last executing test programs:

21.453386708s ago: executing program 0 (id=1425):
r0 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
llistxattr(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)

20.056794204s ago: executing program 0 (id=1427):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
mq_open(&(0x7f00000002c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x850\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xa4\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96n\x17|\xc9xR\\0\xd5\x8c=J\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd3\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xa7\x14t\x9feN*\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0xd8, 0x0)
socket(0xa, 0x3, 0x87)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b0009008000", 0x2c}], 0x1)

15.709947176s ago: executing program 0 (id=1435):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xc0, &(0x7f0000000300)={[{@commit={'commit', 0x3d, 0x8}}, {@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@nouser_xattr}, {@orlov, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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")
setns(0xc9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x40)
getdents64(r4, 0x0, 0x0)

14.368950239s ago: executing program 0 (id=1436):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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")
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
creat(&(0x7f0000000580)='./bus\x00', 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

13.950748493s ago: executing program 2 (id=1437):
r0 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
llistxattr(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)

12.580810128s ago: executing program 2 (id=1438):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = fsopen(&(0x7f0000000080)='selinuxfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, 0x0, &(0x7f0000000240))
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x81)
r9 = ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece)
preadv(r9, &(0x7f0000000080)=[{&(0x7f0000002940)=""/4096, 0x1000}, {0x0}], 0x2, 0x4017, 0x10)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

12.470548522s ago: executing program 1 (id=1440):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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")
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0)
creat(&(0x7f0000000580)='./bus\x00', 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

12.379309105s ago: executing program 4 (id=1441):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1a6)

12.22200559s ago: executing program 4 (id=1442):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'vcan0\x00', 0x1})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x2, 0x2000}, 0x20)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
set_mempolicy(0x1, &(0x7f0000000140), 0x5)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000240)=0xfff)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000007c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa3e, &(0x7f0000000940)="$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")
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
mlockall(0x2)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a3042, 0x20)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

11.933664099s ago: executing program 3 (id=1443):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}]}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getpid()
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012})
socket$key(0xf, 0x3, 0x2)
socket$kcm(0x10, 0x3, 0x10)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891)

9.239497937s ago: executing program 1 (id=1444):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
poll(&(0x7f0000000100), 0x0, 0x4)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"})
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f00000000c0))
r2 = syz_open_pts(r1, 0x141401)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r4 = syz_open_pts(r3, 0x141601)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340))
close_range(r5, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x2000)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3)
close_range(r0, 0xffffffffffffffff, 0x0)

8.990351956s ago: executing program 4 (id=1445):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
mq_open(&(0x7f00000002c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x850\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xa4\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96n\x17|\xc9xR\\0\xd5\x8c=J\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd3\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xa7\x14t\x9feN*\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0xd8, 0x0)
socket(0xa, 0x3, 0x87)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b0009008000", 0x2c}], 0x1)

8.706973785s ago: executing program 3 (id=1446):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xc0, &(0x7f0000000300)={[{@commit={'commit', 0x3d, 0x8}}, {@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@nouser_xattr}, {@orlov, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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")
setns(0xc9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x40)
getdents64(r4, 0x0, 0x0)

7.805631864s ago: executing program 4 (id=1447):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f0}, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
link(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0xc, 0x7f, 0x3, 0x7}, {0xa313, 0x8, 0x0, 0x69}]})
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84)

6.673027202s ago: executing program 1 (id=1448):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'vcan0\x00', 0x1})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x4048001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x2, 0x2000}, 0x20)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
set_mempolicy(0x1, &(0x7f0000000140), 0x5)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000240)=0xfff)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000007c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa3e, &(0x7f0000000940)="$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")
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
mlockall(0x2)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a3042, 0x20)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

6.663560752s ago: executing program 3 (id=1449):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0)
r1 = socket(0x11, 0x3, 0x0)
setsockopt(r1, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="380100001000cb884e59fff3cf61a52abfb8566dff00010000fe880000000000000000510000000001fc010000000000000000000000000001100107144e23007a5c0c9da9363633fbc6d97d613f6ab0ed18340d2408254b78b6a34cd4b64ee22c4ab112c6048e19fe19e6d5784a0b54a8bde5aab4e1347232d8e6b99f6f79d2dbb4ec9531e57e1fba2d0e84687a1d35d6ad88aa38febc4b84bc1396f969b7199cfe4c23da6e8b77b23972590a5dcebe538943f05ebd9c3c3c7d93e96b3fe9138fb7996a0c1b2a9a357e3cda2e8571b9f6f2ea8d5a80a3f89084bcb3fb1b9d979f784dd8d5faabe9c53671a7baa55dcc43927f7a0192f3a59fa159d74044192c9ca065878856b7b833400d3b9c6a1c5d0ef4a573ec76a4a20116666be2f4dc6dc655d422b92e6f8084fe109273047f2be3d12e4cea594c7ed7b442323740a484cdcb9101e683b028d1567e4d0cefb71bc880a68263b62992ab35f60942780ed14c982ee325f3676454755131ebc327ed81241c910d9d7f8a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004840), &(0x7f0000004880)=0xc)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000040)="170000000200010000ffbe8c5ee17688a20033e00201fcff000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf93150334769e106e7db76849d3c98bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5d4af9477170d283f02ff030000ba000840024f0298e9e90539062a80e605007f71174aa961f3c63e5a1b47b63a6323ded223", 0xb8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r6, &(0x7f00000031c0)={0x2020, 0x0, <r7=>0x0, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_STATX(r6, &(0x7f00000063c0)={0x130, 0x0, r7, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0xaf22, 0xa, 0x6, 0x0, r8, 0xc000, '\x00', 0x401, 0x8, 0xd64b, 0x0, {0x4002009, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x10000000040c, 0x72}, {0x4, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x7fff}}}, 0x130)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=@raw=[@alu={0x7, 0x0, 0x5, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r9, &(0x7f0000000e00)='testhandle 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000', 0x43)
ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000080))
unshare(0x2040600)

6.449663198s ago: executing program 0 (id=1450):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x10, 0x2, 0x4)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, 0x0)
close(0x3)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)

4.696628766s ago: executing program 2 (id=1451):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x1, 0x559d, &(0x7f0000005680)="$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")
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40044, 0x0, 0x3, 0x0, &(0x7f0000000080))
rmdir(&(0x7f0000000000)='./bus\x00')
creat(&(0x7f0000000140)='./bus\x00', 0x182)
getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]})
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read$FUSE(r5, &(0x7f00000006c0)={0x2020}, 0x2020)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000100)=0x31)
gettid()
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")

4.633684218s ago: executing program 1 (id=1452):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1a6)

4.060904147s ago: executing program 1 (id=1453):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, 0x0, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0x60, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffda6, 0x0, 0x0, 0x0}, 0x1000}, @request_death={0x400c630e, 0x3}, @dead_binder_done], 0x78, 0x0, &(0x7f0000000600)="f3774e72e5d8a4bb4ee16628a0bf1ba0eb8436558ac0c0b67767414866609ebe207757b65922e3cd55457833645908160523322b46ff92d061b19cb89dcb5a79a5aeabce6b3cb0a21a2ed5788a94b2a55efc5329e8d085180cab61735707e2b0ec78b497a40c30be4ab80eb91c08b8825cf937cebda08486"})

3.66761134s ago: executing program 2 (id=1454):
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(0xffffffffffffffff)
futex(&(0x7f000000cffc), 0x80000000008b, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fc)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='\aY', 0x2)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000580)={0x0, 0x4})
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000008c0)=0x80000000)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000f5ff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/25], 0x50)

2.724664681s ago: executing program 4 (id=1455):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
r1 = getpgid(0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)=',$\x00', r3)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff08, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)
r8 = socket$kcm(0x10, 0x2, 0x4)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d756e69782c00f20f4018296867fd1cac60cfe713baead0bdaf77cd893d45a1b16a68959c4c46e943eef1499a0bf4202c827e1905d1d99ae5e6a70b2d1962c91d3584bd8549058147d6a1d26d941dc484110e122f979e78fe3b7cdd5423086d4e8c537dcbde770000000000"])
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)

2.408945041s ago: executing program 3 (id=1456):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r4, 0x100000000)

1.532742279s ago: executing program 2 (id=1457):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
mq_open(&(0x7f00000002c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x850\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xa4\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96n\x17|\xc9xR\\0\xd5\x8c=J\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd3\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xa7\x14t\x9feN*\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0xd8, 0x0)
socket(0xa, 0x3, 0x87)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b0009008000", 0x2c}], 0x1)

460.202814ms ago: executing program 2 (id=1458):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x6, 0x6, 0x20000001002, 0x6, 0xfffffffd})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
fchown(r0, 0x0, 0xffffffffffffffff)

381.985647ms ago: executing program 3 (id=1459):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
poll(&(0x7f0000000100), 0x0, 0x4)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"})
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, &(0x7f00000000c0))
r2 = syz_open_pts(r1, 0x141401)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r4 = syz_open_pts(r3, 0x141601)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340))
close_range(r5, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x2000)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3)
close_range(r0, 0xffffffffffffffff, 0x0)

180.539014ms ago: executing program 3 (id=1460):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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")
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
creat(&(0x7f0000000580)='./bus\x00', 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

75.528367ms ago: executing program 1 (id=1461):
fanotify_init(0x8, 0x801)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x400000000010, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udp(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
pipe2(&(0x7f0000000080), 0x800)
socket$inet6(0xa, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

45.772708ms ago: executing program 0 (id=1462):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'vcan0\x00', 0x1})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x4048001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x2, 0x2000}, 0x20)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
set_mempolicy(0x1, &(0x7f0000000140), 0x5)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240)=0xfff)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000007c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa3e, &(0x7f0000000940)="$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")
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
mlockall(0x2)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a3042, 0x20)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

0s ago: executing program 4 (id=1463):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, 0x0, 0x0, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

