last executing test programs:

22.177386401s ago: executing program 2 (id=494):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0)

21.154006946s ago: executing program 3 (id=499):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x19})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

18.496418055s ago: executing program 3 (id=504):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = socket$netlink(0x10, 0x3, 0x14)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12)

18.38186091s ago: executing program 2 (id=505):
syz_mount_image$msdos(&(0x7f0000001200), &(0x7f0000001280)='./file0\x00', 0x808804, &(0x7f0000001340)=ANY=[@ANYBLOB="7379735f0f00000000000000652c646f733178666c6f7070792c646f74732c646f74732c6e6f646f74732c00"], 0x2, 0x11d4, &(0x7f0000000000)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000240))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c9c03, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000300))

15.002251473s ago: executing program 2 (id=514):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
geteuid()
msgctl$IPC_SET(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000200))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80002000, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}, 0x0, 0x7})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7}, 0x28)

14.105406484s ago: executing program 3 (id=516):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2c2, 0xca)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0)

11.741890724s ago: executing program 3 (id=519):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
poll(0x0, 0x0, 0x9)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, r1)
setpgid(0x0, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x810c9365, 0x0)

11.081724776s ago: executing program 0 (id=522):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
unshare(0x4000480)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

10.95061933s ago: executing program 0 (id=524):
syz_mount_image$msdos(&(0x7f0000001200), &(0x7f0000001280)='./file0\x00', 0x808804, &(0x7f0000001340)=ANY=[@ANYBLOB="7379735f0f00000000000000652c646f733178666c6f7070792c646f74732c646f74732c6e6f646f74732c00"], 0x2, 0x11d4, &(0x7f0000000000)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000240))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c9c03, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000300))

10.928529062s ago: executing program 3 (id=525):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sync_file_range(r0, 0x6, 0x0, 0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

7.944877422s ago: executing program 0 (id=528):
r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
socket$packet(0x11, 0x3, 0x300)
openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1})
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ftruncate(0xffffffffffffffff, 0xffffffffffffffff)
mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x3, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000))
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020)

7.759327909s ago: executing program 4 (id=530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2c2, 0xca)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0)

6.768096942s ago: executing program 4 (id=532):
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4)

6.139666173s ago: executing program 3 (id=534):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x25dfdbfe, [@sadb_key={0x2, 0x9, 0x10, 0x0, '\x00\x00'}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x100, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x10)

6.089689705s ago: executing program 0 (id=535):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaf9)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x5, 0x8, 0xfffffffffffffffb})

5.854826773s ago: executing program 32 (id=534):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x25dfdbfe, [@sadb_key={0x2, 0x9, 0x10, 0x0, '\x00\x00'}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x100, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x10)

5.813779204s ago: executing program 0 (id=537):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x521, &(0x7f0000000100)={0x0, 0x3cb1, 0x10, 0x3, 0x1a1})
open_tree(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0x0)
umount2(&(0x7f00000000c0)='./cgroup\x00', 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
signalfd(r0, &(0x7f0000000640), 0x8)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0)
sendmmsg$inet(r3, 0x0, 0x0, 0x0)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)

5.813533304s ago: executing program 2 (id=538):
syz_mount_image$msdos(&(0x7f0000001200), &(0x7f0000001280)='./file0\x00', 0x808804, &(0x7f0000001340)=ANY=[@ANYBLOB="7379735f0f00000000000000652c646f733178666c6f7070792c646f74732c646f74732c6e6f646f74732c00"], 0x2, 0x11d4, &(0x7f0000000000)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000240))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c9c03, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000300))

5.312277881s ago: executing program 1 (id=540):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter6\x00')
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2)

5.266125983s ago: executing program 4 (id=541):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x1, 0x4478, &(0x7f00000044c0)="$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")

5.222306794s ago: executing program 1 (id=542):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x2c2, 0xca)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0)

5.04926709s ago: executing program 2 (id=543):
sigaltstack(&(0x7f0000000000)={0x0, 0x80000000}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x24006041}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fffffdf, 0x400000001000088}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x1c)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))

3.996104756s ago: executing program 1 (id=544):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sync_file_range(r0, 0x6, 0x0, 0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

2.830470645s ago: executing program 0 (id=545):
r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
socket$packet(0x11, 0x3, 0x300)
openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1})
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ftruncate(0xffffffffffffffff, 0xffffffffffffffff)
mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x3, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000))
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020)

2.072536801s ago: executing program 1 (id=546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000004d00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004d40)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x40)

905.69518ms ago: executing program 2 (id=547):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfffd], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x9c, 0x2}}]}, 0x90}}, 0x20000000)

834.310382ms ago: executing program 4 (id=548):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f0000000140))

712.328546ms ago: executing program 1 (id=549):
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x1b, 0x0, @none, 0x28, 0x8, 0x6c, 0x2, 0x8, 0xa, 0xf, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}]}}}}, 0x1d)

546.048002ms ago: executing program 1 (id=550):
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil)
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2000, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x412, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
r2 = syz_open_dev$vim2m(0x0, 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff)

225.250863ms ago: executing program 4 (id=551):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0xd8, 0xffff8880b870e000)

