f0000000140), 0x0, 0x2)
socket$kcm(0x10, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe2$watch_queue(0x0, 0x80)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bind$netrom(r3, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x1, 0x1, 0x10, "11010000001400000100b64c0000005c4b7c1500"})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84)
pipe2$9p(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x0)

15m13.177611232s ago: executing program 1 (id=667):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000380)={0x0, 0x5, 0x8, &(0x7f0000000240)={0x18, "14a6c63d876ff44271f1ac25000004189ab72d9615604d4008e300dd00"}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
socket$igmp(0x2, 0x3, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x4)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x6)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r7 = accept4(r5, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x2a6c}], 0x1, 0x2000, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r8, 0x80000000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2d, 0x443f, &(0x7f00000088c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
setresuid(0x0, 0xee01, 0x0)

15m11.070360705s ago: executing program 1 (id=670):
syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x9, 0xc8, 0xb2}}}, 0x7)

15m10.492879059s ago: executing program 1 (id=673):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)

15m9.236557132s ago: executing program 1 (id=676):
openat$comedi(0xffffffffffffff9c, 0x0, 0x288100, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1})
chdir(&(0x7f0000000300)='./bus\x00')
creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x301600, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x200000000000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

15m7.778544078s ago: executing program 1 (id=679):
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x2, 0x15, 0x0, 0x0, 0x7, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xb, 0x10, 0x10}, @sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0x4, 0x45, 0x3, 0xc0000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbb, 0x8, {0x6, 0x32, 0xf6, 0x7, 0x0, 0x401, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x17}}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x7, 0x6, 0x3c, 0x4, 0x40000000}]}, 0xa8}, 0x1, 0x400000000000000}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="b8667c152066"}, 0x14)
syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xa6f6, 0x10, 0x2, 0x28b}, 0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c)
r7 = dup2(r2, r2)
socket(0x2b, 0x1, 0x1)
sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fsopen(&(0x7f0000000180)='nfsd\x00', 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
recvmmsg(r9, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/95, 0x5f}], 0x1}, 0xff}], 0x1, 0x2000, 0x0)
close(0x3)
lseek(r8, 0x851, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

14m50.600341482s ago: executing program 36 (id=679):
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x2, 0x15, 0x0, 0x0, 0x7, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xb, 0x10, 0x10}, @sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0x4, 0x45, 0x3, 0xc0000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbb, 0x8, {0x6, 0x32, 0xf6, 0x7, 0x0, 0x401, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x17}}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x7, 0x6, 0x3c, 0x4, 0x40000000}]}, 0xa8}, 0x1, 0x400000000000000}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="b8667c152066"}, 0x14)
syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xa6f6, 0x10, 0x2, 0x28b}, 0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c)
r7 = dup2(r2, r2)
socket(0x2b, 0x1, 0x1)
sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fsopen(&(0x7f0000000180)='nfsd\x00', 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
recvmmsg(r9, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/95, 0x5f}], 0x1}, 0xff}], 0x1, 0x2000, 0x0)
close(0x3)
lseek(r8, 0x851, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20008041)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

13m17.268677326s ago: executing program 5 (id=878):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200})
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e)
r9 = socket$inet(0x2, 0x2, 0x1)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
write$binfmt_elf32(r10, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x99, 0x11, 0x2, 0x6e0, 0x3, 0x3e, 0x6, 0x170, 0x38, 0x18d, 0x1ff, 0x7, 0x20, 0x1, 0x4, 0xa58, 0x99}, [{0x1, 0x6, 0x19205ef0, 0x1, 0x6, 0xe, 0x6, 0x21}], "", ['\x00']}, 0x158)
ioctl$TIOCSPGRP(r10, 0x5410, &(0x7f0000000140)=r3)
sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

13m13.654482827s ago: executing program 5 (id=883):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
shutdown(r1, 0x1)
poll(&(0x7f0000000140), 0x0, 0x2)
socket$kcm(0x10, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe2$watch_queue(0x0, 0x80)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bind$netrom(r3, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x1, 0x1, 0x10, "11010000001400000100b64c0000005c4b7c1500"})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84)
pipe2$9p(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x0)

13m12.187417623s ago: executing program 5 (id=888):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200})
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e)
r9 = socket$inet(0x2, 0x2, 0x1)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000140)=r3)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

13m10.059480757s ago: executing program 5 (id=873):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x10008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ptrace(0x10, 0x0)
ptrace(0x11, 0x0)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f000020b000/0x11000)=nil, 0x11000, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB="000000850000f9aa3e31418564c9de53b11f3b1e83bd3394eb7bef66d482e883a72e33cedf4fd3601291782fe52526c1fef4492ba9a6bbaa613cc9aacc52939895d46c72fcf709ebddcf19ebb1d450efdf5911bfb951e9a29d62545454c9f3e429d5f9e0e1e6c4a92e45000000003b0a53f658bf13377fd80e7f2d275762548de13d1a8774ef9694298ad99da258a64cd1f710f0e8a60284d13ce9637f525bbfe31ee8a21305"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}, 0x1, 0x0, 0x0, 0x4008055}, 0x0)
process_vm_readv(r1, &(0x7f0000000d00), 0x0, &(0x7f0000000140)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/197, 0xc5}, {&(0x7f0000000ec0)=""/237, 0xbbb9fd7f22b740c8}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f00000003c0)=""/13, 0xd}], 0x5, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'})

13m4.786350496s ago: executing program 5 (id=877):
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x2, [], [0x2], [0x0, 0x6c], [0xfffffffffffffffc]})
r0 = syz_open_procfs(0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0xd, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x82, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)

13m4.18941859s ago: executing program 5 (id=890):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200})
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e)
r9 = socket$inet(0x2, 0x2, 0x1)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x99, 0x11, 0x2, 0x6e0, 0x3, 0x3e, 0x6, 0x170, 0x38, 0x18d, 0x1ff, 0x7, 0x20, 0x1, 0x4, 0xa58, 0x99}, [{0x1, 0x6, 0x19205ef0, 0x1, 0x6, 0xe, 0x6, 0x21}], "", ['\x00']}, 0x158)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000140)=r3)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

12m46.24040847s ago: executing program 37 (id=890):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200})
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e)
r9 = socket$inet(0x2, 0x2, 0x1)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x99, 0x11, 0x2, 0x6e0, 0x3, 0x3e, 0x6, 0x170, 0x38, 0x18d, 0x1ff, 0x7, 0x20, 0x1, 0x4, 0xa58, 0x99}, [{0x1, 0x6, 0x19205ef0, 0x1, 0x6, 0xe, 0x6, 0x21}], "", ['\x00']}, 0x158)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000140)=r3)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

10m13.555706551s ago: executing program 4 (id=1232):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xdc}}, 0x0)

10m11.221986087s ago: executing program 4 (id=1236):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'rti800\x00', [0x409e1, 0x2166, 0x0, 0x100000, 0x88d7, 0x8f, 0x11, 0x10, 0x1002, 0xffffffff, 0x200, 0x8, 0x344, 0x1, 0x7, 0x1, 0x8, 0x3, 0x7, 0xe, 0x102, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400007, 0x1]})

10m10.708790867s ago: executing program 4 (id=1239):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e2e0a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

10m10.392010716s ago: executing program 4 (id=1242):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200})
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r7, &(0x7f0000000a00)={0x2020}, 0x204e)
r8 = socket$inet(0x2, 0x2, 0x1)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
write$binfmt_elf32(r9, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x99, 0x11, 0x2, 0x6e0, 0x3, 0x3e, 0x6, 0x170, 0x38, 0x18d, 0x1ff, 0x7, 0x20, 0x1, 0x4, 0xa58, 0x99}, [{0x1, 0x6, 0x19205ef0, 0x1, 0x6, 0xe, 0x6, 0x21}], "", ['\x00']}, 0x158)
ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000140)=r2)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

10m8.978102229s ago: executing program 4 (id=1245):
socket$inet6(0xa, 0x1, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000810000000300", @ANYRES32, @ANYBLOB="ffffffff00006385062d3e252cad", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
recvfrom$inet6(r6, &(0x7f0000000080)=""/123, 0x7b, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c)
sendfile(r5, r6, 0x0, 0x20000023892)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e21ac1414aa00"/201], 0x210)

10m7.135427766s ago: executing program 4 (id=1247):
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x2, [], [0x2], [0x0, 0x6c], [0xfffffffffffffffc]})
r0 = syz_open_procfs(0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0xd, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x0, 0x8, 0x19, &(0x7f00000008c0)=""/25, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x3, 0x8, 0xc7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x10000}, 0x94)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x1, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x82, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)

9m51.083807594s ago: executing program 38 (id=1247):
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x2, [], [0x2], [0x0, 0x6c], [0xfffffffffffffffc]})
r0 = syz_open_procfs(0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0xd, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x0, 0x8, 0x19, &(0x7f00000008c0)=""/25, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x3, 0x8, 0xc7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x10000}, 0x94)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x1, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x82, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)

19.973380943s ago: executing program 0 (id=2897):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000300)='A', 0x1})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000240)="9f", 0x1})
close(r0)

19.645822882s ago: executing program 0 (id=2901):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000200)={0x0, 0xfffffffffffffd12, 0x7fffffff})

19.480692682s ago: executing program 0 (id=2902):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000000340)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0)

19.063229356s ago: executing program 0 (id=2906):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6)
r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157)
syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

18.168511488s ago: executing program 0 (id=2912):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000080)={[{@fat=@showexec}, {@fat=@nfs}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x401}}, {@fat=@check_strict}]}, 0x1, 0x22d, &(0x7f0000000680)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00'], 0x7c}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

16.464998288s ago: executing program 0 (id=2918):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$sndseq(r0, &(0x7f0000000380)=[{0x86, 0x77, 0x0, 0x0, @tick=0xfffffffc, {0x3}, {0x7}, @raw32={[0x2, 0x0, 0x800]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfc}, {}, @control={0x7, 0x8, 0x3}}, {0x6, 0x3, 0x9, 0x3, @tick=0x2, {0x10, 0x5}, {0x8, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0xd0, 0x5, 0xb, @tick=0x80000001, {0x3, 0x9}, {0x2, 0x2}, @note={0xf9, 0x7, 0xb, 0x3, 0x10}}], 0x70)

13.445537654s ago: executing program 8 (id=2925):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000140)="41000200010001", 0x7)
close_range(r0, 0xffffffffffffffff, 0x0)

12.668943419s ago: executing program 8 (id=2927):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@jqfmt_vfsv0}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)
creat(&(0x7f0000000000)='./file1\x00', 0x14c)

12.088962613s ago: executing program 7 (id=2930):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0)

11.423600702s ago: executing program 8 (id=2933):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c})
r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f00000000c0)="8ae566574653", 0x0, 0x304, 0x0, 0x0, 0x0})

10.529638924s ago: executing program 7 (id=2935):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000080)={[{@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@shortname_win95}]}, 0x2d, 0x34e, &(0x7f0000001a80)="$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")
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

8.571035049s ago: executing program 8 (id=2939):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200})
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e)
r9 = socket$inet(0x2, 0x2, 0x1)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
write$binfmt_elf32(r10, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x99, 0x11, 0x2, 0x6e0, 0x3, 0x3e, 0x6, 0x170, 0x38, 0x18d, 0x1ff, 0x7, 0x20, 0x1, 0x4, 0xa58, 0x99}, [{0x1, 0x6, 0x19205ef0, 0x1, 0x6, 0xe, 0x6, 0x21}], "", ['\x00']}, 0x158)
ioctl$TIOCSPGRP(r10, 0x5410, &(0x7f0000000140)=r3)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

7.167582491s ago: executing program 3 (id=2941):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000010000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
munmap(&(0x7f000000e000/0x3000)=nil, 0x3000)
preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76)

6.8509159s ago: executing program 8 (id=2942):
socket$inet6(0xa, 0x1, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000810000000300", @ANYRES32, @ANYBLOB="ffffffff00006385062d3e252cad", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
recvfrom$inet6(r7, &(0x7f0000000080)=""/123, 0x7b, 0x0, 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x20000023892)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e21ac1414aa00"/201], 0x210)

6.83259933s ago: executing program 9 (id=2943):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, 0x0)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e)
r9 = socket$inet(0x2, 0x2, 0x1)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
write$binfmt_elf32(r10, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x99, 0x11, 0x2, 0x6e0, 0x3, 0x3e, 0x6, 0x170, 0x38, 0x18d, 0x1ff, 0x7, 0x20, 0x1, 0x4, 0xa58, 0x99}, [{0x1, 0x6, 0x19205ef0, 0x1, 0x6, 0xe, 0x6, 0x21}], "", ['\x00']}, 0x158)
ioctl$TIOCSPGRP(r10, 0x5410, &(0x7f0000000140)=r3)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

6.66511142s ago: executing program 7 (id=2944):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x576, &(0x7f0000000580)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0)

6.615334153s ago: executing program 3 (id=2945):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x3f})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)

4.372166834s ago: executing program 8 (id=2946):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200})
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e)
r9 = socket$inet(0x2, 0x2, 0x1)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
write$binfmt_elf32(r10, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x99, 0x11, 0x2, 0x6e0, 0x3, 0x3e, 0x6, 0x170, 0x38, 0x18d, 0x1ff, 0x7, 0x20, 0x1, 0x4, 0xa58, 0x99}, [{0x1, 0x6, 0x19205ef0, 0x1, 0x6, 0xe, 0x6, 0x21}], "", ['\x00']}, 0x158)
ioctl$TIOCSPGRP(r10, 0x5410, &(0x7f0000000140)=r3)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

3.819452266s ago: executing program 9 (id=2947):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000100)="7927393059dab7272a842d1a8644", 0xe}, {&(0x7f0000000b40)="b622a51c", 0x4}], 0x2, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x12, 0x4)