 loop0): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  231.031990][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  231.044170][ T4377] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  231.119830][ T5874] EXT4-fs (loop0): 1 truncate cleaned up
[  231.207358][ T5874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  231.422767][ T4287] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  231.485292][ T5894] loop1: detected capacity change from 0 to 256
[  232.397855][ T5897] netlink: 'syz.0.370': attribute type 1 has an invalid length.
[  232.426683][ T5897] netlink: 'syz.0.370': attribute type 2 has an invalid length.
[  232.740261][ T5905] loop2: detected capacity change from 0 to 1764
[  232.831537][ T5906] loop3: detected capacity change from 0 to 128
[  232.861068][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  232.878296][ T5909] fuse: Bad value for 'fd'
[  232.953815][ T5906] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  232.978383][ T5905] iso9660: Corrupted directory entry in block 2 of inode 1920
[  233.407216][ T5906] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  233.906229][ T5916] loop1: detected capacity change from 0 to 32768
[  234.153956][ T5916] XFS (loop1): Mounting V5 Filesystem
[  234.413767][ T5916] XFS (loop1): Ending clean mount
[  235.342765][ T4287] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  235.351508][ T4287] Bluetooth: hci0: Injecting HCI hardware error event
[  235.361409][   T49] Bluetooth: hci0: hardware error 0x00
[  235.414392][ T4273] XFS (loop1): Unmounting Filesystem
[  236.003885][ T5948] loop2: detected capacity change from 0 to 256
[  237.036423][ T5953] loop1: detected capacity change from 0 to 512
[  237.158730][ T5953] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  237.228739][ T5953] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  237.283264][ T5953] System zones: 0-1, 15-15, 18-18, 34-34
[  237.290154][ T5953] EXT4-fs (loop1): orphan cleanup on readonly fs
[  237.308976][ T5953] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  237.392817][ T5953] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  237.420664][ T5965] fuse: Bad value for 'fd'
[  237.472223][ T5953] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  237.544018][ T5953] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.383: bad orphan inode 16
[  237.582730][   T49] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  237.587882][ T5953] ext4_test_bit(bit=15, block=18) = 1
[  238.445482][ T5979] loop4: detected capacity change from 0 to 40427
[  238.452287][ T5953] is_bad_inode(inode)=0
[  238.483141][ T5979] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  238.491714][ T5979] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  238.523792][ T5953] NEXT_ORPHAN(inode)=0
[  238.527929][ T5953] max_ino=32
[  238.562334][ T5953] i_nlink=2
[  238.569076][ T5979] F2FS-fs (loop4): Found nat_bits in checkpoint
[  238.591553][ T5953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  238.653254][ T5979] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  238.660386][ T5979] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  238.715243][ T5979] syz.4.392: attempt to access beyond end of device
[  238.715243][ T5979] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  238.906902][ T5988] loop2: detected capacity change from 0 to 32768
[  239.054004][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  239.328938][ T5988] XFS (loop2): Mounting V5 Filesystem
[  239.824003][   T49] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  239.833153][   T49] Bluetooth: hci3: Injecting HCI hardware error event
[  239.845712][ T4287] Bluetooth: hci3: hardware error 0x00
[  239.871992][ T6005] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  240.129782][ T5988] XFS (loop2): Ending clean mount
[  241.318471][ T6019] fuse: Bad value for 'fd'
[  241.335976][ T4282] XFS (loop2): Unmounting Filesystem
[  241.982841][ T4287] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  244.248302][ T6040] loop4: detected capacity change from 0 to 512
[  244.366494][ T6041] ieee802154 phy0 wpan0: encryption failed: -22
[  245.073495][ T6040] EXT4-fs: Ignoring removed nobh option
[  245.079193][ T6040] ext4: Unknown parameter 'nouser_xattr'
[  245.350442][ T6043] loop1: detected capacity change from 0 to 40427
[  245.366002][ T6043] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  245.373899][ T6043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  245.430905][ T6043] F2FS-fs (loop1): Found nat_bits in checkpoint
[  245.614553][ T6043] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  245.621638][ T6043] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  246.213902][ T6043] syz.1.408: attempt to access beyond end of device
[  246.213902][ T6043] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  246.432065][ T6054] loop3: detected capacity change from 0 to 32768
[  246.751213][ T6054] XFS (loop3): Mounting V5 Filesystem
[  246.912941][ T6054] XFS (loop3): Ending clean mount
[  247.238490][ T4278] XFS (loop3): Unmounting Filesystem
[  247.491703][ T6076] fuse: Unknown parameter '0x0000000000000004'
[  250.155331][ T6099] loop3: detected capacity change from 0 to 512
[  250.275843][ T6099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  250.312812][ T6099] System zones: 1-12
[  250.355048][ T6099] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.420: missing EA_INODE flag
[  250.438792][ T6104] ieee802154 phy0 wpan0: encryption failed: -22
[  251.275582][ T6099] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.420: error while reading EA inode 12 err=-117
[  251.346926][ T6099] EXT4-fs (loop3): 1 orphan inode deleted
[  251.378241][ T6099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  251.595972][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  251.722455][ T6094] loop2: detected capacity change from 0 to 32768
[  251.870143][ T6094] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  252.641450][ T6112] loop1: detected capacity change from 0 to 40427
[  252.686792][ T6112] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  252.694829][ T6112] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  252.848154][ T6111] loop0: detected capacity change from 0 to 32768
[  252.861905][ T6112] F2FS-fs (loop1): Found nat_bits in checkpoint
[  252.898258][ T6112] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  252.905911][ T6112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  252.935269][ T6112] syz.1.423: attempt to access beyond end of device
[  252.935269][ T6112] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  253.039696][ T6111] XFS (loop0): Mounting V5 Filesystem
[  253.075956][ T6132] fuse: Unknown parameter '0x0000000000000004'
[  253.147038][ T6111] XFS (loop0): Ending clean mount
[  255.468660][ T4277] XFS (loop0): Unmounting Filesystem
[  255.664692][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.671057][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.729197][ T4357] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  255.778557][ T6147] netlink: 'syz.4.432': attribute type 1 has an invalid length.
[  256.109875][ T6152] ieee802154 phy0 wpan0: encryption failed: -22
[  256.288977][ T6156] netlink: 68 bytes leftover after parsing attributes in process `syz.3.435'.
[  256.581148][ T6158] loop0: detected capacity change from 0 to 32768
[  256.946106][ T6158] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  256.973488][ T6158] (syz.0.433,6158,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  257.557457][ T6172] fuse: Unknown parameter '0x0000000000000004'
[  257.725892][ T6175] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  258.037969][ T6176] loop4: detected capacity change from 0 to 40427
[  258.050305][ T6176] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  258.058314][ T6176] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  258.306875][ T6176] F2FS-fs (loop4): Found nat_bits in checkpoint
[  258.380206][ T6176] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  258.387546][ T6176] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  258.441089][ T6176] syz.4.439: attempt to access beyond end of device
[  258.441089][ T6176] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  261.557376][ T6201] loop3: detected capacity change from 0 to 1764
[  261.658587][ T6203] loop2: detected capacity change from 0 to 512
[  261.673308][ T6203] EXT4-fs: Ignoring removed nobh option
[  261.678975][ T6203] ext4: Unknown parameter 'nouser_xattr'
[  261.898294][ T6201] iso9660: Corrupted directory entry in block 2 of inode 1920
[  263.496614][ T6216] ieee802154 phy0 wpan0: encryption failed: -22
[  263.779056][ T6218] fuse: Unknown parameter '0x0000000000000004'
[  264.298815][ T4277] ocfs2: Unmounting device (7,0) on (node local)
[  264.948710][ T6234] loop1: detected capacity change from 0 to 40427
[  265.290833][ T6234] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  265.298753][ T6234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  265.463784][ T6234] F2FS-fs (loop1): Found nat_bits in checkpoint
[  265.522995][ T6232] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  265.533519][ T6234] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  265.540638][ T6234] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  265.563723][   T26] audit: type=1804 audit(1787890104.357:4): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.456" name="/newroot/102/bus/bus" dev="loop1" ino=10 res=1 errno=0
[  265.592162][ T6234] syz.1.456: attempt to access beyond end of device
[  265.592162][ T6234] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  265.728750][   T26] audit: type=1804 audit(1787890104.377:5): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.456" name="/newroot/102/bus/bus" dev="loop1" ino=10 res=1 errno=0
[  266.721912][ T6249] device team_slave_0 entered promiscuous mode
[  266.728357][ T6249] device team_slave_1 entered promiscuous mode
[  266.777083][ T6249] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  267.955562][ T6258] ieee802154 phy0 wpan0: encryption failed: -22
[  268.892202][ T6268] fuse: Unknown parameter '0x0000000000000004'
[  268.931345][ T6270] loop2: detected capacity change from 0 to 1764
[  269.601511][ T6279] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  270.076350][ T6281] iso9660: Corrupted directory entry in block 2 of inode 1920
[  271.420527][ T6292] loop0: detected capacity change from 0 to 32768
[  271.505527][ T6292] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  271.518363][ T6292] (syz.0.472,6292,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  273.211396][ T6325] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  273.624268][ T6327] loop4: detected capacity change from 0 to 1764
[  273.997251][ T6326] iso9660: Corrupted directory entry in block 2 of inode 1920
[  276.577431][ T4277] ocfs2: Unmounting device (7,0) on (node local)
[  277.528608][ T6346] ieee802154 phy0 wpan0: encryption failed: -22
[  279.842242][ T6360] loop0: detected capacity change from 0 to 40427
[  279.856234][ T6360] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  279.864848][ T6360] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  280.063171][ T6370] loop2: detected capacity change from 0 to 1764
[  281.113026][ T6360] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12)
[  281.742173][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'.
[  281.917619][ T6374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.497'.
[  281.933760][ T6365] iso9660: Corrupted directory entry in block 2 of inode 1920
[  282.401556][ T6383] ieee802154 phy0 wpan0: encryption failed: -22
[  284.046265][ T6402] loop3: detected capacity change from 0 to 40427
[  284.054318][ T6402] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  284.062713][ T6402] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  284.269044][ T6408] loop1: detected capacity change from 0 to 32768
[  284.911426][ T6409] loop4: detected capacity change from 0 to 1764
[  284.990490][ T6402] F2FS-fs (loop3): Found nat_bits in checkpoint
[  285.021783][ T6399] loop2: detected capacity change from 0 to 32768
[  285.045725][ T6402] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  285.052922][ T6402] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  285.089046][   T26] audit: type=1804 audit(1787890123.877:6): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.507" name="/newroot/101/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  285.134424][ T6402] syz.3.507: attempt to access beyond end of device
[  285.134424][ T6402] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  285.260109][ T6409] iso9660: Corrupted directory entry in block 2 of inode 1920
[  285.418287][ T6408] XFS (loop1): Mounting V5 Filesystem
[  285.432720][   T26] audit: type=1804 audit(1787890123.907:7): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.507" name="/newroot/101/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  285.542067][   T26] audit: type=1800 audit(1787890124.097:8): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.504" name="file1" dev="loop2" ino=4 res=0 errno=0
[  285.630318][ T6408] XFS (loop1): Ending clean mount
[  286.322172][ T4273] XFS (loop1): Unmounting Filesystem
[  286.437844][ T6445] loop2: detected capacity change from 0 to 8
[  286.524653][ T6447] ieee802154 phy0 wpan0: encryption failed: -22
[  287.839722][ T6456] loop0: detected capacity change from 0 to 32768
[  287.883727][ T6456] XFS (loop0): Mounting V5 Filesystem
[  288.091574][ T6473] loop4: detected capacity change from 0 to 40427
[  288.134226][ T6473] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  288.144821][ T6473] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  288.160011][ T6456] XFS (loop0): Ending clean mount
[  288.171128][ T6456] XFS (loop0): Quotacheck needed: Please wait.
[  288.354032][ T6473] F2FS-fs (loop4): Found nat_bits in checkpoint
[  288.497086][ T6473] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  288.504633][ T6473] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  288.753006][ T6456] XFS (loop0): Quotacheck: Done.
[  288.963477][   T26] audit: type=1804 audit(1787890127.757:9): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.522" name="/newroot/105/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  288.990670][ T6473] syz.4.522: attempt to access beyond end of device
[  288.990670][ T6473] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  289.432395][   T26] audit: type=1804 audit(1787890127.777:10): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.522" name="/newroot/105/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  290.182138][ T6490] loop3: detected capacity change from 0 to 256
[  290.433314][ T6491] loop2: detected capacity change from 0 to 32768
[  290.672667][ T6491] XFS (loop2): Mounting V5 Filesystem
[  290.684702][ T6496] loop1: detected capacity change from 0 to 1764
[  290.802475][ T6491] XFS (loop2): Ending clean mount
[  291.065530][ T4282] XFS (loop2): Unmounting Filesystem
[  291.074524][ T6496] iso9660: Corrupted directory entry in block 2 of inode 1920
[  291.297594][ T4277] XFS (loop0): Unmounting Filesystem
[  292.171042][ T6523] ieee802154 phy0 wpan0: encryption failed: -22
[  294.062278][ T6542] loop3: detected capacity change from 0 to 40427
[  294.653083][ T6542] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  294.660914][ T6542] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  294.827285][ T6542] F2FS-fs (loop3): Found nat_bits in checkpoint
[  294.915370][ T6542] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  294.922767][ T6542] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  294.954023][ T6548] loop2: detected capacity change from 0 to 32768
[  295.001473][   T26] audit: type=1804 audit(1787890133.787:11): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.537" name="/newroot/108/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  295.050429][ T6542] syz.3.537: attempt to access beyond end of device
[  295.050429][ T6542] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  295.075818][ T6556] loop4: detected capacity change from 0 to 128
[  295.179966][ T6554] loop1: detected capacity change from 0 to 32768
[  295.188333][   T26] audit: type=1804 audit(1787890133.837:12): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.537" name="/newroot/108/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  295.223581][ T6556] ext4: Unknown parameter 'measure'
[  295.361760][ T6548] XFS (loop2): Mounting V5 Filesystem
[  295.385642][ T6564] loop0: detected capacity change from 0 to 1764
[  295.456134][ T6564] iso9660: Corrupted directory entry in block 2 of inode 1920
[  295.965401][ T6554] XFS (loop1): Mounting V5 Filesystem
[  295.972339][ T6548] XFS (loop2): Ending clean mount
[  295.983317][ T6548] XFS (loop2): Quotacheck needed: Please wait.
[  296.062456][ T6548] XFS (loop2): Quotacheck: Done.
[  296.374401][ T6554] XFS (loop1): Ending clean mount
[  296.457705][ T4282] XFS (loop2): Unmounting Filesystem
[  296.662565][ T6578] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  296.733615][ T4273] XFS (loop1): Unmounting Filesystem
[  297.269589][ T6590] loop0: detected capacity change from 0 to 256
[  297.963664][ T6590] exfat: Bad value for 'gid'
[  298.295207][ T6478] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  299.250090][ T6595] loop4: detected capacity change from 0 to 1764
[  300.249247][ T6620] loop3: detected capacity change from 0 to 40427
[  300.274669][ T6620] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  300.282459][ T6620] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  300.515876][ T6620] F2FS-fs (loop3): Found nat_bits in checkpoint