0s ago: executing program 4 (id=552):
syz_mount_image$msdos(&(0x7f0000001200), &(0x7f0000001280)='./file0\x00', 0x808804, &(0x7f0000001340)=ANY=[@ANYBLOB="7379735f0f00000000000000652c646f733178666c6f7070792c646f74732c646f74732c6e6f646f74732c00"], 0x2, 0x11d4, &(0x7f0000000000)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000240))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c9c03, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000300))

kernel console output (not intermixed with test programs):

dge_slave_1) entered forwarding state
[   64.806334][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.814972][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   64.824092][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   64.832788][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.841163][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.850301][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.858963][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.868001][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   64.875855][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.884542][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.893553][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.918268][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   64.937302][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.946477][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.957218][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   64.965398][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   64.974896][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   64.983731][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   64.993559][ T4190] device veth0_macvtap entered promiscuous mode
[   65.032988][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.049395][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.063587][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.072741][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.084877][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.093473][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.103285][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.112041][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.121560][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.130031][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.138757][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.147672][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.160778][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.173047][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.185491][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.200455][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.239013][ T4190] device veth1_macvtap entered promiscuous mode
[   65.259320][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.271446][ T4194] device veth0_vlan entered promiscuous mode
[   65.281511][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.291475][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.300323][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.308811][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.325266][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.337139][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.350072][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.361523][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.377225][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.386057][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.397750][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.415037][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.422218][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   65.432631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   65.447682][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.465549][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.476462][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.500035][ T4194] device veth1_vlan entered promiscuous mode
[   65.514154][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.525597][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.537516][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.546239][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.555670][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.565178][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.598859][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.605880][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.615288][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.673599][ T4194] device veth0_macvtap entered promiscuous mode
[   65.688103][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.704924][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.753363][ T4194] device veth1_macvtap entered promiscuous mode
[   65.778570][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.787381][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   65.795290][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.804171][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.851843][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.861150][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.870004][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.880738][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.890567][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.898751][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.909700][ T4193] device veth0_vlan entered promiscuous mode
[   65.924865][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.933262][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.933370][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.933383][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.933394][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.934626][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.956694][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.002746][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.018284][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.018895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.039297][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.048072][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.056947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.065153][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.073834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.085303][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.094194][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.115553][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.127072][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.137479][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.147997][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.164979][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.173948][ T4192] device veth0_vlan entered promiscuous mode