3.660817436s ago: executing program 3 (id=2948):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x18000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
r3 = syz_open_procfs(0x0, 0x0)
pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x97)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001800000000000000010000000000000002000000000000000000000400000000000047a9449b8b15c769e4192500000000e246292d8052d0c8c5702e75a3834dd69dfec577016e0a64be2d44cbe99d293a770362e6d91c60235c09760df4d5000000000000004adcffc7d064a1613a1ae861092acc5bcc25b9cadb701dd107101785667181ffa179035ca7c02d884470923183fc1e5eba"], 0x0, 0x26}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000079cf39fc00000c00009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="0b712003", @ANYRES16=r7, @ANYBLOB="02002dbd7000ffdbdf25030000000500050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x40080)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r9 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r10 = fcntl$dupfd(r8, 0x406, r8)
ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
readv(r9, &(0x7f0000000880)=[{&(0x7f00000030c0)=""/4096, 0x1000}], 0x1)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@usrquota}, {@dioread_nolock}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)

3.308862496s ago: executing program 7 (id=2949):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, &(0x7f00000096c0)={0xe, [0x10000, 0x8, 0xd], [{0x8000, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8000, 0x8001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}, {0x0, 0x80000000, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xf8, 0x16b40000, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x0, 0x1}, {0x29, 0x0, 0x0, 0x1}, {0x8001, 0x6, 0x0, 0x1, 0x1}, {0xf, 0xa15, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x1, 0x1, 0x1, 0x1}], 0x200})
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e)
r9 = socket$inet(0x2, 0x2, 0x1)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
write$binfmt_elf32(r10, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x99, 0x11, 0x2, 0x6e0, 0x3, 0x3e, 0x6, 0x170, 0x38, 0x18d, 0x1ff, 0x7, 0x20, 0x1, 0x4, 0xa58, 0x99}, [{0x1, 0x6, 0x19205ef0, 0x1, 0x6, 0xe, 0x6, 0x21}], "", ['\x00']}, 0x158)
ioctl$TIOCSPGRP(r10, 0x5410, &(0x7f0000000140)=r3)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

3.193516153s ago: executing program 9 (id=2950):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000180)=0xc)
syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./file2\x00', 0x22200c8c, &(0x7f0000000000)=ANY=[], 0x1, 0x1526, &(0x7f000000a000)="$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")
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, r1, 0x1000)

2.167830053s ago: executing program 7 (id=2951):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x147, 0x0, &(0x7f0000000280)="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", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50)
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x20d00)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1.771112916s ago: executing program 9 (id=2952):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
fcntl$notify(r0, 0x402, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='sessionid\x00')
readv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/59, 0x3b}], 0x1)

1.460803544s ago: executing program 3 (id=2953):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, 0x0)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e)
r9 = socket$inet(0x2, 0x2, 0x1)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
write$binfmt_elf32(r10, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x99, 0x11, 0x2, 0x6e0, 0x3, 0x3e, 0x6, 0x170, 0x38, 0x18d, 0x1ff, 0x7, 0x20, 0x1, 0x4, 0xa58, 0x99}, [{0x1, 0x6, 0x19205ef0, 0x1, 0x6, 0xe, 0x6, 0x21}], "", ['\x00']}, 0x158)
ioctl$TIOCSPGRP(r10, 0x5410, &(0x7f0000000140)=r3)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

1.342046291s ago: executing program 7 (id=2954):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x7f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = syz_open_dev$sndpcmc(&(0x7f0000009680), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r7, 0xc1004111, 0x0)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}]}, 0x40}, 0x1, 0x7}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x3210052, &(0x7f0000000000)={[{@errors_continue}, {@order_relaxed}, {@nodiscard}, {@order_strict}, {@norecovery}, {@nodiscard}, {@nobarrier}, {@nodiscard}], [], 0x2c}, 0x43, 0xede, &(0x7f0000002a40)="$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")
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x204e)
r9 = socket$inet(0x2, 0x2, 0x1)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
write$binfmt_elf32(r10, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x99, 0x11, 0x2, 0x6e0, 0x3, 0x3e, 0x6, 0x170, 0x38, 0x18d, 0x1ff, 0x7, 0x20, 0x1, 0x4, 0xa58, 0x99}, [{0x1, 0x6, 0x19205ef0, 0x1, 0x6, 0xe, 0x6, 0x21}], "", ['\x00']}, 0x158)
ioctl$TIOCSPGRP(r10, 0x5410, &(0x7f0000000140)=r3)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb", 0x5}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x20048084)

1.332587652s ago: executing program 9 (id=2955):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./bus\x00', 0x4680, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRES64], 0xfd, 0x2a1, &(0x7f0000000400)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
creat(&(0x7f0000000400)='./bus\x00', 0x0)

426.451834ms ago: executing program 3 (id=2956):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1100730)

137.164172ms ago: executing program 3 (id=2957):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x1000001, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1, 0xf01, &(0x7f0000002d40)="$eJzs3U9oHNf9APA3q3+2pVirJL9flKSx1aSpE7eVXdmH9FQHTAshhFx6T3CsxFRJTZ0eEmIs9+RCDykhl5QeUpJbwT0UmlAooVDonxx67im0l5bigiGXGqwtkt9brZ413dVImtVqPx/46unNG833O16xnjfafRuAodVY+3r69GwRwrsfv3P221dWfr267Wh7j7m1r0XsNUMIYx39IjveZ3HD7ZtvnVttV7K2CAtrX9N4eO5G+2cnQwjLYS58Eprh6PHm59dGnl388L1Pj12++Mwru3T6AAAwVK7/aemvT/7jj1+duXX9yJkw0d6ers+bsT8Zr/tPxuv7dN3fCBv7RUd0Gs/2G4nRyPYbyfYbzfKMluQby44zVrLfeJd8Ix3bNjtPAAAAGESNOMdthqIx3zHPbYZGY37+zrx/1WfT48X8axeWFi/1sVgAAACgks+vrL3oVgghhBBiiONWq9Xqdw1CCCHE7kZrut93IAAAAIBhk9YdaK8PllvOVxbYnvbRmr3lv/F0Y/Ofhx1Q9++//IOV/4OrnnEAAKhuv15NpvNK19FpHYN8HcGR7Oe2ev3fyI4zusU6y9YVHJT1BsvqzP9d96qy+rf6OPZLWf35eph7VVn9+Tqde1VZ/RM111FVWf0Haq6jqrL6D9ZcR1Vl9R+quY6qyuqfrLmOqsrqn6q5jqrK6r+n5jqqKqv/cM11VFVW/6C8rLas/mbNdVRVVv9MzXVUVVb/vTXXUVVZ/ffVXEdVZfXfX3Md/fJIbNO/w5FsvHP+nM/pBmWOBwAAAMPuP31b/++bfV/7YNhi7W/Ce6AOIYTY9Vg1twfqEEIIsUnEFcj6XofYwbi6B2oQPcSVft58AAAAAPaE9L6A9K73VpTGR7qMj3YZH+syPt5lfKLLOAAAABDCb64tPvh2sf4+/+2uh5fWjUrrL211HaN8PcKt5t/uumfbzT8o65YBAAAwXIpvfbJy/Oz7r8/cun7kTMfsdyXOd9M6oKPx3sBHsZ9eFzCV9Ys0hz6zMU+jZL/8/sA9Zcd7fpsnCgAAAEMszd+boWjMd8y7m6HRmJ9fn4/PhrFi8cLS+ZOxnz6f5Q/TYxOr279ec90AAABA79bn+5vP/9Pn+M6G8WL+tQtLi5fu9Kfa28canfcFpte3F533BZrZ9oWS7adiP31+5yvTB9e2z5/73tJLO33yAAAAMCQuvfHmd19cWjr/fd/4xje+aX/T72cmAABgp33493f+/INTU7+98/7/9fXv0vv/52K/Gdf2+0vcIb1OIL0P4K7367+wMc902X4XN+7XzPYbiTGR1X2g4zihY73B9HMzG/oj6/s2Nx5nvCTfZJZvKsuXr1Mwmu2fzu9wtj1fnzDtN51tz9dhHM1yFFn+RwMAAACUO/H6qxdPXHrjza9dePXFl8+/fP61UycXvrHw1MLC6YUTa6/rP9H56n4AAABgEK2/6LfflQAAAAAAAAAAAAAAAAAAAMDwquPjxPp9jgAAADDs/n0lhLAshBBC1Bdrn3G6B+oQQgghxODHhOuKnqPVyj9pHgAAAGB33b751rnYXt10h+ViR/O1j9YM4UDH9pVYx+8f/9njq5G233h64/2SQztaDcOu4/f/3KY77PDvv/yDlf+Dqzubv/2c17zTpOe98ue/xsYDnKmW98s/+ecTnfkfGu0xf37+z1fLfyzLfyz0lr/1fpb/hWr5n8jyH+ox/13nf7Fa/idj/tlUz2O95t/4+E/ENp3HwR7zH8/O/6XQa/7s/Js9Jsx8JeYHgGHU6HcBuyRdJaTr6MnYT+cbLzdD/uqHrV7/N7LjjG678o3HTddBD8R+ul6ayvImW61/MjvePRXrzA3Kq0rK6t+px3G3ldU/VnMdVZXVP15zHVWV1T9Rcx1VldV/oOY6qiqrv9d5aL+V1T8o95XL6p+suY6qyuqfqrmOqsrq3+r/4/1SVv/hmuuoqqz+6ZrrqKqs/oq31WpXVv9MzXVUVVb/vTXXUVVZ/ffVXEdVZfXff/emQbkk2pKHY1s2H07zz+k4lvrNrD+xyb/lfr23AAAAAIPmX9b/E0IIIYQQQggh9n20Wv2+A0E/7e67mQHYqzz/DzeP/3Dz+A83jz//S3oNf5H1k5Eu46Ndxse6jI9n4/nv60SX8fuy47aiNH5/l/H/6zJ+uMv4A13GZ7uMP9hl/KEu4w93GQcAAGA4/H9szQ8BAABg/7r8i49+/KtjL9ycuXX9yJkwfte68ydjfyL+bf1a7Ofr3idj8W/+P4z9n8f2d7H9W7a/158AAADA7kufE+Pv/wAAALB/pc8pNf8HAACA/Wsmtub/AAAAsH/dG1vzfwAAANjHigObb45tui/waGx7XdcPANj7vhDbR2J7JLZHY/vF2KbrgMdi+6Wa6gMAds5Pv/Ojp94u1tf7P5WN347bU3uX5Tt3CorGxpX8D8b2UGwf77Ge/PMAes2fHO4xz27ln95mfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg/2isfT19erYI4d2P3zk7ffnsy6vbjrb3mFv7WsReM4Qw1v65NLre/2Xc8fbNt86ttiuxbcW2CAuhCEV7PDx3o51pMoSwHObCJ6EZjh5vfn5t5NnFD9/79Njli8+8sov/BAAAALDv/TcAAP//vcAp6A==")
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000140)={0xffffffff, 0xffffffffffffffff, 0x0, 0x10000000, 0x0, 0x0, 0x2401})

0s ago: executing program 9 (id=2958):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
getdents64(r0, &(0x7f0000000000)=""/90, 0x5a)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
getdents64(r0, &(0x7f00000001c0)=""/122, 0x7a)

kernel console output (not intermixed with test programs):