[  300.771228][ T6620] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  300.778497][ T6620] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  300.828704][   T26] audit: type=1804 audit(1787890139.617:13): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.553" name="/newroot/111/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  301.039643][ T6635] loop0: detected capacity change from 0 to 1764
[  302.120678][ T6635] iso9660: Corrupted directory entry in block 2 of inode 1920
[  302.606711][ T6639] loop2: detected capacity change from 0 to 32768
[  302.662207][ T6639] XFS (loop2): Mounting V5 Filesystem
[  302.847937][ T6656] loop0: detected capacity change from 0 to 512
[  302.893604][ T6649] loop1: detected capacity change from 0 to 32768
[  302.964003][ T6656] EXT4-fs (loop0): Test dummy encryption mode enabled
[  302.977793][ T6639] XFS (loop2): Ending clean mount
[  302.982754][ T6656] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  303.184321][ T6649] XFS (loop1): Mounting V5 Filesystem
[  303.235599][ T4282] XFS (loop2): Unmounting Filesystem
[  303.267127][ T6649] XFS (loop1): Ending clean mount
[  303.288693][ T6649] XFS (loop1): Quotacheck needed: Please wait.
[  303.320186][ T6656] EXT4-fs (loop0): 1 truncate cleaned up
[  303.374427][ T6656] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  303.866206][ T6649] XFS (loop1): Quotacheck: Done.
[  304.133285][ T6656] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  304.178531][ T4273] XFS (loop1): Unmounting Filesystem
[  304.412414][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  304.837158][ T6685] loop3: detected capacity change from 0 to 1764
[  305.043617][ T6685] iso9660: Corrupted directory entry in block 2 of inode 1920
[  306.611541][ T6699] loop0: detected capacity change from 0 to 512
[  306.782763][ T6701] loop2: detected capacity change from 0 to 40427
[  306.808048][ T6701] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  306.815904][ T6701] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  308.474762][ T6701] F2FS-fs (loop2): Found nat_bits in checkpoint
[  308.571917][ T6701] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  308.579203][ T6701] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  308.670510][ T6699] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  308.679635][ T6699] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.740111][   T26] audit: type=1804 audit(1787890147.527:14): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.568" name="/newroot/112/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  309.236420][ T6710] ieee802154 phy0 wpan0: encryption failed: -22
[  309.282113][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  310.517177][ T6719] loop1: detected capacity change from 0 to 32768
[  310.731810][ T6720] loop3: detected capacity change from 0 to 32768
[  310.816323][ T6719] XFS (loop1): Mounting V5 Filesystem
[  310.831742][ T6738] loop0: detected capacity change from 0 to 256
[  310.862500][ T6720] XFS (loop3): Mounting V5 Filesystem
[  312.711247][ T6744] loop4: detected capacity change from 0 to 1764
[  314.096393][ T6744] iso9660: Corrupted directory entry in block 2 of inode 1920
[  314.518526][ T6719] XFS (loop1): log mount failed
[  314.553427][ T6720] XFS (loop3): log mount failed
[  316.451037][ T6763] loop0: detected capacity change from 0 to 40427
[  316.467221][ T6763] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  316.475090][ T6763] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  316.706746][ T6763] F2FS-fs (loop0): Found nat_bits in checkpoint
[  316.822265][ T6763] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  316.830726][ T6763] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  316.862060][ T6772] loop2: detected capacity change from 0 to 512
[  316.928998][   T26] audit: type=1804 audit(1787890155.717:15): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.578" name="/newroot/108/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  317.079814][ T6776] loop1: detected capacity change from 0 to 512
[  317.094748][ T6776] EXT4-fs (loop1): Test dummy encryption mode enabled
[  317.105926][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.112268][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.252124][ T6772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  317.283115][ T6776] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  317.309258][ T6772] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.393041][ T6778] loop3: detected capacity change from 0 to 40427
[  317.413201][ T6778] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  317.420981][ T6778] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  317.555435][ T6776] EXT4-fs (loop1): 1 truncate cleaned up
[  317.567360][ T6778] F2FS-fs (loop3): Found nat_bits in checkpoint
[  317.675102][ T6776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  317.706026][ T6778] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  317.713177][ T6778] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  317.736906][   T26] audit: type=1804 audit(1787890156.527:16): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.583" name="/newroot/119/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  318.413291][ T6788] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  319.042063][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  319.188379][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  319.540881][ T6801] loop1: detected capacity change from 0 to 32768
[  319.754372][ T6801] XFS (loop1): Mounting V5 Filesystem
[  319.768278][ T6810] loop0: detected capacity change from 0 to 512
[  319.796137][ T6813] loop2: detected capacity change from 0 to 256
[  319.886515][ T6801] XFS (loop1): Ending clean mount
[  319.894165][ T6801] XFS (loop1): Quotacheck needed: Please wait.
[  319.909242][ T6810] EXT4-fs (loop0): Test dummy encryption mode enabled
[  320.142723][ T6810] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  320.176279][ T6801] XFS (loop1): Quotacheck: Done.
[  320.365212][ T4273] XFS (loop1): Unmounting Filesystem
[  320.426163][ T6810] EXT4-fs (loop0): 1 truncate cleaned up
[  320.587227][ T6824] loop3: detected capacity change from 0 to 32768
[  320.603257][ T6810] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  320.644194][ T6819] loop4: detected capacity change from 0 to 1764
[  321.139390][ T6824] XFS (loop3): Mounting V5 Filesystem
[  321.233253][ T6828] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  321.240742][ T6824] XFS (loop3): Ending clean mount
[  321.262061][ T6824] XFS (loop3): Quotacheck needed: Please wait.
[  321.319406][ T6824] XFS (loop3): Quotacheck: Done.
[  321.630712][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  321.662988][   T26] audit: type=1800 audit(1787890160.387:17): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.590" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  322.000660][ T4278] XFS (loop3): Unmounting Filesystem
[  323.583021][ T6852] loop2: detected capacity change from 0 to 1764
[  324.262440][ T6852] iso9660: Corrupted directory entry in block 2 of inode 1920
[  324.677282][ T6858] loop4: detected capacity change from 0 to 40427
[  324.695584][ T6858] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  324.703628][ T6858] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  324.815597][ T6858] F2FS-fs (loop4): Found nat_bits in checkpoint
[  324.888252][ T6858] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  324.895564][ T6858] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  324.949007][   T26] audit: type=1804 audit(1787890163.737:18): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.596" name="/newroot/116/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  325.169570][ T6874] loop0: detected capacity change from 0 to 1764
[  326.112047][ T6874] iso9660: Corrupted directory entry in block 2 of inode 1920
[  326.246842][   T26] audit: type=1804 audit(1787890163.877:19): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.596" name="/newroot/116/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  326.298000][ T6876] loop2: detected capacity change from 0 to 512
[  326.415058][ T6876] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  326.433104][ T6876] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.285438][ T6882] loop0: detected capacity change from 0 to 32768
[  327.639729][ T6882] XFS (loop0): Mounting V5 Filesystem
[  327.648996][ T6886] loop3: detected capacity change from 0 to 256
[  327.744119][ T6890] loop1: detected capacity change from 0 to 128
[  327.804834][ T6882] XFS (loop0): Ending clean mount
[  327.813846][ T6882] XFS (loop0): Quotacheck needed: Please wait.
[  327.899465][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  327.952287][ T6902] loop4: detected capacity change from 0 to 1764
[  327.983850][ T6890] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  328.047381][ T6882] XFS (loop0): Quotacheck: Done.
[  328.374241][ T6905] loop2: detected capacity change from 0 to 32768
[  328.395448][ T6890] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.445557][ T4277] XFS (loop0): Unmounting Filesystem
[  328.529236][ T6905] XFS (loop2): Mounting V5 Filesystem
[  328.629472][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  328.693367][ T6905] XFS (loop2): Ending clean mount
[  328.700866][ T6905] XFS (loop2): Quotacheck needed: Please wait.
[  328.709334][ T4322] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  328.849600][ T6905] XFS (loop2): Quotacheck: Done.
[  329.058151][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.254359][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.313539][   T26] audit: type=1800 audit(1787890167.957:20): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.605" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0
[  330.036639][ T4282] XFS (loop2): Unmounting Filesystem
[  330.501613][ T4322] usb 4-1: unable to get BOS descriptor or descriptor too short
[  330.520188][ T6936] syz.3.606 (6936) used greatest stack depth: 17120 bytes left
[  330.543495][ T4322] usb 4-1: unable to read config index 0 descriptor/start: -71
[  330.552109][ T4322] usb 4-1: can't read configurations, error -71
[  331.638868][ T6947] loop4: detected capacity change from 0 to 512
[  331.815217][ T6951] loop1: detected capacity change from 0 to 256
[  331.954339][ T6947] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  332.001360][ T6947] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.319853][ T6957] loop0: detected capacity change from 0 to 32768
[  332.513877][ T6957] XFS (loop0): Mounting V5 Filesystem
[  333.699372][ T6957] XFS (loop0): Ending clean mount
[  333.707949][ T6957] XFS (loop0): Quotacheck needed: Please wait.
[  333.774590][ T6957] XFS (loop0): Quotacheck: Done.
[  334.004940][ T6973] loop3: detected capacity change from 0 to 32768
[  334.044640][ T4277] XFS (loop0): Unmounting Filesystem
[  334.050904][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  334.231247][ T6973] XFS (loop3): Mounting V5 Filesystem
[  334.292297][ T6981] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  334.610358][ T6973] XFS (loop3): Ending clean mount
[  335.560307][ T7005] loop0: detected capacity change from 0 to 512
[  335.688047][ T7005] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  335.729531][ T7011] loop1: detected capacity change from 0 to 512
[  335.881253][ T7011] EXT4-fs (loop1): Test dummy encryption mode enabled
[  335.920471][ T7011] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  336.015535][ T7011] EXT4-fs (loop1): 1 truncate cleaned up
[  336.156490][ T7011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  337.007946][ T7016] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  337.185088][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  337.238357][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  338.194662][ T4278] XFS (loop3): Unmounting Filesystem
[  338.292586][ T7030] ieee802154 phy0 wpan0: encryption failed: -22
[  338.415363][ T7038] loop0: detected capacity change from 0 to 256
[  338.639647][ T7037] loop4: detected capacity change from 0 to 32768
[  338.678403][ T7041] loop1: detected capacity change from 0 to 1764
[  338.790170][ T7037] XFS (loop4): Mounting V5 Filesystem
[  339.651284][ T7037] XFS (loop4): Ending clean mount
[  339.660219][ T7037] XFS (loop4): Quotacheck needed: Please wait.
[  339.809924][ T7037] XFS (loop4): Quotacheck: Done.
[  339.905179][ T7054] overlayfs: failed to clone lowerpath
[  339.922466][ T7056] loop3: detected capacity change from 0 to 512
[  340.006310][ T4280] XFS (loop4): Unmounting Filesystem
[  340.018799][ T7056] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  340.337418][ T7056] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  340.857087][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  341.090649][ T7072] loop2: detected capacity change from 0 to 32768
[  341.205876][ T7072] XFS (loop2): Mounting V5 Filesystem
[  341.274223][ T7064] loop0: detected capacity change from 0 to 1024
[  342.497935][ T7064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  342.506515][ T7064] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.970916][ T7090] ieee802154 phy0 wpan0: encryption failed: -22
[  343.465715][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  343.471977][ T7072] XFS (loop2): Ending clean mount
[  343.906437][ T7103] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  344.598340][ T7097] loop4: detected capacity change from 0 to 1764
[  345.924905][ T7120] loop0: detected capacity change from 0 to 512
[  346.233462][ T7123] loop1: detected capacity change from 0 to 512
[  346.250956][ T7120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  346.386611][ T7123] EXT4-fs (loop1): Test dummy encryption mode enabled
[  346.402962][ T7120] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.415472][ T7123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  346.424471][ T7126] ieee802154 phy0 wpan0: encryption failed: -22
[  346.526347][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  346.548714][ T7123] EXT4-fs (loop1): 1 truncate cleaned up
[  346.566991][ T7123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  346.956121][ T7140] netlink: 'syz.1.652': attribute type 1 has an invalid length.
[  346.963982][ T7140] netlink: 'syz.1.652': attribute type 2 has an invalid length.
[  347.203190][ T7136] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  347.330631][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  347.699243][ T4282] XFS (loop2): Unmounting Filesystem
[  349.602002][ T7170] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  349.941730][ T7176] loop0: detected capacity change from 0 to 512
[  350.505166][ T7176] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  350.560192][ T7176] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.659021][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  350.969744][ T7190] loop3: detected capacity change from 0 to 32768
[  351.034679][ T7194] loop4: detected capacity change from 0 to 512
[  351.108178][ T7194] EXT4-fs (loop4): Test dummy encryption mode enabled
[  351.235903][ T7199] loop1: detected capacity change from 0 to 32768
[  351.328874][ T7194] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  351.334815][ T7195] loop2: detected capacity change from 0 to 16
[  351.351584][ T7195] erofs: (device loop2): mounted with root inode @ nid 36.
[  351.438650][ T7190] XFS (loop3): Mounting V5 Filesystem
[  351.444365][ T7199] XFS (loop1): Mounting V5 Filesystem
[  351.473660][ T7194] EXT4-fs (loop4): 1 truncate cleaned up
[  351.499425][ T7199] XFS (loop1): Ending clean mount
[  351.512222][ T7199] XFS (loop1): Quotacheck needed: Please wait.
[  351.523272][ T7194] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  351.558796][ T7190] XFS (loop3): Ending clean mount
[  351.723808][ T7199] XFS (loop1): Quotacheck: Done.
[  352.379700][ T7224] netlink: 'syz.4.670': attribute type 1 has an invalid length.
[  352.387736][ T7224] netlink: 'syz.4.670': attribute type 2 has an invalid length.
[  352.525943][ T7221] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  352.536802][ T4273] XFS (loop1): Unmounting Filesystem
[  352.698900][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  355.854393][ T7239] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  355.978699][ T7252] loop4: detected capacity change from 0 to 512
[  356.146626][ T7252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  356.202846][ T7252] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.246023][ T7259] loop2: detected capacity change from 0 to 1764
[  356.367213][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  356.678477][ T7261] loop0: detected capacity change from 0 to 32768
[  356.766034][ T7265] loop2: detected capacity change from 0 to 512
[  356.835906][ T7261] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  356.845876][ T7263] loop4: detected capacity change from 0 to 32768
[  356.847768][ T7261] (syz.0.677,7261,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  356.921972][ T7263] XFS (loop4): Mounting V5 Filesystem
[  356.928266][ T7265] EXT4-fs (loop2): Test dummy encryption mode enabled
[  356.935271][ T7265] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  357.219848][ T7265] EXT4-fs (loop2): 1 truncate cleaned up
[  357.269571][ T7265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  357.317046][ T4278] XFS (loop3): Unmounting Filesystem
[  357.345552][ T7263] XFS (loop4): Ending clean mount
[  357.370732][ T7263] XFS (loop4): Quotacheck needed: Please wait.
[  357.594112][ T7284] netlink: 'syz.2.684': attribute type 1 has an invalid length.
[  357.601869][ T7284] netlink: 'syz.2.684': attribute type 2 has an invalid length.
[  357.758826][ T7282] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  357.785916][ T7263] XFS (loop4): Quotacheck: Done.
[  358.345442][ T4280] XFS (loop4): Unmounting Filesystem