[   66.187914][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.188335][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.200788][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.211926][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.216526][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.228603][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.238060][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.246935][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.260924][ T4193] device veth1_vlan entered promiscuous mode
[   66.274245][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.278217][ T4192] device veth1_vlan entered promiscuous mode
[   66.288610][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.295038][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.304063][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.367932][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.392320][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.432225][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.445490][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.462979][ T4192] device veth0_macvtap entered promiscuous mode
[   66.494380][ T4192] device veth1_macvtap entered promiscuous mode
[   66.507914][ T4193] device veth0_macvtap entered promiscuous mode
[   66.570435][ T4193] device veth1_macvtap entered promiscuous mode
[   66.612989][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.643995][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.672168][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.696476][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.707058][ T4269] loop3: detected capacity change from 0 to 32768
[   66.711956][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.727883][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.739560][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.757192][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.765071][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.796487][ T4269] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4269)
[   66.804104][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.823219][ T4236] Bluetooth: hci4: command 0x040f tx timeout
[   66.829402][ T4236] Bluetooth: hci2: command 0x040f tx timeout
[   66.837760][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.837853][ T4236] Bluetooth: hci3: command 0x040f tx timeout
[   66.852171][ T4236] Bluetooth: hci0: command 0x040f tx timeout
[   66.859528][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.868840][ T4236] Bluetooth: hci1: command 0x040f tx timeout
[   66.892345][ T4269] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   66.901336][ T4269] BTRFS info (device loop3): enabling disk space caching
[   66.908477][ T4269] BTRFS info (device loop3): force clearing of disk cache
[   66.915838][ T4269] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   66.925472][ T4269] BTRFS info (device loop3): use zstd compression, level 3
[   66.932737][ T4269] BTRFS info (device loop3): disk space caching is enabled
[   66.939999][ T4269] BTRFS info (device loop3): has skinny extents
[   66.949536][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.959240][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.968127][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.982847][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.992937][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.007636][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.017614][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.028766][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.041383][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.052494][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.079761][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.113474][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.141346][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.179769][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.188944][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.210376][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.210432][ T4269] BTRFS info (device loop3): enabling ssd optimizations
[   67.229970][ T4269] BTRFS info (device loop3): clearing free space tree
[   67.237229][ T4269] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   67.237834][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.247096][ T4269] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   67.325488][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.358324][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.370403][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.387910][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.398545][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.409467][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.434296][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.486528][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.530602][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.546154][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.557104][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.567065][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.575794][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.575929][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.600286][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.619884][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.899872][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.944953][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.992527][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.066019][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.149202][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.179445][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.199381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.217256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.226233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.287779][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.302861][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.311931][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.328375][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.482456][ T4299] loop2: detected capacity change from 0 to 32768
[   68.564494][ T4305] ODEBUG: Out of memory. ODEBUG disabled
[   68.615183][ T4299] XFS (loop2): Mounting V5 Filesystem
[   68.747436][ T4299] XFS (loop2): Ending clean mount
[   68.797270][ T4299] XFS (loop2): Quotacheck needed: Please wait.
[   68.852965][ T4299] XFS (loop2): Quotacheck: Done.
[   68.886139][ T4236] Bluetooth: hci1: command 0x0419 tx timeout
[   68.906864][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.915852][ T4236] Bluetooth: hci0: command 0x0419 tx timeout
[   68.943737][ T4236] Bluetooth: hci3: command 0x0419 tx timeout
[   68.950617][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.014302][ T4236] Bluetooth: hci2: command 0x0419 tx timeout
[   69.062429][ T4236] Bluetooth: hci4: command 0x0419 tx timeout
[   69.078010][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.497181][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.505180][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.720887][   T26] audit: type=1800 audit(1779717624.784:2): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0