0010][T13667] usb 8-1: Found UVC 7.01 device syz (8086:0b07)
[ 1267.365521][T13667] usb 8-1: No valid video chain found.
[ 1267.453927][T13667] usb 8-1: selecting invalid altsetting 0
[ 1267.460136][T13667] usbtest: probe of 8-1:220.1 failed with error -22
[ 1267.532159][T13667] usb 8-1: USB disconnect, device number 11
[ 1267.742956][T14316] loop7: detected capacity change from 0 to 4096
[ 1267.987779][T14316] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1268.007934][T14317] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1268.916228][T14320] loop7: detected capacity change from 0 to 4096
[ 1268.978262][T14320] ntfs: (device loop7): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[ 1269.082581][T14320] ntfs: volume version 3.1.
[ 1269.496751][T14313] loop8: detected capacity change from 0 to 32768
[ 1269.658527][T14313] XFS (loop8): Mounting V5 Filesystem
[ 1271.571912][ T4275] Bluetooth: hci4: command 0x0401 tx timeout
[ 1271.644089][T13674] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1271.665109][T14313] XFS (loop8): Ending clean mount
[ 1271.722191][T13021] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1271.787525][ T7677] XFS (loop8): Unmounting Filesystem
[ 1271.852236][T13674] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1271.871948][T13674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1271.905330][T13674] usb 1-1: Product: syz
[ 1271.912059][T13021] usb 10-1: Using ep0 maxpacket: 32
[ 1271.917859][T13674] usb 1-1: Manufacturer: syz
[ 1271.929596][T13021] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[ 1271.954568][T13674] usb 1-1: SerialNumber: syz
[ 1271.959411][T13021] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1271.989389][T13674] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1272.017965][T13021] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1272.060129][T13021] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1272.090675][T13021] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1272.139075][T13021] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1272.156044][T13021] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1272.181986][T13021] usb 10-1: Product: syz
[ 1272.186339][T13021] usb 10-1: Manufacturer: syz
[ 1272.191063][T13021] usb 10-1: SerialNumber: syz
[ 1272.218001][  T125] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1272.242703][T13021] usb 10-1: config 0 descriptor??
[ 1272.276135][T13021] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1272.316631][T13021] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1272.642409][T14345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1272.651473][T14345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1273.021917][T13667] usb 1-1: USB disconnect, device number 6
[ 1273.185522][T13021] usb 10-1: USB disconnect, device number 13
[ 1273.220269][T13021] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[ 1273.417817][T14372] loop9: detected capacity change from 0 to 512
[ 1273.515398][T14372] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1273.542813][T14372] ext4 filesystem being mounted at /244/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1273.668036][   T27] audit: type=1800 audit(1770928653.775:278): pid=14372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2124" name="file1" dev="loop9" ino=15 res=0 errno=0
[ 1275.325027][  T125] usb 1-1: Service connection timeout for: 256
[ 1275.331396][  T125] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1275.388370][  T125] ath9k_htc: Failed to initialize the device
[ 1275.406095][   T27] audit: type=1800 audit(1770928655.455:279): pid=14372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2124" name="file2" dev="loop9" ino=16 res=0 errno=0
[ 1275.438781][T13667] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1275.452245][T14386] capability: warning: `syz.0.2125' uses 32-bit capabilities (legacy support in use)
[ 1275.566658][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1277.907258][T14407] program syz.8.2132 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1278.219287][T14413] loop9: detected capacity change from 0 to 1024
[ 1278.952149][  T125] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1279.160352][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2138'.
[ 1279.270890][  T125] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 1279.310114][  T125] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1279.523917][  T125] usb 10-1: Product: syz
[ 1279.557513][  T125] usb 10-1: Manufacturer: syz
[ 1279.587901][  T125] usb 10-1: SerialNumber: syz
[ 1279.662468][  T125] usb 10-1: config 0 descriptor??
[ 1279.944953][  T125] usb 10-1: ignoring: probably an ADSL modem
[ 1280.040322][T14439] loop8: detected capacity change from 0 to 4096
[ 1280.081643][T14439] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512)
[ 1280.214929][T14445] loop7: detected capacity change from 0 to 64
[ 1280.347279][  T125] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1280.444415][T14445] hfs: request for non-existent node 131072 in B*Tree
[ 1280.528825][T14445] hfs: request for non-existent node 131072 in B*Tree
[ 1280.594419][  T125] usb 10-1: USB disconnect, device number 14
[ 1281.178568][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2144'.
[ 1282.154783][T14470] loop8: detected capacity change from 0 to 1024
[ 1282.193195][T14470] EXT4-fs: Ignoring removed nobh option
[ 1282.198854][T14470] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1282.368403][T14470] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1282.397957][T14470] EXT4-fs (loop8): shut down requested (2)
[ 1282.523203][ T7677] EXT4-fs (loop8): unmounting filesystem.
[ 1284.829392][T14483] loop0: detected capacity change from 0 to 4096
[ 1284.864943][T14483] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[ 1284.953904][T14483] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1285.272579][T14496] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1285.304040][T14496] syzkaller1: linktype set to 768
[ 1285.623982][T14503] loop9: detected capacity change from 0 to 128
[ 1285.716892][T14503] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1285.784587][T14503] hpfs: filesystem error: improperly stopped
[ 1285.821270][T14503] hpfs: You really don't want any checks? You are crazy...
[ 1285.829446][T14507] loop8: detected capacity change from 0 to 4096
[ 1285.846696][T14503] hpfs: hpfs_map_sector(): read error
[ 1285.932716][T14503] hpfs: code page support is disabled
[ 1285.940630][T14503] hpfs: hpfs_map_4sectors(): unaligned read
[ 1285.948216][T14509] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1285.967888][T14505] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1286.034438][T14503] hpfs: hpfs_map_4sectors(): unaligned read
[ 1286.040452][T14503] hpfs: filesystem error: unable to find root dir
[ 1286.147297][T14503] hpfs: hpfs_map_4sectors(): unaligned read
[ 1286.183355][T14503] hpfs: hpfs_map_sector(): read error
[ 1286.222952][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'.
[ 1287.324092][T14524] loop0: detected capacity change from 0 to 4096
[ 1287.608120][T14526] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1287.628271][T14523] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1287.773191][T14525] loop9: detected capacity change from 0 to 4096
[ 1287.948322][T14533] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1288.335810][T14540] loop0: detected capacity change from 0 to 512
[ 1288.347693][T14542] input input13: cannot allocate more than FF_MAX_EFFECTS effects
[ 1288.503195][T14540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1288.595888][T14553] loop7: detected capacity change from 0 to 128
[ 1288.630011][T14553] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1288.661024][T14540] ext4 filesystem being mounted at /128/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1288.752640][T14553] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1288.767154][T14553] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1289.114599][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1289.208800][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1289.332457][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2171'.
[ 1290.261934][T11239] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1290.463860][T11239] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1290.513926][T14583] loop0: detected capacity change from 0 to 4096
[ 1290.545435][T11239] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1290.578438][T14586] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1290.589849][T14583] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1290.605610][T11239] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1290.605646][T11239] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.620302][T14565] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1290.832490][T14590] loop7: detected capacity change from 0 to 128
[ 1290.865329][T14590] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1290.903604][T14590] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1290.913437][T14590] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1291.179851][T11239] usb 10-1: USB disconnect, device number 15
[ 1291.492801][T14602] loop8: detected capacity change from 0 to 4096
[ 1291.536761][T14604] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1291.550690][T14602] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1291.725550][ T8785] udevd[8785]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1292.102290][T11239] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1292.332298][T11239] usb 9-1: Using ep0 maxpacket: 16
[ 1292.343617][T11239] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1292.426011][T11239] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1292.496111][T11239] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1292.535326][T11239] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1292.587601][T11239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.656166][T11239] usb 9-1: config 0 descriptor??
[ 1293.111380][T11239] hid (null): invalid report_count -127887439
[ 1293.189854][T11239] hid (null): unknown global tag 0xc
[ 1293.201772][T14615] loop9: detected capacity change from 0 to 131072
[ 1293.236798][T14615] F2FS-fs (loop9): Invalid log sectorsize (67108873)
[ 1293.243787][T14615] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1293.257521][T14615] F2FS-fs (loop9): invalid crc value
[ 1293.314557][T14615] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1293.340484][T11239] usb 9-1: USB disconnect, device number 17
[ 1293.373460][T14615] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1293.380651][T14615] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1294.041060][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1294.308284][T14642] loop7: detected capacity change from 0 to 512
[ 1294.320751][T14634] loop8: detected capacity change from 0 to 4096
[ 1294.350238][T14634] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1294.438048][T14634] ntfs: (device loop8): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[ 1294.484293][T14634] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1294.498020][T14634] ntfs: (device loop8): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1294.519041][T14642] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1294.539249][   T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1294.552106][T14634] ntfs: volume version 3.1.
[ 1294.575387][T14642] EXT4-fs (loop7): shut down requested (2)
[ 1294.657360][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1294.734945][   T14] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30
[ 1294.783599][T14634] ntfs: (device loop8): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[ 1294.792154][T14651] loop9: detected capacity change from 0 to 4096
[ 1294.822984][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1294.834047][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[ 1294.847781][   T14] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[ 1294.872650][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1294.881490][T14652] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1294.913304][T14651] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1294.952583][   T14] usb 1-1: config 0 descriptor??
[ 1295.038885][ T4583] ntfs: (device loop8): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[ 1295.097289][ T7677] ntfs: (device loop8): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[ 1295.375143][   T14] elecom 0003:056E:010C.000D: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.0-1/input0
[ 1295.536612][T13667] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1295.601022][T14666] loop7: detected capacity change from 0 to 4096
[ 1295.635618][   T14] usb 1-1: USB disconnect, device number 7
[ 1295.734280][T13667] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[ 1295.754775][T13667] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[ 1295.770995][T14666] ntfs: (device loop7): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk.
[ 1295.796219][T13667] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1295.826784][T14666] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 1295.835921][T13667] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1295.856450][T14666] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1295.889257][T14660] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1295.942886][T14667] fido_id[14667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1296.400562][T14666] ntfs: volume version 3.1.
[ 1296.987275][T14685] loop0: detected capacity change from 0 to 64
[ 1297.361008][T14692] loop8: detected capacity change from 0 to 4096
[ 1297.399998][T13667] aiptek 10-1:17.0: Aiptek using 400 ms programming speed
[ 1297.817367][T14692] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1297.837611][T14693] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1297.968516][T13667] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input14
[ 1298.148982][T14697] loop0: detected capacity change from 0 to 256
[ 1298.225852][T13667] usb 10-1: USB disconnect, device number 16
[ 1298.232075][    C1] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1298.861790][T14711] loop7: detected capacity change from 0 to 4096
[ 1298.915866][T14714] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1298.931287][T14711] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1299.122543][T14716] loop9: detected capacity change from 0 to 512
[ 1299.188284][T14720] loop0: detected capacity change from 0 to 512
[ 1299.206509][T14716] EXT4-fs (loop9): 1 orphan inode deleted
[ 1299.231959][T14716] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1299.516836][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1300.600933][T14745] loop9: detected capacity change from 0 to 4096
[ 1300.720866][T14745] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1300.744891][T14746] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1300.842152][   T14] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1301.092142][   T14] usb 9-1: Using ep0 maxpacket: 16
[ 1301.257362][T14753] loop0: detected capacity change from 0 to 4096
[ 1302.082246][   T14] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1302.172821][   T14] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1302.200912][T14754] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1302.229065][T14752] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1302.255244][   T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1302.283260][   T14] usb 9-1: Product: syz
[ 1302.301986][   T14] usb 9-1: Manufacturer: syz
[ 1302.306686][   T14] usb 9-1: SerialNumber: syz
[ 1302.363222][   T14] usb 9-1: config 0 descriptor??
[ 1302.413575][   T14] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[ 1302.487440][   T14] usb 9-1: Detected FT232R
[ 1302.574336][   T14] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1302.622494][T14761] loop9: detected capacity change from 0 to 4096
[ 1302.662575][T14762] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1302.694846][T14761] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1302.882100][   T14] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1302.929487][T14767] loop0: detected capacity change from 0 to 4096
[ 1302.979267][T14769] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1303.020136][T14767] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1303.044856][T13674] usb 9-1: USB disconnect, device number 18
[ 1303.139221][T13674] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1303.168681][T13674] ftdi_sio 9-1:0.0: device disconnected
[ 1303.284325][T13670] kernel write not supported for file /snd/pcmC0D0p (pid: 13670 comm: kworker/1:12)
[ 1303.769110][T14780] loop9: detected capacity change from 0 to 4096
[ 1303.872327][T13674] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1304.117424][T13674] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1304.219632][T13674] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1304.291803][T13674] usb 8-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[ 1304.521919][T14801] loop8: detected capacity change from 0 to 4096
[ 1304.636004][T14801] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1304.654780][T14802] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1304.789926][T13674] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1304.803609][T13674] usb 8-1: config 0 descriptor??
[ 1304.818327][ T9058] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22.
[ 1304.845485][ T9058] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[ 1305.023032][T14807] loop0: detected capacity change from 0 to 128
[ 1305.222373][T13674] cypress 0003:04B4:DE61.000E: unknown main item tag 0x5
[ 1305.263066][T13674] cypress 0003:04B4:DE61.000E: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.7-1/input0
[ 1305.429505][T13674] usb 8-1: USB disconnect, device number 12
[ 1305.472412][T14819] loop0: detected capacity change from 0 to 64
[ 1305.485329][T14818] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2240'.
[ 1305.628795][   T27] kauditd_printk_skb: 18 callbacks suppressed