[  358.454809][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  359.622139][ T7300] loop2: detected capacity change from 0 to 1024
[  359.656785][ T7300] EXT4-fs: Ignoring removed orlov option
[  359.738874][ T7300] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  360.550700][ T7315] loop4: detected capacity change from 0 to 512
[  360.551188][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  360.679080][ T7315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  360.718198][ T7315] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.748463][ T7319] loop2: detected capacity change from 0 to 1764
[  360.803001][ T4277] ocfs2: Unmounting device (7,0) on (node local)
[  360.809740][ T7321] ip_tables: iptables: counters copy to user failed while replacing table
[  361.583158][ T7327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.696'.
[  361.957716][ T7314] loop3: detected capacity change from 0 to 32768
[  362.059736][ T7313] ERROR: (device loop3): diAllocBit: iag inconsistent
[  362.059736][ T7313] 
[  362.140418][ T7313] ERROR: (device loop3): remounting filesystem as read-only
[  362.161627][ T7313] ialloc: diAlloc returned -5!
[  362.335571][ T7332] loop2: detected capacity change from 0 to 32768
[  362.376540][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  362.543278][ T7332] XFS (loop2): Mounting V5 Filesystem
[  362.618995][ T7332] XFS (loop2): Ending clean mount
[  362.931857][ T7349] loop4: detected capacity change from 0 to 32768
[  363.662487][ T7349] XFS (loop4): Mounting V5 Filesystem
[  363.800725][ T7349] XFS (loop4): Ending clean mount
[  363.826319][ T7349] XFS (loop4): Quotacheck needed: Please wait.
[  364.004010][ T7373] loop0: detected capacity change from 0 to 1764
[  364.014763][ T7349] XFS (loop4): Quotacheck: Done.
[  364.117656][ T7375] loop1: detected capacity change from 0 to 1024
[  364.130634][ T7375] EXT4-fs: Ignoring removed orlov option
[  364.180699][ T7373] iso9660: Corrupted directory entry in block 2 of inode 1920
[  364.247192][ T7375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  365.328393][ T7388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.705'.
[  365.504336][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  365.798615][ T7394] ip_tables: iptables: counters copy to user failed while replacing table
[  365.826015][ T7393] loop1: detected capacity change from 0 to 1764
[  365.967722][ T4280] XFS (loop4): Unmounting Filesystem
[  366.159301][ T7399] loop1: detected capacity change from 0 to 2048
[  367.430915][ T7408] loop0: detected capacity change from 0 to 512
[  367.467935][ T7408] EXT4-fs: Ignoring removed nobh option
[  367.488961][ T7408] ext4: Unknown parameter 'nouser_xattr'
[  368.836944][ T4282] XFS (loop2): Unmounting Filesystem
[  369.354991][ T7426] loop3: detected capacity change from 0 to 32768
[  369.510180][ T7426] XFS (loop3): Mounting V5 Filesystem
[  369.594959][ T7426] XFS (loop3): Ending clean mount
[  369.601542][ T7426] XFS (loop3): Quotacheck needed: Please wait.
[  369.668630][ T7426] XFS (loop3): Quotacheck: Done.
[  369.679829][ T7443] ip_tables: iptables: counters copy to user failed while replacing table
[  369.699394][ T7440] loop0: detected capacity change from 0 to 1024
[  369.710676][ T7441] loop1: detected capacity change from 0 to 1764
[  369.756946][ T7440] EXT4-fs: Ignoring removed orlov option
[  370.153393][ T7440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  370.455695][ T7453] capability: warning: `syz.1.723' uses deprecated v2 capabilities in a way that may be insecure
[  370.479424][ T4278] XFS (loop3): Unmounting Filesystem
[  370.797992][ T7460] loop1: detected capacity change from 0 to 512
[  370.829933][ T7460] EXT4-fs: Ignoring removed nobh option
[  370.865032][ T7460] ext4: Unknown parameter 'nouser_xattr'
[  373.209442][ T7476] loop2: detected capacity change from 0 to 32768
[  373.288698][ T7479] loop3: detected capacity change from 0 to 16
[  373.301096][ T7479] erofs: (device loop3): mounted with root inode @ nid 36.
[  373.471475][ T7476] XFS (loop2): Mounting V5 Filesystem
[  373.906197][ T7476] XFS (loop2): Ending clean mount
[  374.531959][ T7492] loop3: detected capacity change from 0 to 32768
[  374.586380][ T7494] loop4: detected capacity change from 0 to 1764
[  374.791978][ T7492] XFS (loop3): Mounting V5 Filesystem
[  375.005699][ T7492] XFS (loop3): Ending clean mount
[  375.013206][ T7492] XFS (loop3): Quotacheck needed: Please wait.
[  375.137074][ T7492] XFS (loop3): Quotacheck: Done.
[  375.278984][ T7507] ip_tables: iptables: counters copy to user failed while replacing table
[  375.372997][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  375.563797][ T4278] XFS (loop3): Unmounting Filesystem
[  375.824081][ T7511] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  376.971647][ T7524] loop4: detected capacity change from 0 to 1764
[  377.040813][ T7524] iso9660: Corrupted directory entry in block 2 of inode 1920
[  377.700621][ T4282] XFS (loop2): Unmounting Filesystem
[  377.737824][ T7529] netlink: 168 bytes leftover after parsing attributes in process `syz.3.737'.
[  378.545987][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.552376][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.716415][ T7536] loop0: detected capacity change from 0 to 1024
[  378.747656][ T7538] loop4: detected capacity change from 0 to 1764
[  378.763836][ T7536] EXT4-fs: Ignoring removed orlov option
[  378.831764][ T7536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  378.846433][ T4405] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  378.868974][ T7522] loop1: detected capacity change from 0 to 32768
[  379.096042][   T26] audit: type=1800 audit(1787890217.887:21): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.739" name="file1" dev="loop1" ino=4 res=0 errno=0
[  379.889115][ T7534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.909062][ T7534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.737949][ T7552] loop2: detected capacity change from 0 to 32768
[  380.966527][ T7552] XFS (loop2): Mounting V5 Filesystem
[  381.080928][ T4405] usb 4-1: unable to get BOS descriptor or descriptor too short
[  381.136819][ T4405] usb 4-1: unable to read config index 0 descriptor/start: -71
[  381.183217][ T4405] usb 4-1: can't read configurations, error -71
[  381.211225][ T7552] XFS (loop2): Ending clean mount
[  381.218893][ T7552] XFS (loop2): Quotacheck needed: Please wait.
[  381.277316][ T7552] XFS (loop2): Quotacheck: Done.
[  381.791819][ T4282] XFS (loop2): Unmounting Filesystem
[  381.869463][ T7570] loop4: detected capacity change from 0 to 32768
[  381.948651][ T7570] XFS (loop4): Mounting V5 Filesystem
[  382.094621][ T7570] XFS (loop4): Ending clean mount
[  383.490100][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  383.507924][ T7593] netlink: 168 bytes leftover after parsing attributes in process `syz.2.753'.
[  384.645321][ T7602] loop0: detected capacity change from 0 to 1764
[  385.560121][ T4280] XFS (loop4): Unmounting Filesystem
[  385.570268][ T7614] loop1: detected capacity change from 0 to 32768
[  385.629167][ T7604] loop2: detected capacity change from 0 to 32768
[  385.656487][ T7614] XFS (loop1): Mounting V5 Filesystem
[  385.708051][   T26] audit: type=1800 audit(1787890224.497:22): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.759" name="file1" dev="loop2" ino=4 res=0 errno=0
[  385.728582][ T4326] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  385.779337][ T7614] XFS (loop1): Ending clean mount
[  385.787791][ T7614] XFS (loop1): Quotacheck needed: Please wait.
[  385.856014][ T7614] XFS (loop1): Quotacheck: Done.
[  386.059995][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.093094][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.654537][ T4273] XFS (loop1): Unmounting Filesystem
[  386.947322][ T7629] loop2: detected capacity change from 0 to 1024
[  387.008048][ T7629] EXT4-fs: Ignoring removed orlov option
[  387.179786][ T7629] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  387.532691][ T4326] usb 1-1: unable to get BOS descriptor or descriptor too short
[  387.553277][ T4326] usb 1-1: unable to read config index 0 descriptor/start: -71
[  387.560932][ T4326] usb 1-1: can't read configurations, error -71
[  388.979484][ T7653] loop0: detected capacity change from 0 to 1764
[  389.994537][ T7662] loop3: detected capacity change from 0 to 32768
[  390.136342][ T7662] XFS (loop3): Mounting V5 Filesystem
[  390.159245][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  390.203929][ T7662] XFS (loop3): Ending clean mount
[  391.155680][ T7677] loop4: detected capacity change from 0 to 32768
[  391.231566][ T4278] XFS (loop3): Unmounting Filesystem
[  391.402350][ T7677] XFS (loop4): Mounting V5 Filesystem
[  391.500082][ T7677] XFS (loop4): Ending clean mount
[  391.508604][ T7677] XFS (loop4): Quotacheck needed: Please wait.
[  391.615596][ T7677] XFS (loop4): Quotacheck: Done.
[  392.533104][ T4280] XFS (loop4): Unmounting Filesystem
[  392.596171][ T7701] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  392.896428][ T7681] loop2: detected capacity change from 0 to 32768
[  393.200284][   T26] audit: type=1800 audit(1787890231.987:23): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.775" name="file1" dev="loop2" ino=4 res=0 errno=0
[  393.815363][ T7714] loop2: detected capacity change from 0 to 1024
[  393.838245][ T7714] EXT4-fs: Ignoring removed orlov option
[  393.898543][ T7714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  394.064273][ T7731] loop0: detected capacity change from 0 to 1764
[  394.541507][ T7734] loop0: detected capacity change from 0 to 32768
[  394.610048][ T7734] XFS (loop0): Mounting V5 Filesystem
[  395.112079][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  395.135648][ T7750] netlink: 48 bytes leftover after parsing attributes in process `syz.1.789'.
[  395.168341][ T7734] XFS (loop0): Ending clean mount
[  395.391200][ T7749] loop3: detected capacity change from 0 to 32768
[  395.720193][ T7749] XFS (loop3): Mounting V5 Filesystem
[  395.864802][ T7749] XFS (loop3): Ending clean mount
[  395.872257][ T7749] XFS (loop3): Quotacheck needed: Please wait.
[  395.943925][ T7749] XFS (loop3): Quotacheck: Done.
[  396.133813][ T4277] XFS (loop0): Unmounting Filesystem
[  396.210640][ T7768] loop4: detected capacity change from 0 to 64
[  396.231865][ T7768] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  396.377205][ T4278] XFS (loop3): Unmounting Filesystem
[  398.027504][ T5140] kernel write not supported for file /input/mice (pid: 5140 comm: kworker/0:12)
[  398.036796][ T7803] netlink: 48 bytes leftover after parsing attributes in process `syz.0.802'.
[  398.637988][ T7812] loop3: detected capacity change from 0 to 32768
[  398.787051][ T7812] XFS (loop3): Mounting V5 Filesystem
[  398.925482][ T7812] XFS (loop3): Ending clean mount
[  398.932926][ T7812] XFS (loop3): Quotacheck needed: Please wait.
[  399.003280][ T7812] XFS (loop3): Quotacheck: Done.
[  399.371442][ T4278] XFS (loop3): Unmounting Filesystem
[  399.639433][ T7833] loop2: detected capacity change from 0 to 32768
[  399.839635][ T7833] XFS (loop2): Mounting V5 Filesystem
[  400.011514][ T7833] XFS (loop2): Ending clean mount
[  402.128861][ T4282] XFS (loop2): Unmounting Filesystem
[  402.730656][ T7861] loop4: detected capacity change from 0 to 32768
[  402.799188][ T7861] XFS (loop4): Mounting V5 Filesystem
[  403.501213][ T7869] device team_slave_0 entered promiscuous mode
[  403.507552][ T7869] device team_slave_1 entered promiscuous mode
[  403.514414][ T7869] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  403.656411][ T7861] XFS (loop4): Ending clean mount
[  403.704138][ T7861] XFS (loop4): Quotacheck needed: Please wait.
[  403.752332][ T7861] XFS (loop4): Quotacheck: Done.
[  404.127760][ T7877] loop3: detected capacity change from 0 to 32768
[  404.187036][ T7877] XFS (loop3): Mounting V5 Filesystem
[  404.328162][ T7877] XFS (loop3): Ending clean mount
[  404.346081][ T7877] XFS (loop3): Quotacheck needed: Please wait.
[  404.411510][ T7887] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  404.498449][ T7877] XFS (loop3): Quotacheck: Done.
[  404.552900][ T7890] netlink: 48 bytes leftover after parsing attributes in process `syz.2.815'.
[  404.717705][   T26] audit: type=1800 audit(1787890243.507:24): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.816" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  405.100526][ T4278] XFS (loop3): Unmounting Filesystem
[  405.886139][ T7911] loop3: detected capacity change from 0 to 16
[  405.897552][ T7911] erofs: (device loop3): mounted with root inode @ nid 36.
[  406.323615][ T7912] loop1: detected capacity change from 0 to 32768
[  406.550034][ T7912] XFS (loop1): Mounting V5 Filesystem
[  406.672513][ T7912] XFS (loop1): Ending clean mount
[  407.352137][ T4273] XFS (loop1): Unmounting Filesystem
[  408.228993][ T7933] loop3: detected capacity change from 0 to 512
[  408.291428][ T7933] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 1: comm syz.3.829: invalid block
[  408.305392][ T7933] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.829: couldn't read orphan inode 11 (err -117)
[  408.412766][ T7933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  408.545348][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  408.949074][ T7942] loop3: detected capacity change from 0 to 1764
[  409.289721][ T7942] iso9660: Corrupted directory entry in block 2 of inode 1920
[  409.594632][ T7947] netlink: 144 bytes leftover after parsing attributes in process `syz.2.832'.
[  410.442113][ T7952] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  410.992068][ T4280] XFS (loop4): Unmounting Filesystem
[  411.013916][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.833'.
[  411.919736][ T7963] loop1: detected capacity change from 0 to 32768
[  412.265546][ T7963] XFS (loop1): Mounting V5 Filesystem
[  412.388189][ T7963] XFS (loop1): Ending clean mount
[  414.033329][ T4273] XFS (loop1): Unmounting Filesystem
[  414.337382][ T7991] loop4: detected capacity change from 0 to 32768
[  415.326424][ T7991] XFS (loop4): Mounting V5 Filesystem
[  415.531160][ T8006] loop0: detected capacity change from 0 to 1764
[  416.807918][ T8006] iso9660: Corrupted directory entry in block 2 of inode 1920
[  416.983290][ T7991] XFS (loop4): Ending clean mount
[  416.990391][ T7991] XFS (loop4): Quotacheck needed: Please wait.
[  417.107697][ T7991] XFS (loop4): Quotacheck: Done.
[  417.635267][ T4280] XFS (loop4): Unmounting Filesystem
[  418.408654][ T8024] loop3: detected capacity change from 0 to 32768
[  418.512747][ T4357] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  418.591647][ T8024] loop3: detected capacity change from 0 to 4096
[  418.618695][ T8024] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  419.079512][ T8020] loop0: detected capacity change from 0 to 32768
[  419.225394][ T8020] XFS (loop0): Mounting V5 Filesystem
[  419.232928][ T8030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'.
[  419.316335][ T8020] XFS (loop0): Ending clean mount
[  419.353018][ T4278] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  419.396997][ T8020] XFS (loop0): Quotacheck needed: Please wait.
[  419.532672][ T8020] XFS (loop0): Quotacheck: Done.
[  419.689656][ T8044] loop4: detected capacity change from 0 to 16
[  419.738517][ T8044] erofs: (device loop4): mounted with root inode @ nid 36.
[  420.571018][ T8038] sctp: failed to load transform for md5: -2
[  422.775654][ T4277] XFS (loop0): Unmounting Filesystem
[  422.855209][ T8068] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  423.333916][ T8072] loop2: detected capacity change from 0 to 32768
[  423.401484][ T8072] XFS (loop2): Mounting V5 Filesystem
[  423.540840][ T8072] XFS (loop2): Ending clean mount
[  423.548725][ T8072] XFS (loop2): Quotacheck needed: Please wait.
[  424.210050][ T8084] gadgetfs: bound to dummy_udc driver
[  424.847102][ T8072] XFS (loop2): Quotacheck: Done.
[  425.512161][ T4282] XFS (loop2): Unmounting Filesystem
[  425.671223][ T8107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.866'.
[  426.316273][ T8112] loop4: detected capacity change from 0 to 32768
[  426.513814][ T8117] ip_tables: iptables: counters copy to user failed while replacing table
[  426.539890][ T8112] XFS (loop4): Mounting V5 Filesystem
[  426.684489][ T8112] XFS (loop4): Ending clean mount
[  426.710559][ T8112] XFS (loop4): Quotacheck needed: Please wait.
[  426.793334][ T8112] XFS (loop4): Quotacheck: Done.
[  426.910605][ T8128] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  427.049202][   T26] audit: type=1800 audit(1787890265.837:25): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.868" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  428.424100][ T8147] loop0: detected capacity change from 0 to 32768
[  428.563161][ T8147] XFS (loop0): Mounting V5 Filesystem
[  428.612750][ T8147] XFS (loop0): Ending clean mount
[  428.620096][ T8147] XFS (loop0): Quotacheck needed: Please wait.
[  428.728762][ T8147] XFS (loop0): Quotacheck: Done.
[  429.016005][ T4277] XFS (loop0): Unmounting Filesystem
[  429.250154][ T8164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.878'.
[  429.551935][ T4280] XFS (loop4): Unmounting Filesystem
[  429.633871][ T8173] ip_tables: iptables: counters copy to user failed while replacing table
[  429.639009][ T8170] loop0: detected capacity change from 0 to 2048
[  430.739743][ T8183] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  431.267452][ T8190] loop0: detected capacity change from 0 to 32768
[  431.358977][ T8196] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  431.397878][ T8190] XFS (loop0): Mounting V5 Filesystem
[  431.624155][ T8190] XFS (loop0): Ending clean mount
[  431.635074][ T8190] XFS (loop0): Quotacheck needed: Please wait.