[   69.832098][ T4330] loop0: detected capacity change from 0 to 2048
[   69.896418][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.927783][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.941908][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.025940][ T4190] XFS (loop2): Unmounting Filesystem
[   70.049086][ T4330] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   70.062918][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.612792][   T26] audit: type=1800 audit(1779717625.684:3): pid=4330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name="file1" dev="loop0" ino=1367 res=0 errno=0
[   70.863951][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.901132][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.456629][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   71.507200][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[   71.513779][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   71.515431][ T4339] loop3: detected capacity change from 0 to 512
[   71.537109][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.660276][ T4336] loop4: detected capacity change from 0 to 512
[   71.752746][ T4336] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.5: iget: bad i_size value: 38620345925642
[   71.763071][ T4339] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   71.768772][ T4336] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.5: couldn't read orphan inode 15 (err -117)
[   71.776550][ T4339] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.788495][ T4336] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   72.166622][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[   72.176651][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[   72.186622][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   72.196621][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   72.206621][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   72.216620][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   72.226620][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   72.236618][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   72.246623][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   72.483340][ T1288] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:5: bg 0: block 5: invalid block bitmap
[   72.697058][ T4301] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.035439][ T1288] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   73.095047][ T1288] EXT4-fs (loop4): This should not happen!! Data will be lost
[   73.095047][ T1288] 
[   73.146931][ T4301] usb 2-1: config 0 interface 0 has no altsetting 0
[   73.153893][ T4301] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[   73.173268][ T1288] EXT4-fs (loop4): Total free blocks count 0
[   73.219670][ T1288] EXT4-fs (loop4): Free/Dirty block details
[   73.238632][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.239793][ T1288] EXT4-fs (loop4): free_blocks=0
[   73.262131][ T1288] EXT4-fs (loop4): dirty_blocks=16000
[   73.267676][ T1288] EXT4-fs (loop4): Block reservation details
[   73.285367][ T4301] usb 2-1: config 0 descriptor??
[   74.052986][ T1288] EXT4-fs (loop4): i_reserved_data_blocks=16000
[   74.149873][ T4352] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   74.179298][ T4352] EXT4-fs (loop4): This should not happen!! Data will be lost
[   74.179298][ T4352] 
[   74.193533][ T4362] loop2: detected capacity change from 0 to 256
[   74.227268][ T4362] exfat: Deprecated parameter 'utf8'
[   74.266271][ T4362] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[   74.283356][ T4360] loop0: detected capacity change from 0 to 8192
[   74.946765][ T4301] video4linux radio48: keene_cmd_set failed (-71)
[   74.953433][ T4301] radio-keene 2-1:0.0: V4L2 device registered as radio48
[   75.198322][ T4301] usb 2-1: USB disconnect, device number 2
[   75.428313][ T4376] loop3: detected capacity change from 0 to 32768
[   75.449499][ T4380] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   75.507447][ T4376] XFS (loop3): Mounting V5 Filesystem
[   75.578760][ T4389] Zero length message leads to an empty skb
[   75.766624][ T4376] XFS (loop3): Ending clean mount
[   76.009367][ T4200] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   77.297500][ T4200] usb 3-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config
[   77.464642][ T4200] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   77.475934][ T4200] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   77.597010][ T4200] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   78.061691][ T4200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   78.131033][ T4200] usb 3-1: SerialNumber: syz
[   78.239101][ T4399] loop1: detected capacity change from 0 to 32768
[   78.260187][ T4200] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[   78.263471][ T4191] XFS (loop3): Unmounting Filesystem
[   78.275645][ T4200] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[   78.283142][ T4399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.24 (4399)
[   78.283834][ T4200] cdc_acm: probe of 3-1:1.0 failed with error -22
[   78.354738][ T4399] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   78.363848][ T4399] BTRFS info (device loop1): turning on sync discard
[   78.370693][ T4399] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   78.380243][ T4399] BTRFS info (device loop1): use zstd compression, level 3
[   78.387621][ T4399] BTRFS info (device loop1): turning on async discard
[   78.395874][ T4399] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   78.411588][ T4399] BTRFS info (device loop1): trying to use backup root at mount time
[   78.419847][ T4399] BTRFS info (device loop1): enabling auto defrag
[   78.426401][ T4399] BTRFS info (device loop1): using free space tree
[   78.433748][ T4399] BTRFS info (device loop1): has skinny extents
[   78.516887][ T4200] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   78.592174][ T4321] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[   78.643016][ T4399] BTRFS warning (device loop1): failed to read root (objectid=2): -5
[   78.652913][ T4325] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[   78.675692][ T4399] BTRFS warning (device loop1): couldn't read tree root
[   78.683647][ T4399] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7
[   78.693729][ T4399] BTRFS warning (device loop1): couldn't read tree root
[   78.736003][ T4399] BTRFS info (device loop1): enabling ssd optimizations
[   78.743769][ T4399] BTRFS info (device loop1): clearing free space tree
[   78.750753][ T4399] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   78.760489][ T4399] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   78.781287][ T4399] BTRFS info (device loop1): creating free space tree
[   78.789420][ T4399] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   78.799215][ T4399] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   78.836729][ T4200] usb 5-1: Using ep0 maxpacket: 8
[   78.968244][ T4430] loop3: detected capacity change from 0 to 1024
[   79.008927][ T4200] usb 5-1: unable to get BOS descriptor or descriptor too short