[ 1305.628814][   T27] audit: type=1800 audit(1770928685.735:280): pid=14819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2239" name="file1" dev="loop0" ino=18 res=0 errno=0
[ 1305.869452][T14820] fido_id[14820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[ 1305.904041][T14827] loop9: detected capacity change from 0 to 128
[ 1305.963099][T14827] EXT4-fs: Ignoring removed nobh option
[ 1306.169012][T14827] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1306.224023][T14838] loop8: detected capacity change from 0 to 4096
[ 1307.252583][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1307.258983][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1307.277113][T14841] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1307.290707][T14827] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1307.303822][T14838] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1307.407555][T14827] fscrypt (loop9, inode 12): Direct key flag not allowed with different contents and filenames modes
[ 1307.549205][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1307.607719][T14852] loop0: detected capacity change from 0 to 256
[ 1307.728814][T14852] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[ 1307.779220][T14852] FAT-fs (loop0): Filesystem has been set read-only
[ 1307.848685][T14857] loop9: detected capacity change from 0 to 1024
[ 1307.988364][T14857] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1308.276318][T14869] loop7: detected capacity change from 0 to 128
[ 1308.285046][T14869] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1308.320289][T14869] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1308.326231][T14867] loop0: detected capacity change from 0 to 4096
[ 1308.331043][T14869] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1308.493573][T14867] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1308.562740][T14873] loop8: detected capacity change from 0 to 1024
[ 1308.579616][T14867] ntfs3: loop0: Failed to load $Extend.
[ 1308.593123][T14873] EXT4-fs: Ignoring removed nobh option
[ 1308.628473][T14873] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1308.663745][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1308.730229][T14873] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1308.810989][T14873] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.2255: Allocating blocks 497-513 which overlap fs metadata
[ 1308.943769][T14871] EXT4-fs (loop8): pa ffff8880724748c0: logic 32768, phys. 145, len 23
[ 1308.953323][T14871] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1
[ 1309.142115][ T7677] EXT4-fs (loop8): unmounting filesystem.
[ 1309.351075][T14887] loop0: detected capacity change from 0 to 512
[ 1311.393874][T14887] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1311.505712][T14887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1311.764415][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1312.360070][T14903] loop0: detected capacity change from 0 to 4096
[ 1312.422442][T14904] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1312.439004][T14903] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1313.057715][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1313.266413][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'.
[ 1314.367113][T14931] loop7: detected capacity change from 0 to 4096
[ 1314.601877][T14931] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1314.635746][T14932] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1315.509156][T14937] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1315.555371][T14937] syzkaller1: linktype set to 776
[ 1317.701975][ T4319] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1317.894717][ T4319] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[ 1317.917011][ T4319] usb 1-1: config 0 has no interface number 0
[ 1317.992338][ T4319] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 1318.037810][ T4319] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1318.144817][ T4319] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 1318.190554][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1318.204668][ T4319] usb 1-1: Product: syz
[ 1318.208913][ T4319] usb 1-1: Manufacturer: syz
[ 1318.216193][ T4319] usb 1-1: SerialNumber: syz
[ 1318.919003][ T4319] usb 1-1: config 0 descriptor??
[ 1318.994512][ T4319] usb 1-1: can't set config #0, error -71
[ 1319.001797][ T4319] usb 1-1: USB disconnect, device number 8
[ 1319.285890][T14965] loop0: detected capacity change from 0 to 4096
[ 1319.385977][T14967] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1319.400835][T14965] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1320.554398][T14981] loop7: detected capacity change from 0 to 128
[ 1320.563016][T14981] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1321.568522][T14981] EXT4-fs: failed to create workqueue
[ 1321.574018][T14981] EXT4-fs (loop7): mount failed
[ 1321.750515][T14987] loop9: detected capacity change from 0 to 512
[ 1322.199506][T14995] loop0: detected capacity change from 0 to 1024
[ 1322.740851][T15007] loop0: detected capacity change from 0 to 4096
[ 1322.863517][T15007] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1322.881998][T15010] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1322.924601][T15009] loop8: detected capacity change from 0 to 7
[ 1322.970144][T13843]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 1323.041190][T13843] loop8: partition table partially beyond EOD, truncated
[ 1323.099312][T13843] loop8: p1 size 3651402975 extends beyond EOD, truncated
[ 1323.138833][T13843] loop8: p2 start 956478 is beyond EOD, truncated
[ 1323.188083][T15009]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 1323.554754][T15009] loop8: partition table partially beyond EOD, truncated
[ 1323.624265][T15009] loop8: p1 size 3651402975 extends beyond EOD, truncated
[ 1323.710849][T15009] loop8: p2 start 956478 is beyond EOD, truncated
[ 1323.835608][ T8790] udevd[8790]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1323.992821][T15019] loop0: detected capacity change from 0 to 4096
[ 1324.030677][ T8790] udevd[8790]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1324.070033][T15020] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1324.093950][T15019] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1325.692018][T11239] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1325.894113][T11239] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1325.923850][T11239] usb 8-1: config 0 has no interface number 0
[ 1325.973151][T11239] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1326.039614][T11239] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1326.214895][T11239] usb 8-1: Product: syz
[ 1326.239319][T11239] usb 8-1: Manufacturer: syz
[ 1326.268925][T11239] usb 8-1: SerialNumber: syz
[ 1326.311614][T11239] usb 8-1: config 0 descriptor??
[ 1326.444333][T15059] loop8: detected capacity change from 0 to 512
[ 1326.534392][T15059] EXT4-fs: Ignoring removed bh option
[ 1326.563818][T11239] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1326.587518][T15059] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1326.608045][T11239] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1326.638736][T15025] loop9: detected capacity change from 0 to 32768
[ 1326.660361][T11239] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1326.699736][T11239] usb 8-1: media controller created
[ 1326.721570][T15059] EXT4-fs (loop8): 1 truncate cleaned up
[ 1326.741755][T11239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1326.751661][T15059] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1326.764742][T15039] usb 8-1: dvb_usb_ec168: I2C read not implemented
[ 1326.845481][T15025] XFS (loop9): Mounting V5 Filesystem
[ 1326.862375][T11239] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1326.932194][T11239] usb 8-1: USB disconnect, device number 13
[ 1326.998188][T15045] loop0: detected capacity change from 0 to 32768
[ 1327.097360][ T7677] EXT4-fs (loop8): unmounting filesystem.
[ 1327.137550][T15025] XFS (loop9): Ending clean mount
[ 1327.255125][T15045] XFS (loop0): Mounting V5 Filesystem
[ 1327.310522][ T9058] XFS (loop9): Unmounting Filesystem
[ 1327.599034][T15045] XFS (loop0): Ending clean mount
[ 1327.660229][T15045] XFS (loop0): Quotacheck needed: Please wait.
[ 1327.903739][T15086] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2303'.
[ 1328.694941][T15045] XFS (loop0): Quotacheck: Done.
[ 1328.885740][T11600] XFS (loop0): Unmounting Filesystem
[ 1329.438370][T15102] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2307'.
[ 1330.620821][T15113] loop9: detected capacity change from 0 to 4096
[ 1330.659667][T15114] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1330.682240][T15113] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1330.801734][T15117] loop8: detected capacity change from 0 to 8
[ 1330.809271][T15117] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1330.944042][T13843] udevd[13843]: incorrect cramfs checksum on /dev/loop8
[ 1331.161307][T15122] loop8: detected capacity change from 0 to 512
[ 1331.255342][T15129] loop0: detected capacity change from 0 to 256
[ 1331.265918][T15126] loop7: detected capacity change from 0 to 128
[ 1331.283912][T15122] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1331.316014][T15122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[ 1331.333989][T15126] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1331.376106][T15122] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1331.472065][T15122] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.2312: bad orphan inode 267
[ 1331.499786][T15126] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1331.553267][T15122] EXT4-fs (loop8): Remounting filesystem read-only
[ 1331.631947][T15122] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1331.679929][T15122] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.2312: dx entry: limit 0 != root limit 125
[ 1331.808742][T15122] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2312: Corrupt directory, running e2fsck is recommended
[ 1331.972972][T15138] loop0: detected capacity change from 0 to 256
[ 1331.982783][ T4528] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1332.079320][T15138] exfat: Deprecated parameter 'utf8'
[ 1332.116646][T15138] exfat: Deprecated parameter 'utf8'
[ 1332.137943][ T7677] EXT4-fs (loop8): unmounting filesystem.
[ 1332.204290][T15138] exfat: Deprecated parameter 'utf8'
[ 1333.013069][T15138] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1333.656514][T15164] loop0: detected capacity change from 0 to 4096
[ 1333.708354][T15165] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1333.726713][T15164] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1333.914316][T15171] loop9: detected capacity change from 0 to 4096
[ 1334.772707][T15174] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1334.795147][T15170] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1335.022560][T15178] pimreg: tun_chr_ioctl cmd 1074025677
[ 1335.028487][T15178] pimreg: linktype set to 0
[ 1335.771982][T15189] loop8: detected capacity change from 0 to 4096
[ 1336.648114][T15192] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1336.660833][T15186] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1337.431919][T13021] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1338.142019][T13021] usb 8-1: Using ep0 maxpacket: 32
[ 1338.149149][T13021] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1338.178576][T13021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1338.244076][T13021] usb 8-1: config 0 descriptor??
[ 1338.487820][T13021] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1338.508472][T13021] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1338.552287][T13021] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1338.590044][T13021] usb 8-1: media controller created
[ 1338.613291][ T9523] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1338.712724][T15202] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[ 1338.751496][T15213] 9pnet_fd: Insufficient options for proto=fd
[ 1338.822223][ T9523] usb 10-1: Using ep0 maxpacket: 32
[ 1339.397377][T13021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1339.443374][ T9523] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[ 1339.453358][T13021] az6027: usb out operation failed. (-71)
[ 1339.462107][T13021] az6027: usb out operation failed. (-71)
[ 1339.467927][T13021] stb0899_attach: Driver disabled by Kconfig
[ 1339.501992][T13021] az6027: no front-end attached
[ 1339.501992][T13021] 
[ 1339.514101][ T9523] usb 10-1: config 0 has no interface number 0
[ 1339.520385][T13021] az6027: usb out operation failed. (-71)
[ 1339.526595][T13021] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1339.552024][T13021] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input15
[ 1339.588093][T13021] dvb-usb: schedule remote query interval to 400 msecs.
[ 1339.598148][T13021] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1339.604504][ T9523] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1339.676693][T13021] usb 8-1: USB disconnect, device number 14
[ 1339.695136][ T9523] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.795144][ T9523] usb 10-1: Product: syz
[ 1339.799492][ T9523] usb 10-1: Manufacturer: syz
[ 1339.870079][ T9523] usb 10-1: SerialNumber: syz
[ 1339.870112][T13021] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1339.903756][ T9523] usb 10-1: config 0 descriptor??
[ 1339.936062][ T9523] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1339.967511][T15217] loop8: detected capacity change from 0 to 256
[ 1340.029916][T15217] exfat: Deprecated parameter 'utf8'
[ 1340.129018][T15217] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[ 1340.155455][ T9523] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1340.227396][ T9523] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1340.686529][    C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1340.748159][ T4319] usb 10-1: USB disconnect, device number 17
[ 1341.226456][ T4319] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1341.358044][T15225] loop7: detected capacity change from 0 to 256
[ 1341.419734][ T4319] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1341.502580][ T4319] quatech2 10-1:0.51: device disconnected
[ 1342.008266][T15241] tun0: tun_chr_ioctl cmd 1074025672
[ 1342.033444][T15241] tun0: ignored: set checksum enabled
[ 1342.086707][T15246] loop9: detected capacity change from 0 to 1024
[ 1342.401068][T15256] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2351'.
[ 1342.692757][T15246] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1342.908146][T15246] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1343.151221][T15246] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: block 3: comm syz.9.2350: lblock 3 mapped to illegal pblock 3 (length 3)
[ 1343.242879][T15246] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 1343.295709][T15246] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1343.295709][T15246] 
[ 1343.512969][T15272] loop0: detected capacity change from 0 to 512
[ 1343.525056][ T4401] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8)
[ 1343.549628][T15272] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[ 1343.590154][T15272] UDF-fs: Scanning with blocksize 512 failed
[ 1343.614775][T15272] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[ 1343.653748][T15272] UDF-fs: Scanning with blocksize 1024 failed
[ 1343.663116][ T4401] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[ 1343.721055][T15272] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[ 1343.738472][T15272] UDF-fs: Scanning with blocksize 2048 failed
[ 1343.749764][ T4401] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1343.749764][ T4401] 
[ 1343.790690][T15272] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 1343.813141][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1343.871759][T15277] loop7: detected capacity change from 0 to 64
[ 1343.890919][T15272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1343.993987][T15279] loop8: detected capacity change from 0 to 128
[ 1344.026034][   T27] audit: type=1800 audit(1770928724.135:281): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2356" name="file1" dev="loop0" ino=26 res=0 errno=0
[ 1344.077951][T15279] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1344.163101][T15279] hpfs: filesystem error: improperly stopped
[ 1344.169197][T15279] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1344.264444][T15279] hpfs: You really don't want any checks? You are crazy...
[ 1344.319776][T15279] hpfs: hpfs_map_sector(): read error
[ 1344.384825][T15285] loop9: detected capacity change from 0 to 4096
[ 1344.435004][T15279] hpfs: code page support is disabled
[ 1344.440697][T15279] hpfs: hpfs_map_4sectors(): unaligned read
[ 1344.451097][T15286] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1344.465716][T15285] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1344.496478][T15279] hpfs: hpfs_map_4sectors(): unaligned read
[ 1344.535330][T15279] hpfs: filesystem error: unable to find root dir
[ 1344.642170][T13674] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1344.853469][T15295] loop0: detected capacity change from 0 to 512
[ 1344.873915][T13674] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1344.898016][T13674] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1344.938008][T13674] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1345.023321][T13674] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1345.055793][T13674] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1345.132935][T13674] usb 8-1: config 0 descriptor??
[ 1345.387559][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2365'.
[ 1345.661878][T13674] acrux 0003:1A34:0802.000F: unknown main item tag 0x0
[ 1345.784248][T13674] acrux 0003:1A34:0802.000F: unknown main item tag 0x0
[ 1346.122087][T13674] acrux 0003:1A34:0802.000F: item fetching failed at offset 2/5
[ 1346.148846][T13674] acrux 0003:1A34:0802.000F: parse failed
[ 1346.160626][T13674] acrux: probe of 0003:1A34:0802.000F failed with error -22