[  432.428178][ T8190] XFS (loop0): Quotacheck: Done.
[  432.558283][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.891'.
[  432.688319][ T4277] XFS (loop0): Unmounting Filesystem
[  432.802911][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.890'.
[  433.751252][ T8224] loop4: detected capacity change from 0 to 2048
[  433.886744][ T8226] loop0: detected capacity change from 0 to 32768
[  433.975025][ T4357] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  434.096140][ T8226] XFS (loop0): Mounting V5 Filesystem
[  434.632578][ T8226] XFS (loop0): Ending clean mount
[  434.644411][ T8226] XFS (loop0): Quotacheck needed: Please wait.
[  434.780490][ T8226] XFS (loop0): Quotacheck: Done.
[  435.066753][ T8248] loop4: detected capacity change from 0 to 16
[  435.078081][ T8248] erofs: (device loop4): mounted with root inode @ nid 36.
[  435.108371][   T26] audit: type=1800 audit(1787890273.897:26): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.892" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0
[  436.973662][ T8250] loop3: detected capacity change from 0 to 1764
[  438.188310][ T4357] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  438.206214][ T8250] iso9660: Corrupted directory entry in block 2 of inode 1920
[  438.563616][ T8254] netlink: 136 bytes leftover after parsing attributes in process `syz.4.902'.
[  438.661090][ T8257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.903'.
[  438.797955][ T8259] loop4: detected capacity change from 0 to 512
[  438.841287][ T8259] EXT4-fs (loop4): Test dummy encryption mode enabled
[  438.868394][ T8259] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  438.927272][ T8259] EXT4-fs (loop4): 1 truncate cleaned up
[  438.938749][ T8259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  439.193896][ T4408] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  439.279139][ T8267] netlink: 'syz.4.904': attribute type 1 has an invalid length.
[  439.286976][ T8267] netlink: 'syz.4.904': attribute type 2 has an invalid length.
[  439.772757][ T8264] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  439.808547][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.850121][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.998798][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.006064][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.817518][ T4408] usb 4-1: unable to get BOS descriptor or descriptor too short
[  440.852584][ T4408] usb 4-1: unable to read config index 0 descriptor/start: -71
[  440.900754][ T4408] usb 4-1: can't read configurations, error -71
[  441.064698][ T8277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.906'.
[  441.066779][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  441.838053][ T4277] XFS (loop0): Unmounting Filesystem
[  442.253302][ T8289] loop2: detected capacity change from 0 to 16
[  442.264949][ T8289] erofs: (device loop2): mounted with root inode @ nid 36.
[  443.141132][ T8288] device team_slave_0 entered promiscuous mode
[  443.147435][ T8288] device team_slave_1 entered promiscuous mode
[  443.154431][ T8288] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  443.393271][ T8293] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  443.588788][ T8298] loop2: detected capacity change from 0 to 1764
[  443.764719][ T8297] loop3: detected capacity change from 0 to 2048
[  443.809040][ T8300] loop0: detected capacity change from 0 to 1024
[  444.014677][ T8300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  444.382275][ T8306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.915'.
[  444.464095][ T8300] FS-Cache: Cache "CacheFiles" added (type cachefiles)
[  444.512753][ T8300] CacheFiles: File cache on CacheFiles registered
[  444.538471][ T8298] iso9660: Corrupted directory entry in block 2 of inode 1920
[  445.984468][ T8300] CacheFiles: File cache on CacheFiles unregistering
[  445.991183][ T8300] FS-Cache: Withdrawing cache "CacheFiles" (0 objs)
[  446.110570][ T8314] loop3: detected capacity change from 0 to 16
[  446.127078][ T8314] erofs: (device loop3): mounted with root inode @ nid 36.
[  447.076942][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  447.189619][ T8327] loop1: detected capacity change from 0 to 512
[  447.228145][ T8327] EXT4-fs (loop1): Test dummy encryption mode enabled
[  447.248786][ T8327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  447.292441][ T8327] EXT4-fs (loop1): 1 truncate cleaned up
[  447.302584][ T8327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  447.456654][ T8331] loop2: detected capacity change from 0 to 32768
[  448.085704][ T8331] XFS (loop2): Mounting V5 Filesystem
[  448.142581][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  448.411382][ T8331] XFS (loop2): Ending clean mount
[  448.419096][ T8331] XFS (loop2): Quotacheck needed: Please wait.
[  448.496318][ T8331] XFS (loop2): Quotacheck: Done.
[  448.754302][ T8352] loop3: detected capacity change from 0 to 16
[  448.765127][ T8352] erofs: (device loop3): mounted with root inode @ nid 36.
[  448.829341][ T4377] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  449.633925][   T26] audit: type=1800 audit(1787890288.427:27): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.920" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0
[  449.708341][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.926'.
[  449.818254][ T8361] loop3: detected capacity change from 0 to 2048
[  450.839802][ T8366] loop1: detected capacity change from 0 to 2048
[  452.222566][ T8387] loop3: detected capacity change from 0 to 512
[  452.280661][ T8387] EXT4-fs (loop3): Test dummy encryption mode enabled
[  452.315901][ T8387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  452.369200][ T8387] EXT4-fs (loop3): 1 truncate cleaned up
[  452.386977][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  453.121088][ T8393] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  454.134204][ T8400] loop4: detected capacity change from 0 to 16
[  454.178821][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  454.184993][ T8400] erofs: (device loop4): mounted with root inode @ nid 36.
[  454.505492][ T4282] XFS (loop2): Unmounting Filesystem
[  454.540908][ T8413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.939'.
[  454.588439][ T8412] loop4: detected capacity change from 0 to 2048
[  455.681078][ T8421] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  455.841713][ T8423] loop3: detected capacity change from 0 to 2048
[  458.130448][ T8443] loop4: detected capacity change from 0 to 512
[  458.214886][ T8443] EXT4-fs (loop4): Test dummy encryption mode enabled
[  458.221726][ T8443] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  458.332328][ T8443] EXT4-fs (loop4): 1 truncate cleaned up
[  458.357262][ T8443] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  459.103975][ T8447] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  459.192026][ T8457] loop2: detected capacity change from 0 to 64
[  459.976823][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  460.147996][ T8462] loop0: detected capacity change from 0 to 16
[  460.189174][ T8462] erofs: (device loop0): mounted with root inode @ nid 36.
[  461.486728][ T8467] loop0: detected capacity change from 0 to 32768
[  462.566136][ T8469] syz.2.953 (8469): drop_caches: 2
[  463.653594][ T8467] XFS (loop0): Mounting V5 Filesystem
[  464.788077][ T8488] loop2: detected capacity change from 0 to 2048
[  465.374739][ T8467] XFS (loop0): Ending clean mount
[  465.821972][ T8467] XFS (loop0): Quotacheck needed: Please wait.
[  466.031838][ T8467] XFS (loop0): Quotacheck: Done.
[  466.085027][ T4277] XFS (loop0): Unmounting Filesystem
[  468.108685][ T8510] loop0: detected capacity change from 0 to 16
[  468.121567][ T8510] erofs: (device loop0): mounted with root inode @ nid 36.
[  468.896380][ T8512] loop3: detected capacity change from 0 to 512
[  468.972593][ T8512] EXT4-fs: Ignoring removed nobh option
[  469.044385][ T8512] ext4: Unknown parameter 'nouser_xattr'
[  471.282261][ T8523] ip_tables: iptables: counters copy to user failed while replacing table
[  471.763428][ T8532] loop1: detected capacity change from 0 to 1764
[  472.499654][ T8545] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  473.054558][ T8538] loop1: detected capacity change from 0 to 32768
[  474.289909][ T8538] XFS (loop1): Mounting V5 Filesystem
[  474.420923][ T8538] XFS (loop1): Ending clean mount
[  474.474969][ T8538] XFS (loop1): Quotacheck needed: Please wait.
[  474.547064][ T8538] XFS (loop1): Quotacheck: Done.
[  474.574021][ T8566] loop3: detected capacity change from 0 to 512
[  474.618411][ T8566] EXT4-fs (loop3): Test dummy encryption mode enabled
[  474.662733][ T8566] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  474.681733][ T8547] loop0: detected capacity change from 0 to 32768
[  474.736664][ T8566] EXT4-fs (loop3): 1 truncate cleaned up
[  474.763217][ T8566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  475.028890][ T8547] XFS (loop0): Mounting V5 Filesystem
[  475.403986][ T8547] XFS (loop0): Ending clean mount
[  475.413314][ T8579] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  475.460889][ T8547] XFS (loop0): Quotacheck needed: Please wait.
[  475.561782][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  475.629431][ T8547] XFS (loop0): Quotacheck: Done.
[  475.781014][ T4277] XFS (loop0): Unmounting Filesystem
[  476.417869][ T8591] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  476.986368][ T4273] XFS (loop1): Unmounting Filesystem
[  477.330142][ T8600] loop2: detected capacity change from 0 to 16
[  477.348037][ T8600] erofs: (device loop2): mounted with root inode @ nid 36.
[  478.432493][ T8605] loop2: detected capacity change from 0 to 1764
[  478.578932][ T8605] iso9660: Corrupted directory entry in block 2 of inode 1920
[  479.124817][ T8609] loop0: detected capacity change from 0 to 1764
[  480.657766][ T8620] loop2: detected capacity change from 0 to 512
[  480.694252][ T8620] EXT4-fs (loop2): Test dummy encryption mode enabled
[  480.701347][ T8620] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  480.764059][ T8618] loop0: detected capacity change from 0 to 4096
[  480.764857][ T8620] EXT4-fs (loop2): 1 truncate cleaned up
[  480.782844][ T8620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  480.800023][ T8624] loop3: detected capacity change from 0 to 64
[  480.855221][ T8618] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  481.063997][ T8629] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  481.745181][ T8625] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  481.886782][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  482.012319][ T8639] loop0: detected capacity change from 0 to 2048
[  482.053192][ T4488] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  483.159452][ T8651] loop0: detected capacity change from 0 to 2048
[  483.163001][ T4488] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  483.280284][ T8651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  483.359417][   T26] audit: type=1800 audit(1787890322.147:28): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.996" name="file1" dev="loop0" ino=15 res=0 errno=0
[  483.439791][ T8650] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  483.523888][ T8650] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 124 with error 28
[  483.547092][ T8650] EXT4-fs (loop0): This should not happen!! Data will be lost
[  483.547092][ T8650] 
[  483.562710][ T8650] EXT4-fs (loop0): Total free blocks count 0
[  483.581763][ T8658] kvm [8656]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x10000000001780
[  483.599706][ T8650] EXT4-fs (loop0): Free/Dirty block details
[  483.609940][ T8650] EXT4-fs (loop0): free_blocks=2415919504
[  483.621682][ T8637] loop3: detected capacity change from 0 to 32768
[  483.625730][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'.
[  483.640162][ T8650] EXT4-fs (loop0): dirty_blocks=128
[  483.650194][ T8650] EXT4-fs (loop0): Block reservation details
[  483.662794][ T8650] EXT4-fs (loop0): i_reserved_data_blocks=8
[  483.740959][ T8637] XFS (loop3): Mounting V5 Filesystem
[  483.793600][ T8643] loop2: detected capacity change from 0 to 32768
[  483.877197][   T34] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 28
[  483.889060][ T8643] XFS (loop2): Mounting V5 Filesystem
[  483.908035][ T8637] XFS (loop3): Ending clean mount
[  483.920427][ T8637] XFS (loop3): Quotacheck needed: Please wait.
[  484.026244][ T8637] XFS (loop3): Quotacheck: Done.
[  484.121189][ T8643] XFS (loop2): Ending clean mount
[  484.138912][ T8643] XFS (loop2): Quotacheck needed: Please wait.
[  484.155892][ T4278] XFS (loop3): Unmounting Filesystem
[  484.905984][ T8643] XFS (loop2): Quotacheck: Done.
[  485.468304][ T8694] loop3: detected capacity change from 0 to 1764
[  485.555568][   T26] audit: type=1800 audit(1787890324.347:29): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.994" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0
[  486.271636][  T126] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  486.531708][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.585203][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.721146][ T4282] XFS (loop2): Unmounting Filesystem
[  486.763810][ T8710] loop1: detected capacity change from 0 to 64
[  487.541595][ T8720] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  487.818931][ T8722] loop0: detected capacity change from 0 to 1764
[  487.823345][  T126] usb 1-1: unable to get BOS descriptor or descriptor too short
[  487.837593][  T126] usb 1-1: unable to read config index 0 descriptor/start: -71
[  487.852710][  T126] usb 1-1: can't read configurations, error -71
[  488.671726][ T8737] loop1: detected capacity change from 0 to 32768
[  488.749409][ T8737] XFS (loop1): Mounting V5 Filesystem
[  488.901481][ T8737] XFS (loop1): Ending clean mount
[  488.910228][ T8737] XFS (loop1): Quotacheck needed: Please wait.
[  488.966585][ T8737] XFS (loop1): Quotacheck: Done.
[  489.147786][   T26] audit: type=1800 audit(1787890327.937:30): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1020" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0
[  489.296158][ T4273] XFS (loop1): Unmounting Filesystem
[  489.445207][ T8756] loop0: detected capacity change from 0 to 64
[  489.812505][ T8767] loop4: detected capacity change from 0 to 256
[  489.877817][ T8767] exFAT-fs (loop4): Invalid exboot-signature(sector = 6): 0x0fff0000
[  489.937970][ T8767] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119ae8a)
[  489.975454][ T8764] loop3: detected capacity change from 0 to 1764
[  489.985263][ T8767] exFAT-fs (loop4): invalid boot region
[  489.991383][ T8767] exFAT-fs (loop4): failed to recognize exfat type
[  490.225407][ T8747] loop2: detected capacity change from 0 to 32768
[  490.378547][ T8747] XFS (loop2): Mounting V5 Filesystem
[  490.432768][ T5135] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  490.473307][ T8747] XFS (loop2): Ending clean mount
[  490.505338][ T8747] XFS (loop2): Quotacheck needed: Please wait.
[  490.579136][ T8747] XFS (loop2): Quotacheck: Done.
[  490.735540][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.762988][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.202149][ T8794] loop1: detected capacity change from 0 to 32768
[  491.298489][ T8794] XFS (loop1): Mounting V5 Filesystem
[  491.356922][ T8794] XFS (loop1): Ending clean mount
[  491.483925][ T8794] XFS (loop1): Quotacheck needed: Please wait.
[  491.638990][ T8794] XFS (loop1): Quotacheck: Done.
[  491.918908][   T26] audit: type=1800 audit(1787890330.617:31): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1033" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0
[  492.123573][ T5135] usb 1-1: unable to get BOS descriptor or descriptor too short
[  492.133298][ T5135] usb 1-1: unable to read config index 0 descriptor/start: -71
[  492.140920][ T5135] usb 1-1: can't read configurations, error -71
[  492.160516][ T4282] XFS (loop2): Unmounting Filesystem
[  492.274317][ T4273] XFS (loop1): Unmounting Filesystem
[  492.308330][ T8806] loop4: detected capacity change from 0 to 4096
[  492.492912][ T8812] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  493.481739][ T8820] loop3: detected capacity change from 0 to 1764
[  495.268936][ T8834] loop3: detected capacity change from 0 to 16
[  495.322494][ T8834] erofs: (device loop3): mounted with root inode @ nid 36.
[  496.255694][ T8844] loop3: detected capacity change from 0 to 32768
[  496.316538][ T8844] XFS (loop3): Mounting V5 Filesystem
[  496.384022][ T8844] XFS (loop3): Ending clean mount
[  496.391489][ T8844] XFS (loop3): Quotacheck needed: Please wait.
[  496.548493][ T8844] XFS (loop3): Quotacheck: Done.
[  496.553691][ T4324] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  496.736322][   T26] audit: type=1800 audit(1787890335.527:32): pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1047" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  496.800919][ T8850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.872313][ T8850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  496.887004][ T4278] XFS (loop3): Unmounting Filesystem
[  497.336124][ T8865] loop4: detected capacity change from 0 to 512
[  497.472078][ T8865] EXT4-fs (loop4): Test dummy encryption mode enabled
[  497.519688][ T8865] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  497.631859][ T8865] EXT4-fs (loop4): 1 truncate cleaned up
[  497.723834][ T4324] usb 1-1: unable to get BOS descriptor or descriptor too short
[  498.495817][ T8872] gadgetfs: bound to dummy_udc driver
[  499.123976][ T8865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  499.304665][ T8868] loop1: detected capacity change from 0 to 32768