[   79.116928][ T4200] usb 5-1: config 4 interface 0 has no altsetting 0
[   79.264971][ T4410] loop0: detected capacity change from 0 to 32768
[   79.300080][ T4446] xt_cluster: you have exceeded the maximum number of cluster nodes (8200 > 32)
[   79.322991][ T4410] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.27 (4410)
[   79.406958][ T4200] usb 5-1: string descriptor 0 read error: -22
[   79.413784][ T4200] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   79.428133][ T4410] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   79.457102][ T4200] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[   79.472025][ T4410] BTRFS info (device loop0): turning on sync discard
[   79.528951][ T4410] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   79.559471][ T4200] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   79.597563][ T4200] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   79.607950][ T4410] BTRFS info (device loop0): use zstd compression, level 3
[   79.615177][ T4410] BTRFS info (device loop0): turning on async discard
[   79.631085][ T4300] usb 3-1: USB disconnect, device number 2
[   79.639494][ T4200] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   79.648174][ T4410] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   79.666693][ T4200] usb 5-1: media controller created
[   79.677640][ T4410] BTRFS info (device loop0): trying to use backup root at mount time
[   79.707555][ T4410] BTRFS info (device loop0): enabling auto defrag
[   79.714050][ T4410] BTRFS info (device loop0): using free space tree
[   79.728121][ T4200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   79.766495][ T4442] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   79.772983][ T4410] BTRFS info (device loop0): has skinny extents
[   79.800656][ T4451] loop3: detected capacity change from 0 to 8192
[   79.809326][ T4401] usb 5-1: dvb_usb_au6610: wlen=0, aborting
[   79.875664][ T4200] zl10353_read_register: readreg error (reg=127, ret==0)
[   81.337107][ T4442] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   81.403851][ T4442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.516592][    C1] sched: RT throttling activated
[   81.524363][ T4442] usb 2-1: Product: syz
[   81.559339][ T4442] usb 2-1: Manufacturer: syz
[   81.577587][ T4442] usb 2-1: SerialNumber: syz
[   81.611139][ T4410] BTRFS error (device loop0): open_ctree failed: -12
[   81.652248][ T4180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4180)
[   81.668657][ T4476] tipc: Started in network mode
[   81.674085][ T4476] tipc: Node identity f6aeeb22930b, cluster identity 4711
[   81.683875][ T4476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.700897][ T4476] device syzkaller0 entered promiscuous mode
[   81.776847][ T4200] usb 5-1: USB disconnect, device number 2
[   82.008240][ T4481] tipc: Resetting bearer <eth:syzkaller0>
[   82.100434][ T4475] tipc: Resetting bearer <eth:syzkaller0>
[   82.174680][ T4475] tipc: Disabling bearer <eth:syzkaller0>
[   83.462728][ T4525] loop3: detected capacity change from 0 to 2048
[   83.863546][ T4540] tmpfs: Bad value for 'mpol'
[   83.944699][ T4546] loop1: detected capacity change from 0 to 2048
[   83.983199][ T4546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.076938][ T4442] rtl8150 2-1:1.0: couldn't reset the device
[   85.108799][ T4442] rtl8150: probe of 2-1:1.0 failed with error -5
[   85.190431][ T4442] usb 2-1: USB disconnect, device number 3
[   85.626317][ T4556] loop4: detected capacity change from 0 to 1024
[   85.862425][ T4557] loop0: detected capacity change from 0 to 1024
[   85.945777][ T4553] loop3: detected capacity change from 0 to 8192
[   86.721336][ T1347] cfg80211: failed to load regulatory.db
[   87.955175][   T26] audit: type=1107 audit(1779717643.024:4): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''þ2’ˆ"øO*þújñ¡sÜÚ'
[   88.989434][ T4580] loop2: detected capacity change from 0 to 32768
[   89.061336][ T4580] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.67 (4580)
[   89.592609][ T4580] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   89.599019][ T4585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.69'.
[   89.601586][ T4580] BTRFS info (device loop2): force clearing of disk cache
[   89.618248][ T4580] BTRFS info (device loop2): turning on sync discard
[   89.624961][ T4580] BTRFS info (device loop2): turning off barriers
[   89.631473][ T4580] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[   89.640795][ T4580] BTRFS info (device loop2): use lzo compression, level 0
[   89.649016][ T4580] BTRFS info (device loop2): enabling ssd optimizations
[   89.656062][ T4580] BTRFS info (device loop2): using spread ssd allocation scheme
[   89.663789][ T4580] BTRFS info (device loop2): not using ssd optimizations
[   89.670907][ T4580] BTRFS info (device loop2): not using spread ssd allocation scheme
[   89.678960][ T4580] BTRFS info (device loop2): using free space tree
[   89.685583][ T4580] BTRFS info (device loop2): has skinny extents
[   90.257389][ T4600] loop0: detected capacity change from 0 to 4096
[   90.277845][ T4604] loop1: detected capacity change from 0 to 32768
[   90.307064][ T4601] syz.4.75 (4601) used greatest stack depth: 18128 bytes left
[   90.349742][ T4604] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.76 (4604)
[   90.423221][  T156] BTRFS warning (device loop2): checksum verify failed on 5267456 wanted 0xb8512a1d2916df35de1eb979e5409d57680a9623aa14e80f6c4e3536403d44d6 found 0xd4d00f53c4415198ba9df518891a47ab2a0e3a6d05c7721dcfa0aec12a8e5103 level 0
[   90.519895][ T4580] BTRFS warning (device loop2): failed to read fs tree: -5
[   90.551322][ T4621] loop3: detected capacity change from 0 to 2048
[   90.565456][ T4580] BTRFS error (device loop2): open_ctree failed: -5
[   90.609218][ T4625] input: syz1 as /devices/virtual/input/input6
[   90.648524][   T26] audit: type=1326 audit(1779717645.724:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.80" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f4dcbe59 code=0x7ffc0000
[   90.739547][   T26] audit: type=1326 audit(1779717645.724:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.80" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f4dcbe59 code=0x7ffc0000
[   90.761971][ T4479] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4479)
[   90.765170][ T4621] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,lazytime,errors=remount-ro,mb_optimize_scan=0x0000000000000001,. Quota mode: none.
[   90.812469][ T4194] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[   90.845876][ T4621] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   90.886452][ T4194] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   90.927516][   T26] audit: type=1326 audit(1779717645.764:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.80" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98f4dcbe59 code=0x7ffc0000
[   90.938768][ T4621] EXT4-fs (loop3): Remounting filesystem read-only
[   91.169170][ T4641] binder: 4637:4641 ioctl c0306201 0 returned -14
[   91.214747][   T26] audit: type=1326 audit(1779717645.764:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.80" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f4dcbe59 code=0x7ffc0000