[ 1346.190652][T13674] usb 8-1: USB disconnect, device number 15
[ 1346.488741][T15295] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1346.505968][T15295] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1346.561996][T15295] EXT4-fs (loop0): ea_inode feature is not supported for Hurd
[ 1347.224796][ T4412] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1347.470995][ T4412] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1347.521949][ T4412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1347.530044][ T4412] usb 1-1: Product: syz
[ 1347.592016][ T4412] usb 1-1: Manufacturer: syz
[ 1347.607254][ T4412] usb 1-1: SerialNumber: syz
[ 1347.855344][ T4412] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1347.946942][ T4412] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1348.137380][T15326] loop7: detected capacity change from 0 to 40427
[ 1348.248701][T15326] F2FS-fs (loop7): invalid crc value
[ 1348.255509][ T4412] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71
[ 1348.286335][ T4412] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1348.574774][T15326] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1348.968393][ T4412] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1349.068499][ T4412] lan78xx: probe of 1-1:1.0 failed with error -71
[ 1349.326686][T15357] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2377'.
[ 1350.046657][ T4412] usb 1-1: USB disconnect, device number 9
[ 1351.446281][T15382] loop0: detected capacity change from 0 to 128
[ 1351.472291][T15382] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1351.622779][T15382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1351.634583][T15382] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1352.013332][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1352.105447][T15389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2385'.
[ 1353.290015][T15404] 9pnet_fd: Insufficient options for proto=fd
[ 1353.384493][T15374] loop9: detected capacity change from 0 to 32768
[ 1353.857151][T15411] loop7: detected capacity change from 0 to 4096
[ 1354.024043][T15411] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1354.061873][T15412] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1356.344623][T15438] loop7: detected capacity change from 0 to 128
[ 1357.012645][T15438] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1357.181372][T15438] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1357.368514][T15438] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1358.253931][T15428] loop8: detected capacity change from 0 to 32768
[ 1358.441026][T15431] loop0: detected capacity change from 0 to 32768
[ 1359.527602][T15468] loop9: detected capacity change from 0 to 4096
[ 1360.455048][T15469] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1360.477497][T15467] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1360.726529][T15473] 9pnet_fd: Insufficient options for proto=fd
[ 1360.962081][T13021] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1361.172079][T13021] usb 9-1: Using ep0 maxpacket: 16
[ 1361.182778][T13021] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[ 1361.344971][T13021] usb 9-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[ 1361.425437][T13021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1361.563847][T13021] usb 9-1: config 0 descriptor??
[ 1362.006522][T13021] wacom 0003:056A:0084.0010: unknown main item tag 0x0
[ 1362.072279][T13021] wacom 0003:056A:0084.0010: unknown main item tag 0x0
[ 1362.140748][T13021] wacom 0003:056A:0084.0010: hidraw0: USB HID v0.05 Device [HID 056a:0084] on usb-dummy_hcd.8-1/input0
[ 1362.336959][T13021] usb 9-1: USB disconnect, device number 19
[ 1362.457125][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1362.854939][T15494] loop7: detected capacity change from 0 to 4096
[ 1362.892172][T15495] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1362.905393][T15494] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1363.031286][T15492] fido_id[15492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1365.726144][T15533] loop8: detected capacity change from 0 to 2048
[ 1365.780102][T15535] loop9: detected capacity change from 0 to 256
[ 1365.902029][T15533] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1366.862756][T15535] FAT-fs (loop9): Directory bread(block 64) failed
[ 1366.951916][T15535] FAT-fs (loop9): Directory bread(block 65) failed
[ 1366.958669][T15535] FAT-fs (loop9): Directory bread(block 66) failed
[ 1367.061934][T15535] FAT-fs (loop9): Directory bread(block 67) failed
[ 1367.068680][T15535] FAT-fs (loop9): Directory bread(block 68) failed
[ 1367.166574][T15535] FAT-fs (loop9): Directory bread(block 69) failed
[ 1367.202464][T15535] FAT-fs (loop9): Directory bread(block 70) failed
[ 1367.209102][T15535] FAT-fs (loop9): Directory bread(block 71) failed
[ 1367.284726][T15535] FAT-fs (loop9): Directory bread(block 72) failed
[ 1367.316614][T15535] FAT-fs (loop9): Directory bread(block 73) failed
[ 1367.868495][T15545] loop8: detected capacity change from 0 to 4096
[ 1367.947957][T15548] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1367.963920][T15545] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1368.033290][   T27] audit: type=1800 audit(1770928748.155:282): pid=15535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2422" name="file1" dev="loop9" ino=1048686 res=0 errno=0
[ 1368.041353][T15535] syz.9.2422: attempt to access beyond end of device
[ 1368.041353][T15535] loop9: rw=2051, sector=1160, nr_sectors = 32 limit=256
[ 1368.444920][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1368.451758][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1369.495434][T15574] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2435'.
[ 1370.601369][T15577] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2436'.
[ 1370.899349][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'.
[ 1372.722789][T15593] loop0: detected capacity change from 0 to 8
[ 1372.845962][T15593] SQUASHFS error: Failed to read block 0x599: -5
[ 1372.905475][T15593] SQUASHFS error: Unable to read metadata cache entry [599]
[ 1373.889488][T15618] loop0: detected capacity change from 0 to 4096
[ 1374.745629][T15619] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1374.770250][T15617] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1374.958980][T15622] loop8: detected capacity change from 0 to 256
[ 1374.997975][T15622] exfat: Deprecated parameter 'utf8'
[ 1375.027923][T15622] exfat: Deprecated parameter 'utf8'
[ 1375.079276][T15622] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d)
[ 1375.355931][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'.
[ 1376.408309][T15633] loop0: detected capacity change from 0 to 4096
[ 1376.444466][T15633] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[ 1376.551767][T15633] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1379.382386][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2459'.
[ 1380.367523][T15647] loop7: detected capacity change from 0 to 32768
[ 1380.584364][T15647] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1380.884760][T15678] loop0: detected capacity change from 0 to 128
[ 1380.935826][T15681] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2463'.
[ 1381.524085][T15678] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1381.810436][T15678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1381.932310][T15678] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1382.210515][ T7587] ocfs2: Unmounting device (7,7) on (node local)
[ 1383.510337][ T4319] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1383.982259][   T26] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1384.193546][   T26] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1384.224190][   T26] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1384.230622][ T4319] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1384.294610][   T26] usb 9-1: config 0 descriptor??
[ 1384.320156][ T4319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.340497][ T4319] usb 8-1: Product: syz
[ 1384.346376][   T26] cp210x 9-1:0.0: cp210x converter detected
[ 1384.362280][ T4319] usb 8-1: Manufacturer: syz
[ 1384.366965][ T4319] usb 8-1: SerialNumber: syz
[ 1384.438610][ T4319] usb 8-1: config 0 descriptor??
[ 1384.740371][   T26] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1384.764907][   T26] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1384.793780][T11239] usb 8-1: USB disconnect, device number 16
[ 1384.972937][   T26] usb 9-1: USB disconnect, device number 20
[ 1384.997985][   T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1385.080477][   T26] cp210x 9-1:0.0: device disconnected
[ 1385.747990][T15722] loop8: detected capacity change from 0 to 512
[ 1385.759124][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1385.842795][T15722] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1385.943501][T15722] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1386.264943][ T7677] EXT4-fs (loop8): unmounting filesystem.
[ 1387.294449][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2477'.
[ 1388.684398][T15762] loop9: detected capacity change from 0 to 256
[ 1388.738095][T15762] exfat: Deprecated parameter 'utf8'
[ 1388.774314][T15762] exfat: Deprecated parameter 'namecase'
[ 1388.780122][T15762] exfat: Deprecated parameter 'utf8'
[ 1388.850398][T15762] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001210c, chksum : 0x8db71888, utbl_chksum : 0xe619d30d)
[ 1389.850725][T15776] loop7: detected capacity change from 0 to 1024
[ 1389.992525][T15777] hfsplus: xattr exists yet
[ 1390.164590][ T4391] hfsplus: b-tree write err: -5, ino 8
[ 1390.305514][T15782] loop9: detected capacity change from 0 to 128
[ 1390.370412][T15782] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1390.438793][T15784] loop7: detected capacity change from 0 to 64
[ 1390.469501][T15782] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1390.519899][T15782] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1390.992868][T15802] loop0: detected capacity change from 0 to 512
[ 1391.048827][T15802] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1391.157008][T15802] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1391.237188][T15802] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.2491: Invalid block bitmap block 0 in block_group 0
[ 1391.273453][T15802] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem
[ 1391.288668][T15802] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.2491: attempt to clear invalid blocks 983261 len 1
[ 1391.333922][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2495'.
[ 1391.411116][T15802] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.2491: Invalid inode table block 0 in block_group 0
[ 1391.464020][T15812] loop8: detected capacity change from 0 to 4096
[ 1391.468997][T15802] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem
[ 1391.497173][T15813] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1391.514081][T15812] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1391.539538][T15802] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[ 1391.574313][T15802] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.2491: Invalid inode table block 0 in block_group 0
[ 1391.649845][T15802] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem
[ 1391.707384][T15802] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.2491: mark_inode_dirty error
[ 1391.765795][T15802] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[ 1391.801574][T15802] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.2491: Invalid inode table block 0 in block_group 0
[ 1391.887892][T15802] EXT4-fs (loop0): 1 truncate cleaned up
[ 1391.909159][T15802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1392.066097][T15802] EXT4-fs (loop0): shut down requested (2)
[ 1392.096378][T15821] netlink: 'syz.7.2498': attribute type 11 has an invalid length.
[ 1392.162164][T15821] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2498'.
[ 1392.230142][T15820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1392.246025][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1392.547971][T15829] loop0: detected capacity change from 0 to 512
[ 1392.592184][T15831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2499'.
[ 1393.323256][T15829] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1393.403318][T15829] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1393.688482][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1393.738871][T15846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2504'.
[ 1393.970939][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1394.125099][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1394.354587][T15855] loop7: detected capacity change from 0 to 4096
[ 1394.531051][T15855] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1394.554840][T15856] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1395.333690][T15866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'.
[ 1396.250048][T15872] loop0: detected capacity change from 0 to 1024
[ 1397.440662][T15906] loop7: detected capacity change from 0 to 128
[ 1397.449120][T15906] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1397.548550][T15906] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1397.558604][T15906] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1397.650733][T15877] loop9: detected capacity change from 0 to 40427
[ 1397.731678][T15877] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 1397.805954][T15877] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1397.930116][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1397.946918][T15877] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1398.188765][T15877] F2FS-fs (loop9): recover fsync data on readonly fs
[ 1398.269925][T15877] F2FS-fs (loop9): Try to recover 1th superblock, ret: -30
[ 1398.288669][T15877] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1399.739571][T15942] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1399.749634][T15942] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1399.758781][T15942] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1399.767725][T15942] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1400.033346][T15950] loop0: detected capacity change from 0 to 4096
[ 1400.922851][T15953] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1400.939967][T15950] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1401.361176][T15966] loop8: detected capacity change from 0 to 1024
[ 1401.488054][T15966] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1401.509613][T15970] loop7: detected capacity change from 0 to 512
[ 1402.279654][T15970] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2540: inode has both inline data and extents flags
[ 1402.409114][T15970] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2540: couldn't read orphan inode 15 (err -117)
[ 1402.458858][ T7677] EXT4-fs (loop8): unmounting filesystem.
[ 1402.518833][T15970] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1402.548185][T15970] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2800: Unable to expand inode 2. Delete some EAs or run e2fsck.
[ 1403.335506][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1403.715503][T16000] loop9: detected capacity change from 0 to 1024
[ 1403.751609][T16000] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1403.782151][T16000] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1405.127629][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1405.237879][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1406.326500][T16022] loop0: detected capacity change from 0 to 4096
[ 1406.630212][   T48] Bluetooth: hci4: command 0x0409 tx timeout
[ 1406.706886][T16023] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1406.748031][T16020] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1407.677889][T16030] loop9: detected capacity change from 0 to 64
[ 1407.785010][T16030] hfs: request for non-existent node 1280 in B*Tree
[ 1407.791723][T16030] hfs: request for non-existent node 1280 in B*Tree
[ 1408.018698][T16037] netlink: 'syz.0.2558': attribute type 11 has an invalid length.
[ 1408.045140][T12142] hfs: request for non-existent node 1280 in B*Tree
[ 1408.062664][T16037] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2558'.
[ 1408.065029][T12142] hfs: request for non-existent node 1280 in B*Tree
[ 1408.116450][T16033] loop7: detected capacity change from 0 to 8192
[ 1408.265743][T16033] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1408.293178][T16036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1408.331850][T16033] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[ 1408.363172][T16033] REISERFS (device loop7): using ordered data mode
[ 1408.400557][T16033] reiserfs: using flush barriers
[ 1408.458322][T16033] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1408.570380][T16033] REISERFS (device loop7): checking transaction log (loop7)
[ 1408.722742][T16033] REISERFS (device loop7): Using r5 hash to sort names
[ 1408.801226][T16033] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[ 1408.918179][T16055] loop0: detected capacity change from 0 to 1024
[ 1409.059513][T16055] syz.0.2566: attempt to access beyond end of device
[ 1409.059513][T16055] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[ 1409.138171][T16062] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2565'.
[ 1412.397704][T16079] loop0: detected capacity change from 0 to 4096
[ 1412.438428][T16084] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1412.700127][T16079] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1413.271308][T16096] loop8: detected capacity change from 0 to 4096
[ 1414.171287][T16098] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1414.192662][T16094] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1414.690364][T16111] loop0: detected capacity change from 0 to 4096
[ 1414.752403][T16113] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1414.769454][T16111] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1416.302725][    C1] hrtimer: interrupt took 262275 ns