[  499.361226][ T4324] usb 1-1: unable to read config index 0 descriptor/start: -71
[  499.377151][ T4324] usb 1-1: can't read configurations, error -71
[  499.561899][ T8874] loop0: detected capacity change from 0 to 1024
[  500.329098][ T8874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  500.491028][ T8875] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  500.523244][ T8874] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  500.705023][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  500.885042][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  501.244001][ T8894] loop4: detected capacity change from 0 to 16
[  501.257836][ T8894] erofs: (device loop4): mounted with root inode @ nid 36.
[  501.425364][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.432095][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.538398][ T8906] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  503.230927][ T8910] loop2: detected capacity change from 0 to 1764
[  503.710325][ T8912] loop4: detected capacity change from 0 to 32768
[  503.776424][ T8912] XFS (loop4): Mounting V5 Filesystem
[  503.860772][ T8912] XFS (loop4): Ending clean mount
[  503.868893][ T8912] XFS (loop4): Quotacheck needed: Please wait.
[  504.708516][ T8912] XFS (loop4): Quotacheck: Done.
[  505.144693][   T26] audit: type=1800 audit(1787890343.757:33): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1061" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  505.539696][ T4280] XFS (loop4): Unmounting Filesystem
[  505.607652][ T8930] loop1: detected capacity change from 0 to 1024
[  505.726783][ T8930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  505.735392][ T8930] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  505.840784][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  506.452478][ T8944] loop4: detected capacity change from 0 to 16
[  506.463135][ T8944] erofs: (device loop4): mounted with root inode @ nid 36.
[  507.323465][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1071'.
[  507.963691][ T8951] loop2: detected capacity change from 0 to 4096
[  508.004603][ T8951] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  508.408183][ T4282] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  508.409938][ T8953] loop4: detected capacity change from 0 to 1764
[  510.374951][ T8973] loop4: detected capacity change from 0 to 32768
[  510.471710][ T8970] loop0: detected capacity change from 0 to 1024
[  510.519305][ T8973] XFS (loop4): Mounting V5 Filesystem
[  510.779167][ T8973] XFS (loop4): Ending clean mount
[  510.787278][ T8973] XFS (loop4): Quotacheck needed: Please wait.
[  510.846365][ T8973] XFS (loop4): Quotacheck: Done.
[  510.994115][ T8970] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  511.011680][ T8992] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  511.293989][ T8970] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  511.306769][   T26] audit: type=1800 audit(1787890349.877:34): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1078" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0
[  511.384867][ T4280] XFS (loop4): Unmounting Filesystem
[  511.658257][ T8996] loop2: detected capacity change from 0 to 16
[  511.676675][ T8996] erofs: (device loop2): mounted with root inode @ nid 36.
[  512.427343][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  513.733365][ T9002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1085'.
[  514.682803][ T9011] loop0: detected capacity change from 0 to 1764
[  515.156797][ T9020] loop1: detected capacity change from 0 to 2048
[  515.955175][ T4488] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  516.767503][ T9035] loop0: detected capacity change from 0 to 1024
[  516.845534][ T9034] loop1: detected capacity change from 0 to 1764
[  517.003449][ T9034] iso9660: Corrupted directory entry in block 2 of inode 1920
[  517.072459][ T9035] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  517.089926][ T9035] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  518.135987][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  519.036872][ T9051] loop0: detected capacity change from 0 to 1764
[  519.409975][ T9055] loop2: detected capacity change from 0 to 32768
[  519.429687][ T9050] iso9660: Corrupted directory entry in block 2 of inode 1920
[  519.632043][ T9055] XFS (loop2): Mounting V5 Filesystem
[  519.745671][ T9055] XFS (loop2): Ending clean mount
[  519.802242][ T9055] XFS (loop2): Quotacheck needed: Please wait.
[  519.946873][ T9070] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  519.967156][ T9055] XFS (loop2): Quotacheck: Done.
[  520.213604][   T26] audit: type=1800 audit(1787890358.997:35): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1093" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0
[  520.615827][ T4282] XFS (loop2): Unmounting Filesystem
[  520.620905][ T9078] loop0: detected capacity change from 0 to 2048
[  521.589266][ T9068] loop1: detected capacity change from 0 to 32768
[  521.636548][ T9068] JBD2: Ignoring recovery information on journal
[  521.724911][ T9068] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  521.985030][ T9091] loop3: detected capacity change from 0 to 1764
[  522.056935][ T9091] iso9660: Corrupted directory entry in block 2 of inode 1920
[  522.684974][ T4273] ocfs2: Unmounting device (7,1) on (node local)
[  522.929841][ T9098] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  522.965082][ T4322] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  523.142656][ T9096] loop0: detected capacity change from 0 to 1024
[  523.270622][ T9101] loop3: detected capacity change from 0 to 64
[  523.382393][ T9096] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  523.411430][ T9096] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  523.482803][ T4322] usb 3-1: Using ep0 maxpacket: 16
[  523.504709][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.548078][ T4322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  523.610149][ T4322] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  523.656551][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  523.665159][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.713836][ T4322] usb 3-1: config 0 descriptor??
[  523.847907][ T9110] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  524.052442][ T9114] loop3: detected capacity change from 0 to 1764
[  524.318823][ T9116] loop1: detected capacity change from 0 to 32768
[  524.397981][ T9114] iso9660: Corrupted directory entry in block 2 of inode 1920
[  524.407743][ T4322] usbhid 3-1:0.0: can't add hid device: -71
[  524.422953][ T4322] usbhid: probe of 3-1:0.0 failed with error -71
[  524.436617][ T4322] usb 3-1: USB disconnect, device number 7
[  524.756820][ T9116] XFS (loop1): Mounting V5 Filesystem
[  524.858367][ T9116] XFS (loop1): Ending clean mount
[  524.870224][ T9116] XFS (loop1): Quotacheck needed: Please wait.
[  524.922006][ T9116] XFS (loop1): Quotacheck: Done.
[  525.244478][   T26] audit: type=1800 audit(1787890363.947:36): pid=9133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1118" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0
[  526.125815][ T4273] XFS (loop1): Unmounting Filesystem
[  526.297994][ T9141] loop4: detected capacity change from 0 to 1764
[  526.813189][    C0] vcan0: j1939_tp_rxtimer: 0xffff888054169000: rx timeout, send abort
[  528.221497][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802ee53000: rx timeout, send abort
[  528.229956][    C0] vcan0: j1939_tp_rxtimer: 0xffff888054169000: abort rx timeout. Force session deactivation
[  528.256308][ T9147] iso9660: Corrupted directory entry in block 2 of inode 1920
[  528.719331][ T9150] loop0: detected capacity change from 0 to 64
[  528.738274][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802ee53000: abort rx timeout. Force session deactivation
[  529.226830][ T9161] binder_alloc: 9158: binder_alloc_buf, no vma
[  529.442534][ T9155] loop4: detected capacity change from 0 to 1024
[  529.611449][ T9160] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  530.248787][ T9164] gadgetfs: bound to dummy_udc driver
[  530.929698][ T9155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  530.950833][ T9155] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  531.130084][ T9172] loop3: detected capacity change from 0 to 32768
[  532.044245][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  532.156228][ T9172] XFS (loop3): Mounting V5 Filesystem
[  532.376492][ T9191] loop4: detected capacity change from 0 to 512
[  532.849510][ T9191] EXT4-fs (loop4): Test dummy encryption mode enabled
[  533.390923][ T9191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  533.443406][ T9172] XFS (loop3): Ending clean mount
[  533.452425][ T9172] XFS (loop3): Quotacheck needed: Please wait.
[  533.551190][ T9191] EXT4-fs (loop4): 1 truncate cleaned up
[  533.582844][ T9191] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  533.617376][ T9172] XFS (loop3): Quotacheck: Done.
[  533.846282][ T9204] loop0: detected capacity change from 0 to 1764
[  533.859261][   T26] audit: type=1800 audit(1787890372.627:37): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1132" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  533.986883][ T9204] iso9660: Corrupted directory entry in block 2 of inode 1920
[  534.085734][ T4278] XFS (loop3): Unmounting Filesystem
[  534.993413][  T126] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  535.263885][ T9218] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  535.304778][ T9213] binder_alloc: 9210: binder_alloc_buf, no vma
[  536.406280][  T126] usb 5-1: device descriptor read/all, error -71
[  537.239282][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  537.859006][ T9231] gadgetfs: bound to dummy_udc driver
[  538.697777][ T9233] loop2: detected capacity change from 0 to 1024
[  538.986149][ T9233] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  539.002704][ T9233] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  540.199884][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  540.972088][ T9261] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.980121][ T9278] loop2: detected capacity change from 0 to 1764
[  542.994951][ T4324] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  543.813237][ T9278] iso9660: Corrupted directory entry in block 2 of inode 1920
[  543.830767][ T9274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.922937][ T9274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.460939][ T4324] usb 2-1: unable to get BOS descriptor or descriptor too short
[  544.480611][ T4324] usb 2-1: unable to read config index 0 descriptor/start: -71
[  544.727327][ T9287] loop4: detected capacity change from 0 to 1024
[  544.768373][ T4324] usb 2-1: can't read configurations, error -71
[  545.059637][ T9287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  545.097883][ T9287] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  545.399918][ T9299] loop0: detected capacity change from 0 to 32768
[  545.419447][ T9299] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  545.459291][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  545.511707][ T9301] loop1: detected capacity change from 0 to 4096
[  545.657227][ T9299] loop0: detected capacity change from 0 to 1024
[  545.665027][ T9299] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  546.606456][ T9301] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  546.622348][ T9299] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  546.705344][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  547.222952][ T9322] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  547.799113][ T9336] loop2: detected capacity change from 0 to 1764
[  547.902237][ T9336] iso9660: Corrupted directory entry in block 2 of inode 1920
[  547.935129][ T4408] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  548.852226][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.905953][ T4323] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  549.039235][ T9344] loop0: detected capacity change from 0 to 32768
[  549.052863][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.224297][ T9344] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  549.570947][ T4408] usb 2-1: unable to get BOS descriptor or descriptor too short
[  549.623459][ T4323] usb 5-1: unable to get BOS descriptor or descriptor too short
[  549.651299][ T4323] usb 5-1: not running at top speed; connect to a high speed hub
[  549.659588][ T4408] usb 2-1: unable to read config index 0 descriptor/start: -71
[  549.670408][ T4408] usb 2-1: can't read configurations, error -71
[  549.677082][ T4323] usb 5-1: config 5 has an invalid interface number: 246 but max is 0
[  549.693057][ T4323] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  550.568657][ T4323] usb 5-1: config 5 has no interface number 0
[  550.592812][ T4323] usb 5-1: config 5 interface 246 altsetting 4 has an invalid endpoint with address 0x0, skipping
[  550.658497][ T4323] usb 5-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  550.728750][ T4323] usb 5-1: config 5 interface 246 has no altsetting 0
[  550.835017][ T9360] loop2: detected capacity change from 0 to 64
[  550.857190][ T4323] usb 5-1: string descriptor 0 read error: -71
[  550.863891][ T4323] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  550.873497][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.902443][ T4323] usb 5-1: can't set config #5, error -71
[  550.934167][ T4323] usb 5-1: USB disconnect, device number 6
[  550.991811][ T4357] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  551.200197][ T9367] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  551.562900][ T9377] loop0: detected capacity change from 0 to 2048
[  551.942733][ T9378] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  552.327997][ T9375] loop3: detected capacity change from 0 to 1764
[  552.495887][ T9375] iso9660: Corrupted directory entry in block 2 of inode 1920
[  552.631348][ T9382] loop1: detected capacity change from 0 to 32768
[  552.645971][ T9382] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  552.656526][ T9382] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  552.666129][ T9382] BTRFS info (device loop1): using free space tree
[  552.733360][ T9382] BTRFS info (device loop1): enabling ssd optimizations
[  554.024549][ T4273] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  555.071211][ T9425] loop2: detected capacity change from 0 to 1764
[  555.180877][ T9416] iso9660: Corrupted directory entry in block 2 of inode 1920
[  555.928855][ T9431] loop3: detected capacity change from 0 to 4096
[  556.038263][ T9436] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  556.051139][ T9431] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  557.886586][ T9451] loop0: detected capacity change from 0 to 32768
[  557.894319][ T9448] loop4: detected capacity change from 0 to 512
[  557.931290][ T9451] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1208 (9451)
[  557.954960][ T9451] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  557.965262][ T9451] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  557.974734][ T9451] BTRFS info (device loop0): using free space tree
[  557.996778][ T9448] EXT4-fs (loop4): Test dummy encryption mode enabled
[  558.035492][ T9448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  558.145030][ T9448] EXT4-fs (loop4): 1 truncate cleaned up
[  558.150762][ T9448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  559.243702][ T9448] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  559.252524][ T9451] BTRFS info (device loop0): enabling ssd optimizations
[  559.384902][ T4280] EXT4-fs (loop4): unmounting filesystem.
[  559.477637][ T4277] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  561.135405][ T9505] binder: BINDER_SET_CONTEXT_MGR already set
[  561.141904][ T9505] binder: 9504:9505 ioctl 4018620d 200000000040 returned -16
[  561.610111][ T9512] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  561.995738][ T9515] loop0: detected capacity change from 0 to 4096
[  562.070959][ T9515] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  562.319905][ T9517]  loop0:
[  562.597849][ T4277] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  562.879831][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  562.886546][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  563.601889][ T9523] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  564.490639][ T9527] loop2: detected capacity change from 0 to 32768
[  564.502145][ T9527] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1224 (9527)
[  564.522085][ T9527] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  564.532727][ T9527] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  564.542130][ T9527] BTRFS info (device loop2): using free space tree
[  565.662272][ T9535] gadgetfs: bound to dummy_udc driver
[  566.686005][ T9527] BTRFS error (device loop2): open_ctree failed: -12
[  567.052314][ T9571] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  567.081701][ T4357] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4357)
[  567.171412][ T9570] loop0: detected capacity change from 0 to 4096
[  567.308970][ T9570] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  567.467462][ T4277] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  567.871421][ T9579] binder: BINDER_SET_CONTEXT_MGR already set
[  567.876487][ T9495] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  567.917883][ T9579] binder: 9578:9579 ioctl 4018620d 200000000040 returned -16
[  568.227531][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  568.400082][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  569.537387][ T9495] usb 2-1: unable to get BOS descriptor or descriptor too short
[  569.551880][ T9495] usb 2-1: unable to read config index 0 descriptor/start: -71