[   91.282903][ T4641] binder: 4637:4641 ioctl 40286608 200000000140 returned -22
[   91.828906][   T26] audit: type=1326 audit(1779717645.764:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.80" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f4dcbe59 code=0x7ffc0000
[   91.869444][ T4646] loop1: detected capacity change from 0 to 8192
[   91.953959][   T26] audit: type=1326 audit(1779717645.784:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.80" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f98f4dcbe59 code=0x7ffc0000
[   91.982162][   T26] audit: type=1326 audit(1779717645.784:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.80" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f4dcbe59 code=0x7ffc0000
[   92.006150][   T26] audit: type=1326 audit(1779717645.784:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.80" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f4dcbe59 code=0x7ffc0000
[   92.031038][   T26] audit: type=1326 audit(1779717645.784:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.4.80" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98f4dcbe59 code=0x7ffc0000
[   92.276298][ T4658] loop2: detected capacity change from 0 to 1024
[   94.144590][ T4658] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   94.187712][   T26] kauditd_printk_skb: 13 callbacks suppressed
[   94.187724][   T26] audit: type=1800 audit(1779717649.264:27): pid=4658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.89" name="file1" dev="loop2" ino=15 res=0 errno=0
[   94.506831][ T4484] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   94.896828][ T4484] usb 1-1: Using ep0 maxpacket: 16
[   95.255798][ T4690] rdma_rxe: rxe creation allowed on top of a real device only
[   95.336974][ T4484] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[   95.356693][ T4484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.437905][ T4689] loop1: detected capacity change from 0 to 40427
[   95.447386][ T4484] usb 1-1: Product: syz
[   95.451582][ T4484] usb 1-1: Manufacturer: syz
[   95.481231][ T4695] loop4: detected capacity change from 0 to 128
[   95.496904][ T4689] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value
[   95.501670][ T4484] usb 1-1: SerialNumber: syz
[   95.588330][ T4484] usb 1-1: config 0 descriptor??
[   95.618367][ T4695] =======================================================
[   95.618367][ T4695] WARNING: The mand mount option has been deprecated and
[   95.618367][ T4695]          and is ignored by this kernel. Remove the mand
[   95.618367][ T4695]          option from the mount to silence this warning.
[   95.618367][ T4695] =======================================================
[   95.686060][ T4484] visor 1-1:0.0: Sony Clie 3.5 converter detected
[   95.700543][ T4695] EXT4-fs (loop4): Test dummy encryption mode enabled
[   95.749543][ T4701] netlink: 'syz.2.102': attribute type 22 has an invalid length.
[   96.005673][ T4695] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   96.434446][ T4695] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   96.434625][ T4484] usb 1-1: clie_3_5_startup: get interface number bad return length: 0
[   97.588013][ T4714] sctp: failed to load transform for md5: -2
[   98.676168][ T4484] visor: probe of 1-1:0.0 failed with error -5
[   98.694694][ T4484] usb 1-1: USB disconnect, device number 2
[   99.523438][ T4737] loop1: detected capacity change from 0 to 131072
[   99.710811][ T4737] F2FS-fs (loop1): invalid crc value
[  100.133633][ T4737] F2FS-fs (loop1): Found nat_bits in checkpoint
[  100.177640][ T4737] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  100.202116][ T4737] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  100.427944][ T4775] device syzkaller0 entered promiscuous mode
[  101.941299][ T4792] loop4: detected capacity change from 0 to 4096
[  102.937379][ T4792] ntfs3: Unknown parameter 'windows_names'
[  102.962469][ T4807] loop0: detected capacity change from 0 to 1024
[  103.065885][ T4792] loop4: detected capacity change from 0 to 512
[  103.110787][ T4792] EXT4-fs (loop4): Ignoring removed nobh option
[  103.131577][ T4792] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  103.166737][ T4792] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  103.261512][ T4807] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  103.288247][ T4792] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  103.387320][ T4807] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.398863][ T4792] EXT4-fs (loop4): 1 truncate cleaned up
[  103.404526][ T4792] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  103.426742][    C0] vkms_vblank_simulate: vblank timer overrun
[  103.634827][ T4821] loop3: detected capacity change from 0 to 256
[  103.722073][ T4819] loop1: detected capacity change from 0 to 40427
[  103.771284][ T4819] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  103.779438][ T4819] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  103.848943][ T4819] F2FS-fs (loop1): Found nat_bits in checkpoint
[  103.893132][ T4819] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  103.896478][ T4828] loop4: detected capacity change from 0 to 512
[  103.900257][ T4819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.973144][ T4819] attempt to access beyond end of device
[  103.973144][ T4819] loop1: rw=2049, want=77960, limit=40427
[  103.988255][ T4819] attempt to access beyond end of device
[  103.988255][ T4819] loop1: rw=2049, want=40968, limit=40427
[  104.060227][ T4817] loop2: detected capacity change from 0 to 32768
[  104.133744][ T4828] EXT4-fs (loop4): Ignoring removed nobh option
[  104.140343][ T4817] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.135 (4817)
[  104.162821][ T4828] EXT4-fs (loop4): Ignoring removed orlov option
[  104.234443][ T4817] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  104.266804][ T4817] BTRFS info (device loop2): turning on async discard
[  104.267043][ T4828] EXT4-fs error (device loop4): __ext4_iget:4919: inode #11: block 1: comm syz.4.137: invalid block
[  104.283900][ T4817] BTRFS info (device loop2): metadata ratio 0
[  104.307033][ T4828] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.137: couldn't read orphan inode 11 (err -117)
[  104.370283][ T4828] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000000,nobh,max_dir_size_kb=0x0000000000000008,debug_want_extra_isize=0x0000000000000080,nogrpid,sysvgroups,orlov,bsdgroups,noauto_da_alloc,,errors=continue. Quota mode: none.
[  104.944073][ T1347] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.960538][ T4817] BTRFS info (device loop2): setting nodatasum
[  105.030298][ T4817] BTRFS info (device loop2): using free space tree
[  105.105644][ T4817] BTRFS info (device loop2): has skinny extents
[  105.656854][ T1347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.686994][ T1347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.705112][ T1347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  105.718721][ T1347] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  105.727859][ T1347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.736068][ T4817] BTRFS info (device loop2): enabling ssd optimizations