[ 1416.554148][T11239] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 1416.758150][T11239] usb 8-1: Using ep0 maxpacket: 32
[ 1416.772836][T16124] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4)
[ 1416.780406][T16124] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1416.809458][T11239] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1416.858214][T16124] vhci_hcd vhci_hcd.0: Device attached
[ 1416.905268][T11239] usb 8-1: unable to read config index 0 descriptor/start: -71
[ 1416.932116][T11239] usb 8-1: can't read configurations, error -71
[ 1416.991905][T13674] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1417.111865][T16133] loop8: detected capacity change from 0 to 8192
[ 1417.122139][T13021] usb 51-1: new low-speed USB device number 2 using vhci_hcd
[ 1417.193879][T13674] usb 10-1: config 0 has no interfaces?
[ 1417.201587][T13674] usb 10-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1417.260026][T13674] usb 10-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1417.302682][T13674] usb 10-1: Manufacturer: syz
[ 1417.315476][T13674] usb 10-1: config 0 descriptor??
[ 1417.576688][T16125] usb 51-1: recv xbuf, 0
[ 1417.577950][T13674] usb 10-1: USB disconnect, device number 18
[ 1417.627428][   T65] vhci_hcd: stop threads
[ 1417.736518][   T65] vhci_hcd: release socket
[ 1417.772012][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2588'.
[ 1417.786287][T13021] usb 51-1: device descriptor read/64, error -71
[ 1418.255601][   T65] vhci_hcd: disconnect device
[ 1421.720286][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2600'.
[ 1422.845807][T16192] loop0: detected capacity change from 0 to 4096
[ 1423.053156][T16192] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1423.074397][T16194] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1423.675918][T16202] netlink: 'syz.9.2605': attribute type 3 has an invalid length.
[ 1423.706026][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2605'.
[ 1424.112301][T16213] loop0: detected capacity change from 0 to 1024
[ 1424.222866][T16213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1424.256267][T16213] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1426.414839][T16213] EXT4-fs error (device loop0): ext4_free_blocks:6221: comm syz.0.2611: Freeing blocks not in datazone - block = 0, count = 16
[ 1426.517027][T16213] EXT4-fs (loop0): Remounting filesystem read-only
[ 1426.669138][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1427.992536][T16232] loop7: detected capacity change from 0 to 512
[ 1428.134364][T16232] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1428.166306][T16232] ext4 filesystem being mounted at /426/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1428.473383][T16243] loop0: detected capacity change from 0 to 4096
[ 1429.195546][T16244] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1429.214541][T16241] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1429.325968][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1429.885863][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1429.895797][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1430.515594][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2619'.
[ 1432.284135][T16267] loop0: detected capacity change from 0 to 512
[ 1432.406067][T16267] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2623: inode has both inline data and extents flags
[ 1432.420101][T16267] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2623: couldn't read orphan inode 15 (err -117)
[ 1432.539174][T16267] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1434.724755][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1434.843983][T16278] loop8: detected capacity change from 0 to 16
[ 1434.882315][T16278] erofs: (device loop8): erofs_init_device: empty device tag @ pos 0
[ 1434.920293][T16280] loop0: detected capacity change from 0 to 128
[ 1434.934795][T16278] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1434.995261][T16280] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 1435.079570][T16280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1435.326852][T16287] loop9: detected capacity change from 0 to 128
[ 1435.436790][T16287] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1435.522226][T16287] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1435.554266][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1435.722870][T16287] EXT4-fs warning (device loop9): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled.
[ 1435.781991][T13674] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1435.937386][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1436.001956][T13674] usb 1-1: Using ep0 maxpacket: 16
[ 1436.009545][T13674] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1436.076948][T13674] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1436.107448][T13674] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1436.193385][T13674] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1436.255260][T13674] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1436.328639][T13674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1436.478483][T16302] loop9: detected capacity change from 0 to 4096
[ 1436.568330][T13674] usb 1-1: Product: syz
[ 1436.697423][T13674] usb 1-1: Manufacturer: syz
[ 1436.750575][T13674] usb 1-1: SerialNumber: syz
[ 1436.852302][T16302] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1436.890161][T16303] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1437.289877][T13674] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1437.530343][ T4319] usb 1-1: USB disconnect, device number 10
[ 1437.599021][ T4319] usblp0: removed
[ 1437.946300][T16315] loop9: detected capacity change from 0 to 256
[ 1438.001244][T16315] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1438.073248][T16315] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[ 1438.084018][T16288] loop8: detected capacity change from 0 to 40427
[ 1438.165592][T16288] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 1438.177770][T16315] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[ 1438.199596][T16314] loop7: detected capacity change from 0 to 4096
[ 1438.245464][T16288] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 1438.305616][T16314] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 1438.326161][T16288] F2FS-fs (loop8): invalid crc value
[ 1438.354063][T16288] F2FS-fs (loop8): Failed to start F2FS issue_checkpoint_thread (-12)
[ 1438.370184][T16314] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1438.436785][T16314] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1438.689789][T16326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2636'.
[ 1439.523213][T16314] ntfs: volume version 3.1.
[ 1439.729701][T16332] loop0: detected capacity change from 0 to 512
[ 1439.801454][ T7587] ntfs: (device loop7): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[ 1439.830694][T16332] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1439.907120][T16334] loop9: detected capacity change from 0 to 2048
[ 1439.955969][T16332] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[ 1440.019487][T16334] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1440.096308][T16332] EXT4-fs (loop0): 1 truncate cleaned up
[ 1440.125961][T16332] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1440.205654][T16344] loop8: detected capacity change from 0 to 256
[ 1440.292843][T16344] exfat: Deprecated parameter 'utf8'
[ 1440.502986][T16344] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1440.584617][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1440.951905][T13673] kernel read not supported for file /video7 (pid: 13673 comm: kworker/1:15)
[ 1441.222044][T13673] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[ 1441.375510][T16365] loop9: detected capacity change from 0 to 512
[ 1441.430060][T16365] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[ 1441.453558][T13673] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1441.577634][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2650'.
[ 1441.606634][T13673] usb 1-1: config 0 has no interface number 0
[ 1441.655386][T13673] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1441.980700][T13673] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1442.119560][T13673] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1442.272769][T13673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1442.375218][T13673] usb 1-1: config 0 descriptor??
[ 1442.390992][T16365] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1442.414266][T16365] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[ 1442.442236][T16355] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1442.475508][T13673] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1442.710138][T16365] EXT4-fs (loop9): 1 truncate cleaned up
[ 1442.730154][T16365] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1442.751480][T16374] loop7: detected capacity change from 0 to 256
[ 1442.807807][T13673] usb 1-1: USB disconnect, device number 11
[ 1442.813920][    C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1442.830657][T16374] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1442.872082][T16374] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[ 1443.017827][T16374] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[ 1443.124287][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1444.699385][T16386] loop9: detected capacity change from 0 to 4096
[ 1445.640873][T16387] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1445.664867][T16385] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1446.568159][T16407] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2664'.
[ 1446.602283][T16407] netem: unknown loss type 0
[ 1446.630357][T16407] netem: change failed
[ 1446.951936][T13674] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1447.154333][T13674] usb 10-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00
[ 1447.199965][T13674] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1447.324807][T16423] loop7: detected capacity change from 0 to 128
[ 1447.379503][T16423] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1447.423786][T16422] loop8: detected capacity change from 0 to 128
[ 1447.432673][T16423] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1447.445158][T13674] usb 10-1: config 0 descriptor??
[ 1447.450495][T16423] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1447.766126][T13674] usbhid 10-1:0.0: can't add hid device: -71
[ 1447.792166][T13674] usbhid: probe of 10-1:0.0 failed with error -71
[ 1447.890374][T13674] usb 10-1: USB disconnect, device number 19
[ 1448.190840][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2669'.
[ 1448.560563][T16442] loop8: detected capacity change from 0 to 128
[ 1448.608445][T16442] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1448.688664][T16442] hpfs: filesystem error: improperly stopped
[ 1448.729289][T16442] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1448.749658][T16442] hpfs: You really don't want any checks? You are crazy...
[ 1448.791903][T16442] hpfs: hpfs_map_sector(): read error
[ 1448.797369][T16442] hpfs: code page support is disabled
[ 1448.875642][T16442] hpfs: hpfs_map_4sectors(): unaligned read
[ 1448.881723][T16442] hpfs: hpfs_map_4sectors(): unaligned read
[ 1448.942567][T16442] hpfs: filesystem error: unable to find root dir
[ 1449.013097][T16450] loop0: detected capacity change from 0 to 512
[ 1449.114683][T16450] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2675: bad orphan inode 13
[ 1449.155894][T16450] ext4_test_bit(bit=12, block=4) = 1
[ 1449.161323][T16450] is_bad_inode(inode)=0
[ 1449.194196][T16450] NEXT_ORPHAN(inode)=0
[ 1449.219040][T16450] max_ino=32
[ 1449.233180][T16450] i_nlink=1
[ 1449.236497][T16450] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1449.352166][T16450] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.2675: Unrecognised inode hash code 20
[ 1449.404726][T16457] EXT4-fs (loop0): shut down requested (2)
[ 1449.411115][T16450] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2675: Corrupt directory, running e2fsck is recommended
[ 1449.472133][T16459] loop8: detected capacity change from 0 to 1024
[ 1449.505416][T16459] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1449.558123][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1449.612461][T16459] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1449.639762][T16459] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1449.715536][   T27] audit: type=1800 audit(1770928829.825:283): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2677" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1449.950172][ T7677] EXT4-fs (loop8): unmounting filesystem.
[ 1450.079794][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2678'.
[ 1451.005101][T16443] loop9: detected capacity change from 0 to 32768
[ 1451.217875][T16443] XFS (loop9): Mounting V5 Filesystem
[ 1451.931108][T16443] XFS (loop9): Ending clean mount
[ 1452.041838][T16443] XFS (loop9): Quotacheck needed: Please wait.
[ 1452.178485][T16443] XFS (loop9): Quotacheck: Done.
[ 1452.277806][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2681'.
[ 1453.063506][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1453.252334][ T9058] XFS (loop9): Unmounting Filesystem
[ 1453.319516][T16522] loop7: detected capacity change from 0 to 256
[ 1453.352987][T16522] exfat: Deprecated parameter 'utf8'
[ 1453.358434][T16522] exfat: Deprecated parameter 'namecase'
[ 1453.408586][T16522] exfat: Deprecated parameter 'utf8'
[ 1453.535610][T16522] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1453.633595][T16522] exFAT-fs (loop7): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5)
[ 1453.687975][T16522] exFAT-fs (loop7): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5)
[ 1453.702330][T11239] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1453.909889][T11239] usb 9-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00
[ 1453.944844][T16535] device bond_slave_0 entered promiscuous mode
[ 1453.952017][T16535] device bond_slave_1 entered promiscuous mode
[ 1453.964200][T11239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1453.992625][T11239] usb 9-1: config 0 descriptor??
[ 1454.011648][T16535] device bond_slave_0 left promiscuous mode
[ 1454.017745][T16535] device bond_slave_1 left promiscuous mode
[ 1454.456793][T11239] usbhid 9-1:0.0: can't add hid device: -71
[ 1454.559505][T11239] usbhid: probe of 9-1:0.0 failed with error -71
[ 1454.804370][T11239] usb 9-1: USB disconnect, device number 21
[ 1454.858840][T16540] loop7: detected capacity change from 0 to 1024
[ 1455.829605][ T9781] hfsplus: b-tree write err: -5, ino 4
[ 1456.127063][T16563] loop9: detected capacity change from 0 to 128
[ 1456.794503][T16569] loop8: detected capacity change from 0 to 4096
[ 1457.678368][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2695'.
[ 1457.942962][T16572] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1457.965708][T13674] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1457.967726][T16565] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1458.269984][T13674] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1458.292728][T13674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1458.301907][T13674] usb 1-1: Product: syz
[ 1458.306292][T13674] usb 1-1: Manufacturer: syz
[ 1458.311027][T13674] usb 1-1: SerialNumber: syz
[ 1458.635790][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2699'.
[ 1459.297126][T16585] loop9: detected capacity change from 0 to 4096
[ 1460.292469][T16583] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1460.321949][T16586] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1460.514808][T13674] rtl8150 1-1:1.0: couldn't reset the device
[ 1460.521114][T13674] rtl8150: probe of 1-1:1.0 failed with error -5
[ 1460.559456][T13674] usb 1-1: USB disconnect, device number 12
[ 1460.748760][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2702'.
[ 1461.594726][T16597] loop7: detected capacity change from 0 to 128
[ 1461.652096][T16597] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1461.718862][T16597] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1461.916753][ T6362] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1462.193268][T16597] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1462.240742][ T6362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1462.429029][ T6362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1462.642160][ T6362] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1462.679120][ T6362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1462.794653][ T6362] usb 1-1: config 0 descriptor??
[ 1462.835847][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1463.880782][ T6362] logitech-djreceiver 0003:046D:C71F.0011: ignoring exceeding usage max
[ 1463.957122][ T6362] logitech-djreceiver 0003:046D:C71F.0011: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0
[ 1464.141505][ T4646] usb 1-1: USB disconnect, device number 13
[ 1464.300930][T16617] fido_id[16617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1464.322157][ T6362] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1464.534049][ T6362] usb 8-1: Using ep0 maxpacket: 32
[ 1464.541308][ T6362] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[ 1464.568493][ T6362] usb 8-1: config 0 has no interface number 0
[ 1464.600183][ T6362] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1464.620889][ T6362] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1464.634903][T16603] loop8: detected capacity change from 0 to 40427
[ 1464.643894][ T6362] usb 8-1: Product: syz
[ 1464.648146][ T6362] usb 8-1: Manufacturer: syz
[ 1464.774039][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2710'.
[ 1464.790493][T16603] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3ffff
[ 1464.837464][T16603] F2FS-fs (loop8): invalid crc value
[ 1465.043036][T16603] F2FS-fs (loop8): Failed to start F2FS issue_checkpoint_thread (-12)
[ 1465.583658][ T6362] usb 8-1: SerialNumber: syz
[ 1465.601302][ T6362] usb 8-1: config 0 descriptor??