[  569.587771][ T9495] usb 2-1: can't read configurations, error -71
[  570.734777][ T9604] loop4: detected capacity change from 0 to 32768
[  570.749510][ T9604] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  570.759815][ T9604] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  570.769475][ T9604] BTRFS info (device loop4): using free space tree
[  571.922427][ T9607] device team_slave_0 entered promiscuous mode
[  571.928686][ T9607] device team_slave_1 entered promiscuous mode
[  571.935624][ T9607] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  572.381275][ T9604] BTRFS info (device loop4): enabling ssd optimizations
[  572.744646][ T9617] loop3: detected capacity change from 0 to 4096
[  572.844729][ T9633] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  573.006840][ T4280] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  573.758031][ T9635] gadgetfs: bound to dummy_udc driver
[  574.341732][ T9617] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  574.432966][ T4278] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  574.609254][ T4488] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop4 scanned by udevd (4488)
[  574.627105][ T9638] binder: BINDER_SET_CONTEXT_MGR already set
[  574.656020][ T9638] binder: 9637:9638 ioctl 4018620d 200000000040 returned -16
[  574.760078][ T9641] loop0: detected capacity change from 0 to 16
[  574.782972][ T9641] erofs: (device loop0): mounted with root inode @ nid 36.
[  575.090911][ T9647] loop3: detected capacity change from 0 to 64
[  575.318553][ T9647] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  577.086888][ T9662] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  577.462403][ T9666] loop2: detected capacity change from 0 to 1764
[  577.782736][ T9658] iso9660: Corrupted directory entry in block 2 of inode 1920
[  578.783827][ T9669] gadgetfs: bound to dummy_udc driver
[  580.384885][  T126] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  580.662867][  T126] usb 4-1: Using ep0 maxpacket: 32
[  580.675305][  T126] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  580.818842][  T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  580.979403][  T126] usb 4-1: config 0 has no interface number 0
[  581.086694][  T126] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  581.239362][  T126] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0
[  581.372278][  T126] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  581.639828][  T126] usb 4-1: config 0 interface 196 has no altsetting 0
[  581.819188][  T126] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  581.892851][  T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.912490][  T126] usb 4-1: Product: syz
[  581.917325][  T126] usb 4-1: Manufacturer: syz
[  581.922110][  T126] usb 4-1: SerialNumber: syz
[  581.929164][  T126] usb 4-1: config 0 descriptor??
[  582.049945][ T9697] loop0: detected capacity change from 0 to 2048
[  582.281715][ T9700] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  583.340639][ T9709] loop4: detected capacity change from 0 to 1764
[  583.612260][  T126] ipheth 4-1:0.196: Unable to find endpoints
[  583.633402][ T9701] iso9660: Corrupted directory entry in block 2 of inode 1920
[  583.703864][  T126] usb 4-1: USB disconnect, device number 8
[  586.487028][ T9738] loop2: detected capacity change from 0 to 32768
[  586.613993][ T9738] XFS (loop2): Mounting V5 Filesystem
[  586.705956][ T9738] XFS (loop2): Ending clean mount
[  586.747698][   T26] audit: type=1800 audit(1787890425.537:38): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1274" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  587.145085][ T4282] XFS (loop2): Unmounting Filesystem
[  587.408373][ T9770] loop3: detected capacity change from 0 to 2048
[  587.506797][ T9773] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  587.749842][ T9778] loop3: detected capacity change from 0 to 64
[  588.131341][ T9781] loop4: detected capacity change from 0 to 1764
[  588.246656][ T9776] iso9660: Corrupted directory entry in block 2 of inode 1920
[  591.298957][ T9806] binder: BINDER_SET_CONTEXT_MGR already set
[  591.309566][ T9806] binder: 9805:9806 ioctl 4018620d 200000000040 returned -16
[  591.787878][ T9809] loop3: detected capacity change from 0 to 1764
[  591.806097][ T9813] loop1: detected capacity change from 0 to 64
[  591.880170][ T9809] iso9660: Corrupted directory entry in block 2 of inode 1920
[  592.032694][ T9418] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  592.375733][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.386984][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.798222][ T9418] usb 5-1: unable to get BOS descriptor or descriptor too short
[  593.813556][ T9418] usb 5-1: unable to read config index 0 descriptor/start: -71
[  593.879699][ T9418] usb 5-1: can't read configurations, error -71
[  594.212953][ T9830] loop0: detected capacity change from 0 to 2048
[  594.542905][ T9830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  594.629010][ T9830] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.1297: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  594.821668][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  597.598233][ T9861] loop4: detected capacity change from 0 to 64
[  598.400662][ T9864] loop4: detected capacity change from 0 to 1764
[  599.052586][ T9863] iso9660: Corrupted directory entry in block 2 of inode 1920
[  599.330517][ T9871] loop4: detected capacity change from 0 to 1024
[  599.990062][ T9876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1312'.
[  600.372995][ T9418] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  600.660941][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  600.812133][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.124015][ T9418] usb 5-1: unable to get BOS descriptor or descriptor too short
[  602.139105][ T9418] usb 5-1: unable to read config index 0 descriptor/start: -71
[  602.162821][ T9418] usb 5-1: can't read configurations, error -71
[  602.787767][ T9887] loop3: detected capacity change from 0 to 32768
[  602.900425][ T9887] XFS (loop3): Mounting V5 Filesystem
[  603.019503][ T9887] XFS (loop3): Ending clean mount
[  604.849881][ T9914] loop1: detected capacity change from 0 to 2048
[  604.886586][ T9916] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  606.036884][ T9924] loop4: detected capacity change from 0 to 64
[  606.266749][ T9922] loop1: detected capacity change from 0 to 2048
[  606.625702][ T4278] XFS (loop3): Unmounting Filesystem
[  607.182709][ T9418] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  607.512849][ T9928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  607.521436][ T9928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.688127][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1330'.
[  608.888050][ T9418] usb 2-1: unable to get BOS descriptor or descriptor too short
[  608.903068][ T9418] usb 2-1: unable to read config index 0 descriptor/start: -71
[  608.911207][ T9418] usb 2-1: can't read configurations, error -71
[  609.009605][ T9926] loop4: detected capacity change from 0 to 32768
[  609.176966][ T9926] XFS (loop4): Mounting V5 Filesystem
[  609.292992][ T9926] XFS (loop4): Ending clean mount
[  610.776132][ T9964] loop3: detected capacity change from 0 to 32768
[  611.357392][ T9964] JBD2: Ignoring recovery information on journal
[  611.432108][ T9964] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  611.464858][   T57] (kworker/u4:4,57,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1
[  611.603709][ T9964] (syz.3.1338,9964,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1
[  611.619988][ T9964] (syz.3.1338,9964,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  611.628781][ T9964] (syz.3.1338,9964,1):__ocfs2_prepare_orphan_dir:2168 ERROR: status = -2
[  611.637559][ T9964] (syz.3.1338,9964,1):ocfs2_prepare_orphan_dir:2210 ERROR: status = -2
[  611.645941][ T9964] (syz.3.1338,9964,1):ocfs2_prepare_orphan_dir:2226 ERROR: status = -2
[  611.654638][ T9964] (syz.3.1338,9964,1):ocfs2_unlink:964 ERROR: status = -2
[  611.767130][ T4278] ocfs2: Unmounting device (7,3) on (node local)
[  614.216563][ T4280] XFS (loop4): Unmounting Filesystem
[  614.894912][ T9983] loop0: detected capacity change from 0 to 64
[  615.017469][ T9985] loop2: detected capacity change from 0 to 512
[  615.076790][ T9985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  615.162564][ T9985] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  615.230986][ T9985] EXT4-fs (loop2): orphan cleanup on readonly fs
[  616.093945][ T9985] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  616.133010][ T9985] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  616.176270][ T9985] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1345: Failed to acquire dquot type 1
[  616.200279][ T9978] loop1: detected capacity change from 0 to 32768
[  616.497899][T10002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1344'.
[  616.532929][ T9985] EXT4-fs (loop2): Remounting filesystem read-only
[  616.667601][ T9978] XFS (loop1): Mounting V5 Filesystem
[  617.083613][ T9985] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.1345: corrupted inode contents
[  617.122763][ T9985] EXT4-fs (loop2): Remounting filesystem read-only
[  617.146315][ T9978] XFS (loop1): Ending clean mount
[  617.183147][ T9985] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #16: comm syz.2.1345: mark_inode_dirty error
[  617.227389][ T9985] EXT4-fs (loop2): Remounting filesystem read-only
[  617.245578][ T9985] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.1345: corrupted inode contents
[  617.260299][ T4273] XFS (loop1): Unmounting Filesystem
[  617.293294][ T9985] EXT4-fs (loop2): Remounting filesystem read-only
[  617.310968][ T9985] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1345: mark_inode_dirty error
[  617.342510][ T9985] EXT4-fs (loop2): Remounting filesystem read-only
[  617.349672][ T9985] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.1345: corrupted inode contents
[  617.542721][ T9985] EXT4-fs (loop2): Remounting filesystem read-only
[  617.587161][T10012] loop4: detected capacity change from 0 to 16
[  617.602743][ T9985] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  617.658817][T10012] erofs: (device loop4): mounted with root inode @ nid 36.
[  617.666252][ T9985] EXT4-fs (loop2): Remounting filesystem read-only
[  617.702174][ T9985] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.1345: corrupted inode contents
[  617.778057][ T9985] EXT4-fs (loop2): Remounting filesystem read-only
[  617.849618][ T9985] EXT4-fs error (device loop2): ext4_truncate:4325: inode #16: comm syz.2.1345: mark_inode_dirty error
[  617.892011][ T9985] EXT4-fs (loop2): Remounting filesystem read-only
[  617.911838][ T9985] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  617.948266][ T9985] EXT4-fs (loop2): Remounting filesystem read-only
[  617.959528][ T9985] EXT4-fs (loop2): 1 truncate cleaned up
[  617.981737][ T9985] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  618.687669][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  619.018547][T10026] loop1: detected capacity change from 0 to 32768
[  619.281867][T10026] XFS (loop1): Mounting V5 Filesystem
[  619.822241][T10042] loop3: detected capacity change from 0 to 32768
[  619.868393][T10026] XFS (loop1): Ending clean mount
[  619.882883][T10042] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  620.552449][ T4273] XFS (loop1): Unmounting Filesystem
[  620.961147][T10053] loop0: detected capacity change from 0 to 4096
[  620.968301][T10053] ntfs3: Unknown parameter 'windows_names'
[  620.998501][ T4357] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  621.040075][ T4377] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  624.305915][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.312531][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  625.019136][T10083] loop0: detected capacity change from 0 to 32768
[  625.678636][T10062] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  625.865837][T10095] loop4: detected capacity change from 0 to 1764
[  625.888797][T10083] XFS (loop0): Mounting V5 Filesystem
[  626.266225][T10095] iso9660: Corrupted directory entry in block 2 of inode 1920
[  626.282497][T10083] XFS (loop0): Ending clean mount
[  627.678386][ T4277] XFS (loop0): Unmounting Filesystem
[  630.150973][T10121] loop4: detected capacity change from 0 to 2048
[  630.365962][T10126] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  630.985991][T10125] loop2: detected capacity change from 0 to 32768
[  631.009327][T10125] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  631.617922][ T4377] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  632.318509][T10136] gadgetfs: bound to dummy_udc driver
[  633.270071][T10137] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.278844][T10137] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.447485][T10137] device team_slave_0 left promiscuous mode
[  633.459715][T10137] device team_slave_1 left promiscuous mode
[  633.581423][T10153] loop2: detected capacity change from 0 to 512
[  633.667276][T10153] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  633.691181][T10153] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  634.719134][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  635.135901][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  635.232308][T10171] loop0: detected capacity change from 0 to 2048
[  635.262405][T10172] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  636.216368][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  638.502091][T10180] gadgetfs: bound to dummy_udc driver
[  640.439303][T10188] loop2: detected capacity change from 0 to 1764
[  640.543866][T10188] iso9660: Corrupted directory entry in block 2 of inode 1920
[  640.552389][T10137] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  640.572083][T10137] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  640.599342][T10137] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  640.618560][T10137] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  640.704018][T10195] loop0: detected capacity change from 0 to 2048
[  640.772079][  T126] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  641.108513][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.118658][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.610702][T10215] loop0: detected capacity change from 0 to 2048
[  642.868411][T10216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  645.710199][T10223] loop4: detected capacity change from 0 to 32768
[  646.426833][  T126] usb 2-1: unable to get BOS descriptor or descriptor too short
[  646.509787][T10223] JBD2: Ignoring recovery information on journal
[  646.595622][  T126] usb 2-1: unable to read config index 0 descriptor/start: -32
[  647.362487][  T126] usb 2-1: chopping to 0 config(s)
[  647.378395][T10223] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  647.390214][  T126] usb 2-1: can't read configurations, error -32
[  647.397081][ T5826] (kworker/u4:20,5826,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1
[  647.480837][T10223] (syz.4.1402,10223,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1
[  647.497236][T10223] (syz.4.1402,10223,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  647.506006][T10223] (syz.4.1402,10223,0):__ocfs2_prepare_orphan_dir:2168 ERROR: status = -2
[  647.514555][T10223] (syz.4.1402,10223,0):ocfs2_prepare_orphan_dir:2210 ERROR: status = -2
[  647.523138][T10223] (syz.4.1402,10223,0):ocfs2_prepare_orphan_dir:2226 ERROR: status = -2
[  647.531465][T10223] (syz.4.1402,10223,0):ocfs2_unlink:964 ERROR: status = -2
[  647.644705][ T4280] ocfs2: Unmounting device (7,4) on (node local)
[  647.662904][  T126] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  647.880826][  T126] usb 2-1: device descriptor read/64, error -32
[  647.984885][T10234] loop3: detected capacity change from 0 to 16
[  648.032983][  T126] usb usb2-port1: attempt power cycle
[  648.115711][T10234] erofs: (device loop3): mounted with root inode @ nid 36.
[  648.288431][ T5135] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  648.942701][ T5135] usb 3-1: Using ep0 maxpacket: 16
[  649.335571][ T5135] usb 3-1: config 166 has an invalid interface number: 177 but max is 1
[  649.445778][ T5135] usb 3-1: config 166 has an invalid interface number: 34 but max is 1
[  649.482968][ T5135] usb 3-1: config 166 has no interface number 0
[  649.489273][ T5135] usb 3-1: config 166 has no interface number 1
[  649.521757][ T5135] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping
[  649.553010][ T5135] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping
[  649.591051][ T5135] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  649.628308][ T5135] usb 3-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping
[  649.674112][ T5135] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  649.712317][ T5135] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[  649.742776][ T5135] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  649.768008][T10247] loop1: detected capacity change from 0 to 512
[  649.779704][ T5135] usb 3-1: config 166 interface 177 has no altsetting 0
[  649.796969][T10247] EXT4-fs: Ignoring removed nobh option
[  650.771961][T10248] gadgetfs: bound to dummy_udc driver
[  650.831590][ T5135] usb 3-1: config 166 interface 34 has no altsetting 0
[  650.831929][T10247] ext4: Unknown parameter 'nouser_xattr'
[  650.849797][ T5135] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  650.860627][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.868871][ T5135] usb 3-1: Product: syz
[  650.875192][ T5135] usb 3-1: Manufacturer: syz
[  650.879837][ T5135] usb 3-1: SerialNumber: syz
[  652.087553][ T5135] usb 3-1: can't set config #166, error -71