[  105.758152][ T1347] usb 4-1: config 0 descriptor??
[  106.241913][ T1347] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  106.323903][ T1347] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  106.472533][ T4867] loop2: detected capacity change from 0 to 8192
[  107.526997][ T4832] usb 4-1: string descriptor 0 read error: -71
[  107.648569][   T26] audit: type=1326 audit(1779717662.694:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.4.149" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98f4dcbe59 code=0x0
[  107.680843][ T4301] usb 4-1: reset high-speed USB device number 2 using dummy_hcd
[  107.691164][ T4890] loop0: detected capacity change from 0 to 32768
[  107.735598][ T4897] tmpfs: Unknown parameter 'usrquota'
[  107.751547][ T4890] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.147 (4890)
[  107.872311][ T4890] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  107.881192][ T4890] BTRFS info (device loop0): enabling disk space caching
[  107.888388][ T4890] BTRFS info (device loop0): force clearing of disk cache
[  107.895529][ T4890] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  107.904960][ T4890] BTRFS info (device loop0): use zstd compression, level 3
[  107.912287][ T4890] BTRFS info (device loop0): disk space caching is enabled
[  107.919662][ T4890] BTRFS info (device loop0): has skinny extents
[  108.758374][ T4903] loop3: detected capacity change from 0 to 32768
[  108.810418][ T4921] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  108.838405][ T4903] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  108.846991][ T4903] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  108.905363][ T4903] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  108.919161][ T4484] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  108.926492][ T4484] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  108.955939][ T4890] BTRFS info (device loop0): enabling ssd optimizations
[  108.965838][ T4890] BTRFS info (device loop0): clearing free space tree
[  108.973709][ T4890] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  108.983484][ T4890] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  109.112482][ T4484] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 185ms
[  109.133352][ T4484] gfs2: fsid=syz:syz.0: jid=0: Done
[  109.184750][ T4903] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  109.252808][ T4489] usb 4-1: USB disconnect, device number 2
[  110.569145][ T4489] tipc: Node number set to 1705372450
[  110.838444][ T4952] loop4: detected capacity change from 0 to 32768
[  110.886726][ T4952] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.164 (4952)
[  110.910103][ T4952] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  110.919222][ T4952] BTRFS info (device loop4): using free space tree
[  110.925712][ T4952] BTRFS info (device loop4): has skinny extents
[  110.999890][ T4237] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  111.029560][ T4959] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8
[  111.246874][ T4237] usb 1-1: Using ep0 maxpacket: 16
[  111.255735][ T4952] BTRFS info (device loop4): enabling ssd optimizations
[  111.449372][ T4237] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.470237][ T4237] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.484571][ T4237] usb 1-1: config 0 interface 0 has no altsetting 0
[  111.492622][ T4237] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  111.520132][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.687176][ T4986] loop2: detected capacity change from 0 to 32768
[  112.419105][ T4986] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.170 (4986)
[  112.476933][ T4489] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  112.478036][ T4237] usb 1-1: config 0 descriptor??
[  112.520107][ T4986] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  112.528926][ T4986] BTRFS info (device loop2): enabling disk space caching
[  112.535967][ T4986] BTRFS info (device loop2): force clearing of disk cache
[  112.543169][ T4986] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  112.552765][ T4986] BTRFS info (device loop2): use zstd compression, level 3
[  112.560376][ T4986] BTRFS info (device loop2): disk space caching is enabled
[  112.567716][ T4986] BTRFS info (device loop2): has skinny extents
[  113.046779][ T4986] BTRFS info (device loop2): enabling ssd optimizations
[  113.068110][ T4986] BTRFS info (device loop2): clearing free space tree
[  113.074956][ T4986] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  113.084775][ T4986] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  113.103079][ T4237] hid (null): report_id 0 is invalid
[  113.197396][ T4489] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  113.223638][ T4489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.259511][ T4489] usb 4-1: Product: syz
[  113.279593][ T4489] usb 4-1: Manufacturer: syz
[  113.293887][ T4489] usb 4-1: SerialNumber: syz
[  113.351677][ T4483] usb 1-1: USB disconnect, device number 3
[  113.886941][ T4489] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  114.005031][ T5019] loop0: detected capacity change from 0 to 128
[  115.166882][ T5019] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  115.285484][ T5019] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  115.423589][ T4489] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71
[  115.435297][ T4489] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  115.522351][ T4489] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  115.536391][ T4489] lan78xx: probe of 4-1:1.0 failed with error -71
[  115.654233][ T4489] usb 4-1: USB disconnect, device number 3
[  116.864967][ T5054] loop3: detected capacity change from 0 to 32768
[  117.066886][ T4234] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  117.077791][ T5054] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.184 (5054)
[  117.157959][ T5054] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  117.168032][ T5054] BTRFS info (device loop3): enabling disk space caching
[  117.175187][ T5054] BTRFS info (device loop3): force clearing of disk cache
[  117.182409][ T5054] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  117.191827][ T5054] BTRFS info (device loop3): use zstd compression, level 3
[  117.199113][ T5054] BTRFS info (device loop3): disk space caching is enabled
[  117.206316][ T5054] BTRFS info (device loop3): has skinny extents
[  117.353526][ T5063] loop0: detected capacity change from 0 to 8192
[  117.450630][ T5077] loop4: detected capacity change from 0 to 764
[  117.471987][ T5054] BTRFS info (device loop3): enabling ssd optimizations
[  117.480311][ T5054] BTRFS info (device loop3): clearing free space tree
[  117.487349][ T5054] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  117.497158][ T5054] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  118.686872][ T4234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.776719][ T4234] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  119.816494][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.868335][ T4234] usb 3-1: Product: syz