[ 1465.613921][ T6362] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1466.437278][T16644] loop0: detected capacity change from 0 to 4096
[ 1467.438550][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2714'.
[ 1468.663160][T16644] NILFS (loop0): error -4 creating segctord thread
[ 1468.798785][ T6362] usb 8-1: qt2_attach - failed to power on unit: -71
[ 1468.822129][ T6362] quatech2: probe of 8-1:0.51 failed with error -71
[ 1468.912082][ T6362] usb 8-1: USB disconnect, device number 19
[ 1469.212583][T16662] loop7: detected capacity change from 0 to 4096
[ 1469.395924][T16662] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1469.419947][T16663] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1470.260306][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2723'.
[ 1471.100699][T16674] loop9: detected capacity change from 0 to 2048
[ 1471.151098][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2725'.
[ 1471.220119][T16674] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1471.395176][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2726'.
[ 1471.836512][T16688] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1474.652701][T16723] loop8: detected capacity change from 0 to 4096
[ 1474.680096][T16724] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1474.695274][T16723] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1474.722877][T16722] loop9: detected capacity change from 0 to 256
[ 1474.765914][T16722] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1474.802458][T16722] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[ 1474.932950][T16722] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[ 1475.337087][T16734] dvmrp1: tun_chr_ioctl cmd 2147767507
[ 1477.325331][T16755] loop7: detected capacity change from 0 to 4096
[ 1477.353053][T16756] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1477.373415][T16754] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1478.911488][T16764] loop7: detected capacity change from 0 to 4096
[ 1478.983914][T16765] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1479.010710][T16764] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1479.277705][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2738'.
[ 1480.147549][T16775] loop9: detected capacity change from 0 to 256
[ 1480.234902][T16775] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7c19779b, utbl_chksum : 0xe619d30d)
[ 1480.401330][T16779] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2749'.
[ 1481.380257][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2751'.
[ 1482.028767][T16794] loop8: detected capacity change from 0 to 256
[ 1482.059470][T16794] exfat: Deprecated parameter 'namecase'
[ 1482.086860][T16794] exfat: Deprecated parameter 'namecase'
[ 1482.121226][T16794] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x7808ae6a, utbl_chksum : 0xe619d30d)
[ 1482.379742][T16802] loop0: detected capacity change from 0 to 128
[ 1482.405408][T16802] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1483.152881][T16802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1483.162654][T16802] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1483.251008][T16804] loop7: detected capacity change from 0 to 4096
[ 1483.300620][T16810] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1483.316321][T16804] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1483.501714][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1483.860351][T16818] loop8: detected capacity change from 0 to 4096
[ 1484.590334][T16819] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1484.620517][T16817] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1485.011219][T16829] loop9: detected capacity change from 0 to 4096
[ 1485.792712][T16831] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1485.814038][T16828] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1488.235708][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2765'.
[ 1489.074825][T16851] loop8: detected capacity change from 0 to 128
[ 1489.130489][T16851] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1489.171570][T16851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1489.257345][T16853] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 1489.286496][T16853] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 1490.149098][T16876] loop0: detected capacity change from 0 to 128
[ 1490.188346][T16876] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 1490.200645][T16878] loop7: detected capacity change from 0 to 256
[ 1490.257418][T16876] syz.0.2763: attempt to access beyond end of device
[ 1490.257418][T16876] loop0: rw=2051, sector=104, nr_sectors = 937 limit=128
[ 1490.257525][T16878] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1490.362066][T13674] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1490.560234][T16883] loop0: detected capacity change from 0 to 2048
[ 1490.567112][T13674] usb 10-1: Using ep0 maxpacket: 16
[ 1490.576733][T13674] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1490.608993][T16886] loop7: detected capacity change from 0 to 512
[ 1490.612249][T13674] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.627147][T16883] UDF-fs: bad mount option "cŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1ÆcŒ1Ʋ‡Óþ2" or missing value
[ 1490.653394][T13674] usb 10-1: Product: syz
[ 1490.668487][T13674] usb 10-1: Manufacturer: syz
[ 1490.685019][T13674] usb 10-1: SerialNumber: syz
[ 1490.701598][T16886] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[ 1490.758512][T16886] EXT4-fs (loop7): orphan cleanup on readonly fs
[ 1490.812560][T16886] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:511: comm syz.7.2777: Block bitmap for bg 0 marked uninitialized
[ 1490.926553][T13674] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1490.943190][T13674] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1490.954172][T13674] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1490.963466][T13674] usb 10-1: media controller created
[ 1490.998619][T16894] loop8: detected capacity change from 0 to 128
[ 1491.015478][T16886] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6181: Corrupt filesystem
[ 1491.033025][T13674] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1491.042744][T16893] loop0: detected capacity change from 0 to 256
[ 1491.070905][T16886] EXT4-fs (loop7): 1 orphan inode deleted
[ 1491.077916][T16894] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1491.083579][T16886] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1491.140058][T16893] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1491.192983][T16894] hpfs: filesystem error: improperly stopped
[ 1491.199452][T16894] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1491.215030][T16886] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[ 1491.272052][T16894] hpfs: You really don't want any checks? You are crazy...
[ 1491.283114][T16886] EXT4-fs (loop7): re-mounted. Quota mode: none.
[ 1491.316951][T16894] hpfs: hpfs_map_sector(): read error
[ 1491.326981][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1491.327039][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1491.359639][T13674] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1491.417703][T16894] hpfs: code page support is disabled
[ 1491.447035][T16894] hpfs: hpfs_map_4sectors(): unaligned read
[ 1491.471522][T13674] dvb_usb_gl861: probe of 10-1:157.0 failed with error -5
[ 1491.489612][T16894] hpfs: hpfs_map_4sectors(): unaligned read
[ 1491.502019][T16894] hpfs: filesystem error: unable to find root dir
[ 1491.520213][T13674] usb 10-1: USB disconnect, device number 20
[ 1491.563878][T16894] hpfs: hpfs_map_4sectors(): unaligned read
[ 1491.637332][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1491.653728][T16901] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[ 1492.233662][T16915] loop8: detected capacity change from 0 to 4096
[ 1492.323253][T13673] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 1492.922227][T16914] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1492.944488][T16916] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1493.192074][T13673] usb 8-1: Using ep0 maxpacket: 8
[ 1493.203862][T13673] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1493.276988][T13673] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.482401][T13673] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1493.689796][T13673] pvrusb2: **********
[ 1493.797487][T13673] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1494.125388][T13673] pvrusb2: Important functionality might not be entirely working.
[ 1494.193960][T13673] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1494.265922][T13673] pvrusb2: **********
[ 1494.292106][ T2310] pvrusb2: Invalid write control endpoint
[ 1494.473289][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2792'.
[ 1494.578827][T13673] usb 8-1: USB disconnect, device number 20
[ 1494.776981][T16945] loop9: detected capacity change from 0 to 128
[ 1494.869032][T16945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1494.927020][T16953] loop8: detected capacity change from 0 to 128
[ 1494.934573][T16945] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1494.948887][T16945] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1494.963286][T16953] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1494.984497][T16951] loop0: detected capacity change from 0 to 128
[ 1495.002478][T16951] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1495.041634][T16951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1495.051333][T16951] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1495.070555][T16953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1495.464535][ T2310] pvrusb2: Invalid write control endpoint
[ 1495.487890][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1497.519387][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1497.528088][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1497.623504][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1497.631150][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1497.710696][ T2310] pvrusb2: Device being rendered inoperable
[ 1497.737975][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1497.756601][T16973] loop9: detected capacity change from 0 to 128
[ 1497.764975][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1497.787973][T16969] loop8: detected capacity change from 0 to 2048
[ 1497.892943][ T2310] pvrusb2: Attached sub-driver cx25840
[ 1498.802153][T16979] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1498.860001][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1498.972187][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1499.221004][T16988] loop0: detected capacity change from 0 to 16
[ 1499.229361][T16988] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1499.259584][ T4275] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[ 1499.277708][T16988] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[ 1499.290076][   T27] audit: type=1800 audit(1770928879.405:284): pid=16988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2807" name="file2" dev="loop0" ino=89 res=0 errno=0
[ 1499.433995][T16992] loop8: detected capacity change from 0 to 512
[ 1499.461354][T16992] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1499.491449][T16992] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1499.572164][T16992] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1499.580766][T16992] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1500.292103][T17002] loop7: detected capacity change from 0 to 4096
[ 1500.611807][T13673] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1500.945930][T17008] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1500.959527][T17000] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1501.062228][T16992] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.2808: Allocating blocks 41-42 which overlap fs metadata
[ 1501.081902][T13673] usb 10-1: Using ep0 maxpacket: 32
[ 1501.089130][T13673] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1501.201925][T13673] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1501.219093][T16992] Quota error (device loop8): write_blk: dquota write failed
[ 1501.250840][T13673] usb 10-1: config 0 descriptor??
[ 1501.262957][T16992] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5
[ 1502.324924][T16992] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.2808: Allocating blocks 41-42 which overlap fs metadata
[ 1502.371618][T16992] Quota error (device loop8): write_blk: dquota write failed
[ 1502.379755][T16992] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[ 1502.390204][T16992] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.2808: Failed to acquire dquot type 1
[ 1502.407584][T16992] EXT4-fs error (device loop8): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1502.436327][T13673] usb 10-1: can't set config #0, error -71
[ 1502.451688][T13673] usb 10-1: USB disconnect, device number 21
[ 1502.582224][T16992] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.2808: corrupted inode contents
[ 1502.650606][T16992] EXT4-fs error (device loop8): ext4_dirty_inode:6137: inode #12: comm syz.8.2808: mark_inode_dirty error
[ 1502.666411][T17022] loop9: detected capacity change from 0 to 256
[ 1502.696985][T16992] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.2808: corrupted inode contents
[ 1502.762443][T16992] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #12: comm syz.8.2808: mark_inode_dirty error
[ 1502.767479][T17022] exfat: Deprecated parameter 'namecase'
[ 1502.853562][T17022] exfat: Deprecated parameter 'namecase'
[ 1502.857415][T16992] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.2808: corrupted inode contents
[ 1502.939337][T17022] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7808ae6a, utbl_chksum : 0xe619d30d)
[ 1502.942631][T16992] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[ 1503.004778][T16992] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #12: comm syz.8.2808: corrupted inode contents
[ 1503.028818][T17026] loop7: detected capacity change from 0 to 1024
[ 1503.064458][T17026] EXT4-fs: inline encryption not supported
[ 1503.083396][T17026] EXT4-fs: Ignoring removed nobh option
[ 1503.089041][T17026] EXT4-fs: Ignoring removed bh option
[ 1503.112702][T16992] EXT4-fs error (device loop8): ext4_truncate:4318: inode #12: comm syz.8.2808: mark_inode_dirty error
[ 1503.171917][T16992] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[ 1503.182276][T17026] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1503.226946][T16992] EXT4-fs (loop8): 1 truncate cleaned up
[ 1503.251928][T16992] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1503.277745][T17026] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1503.649837][ T7677] EXT4-fs (loop8): unmounting filesystem.
[ 1503.734889][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1504.071200][T17042] loop0: detected capacity change from 0 to 4096
[ 1504.812373][T17043] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1504.835499][T17041] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1505.018324][T11239] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1505.201856][T11239] usb 10-1: Using ep0 maxpacket: 32
[ 1505.209686][T11239] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1507.201833][T11239] usb 10-1: config 0 has no interface number 0
[ 1507.221817][T11239] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1507.251852][T11239] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1507.321921][T11239] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1507.331332][T11239] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1507.396937][T17058] loop7: detected capacity change from 0 to 128
[ 1507.453384][T11239] usb 10-1: config 0 descriptor??
[ 1507.503657][T11239] usb 10-1: can't set config #0, error -71
[ 1507.531995][T11239] usb 10-1: USB disconnect, device number 22
[ 1507.794996][T17060] loop8: detected capacity change from 0 to 4096
[ 1507.824893][T17071] loop7: detected capacity change from 0 to 16
[ 1507.874512][T17071] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1507.922579][T17060] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[ 1508.076412][T17060] ntfs3: loop8: ino=1e, "file1" The size of extended attributes must not exceed 64KiB
[ 1508.375170][ T7677] ntfs3: loop8: ntfs_sync_fs r=9 failed, -22.
[ 1508.389093][ T7677] ntfs3: loop8: ntfs_evict_inode r=9 failed, -22.
[ 1511.110483][T17102] loop8: detected capacity change from 0 to 256
[ 1512.409731][T17119] loop7: detected capacity change from 0 to 128
[ 1512.460476][T17119] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1512.482030][T11239] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1512.520361][T17119] hpfs: filesystem error: improperly stopped
[ 1512.535210][T17119] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1512.560325][T17119] hpfs: You really don't want any checks? You are crazy...
[ 1512.582623][T17119] hpfs: hpfs_map_sector(): read error
[ 1512.588094][T17119] hpfs: code page support is disabled
[ 1512.624545][T17119] hpfs: hpfs_map_4sectors(): unaligned read
[ 1512.634660][T17119] hpfs: hpfs_map_4sectors(): unaligned read
[ 1512.640627][T17119] hpfs: filesystem error: unable to find root dir
[ 1512.691953][T11239] usb 1-1: Using ep0 maxpacket: 8
[ 1512.699415][T11239] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1512.709956][T17119] hpfs: hpfs_map_4sectors(): unaligned read
[ 1512.741347][T17119] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[ 1512.751710][T11239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1512.806476][T11239] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1512.851905][T11239] pvrusb2: **********
[ 1512.855974][T11239] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1512.927478][T11239] pvrusb2: Important functionality might not be entirely working.
[ 1512.957003][T11239] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1512.989261][T11239] pvrusb2: **********
[ 1513.016767][ T2310] pvrusb2: Invalid write control endpoint
[ 1513.238396][T17112] pvrusb2: Invalid write control endpoint
[ 1513.247986][T17136] gfs2: path_lookup on c::: returned error -2