[  652.106663][ T5135] usb 3-1: USB disconnect, device number 8
[  655.350217][T10272] loop4: detected capacity change from 0 to 2048
[  655.384345][T10276] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  655.962712][ T9497] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  656.168504][T10280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.245596][T10280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.422039][T10287] loop2: detected capacity change from 0 to 32768
[  656.479694][T10287] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  657.966376][ T4488] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  659.279914][T10304] loop0: detected capacity change from 0 to 512
[  659.355247][T10304] EXT4-fs (loop0): Test dummy encryption mode enabled
[  659.394287][T10304] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  659.414543][T10306] loop3: detected capacity change from 0 to 512
[  659.483742][T10306] EXT4-fs: Ignoring removed nobh option
[  659.489478][T10306] ext4: Unknown parameter 'nouser_xattr'
[  659.552968][T10304] EXT4-fs (loop0): 1 truncate cleaned up
[  659.559551][T10304] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  660.990909][ T9497] usb 5-1: unable to get BOS descriptor or descriptor too short
[  660.995838][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  661.014214][ T9497] usb 5-1: unable to read config index 0 descriptor/start: -71
[  661.093027][ T9497] usb 5-1: can't read configurations, error -71
[  662.597195][T10316] binder: 10315:10316 ioctl 4018620d 0 returned -22
[  663.053855][T10325] loop2: detected capacity change from 0 to 1764
[  663.218436][T10325] iso9660: Corrupted directory entry in block 2 of inode 1920
[  663.380377][T10332] loop1: detected capacity change from 0 to 2048
[  663.443755][T10333] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  666.743127][T10353] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  666.750023][T10353] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  666.805974][T10353] vhci_hcd vhci_hcd.0: Device attached
[  666.873907][T10360] loop0: detected capacity change from 0 to 512
[  666.891278][T10360] EXT4-fs: Ignoring removed nobh option
[  666.900770][T10360] ext4: Unknown parameter 'nouser_xattr'
[  668.122705][  T126] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  668.212822][ T5135] vhci_hcd: vhci_device speed not set
[  668.317834][ T5135] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  668.327598][  T126] usb 5-1: config 0 has no interfaces?
[  668.342226][  T126] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  668.382705][  T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.414169][  T126] usb 5-1: config 0 descriptor??
[  668.625675][  T126] usb 5-1: USB disconnect, device number 13
[  668.626901][T10356] usbip_core: unknown command
[  668.653942][T10356] vhci_hcd: unknown pdu 0
[  669.779171][ T5135] vhci_hcd: vhci_device speed not set
[  669.848731][T10356] usbip_core: unknown command
[  669.862674][ T5135] usb 41-1: device descriptor read/64, error -71
[  669.875076][ T4365] vhci_hcd: stop threads
[  669.880862][ T4365] vhci_hcd: release socket
[  669.899771][ T4365] vhci_hcd: disconnect device
[  669.937692][T10368] program syz.4.1439 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  670.057987][T10370] loop1: detected capacity change from 0 to 512
[  670.073172][ T5135] vhci_hcd: vhci_device speed not set
[  670.104661][T10370] EXT4-fs (loop1): Test dummy encryption mode enabled
[  670.111587][T10370] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  670.251346][T10370] EXT4-fs (loop1): 1 truncate cleaned up
[  670.272667][T10370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  670.653515][T10375] netlink: 'syz.1.1440': attribute type 1 has an invalid length.
[  670.661312][T10375] netlink: 'syz.1.1440': attribute type 2 has an invalid length.
[  670.904130][T10381] loop4: detected capacity change from 0 to 1764
[  671.472892][T10381] iso9660: Corrupted directory entry in block 2 of inode 1920
[  672.127439][    C0] vcan0: j1939_tp_rxtimer: 0xffff888054d23000: rx timeout, send abort
[  673.189275][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056e54400: rx timeout, send abort
[  673.197553][    C0] vcan0: j1939_tp_rxtimer: 0xffff888054d23000: abort rx timeout. Force session deactivation
[  673.506813][T10385] loop0: detected capacity change from 0 to 512
[  673.515480][T10385] EXT4-fs (loop0): Test dummy encryption mode enabled
[  673.522461][T10385] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  673.538608][    C0] vcan0: j1939_simple_recv: Received already invalidated message
[  673.547793][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  673.697563][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056e54400: abort rx timeout. Force session deactivation
[  673.701537][T10385] EXT4-fs (loop0): 1 truncate cleaned up
[  673.772812][T10385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  673.908580][T10395] loop3: detected capacity change from 0 to 512
[  673.974363][T10395] EXT4-fs: Ignoring removed nobh option
[  673.980046][T10395] ext4: Unknown parameter 'nouser_xattr'
[  676.162437][T10407] loop1: detected capacity change from 0 to 1764
[  676.219317][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  677.555424][T10413] iso9660: Corrupted directory entry in block 2 of inode 1920
[  678.000076][T10418] loop2: detected capacity change from 0 to 32768
[  678.014257][T10418] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  678.153621][ T4488] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  678.612822][T10425] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1449'.
[  678.641320][T10418] loop2: detected capacity change from 0 to 1024
[  678.649435][T10418] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  678.693018][T10418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  678.831354][T10426] CUSE: unknown device info ""
[  678.836862][T10426] CUSE: unknown device info "KÖ"
[  678.842666][T10426] CUSE: zero length info key specified
[  678.863913][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  682.089779][T10460] loop2: detected capacity change from 0 to 512
[  682.314130][T10460] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  682.353666][T10460] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  682.372392][T10468] loop3: detected capacity change from 0 to 512
[  682.479507][T10468] EXT4-fs (loop3): Test dummy encryption mode enabled
[  682.525595][T10460] 
[  682.528036][T10460] ======================================================
[  682.535142][T10460] WARNING: possible circular locking dependency detected
[  682.542316][T10460] syzkaller #0 Not tainted
[  682.543041][T10468] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  682.546723][T10460] ------------------------------------------------------
[  682.546732][T10460] syz.2.1458/10460 is trying to acquire lock:
[  682.569641][T10460] ffff8880551845e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  682.570294][T10475] binder: BINDER_SET_CONTEXT_MGR already set
[  682.578656][T10460] 
[  682.578656][T10460] but task is already holding lock:
[  682.578666][T10460] ffff888074b6f0e0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x9ae/0x12a0
[  682.578792][T10460] 
[  682.578792][T10460] which lock already depends on the new lock.
[  682.578792][T10460] 
[  682.578798][T10460] 
[  682.578798][T10460] the existing dependency chain (in reverse order) is:
[  682.578803][T10460] 
[  682.578803][T10460] -> #2 (&ei->i_data_sem/2){++++}-{3:3}:
[  682.578831][T10460]        down_read+0x42/0x2d0
[  682.587028][T10474] loop0: detected capacity change from 0 to 1764
[  682.592361][T10460]        ext4_map_blocks+0x338/0x1a90
[  682.646134][T10460]        ext4_getblk+0x1c5/0x720
[  682.651109][T10460]        ext4_bread+0x26/0x170
[  682.655873][T10460]        ext4_quota_write+0x237/0x580
[  682.661477][T10460]        get_free_dqblk+0x2dc/0x630
[  682.666859][T10460]        do_insert_tree+0x22b/0x1060
[  682.672167][T10460]        do_insert_tree+0x9f5/0x1060
[  682.677456][T10460]        do_insert_tree+0x9b8/0x1060
[  682.682743][T10460]        do_insert_tree+0x9b8/0x1060
[  682.688035][T10460]        qtree_write_dquot+0x49b/0x5d0
[  682.693493][T10460]        v2_write_dquot+0x108/0x190
[  682.698690][T10460]        dquot_acquire+0x2d5/0x520
[  682.703799][T10460]        ext4_acquire_dquot+0x2e3/0x4a0
[  682.709344][T10460]        dqget+0x713/0xbb0
[  682.713757][T10460]        dquot_transfer+0x375/0x7d0
[  682.718950][T10460]        ext4_setattr+0x94f/0x1bc0
[  682.724054][T10460]        notify_change+0xca0/0xf90
[  682.729239][T10460]        chown_common+0x489/0x640
[  682.734319][T10460]        ksys_fchown+0xe2/0x150
[  682.739165][T10460]        __x64_sys_fchown+0x76/0x80
[  682.744363][T10460]        do_syscall_64+0x4c/0xa0
[  682.749326][T10460]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  682.755786][T10460] 
[  682.755786][T10460] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  682.763861][T10460]        down_read+0x42/0x2d0
[  682.768530][T10460]        v2_read_dquot+0x4a/0x110
[  682.773549][T10460]        dquot_acquire+0x152/0x520
[  682.778652][T10460]        ext4_acquire_dquot+0x2e3/0x4a0
[  682.784193][T10460]        dqget+0x713/0xbb0
[  682.788601][T10460]        __dquot_initialize+0x3a9/0xd00
[  682.794139][T10460]        ext4_process_orphan+0x4c/0x2e0
[  682.799748][T10460]        ext4_orphan_cleanup+0xc32/0x1470
[  682.805476][T10460]        ext4_fill_super+0x6f0c/0x78f0
[  682.810934][T10460]        get_tree_bdev+0x3e6/0x610
[  682.816044][T10460]        vfs_get_tree+0x88/0x270
[  682.822200][T10460]        do_new_mount+0x247/0xa40
[  682.827319][T10460]        __se_sys_mount+0x2e3/0x3d0
[  682.832523][T10460]        do_syscall_64+0x4c/0xa0
[  682.837468][T10460]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  682.843972][T10460] 
[  682.843972][T10460] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  682.851612][T10460]        __lock_acquire+0x2d18/0x7c40
[  682.857670][T10460]        lock_acquire+0x1bb/0x4a0
[  682.862804][T10460]        __mutex_lock+0x12d/0xae0
[  682.867852][T10460]        dquot_commit+0x5a/0x410
[  682.872895][T10460]        ext4_write_dquot+0x1f0/0x360
[  682.878312][T10460]        mark_all_dquot_dirty+0xf9/0x400
[  682.883967][T10460]        __dquot_free_space+0x7f8/0xbc0
[  682.889517][T10460]        ext4_free_blocks+0x1be5/0x26a0
[  682.895065][T10460]        ext4_ext_remove_space+0x1e82/0x43d0
[  682.901117][T10460]        ext4_ext_truncate+0x213/0x370
[  682.906574][T10460]        ext4_truncate+0xa5b/0x12a0
[  682.911941][T10460]        ext4_setattr+0x120f/0x1bc0
[  682.917130][T10460]        notify_change+0xca0/0xf90
[  682.922237][T10460]        do_truncate+0x1ac/0x240
[  682.927169][T10460]        path_openat+0x2897/0x2f10
[  682.932278][T10460]        do_filp_open+0x1ee/0x420
[  682.937312][T10460]        do_sys_openat2+0x14b/0x4f0
[  682.942514][T10460]        __x64_sys_openat+0x135/0x160
[  682.947914][T10460]        do_syscall_64+0x4c/0xa0
[  682.952938][T10460]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  682.959355][T10460] 
[  682.959355][T10460] other info that might help us debug this:
[  682.959355][T10460] 
[  682.969597][T10460] Chain exists of:
[  682.969597][T10460]   &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2
[  682.969597][T10460] 
[  682.983250][T10460]  Possible unsafe locking scenario:
[  682.983250][T10460] 
[  682.990692][T10460]        CPU0                    CPU1
[  682.996047][T10460]        ----                    ----
[  683.001407][T10460]   lock(&ei->i_data_sem/2);
[  683.006006][T10460]                                lock(&s->s_dquot.dqio_sem);
[  683.013370][T10460]                                lock(&ei->i_data_sem/2);
[  683.020486][T10460]   lock(&dquot->dq_lock);
[  683.024906][T10460] 
[  683.024906][T10460]  *** DEADLOCK ***
[  683.024906][T10460] 
[  683.033040][T10460] 5 locks held by syz.2.1458/10460:
[  683.038313][T10460]  #0: ffff88802aa20460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  683.047460][T10460]  #1: ffff888074b6f258 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x198/0x240
[  683.057738][T10460]  #2: ffff888074b6f3f8 (mapping.invalidate_lock#2){++++}-{3:3}, at: ext4_setattr+0xfc9/0x1bc0
[  683.068122][T10460]  #3: ffff888074b6f0e0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x9ae/0x12a0
[  683.077885][T10460]  #4: ffffffff8cc75268 (dquot_srcu){....}-{0:0}, at: __dquot_free_space+0x172/0xbc0
[  683.087377][T10460] 
[  683.087377][T10460] stack backtrace:
[  683.093270][T10460] CPU: 1 PID: 10460 Comm: syz.2.1458 Not tainted syzkaller #0
[  683.100723][T10460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  683.110788][T10460] Call Trace:
[  683.114069][T10460]  <TASK>
[  683.116996][T10460]  dump_stack_lvl+0x188/0x24e
[  683.121679][T10460]  ? load_image+0x410/0x410
[  683.126210][T10460]  ? show_regs_print_info+0x12/0x12
[  683.131414][T10460]  ? print_circular_bug+0x12b/0x1a0
[  683.136618][T10460]  check_noncircular+0x296/0x330
[  683.141653][T10460]  ? add_chain_block+0x9b0/0x9b0
[  683.146591][T10460]  ? lockdep_lock+0xf1/0x1f0
[  683.151183][T10460]  ? mark_lock+0x94/0x320
[  683.155702][T10460]  ? _find_first_zero_bit+0xd2/0x100
[  683.161022][T10460]  __lock_acquire+0x2d18/0x7c40
[  683.165881][T10460]  ? check_noncircular+0x189/0x330
[  683.170995][T10460]  ? verify_lock_unused+0x140/0x140
[  683.176193][T10460]  ? add_chain_block+0x9b0/0x9b0
[  683.181132][T10460]  ? lockdep_lock+0xf1/0x1f0
[  683.185722][T10460]  ? lockdep_unlock+0x142/0x2e0
[  683.190580][T10460]  lock_acquire+0x1bb/0x4a0
[  683.195086][T10460]  ? dquot_commit+0x5a/0x410
[  683.199673][T10460]  ? __might_sleep+0xd0/0xd0
[  683.204331][T10460]  ? read_lock_is_recursive+0x10/0x10
[  683.209707][T10460]  __mutex_lock+0x12d/0xae0
[  683.214207][T10460]  ? dquot_commit+0x5a/0x410
[  683.218791][T10460]  ? __might_sleep+0xd0/0xd0
[  683.223380][T10460]  ? dquot_commit+0x5a/0x410
[  683.227967][T10460]  ? mutex_lock_nested+0x10/0x10
[  683.232901][T10460]  ? ext4_journal_check_start+0x17d/0x240
[  683.238615][T10460]  dquot_commit+0x5a/0x410
[  683.243028][T10460]  ext4_write_dquot+0x1f0/0x360
[  683.247886][T10460]  mark_all_dquot_dirty+0xf9/0x400
[  683.252996][T10460]  __dquot_free_space+0x7f8/0xbc0
[  683.258019][T10460]  ? __dquot_free_space+0x172/0xbc0
[  683.263214][T10460]  ? ext4_free_blocks+0x18d0/0x26a0
[  683.268419][T10460]  ext4_free_blocks+0x1be5/0x26a0
[  683.273449][T10460]  ? ext4_mb_discard_preallocations_should_retry+0x710/0x710
[  683.280911][T10460]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  683.286975][T10460]  ? ext4_inode_journal_mode+0x189/0x460
[  683.292693][T10460]  ? ext4_ext_remove_space+0x1d81/0x43d0
[  683.298320][T10460]  ext4_ext_remove_space+0x1e82/0x43d0
[  683.303774][T10460]  ? ext4_mark_iloc_dirty+0x4eb/0x1cb0
[  683.309273][T10460]  ? mark_buffer_dirty+0x2d8/0x7a0
[  683.314473][T10460]  ? ext4_da_release_space+0x133/0x5e0
[  683.319958][T10460]  ? ext4_ext_index_trans_blocks+0xf0/0xf0
[  683.325849][T10460]  ext4_ext_truncate+0x213/0x370
[  683.330795][T10460]  ext4_truncate+0xa5b/0x12a0
[  683.335469][T10460]  ? __ext4_mark_inode_dirty+0x760/0x760
[  683.341098][T10460]  ? unmap_mapping_range+0x91/0x100
[  683.346355][T10460]  ext4_setattr+0x120f/0x1bc0
[  683.351047][T10460]  ? ext4_write_inode+0x5e0/0x5e0
[  683.356066][T10460]  notify_change+0xca0/0xf90
[  683.360666][T10460]  do_truncate+0x1ac/0x240
[  683.365169][T10460]  ? put_page_bootmem+0x2b0/0x2b0
[  683.370192][T10460]  ? ima_bprm_check+0x200/0x200
[  683.375133][T10460]  ? bpf_lsm_path_truncate+0x5/0x10
[  683.380398][T10460]  path_openat+0x2897/0x2f10
[  683.384999][T10460]  ? do_filp_open+0x420/0x420
[  683.389697][T10460]  do_filp_open+0x1ee/0x420
[  683.394206][T10460]  ? vfs_tmpfile+0x470/0x470
[  683.398811][T10460]  ? _raw_spin_unlock+0x24/0x40
[  683.403662][T10460]  ? alloc_fd+0x590/0x640
[  683.407995][T10460]  do_sys_openat2+0x14b/0x4f0
[  683.412674][T10460]  ? do_sys_open+0xe0/0xe0
[  683.417098][T10460]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  683.423088][T10460]  ? lock_chain_count+0x20/0x20
[  683.427943][T10460]  __x64_sys_openat+0x135/0x160
[  683.432807][T10460]  do_syscall_64+0x4c/0xa0
[  683.437230][T10460]  ? clear_bhb_loop+0x60/0xb0
[  683.441908][T10460]  ? clear_bhb_loop+0x60/0xb0
[  683.446592][T10460]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  683.452501][T10460] RIP: 0033:0x7f807179e0d9
[  683.456917][T10460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  683.476611][T10460] RSP: 002b:00007f807264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  683.485024][T10460] RAX: ffffffffffffffda RBX: 00007f8071a25fa0 RCX: 00007f807179e0d9
[  683.492991][T10460] RDX: 0000000000183341 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  683.500966][T10460] RBP: 00007f8071835024 R08: 0000000000000000 R09: 0000000000000000
[  683.509020][T10460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  683.516994][T10460] R13: 00007f8071a26038 R14: 00007f8071a25fa0 R15: 00007ffc92a59958
[  683.524966][T10460]  </TASK>
[  683.534057][T10475] binder: 10471:10475 ioctl 4018620d 200000000040 returned -16
[  683.567562][T10474] ISO 9660 Extensions: Microsoft Joliet Level 3
[  683.587609][T10468] EXT4-fs (loop3): 1 truncate cleaned up
[  683.593668][T10474] ISOFS: changing to secondary root
[  683.602872][T10468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  683.691475][T10474] iso9660: Corrupted directory entry in block 2 of inode 1920
[  683.723895][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  683.764409][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  685.744471][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  685.751049][ T1280] ieee802154 phy1 wpan1: encryption failed: -22