[ 1513.255795][T11239] usb 1-1: USB disconnect, device number 14
[ 1513.328558][ T2310] pvrusb2: Invalid write control endpoint
[ 1513.344908][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1513.398996][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1513.438867][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1513.467856][ T2310] pvrusb2: Device being rendered inoperable
[ 1513.484547][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1513.504217][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1513.556446][ T2310] pvrusb2: Attached sub-driver cx25840
[ 1513.575897][T17118] loop8: detected capacity change from 0 to 32768
[ 1513.778778][T17149] loop9: detected capacity change from 0 to 4096
[ 1513.873103][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1513.944944][T17149] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1513.987566][T17150] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1514.442741][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2853'.
[ 1514.829812][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1514.889025][T17118] XFS (loop8): Mounting V5 Filesystem
[ 1515.142243][T17118] XFS (loop8): Ending clean mount
[ 1515.184518][T17118] XFS (loop8): Quotacheck needed: Please wait.
[ 1515.754990][T17174] loop0: detected capacity change from 0 to 128
[ 1515.788014][T17173] loop7: detected capacity change from 0 to 4096
[ 1515.831535][T17174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1515.887236][T17178] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1515.913000][T17171] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1515.934149][T17174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1515.949112][T17174] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1516.296289][T17118] XFS (loop8): Quotacheck: Done.
[ 1516.345011][T11600] EXT4-fs (loop0): unmounting filesystem.
[ 1517.144478][ T7677] XFS (loop8): Unmounting Filesystem
[ 1517.346117][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1517.726243][T17198] loop9: detected capacity change from 0 to 2048
[ 1517.768966][T17198] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1517.815201][T17198] NILFS (loop9): mounting unchecked fs
[ 1517.925215][T17198] NILFS (loop9): recovery complete
[ 1517.971483][T17215] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1518.302833][T17223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2867'.
[ 1519.357522][T17230] loop0: detected capacity change from 0 to 4096
[ 1519.597537][T17230] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1519.617749][T17232] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1521.556159][T17251] program syz.0.2875 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1523.945825][T17266] loop9: detected capacity change from 0 to 1024
[ 1524.118972][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2880'.
[ 1524.187905][ T4349] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1524.482056][ T4349] usb 1-1: Using ep0 maxpacket: 32
[ 1524.496711][ T4349] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1524.608012][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1524.854696][ T4349] usb 1-1: config 0 descriptor??
[ 1525.136234][ T4349] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1525.338074][T17277] loop8: detected capacity change from 0 to 4096
[ 1525.478113][T17278] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1525.512317][T17277] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1526.035370][ T4349] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1526.045991][ T4349] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1526.063044][ T4349] usb 1-1: media controller created
[ 1526.146141][ T4349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1526.269247][ T4349] az6027: usb out operation failed. (-71)
[ 1526.289486][ T4349] az6027: usb out operation failed. (-71)
[ 1526.319806][ T4349] stb0899_attach: Driver disabled by Kconfig
[ 1526.348252][ T4349] az6027: no front-end attached
[ 1526.348252][ T4349] 
[ 1527.228943][T17290] loop0: detected capacity change from 0 to 4096
[ 1527.267874][ T4349] az6027: usb out operation failed. (-71)
[ 1527.333863][ T4349] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1527.367644][T17286] loop9: detected capacity change from 0 to 4096
[ 1527.381001][T17294] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1527.394391][T17289] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1527.414656][T17286] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512)
[ 1527.425445][ T4349] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19
[ 1527.476783][ T4349] dvb-usb: schedule remote query interval to 400 msecs.
[ 1527.484218][ T4349] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1527.523849][ T4349] usb 1-1: USB disconnect, device number 15
[ 1527.548514][T17286] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[ 1527.703490][ T4349] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1527.979722][T17300] ip6erspan0: tun_chr_ioctl cmd 1074025677
[ 1527.986303][T17300] ip6erspan0: linktype set to 774
[ 1528.224592][T17307] loop7: detected capacity change from 0 to 256
[ 1528.841142][T17321] loop0: detected capacity change from 0 to 4096
[ 1529.063763][T17321] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1529.107763][T17322] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1530.137354][T17340] loop0: detected capacity change from 0 to 64
[ 1530.523325][T17309] loop9: detected capacity change from 0 to 40427
[ 1530.576671][T17309] F2FS-fs (loop9): invalid crc value
[ 1530.633698][T17309] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1530.799084][T17354] cgroup: fork rejected by pids controller in /syz0
[ 1530.816161][T17315] loop7: detected capacity change from 0 to 40427
[ 1530.820373][T17357] loop8: detected capacity change from 0 to 64
[ 1530.894778][T17309] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1530.946912][T17315] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1531.019098][   T27] audit: type=1804 audit(1770928911.135:285): pid=17309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2890" name="/newroot/379/file0/file0" dev="loop9" ino=10 res=1 errno=0
[ 1531.178423][ T9058] syz-executor: attempt to access beyond end of device
[ 1531.178423][ T9058] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1531.215927][T17315] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1531.331267][   T27] audit: type=1800 audit(1770928911.435:286): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2893" name="file1" dev="loop7" ino=10 res=0 errno=0
[ 1532.180523][T17315] syz.7.2893: attempt to access beyond end of device
[ 1532.180523][T17315] loop7: rw=2049, sector=53248, nr_sectors = 2048 limit=40427
[ 1532.204288][T17315] syz.7.2893: attempt to access beyond end of device
[ 1532.204288][T17315] loop7: rw=2049, sector=55296, nr_sectors = 520 limit=40427
[ 1532.424719][ T7587] syz-executor: attempt to access beyond end of device
[ 1532.424719][ T7587] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1532.630440][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1532.965655][T17389] loop8: detected capacity change from 0 to 512
[ 1533.060921][T17389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1533.185846][T17389] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1533.222821][T17389] ext4 filesystem being mounted at /478/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1533.481804][T17401] loop9: detected capacity change from 0 to 4096
[ 1533.684041][T17401] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1533.707222][T17402] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1533.802579][T17389] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.2917: iget: bad i_size value: 2533274857506816
[ 1534.105149][T12109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.224313][ T7677] EXT4-fs (loop8): unmounting filesystem.
[ 1534.532693][T12109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.812765][T17414] loop7: detected capacity change from 0 to 4096
[ 1535.020425][T17414] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1535.045170][T17415] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1535.538039][T12109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1536.597448][T12109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1536.665061][T17431] loop9: detected capacity change from 0 to 2048
[ 1536.881521][T17431] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1536.900668][T17431] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1537.077286][ T9058] EXT4-fs (loop9): unmounting filesystem.
[ 1537.090397][T17442] loop8: detected capacity change from 0 to 1024
[ 1537.128658][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1537.215921][T17442] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1537.309310][T17442] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1537.432660][T17442] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: block 3: comm syz.8.2927: lblock 3 mapped to illegal pblock 3 (length 3)
[ 1537.506945][T17450] loop7: detected capacity change from 0 to 512
[ 1537.536419][T17442] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 1537.579212][T17450] EXT4-fs: Ignoring removed bh option
[ 1537.591783][T17442] EXT4-fs (loop8): This should not happen!! Data will be lost
[ 1537.591783][T17442] 
[ 1537.617916][T17450] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[ 1537.660286][T17449] EXT4-fs error (device loop8): ext4_ext_remove_space:2930: inode #15: comm syz.8.2927: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 1537.678372][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1537.720618][T17450] EXT4-fs (loop7): 1 truncate cleaned up
[ 1537.775614][T17450] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1537.828014][T17449] EXT4-fs error (device loop8) in ext4_setattr:5676: Corrupt filesystem
[ 1537.863945][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1537.876166][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1537.885964][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1537.894529][T17456] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1537.906000][T17456] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1537.913791][T17456] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1538.101570][ T7677] EXT4-fs (loop8): unmounting filesystem.
[ 1538.386894][T17468] loop9: detected capacity change from 0 to 4096
[ 1538.606290][T17468] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1538.629975][T17469] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1539.098970][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1539.495021][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1539.890881][T17479] loop7: detected capacity change from 0 to 256
[ 1539.970130][ T4275] Bluetooth: hci2: command 0x0409 tx timeout
[ 1540.689616][T17479] FAT-fs (loop7): Directory bread(block 64) failed
[ 1540.851928][T17479] FAT-fs (loop7): Directory bread(block 65) failed
[ 1540.899836][T17479] FAT-fs (loop7): Directory bread(block 66) failed
[ 1541.029786][T17479] FAT-fs (loop7): Directory bread(block 67) failed
[ 1541.066260][T17479] FAT-fs (loop7): Directory bread(block 68) failed
[ 1541.109773][T17479] FAT-fs (loop7): Directory bread(block 69) failed
[ 1541.144416][T17479] FAT-fs (loop7): Directory bread(block 70) failed
[ 1541.170084][T17479] FAT-fs (loop7): Directory bread(block 71) failed
[ 1541.845624][T17501] loop8: detected capacity change from 0 to 4096
[ 1542.279296][ T4275] Bluetooth: hci2: command 0x041b tx timeout
[ 1542.386379][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2938'.
[ 1542.407848][T17498] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1542.434910][T17504] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1542.455440][T17479] FAT-fs (loop7): Directory bread(block 72) failed
[ 1542.462664][T17479] FAT-fs (loop7): Directory bread(block 73) failed
[ 1542.811438][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1544.737979][ T4275] Bluetooth: hci2: command 0x040f tx timeout
[ 1545.084155][T17516] loop9: detected capacity change from 0 to 4096
[ 1545.337201][T17516] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1545.360622][T17517] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1545.650658][T17518] loop7: detected capacity change from 0 to 1024
[ 1545.676805][T17518] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1545.727019][T17518] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1545.876913][T17518] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1546.200571][ T7587] EXT4-fs (loop7): unmounting filesystem.
[ 1546.461129][T17535] loop9: detected capacity change from 0 to 256
[ 1546.663759][T17539] loop7: detected capacity change from 0 to 4096
[ 1546.762143][ T4275] Bluetooth: hci2: command 0x0419 tx timeout
[ 1546.929616][T17539] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1546.950658][T17540] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1547.029963][T17535] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1547.094515][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1547.341218][T17535] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[ 1547.882667][T17546] program syz.7.2951 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1548.945033][T17455] chnl_net:caif_netlink_parms(): no params data found
[ 1549.086400][T17559] loop9: detected capacity change from 0 to 64
[ 1549.143999][T17560] loop7: detected capacity change from 0 to 4096
[ 1549.232706][T17561] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1549.245223][T17560] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1549.442991][ T5688] ------------[ cut here ]------------
[ 1549.448540][ T5688] kernel BUG at fs/hfs/inode.c:449!
[ 1549.471556][ T5688] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 1549.477964][ T5688] CPU: 0 PID: 5688 Comm: kworker/u4:19 Not tainted syzkaller #0
[ 1549.485644][ T5688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1549.495759][ T5688] Workqueue: writeback wb_workfn (flush-7:9)
[ 1549.501859][ T5688] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[ 1549.507585][ T5688] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 60 05 87 ff e9 47 fe ff ff e8 96 19 36 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[ 1549.527311][ T5688] RSP: 0018:ffffc90004a0f3a0 EFLAGS: 00010293
[ 1549.533431][ T5688] RAX: ffffffff824c5a1a RBX: ffff888027beb598 RCX: ffff888028cfbb80
[ 1549.541451][ T5688] RDX: 0000000000000000 RSI: ffffffff8cd252e0 RDI: 0000000000000000
[ 1549.549468][ T5688] RBP: ffffc90004a0f530 R08: ffff888028cfbb80 R09: 0000000000000003
[ 1549.557490][ T5688] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[ 1549.565510][ T5688] R13: 1ffff92000941e78 R14: 0000000000000000 R15: ffff888027beb558
[ 1549.573531][ T5688] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1549.582595][ T5688] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1549.589208][ T5688] CR2: 0000200000034030 CR3: 0000000062bed000 CR4: 00000000003506f0
[ 1549.597297][ T5688] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1549.605292][ T5688] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1549.613339][ T5688] Call Trace:
[ 1549.616723][ T5688]  <TASK>
[ 1549.619750][ T5688]  ? hfs_inode_write_fork+0x1a0/0x1a0
[ 1549.625238][ T5688]  ? __writeback_single_inode+0x4ae/0x1160
[ 1549.631082][ T5688]  ? __rwlock_init+0x140/0x140
[ 1549.635891][ T5688]  __writeback_single_inode+0x75b/0x1160
[ 1549.641572][ T5688]  writeback_sb_inodes+0xb30/0x1850
[ 1549.646815][ T5688]  ? queue_io+0x5a0/0x5a0
[ 1549.651202][ T5688]  ? rcu_is_watching+0x11/0xa0
[ 1549.656117][ T5688]  wb_writeback+0x482/0xd50
[ 1549.660678][ T5688]  ? percpu_ref_tryget+0x250/0x250
[ 1549.665843][ T5688]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1549.671889][ T5688]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1549.677205][ T5688]  wb_workfn+0x423/0xee0
[ 1549.681500][ T5688]  ? inode_wait_for_writeback+0x220/0x220
[ 1549.687247][ T5688]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1549.693266][ T5688]  ? read_lock_is_recursive+0x10/0x10
[ 1549.698679][ T5688]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1549.703906][ T5688]  ? process_one_work+0x7b0/0x1160
[ 1549.709112][ T5688]  process_one_work+0x8a2/0x1160
[ 1549.714086][ T5688]  ? worker_detach_from_pool+0x240/0x240
[ 1549.719749][ T5688]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1549.724828][ T5688]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1549.730424][ T5688]  ? kthread_data+0x4b/0xc0
[ 1549.734991][ T5688]  worker_thread+0xaa2/0x1270
[ 1549.739806][ T5688]  kthread+0x29d/0x330
[ 1549.743984][ T5688]  ? worker_clr_flags+0x1a0/0x1a0
[ 1549.749082][ T5688]  ? kthread_blkcg+0xd0/0xd0
[ 1549.753704][ T5688]  ret_from_fork+0x1f/0x30
[ 1549.758183][ T5688]  </TASK>
[ 1549.761241][ T5688] Modules linked in:
[ 1549.944752][ T5688] ---[ end trace 0000000000000000 ]---
[ 1549.950396][ T5688] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[ 1549.956783][ T5688] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 60 05 87 ff e9 47 fe ff ff e8 96 19 36 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[ 1549.977290][ T5688] RSP: 0018:ffffc90004a0f3a0 EFLAGS: 00010293
[ 1549.986284][ T5688] RAX: ffffffff824c5a1a RBX: ffff888027beb598 RCX: ffff888028cfbb80
[ 1549.994595][ T5688] RDX: 0000000000000000 RSI: ffffffff8cd252e0 RDI: 0000000000000000
[ 1550.002885][ T5688] RBP: ffffc90004a0f530 R08: ffff888028cfbb80 R09: 0000000000000003
[ 1550.010992][ T5688] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[ 1550.019362][ T5688] R13: 1ffff92000941e78 R14: 0000000000000000 R15: ffff888027beb558
[ 1550.027681][ T5688] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1550.037048][ T5688] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1550.043990][ T5688] CR2: 00007f17e89e7198 CR3: 000000007dc38000 CR4: 00000000003506f0
[ 1550.052329][ T5688] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1550.060426][ T5688] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1550.068834][ T5688] Kernel panic - not syncing: Fatal exception
[ 1550.075803][ T5688] Kernel Offset: disabled
[ 1550.080148][ T5688] Rebooting in 86400 seconds..