[  119.895692][ T4234] usb 3-1: Manufacturer: syz
[  119.942803][ T4234] usb 3-1: config 0 descriptor??
[  119.986844][ T4234] usb 3-1: can't set config #0, error -71
[  120.003174][ T5090] loop2: detected capacity change from 0 to 32768
[  120.052488][ T4234] usb 3-1: USB disconnect, device number 3
[  120.109322][ T5090] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.188 (5090)
[  120.126058][ T5090] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  120.135327][ T5090] BTRFS info (device loop2): turning on sync discard
[  120.142078][ T5090] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  120.151579][ T5090] BTRFS info (device loop2): use zstd compression, level 3
[  120.159054][ T5090] BTRFS info (device loop2): turning on async discard
[  120.165839][ T5090] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  120.177022][ T5090] BTRFS info (device loop2): trying to use backup root at mount time
[  120.185188][ T5090] BTRFS info (device loop2): enabling auto defrag
[  120.191783][ T5090] BTRFS info (device loop2): using free space tree
[  120.198325][ T5090] BTRFS info (device loop2): has skinny extents
[  120.277851][ T5093] [U] ^K
[  121.721993][ T5107] loop4: detected capacity change from 0 to 4096
[  121.936866][ T5107] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  121.944045][ T5107] ntfs3: loop4: Failed to load $BadClus.
[  121.990896][ T4391] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  121.991020][ T5090] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[  121.991355][ T4391] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  121.991423][ T5090] BTRFS warning (device loop2): couldn't read tree root
[  121.991743][ T5090] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[  121.991812][ T5090] BTRFS warning (device loop2): couldn't read tree root
[  122.076054][ T5090] BTRFS info (device loop2): enabling ssd optimizations
[  122.080116][ T5090] BTRFS info (device loop2): clearing free space tree
[  122.080175][ T5090] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  122.080197][ T5090] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  122.118051][ T5090] BTRFS info (device loop2): creating free space tree
[  122.118813][ T5090] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  122.118839][ T5090] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  122.316675][ T4438] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  122.693756][   T26] audit: type=1326 audit(1779717677.764:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.0.200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0abc8e59 code=0x7ffc0000
[  123.054568][ T4438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.066126][ T4438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.077819][ T4438] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  123.091214][ T4438] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  123.125352][   T26] audit: type=1326 audit(1779717677.764:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.0.200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0abc8e59 code=0x7ffc0000
[  123.151889][ T4438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.187355][ T4438] usb 5-1: config 0 descriptor??
[  123.223764][   T26] audit: type=1326 audit(1779717677.764:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.0.200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0abc8e59 code=0x7ffc0000
[  123.311806][ T5146] loop0: detected capacity change from 0 to 2048
[  123.344134][   T26] audit: type=1326 audit(1779717677.764:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.0.200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0b0abc8e59 code=0x7ffc0000
[  123.373084][   T26] audit: type=1326 audit(1779717677.764:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.0.200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0abc8e59 code=0x7ffc0000
[  123.397698][   T26] audit: type=1326 audit(1779717677.764:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.0.200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0abc8e59 code=0x7ffc0000
[  123.449547][   T26] audit: type=1326 audit(1779717677.764:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.0.200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0abc8e59 code=0x7ffc0000
[  123.488705][   T26] audit: type=1326 audit(1779717677.764:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.0.200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f0b0abc8e59 code=0x7ffc0000
[  123.513669][   T26] audit: type=1326 audit(1779717677.764:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.0.200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0abc8e59 code=0x7ffc0000
[  123.539476][   T26] audit: type=1326 audit(1779717677.764:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5145 comm="syz.0.200" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0abc8e59 code=0x7ffc0000
[  123.701770][ T4438] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  124.088381][ T4438] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  124.140811][ T5160] binder: 5158:5160 ioctl c0285840 0 returned -22
[  124.371613][ T4438] usb 5-1: USB disconnect, device number 3
[  125.023107][ T4208] Bluetooth: Wrong link type (-22)
[  125.764749][ T5167] loop3: detected capacity change from 0 to 128
[  125.815968][ T5171] loop2: detected capacity change from 0 to 512
[  125.844620][ T5162] fido_id[5162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  125.860331][ T5167] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  125.925255][ T5167] hpfs: filesystem error: improperly stopped
[  125.932181][ T5167] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  125.940378][ T5167] hpfs: You really don't want any checks? You are crazy...
[  125.948530][ T5167] hpfs: Code page index out of array
[  125.954384][ T5167] hpfs: code page support is disabled
[  125.961244][ T5167] hpfs: hpfs_map_4sectors(): unaligned read
[  125.969957][ T5167] hpfs: hpfs_map_4sectors(): unaligned read
[  125.976116][ T5167] hpfs: filesystem error: unable to find root dir
[  126.163142][ T5171] EXT4-fs (loop2): Test dummy encryption mode enabled
[  126.181084][ T5171] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  126.287545][ T5171] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.207: bad orphan inode 131083
[  126.321209][ T4208] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  126.331686][ T4208] CPU: 1 PID: 4208 Comm: kworker/u5:8 Not tainted syzkaller #0
[  126.339252][ T4208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  126.349402][ T4208] Workqueue: hci4 hci_rx_work
[  126.354117][ T4208] Call Trace:
[  126.357395][ T4208]  <TASK>
[  126.360326][ T4208]  dump_stack_lvl+0x188/0x250
[  126.365008][ T4208]  ? show_regs_print_info+0x20/0x20
[  126.370241][ T4208]  ? load_image+0x400/0x400
[  126.374769][ T4208]  sysfs_create_dir_ns+0x26a/0x290
[  126.379913][ T4208]  ? sysfs_warn_dup+0xa0/0xa0
[  126.384603][ T4208]  ? process_one_work+0x85f/0x1010
[  126.389748][ T4208]  ? do_raw_spin_unlock+0x11d/0x230
[  126.394984][ T4208]  kobject_add_internal+0x6e0/0xd90
[  126.400209][ T4208]  kobject_add+0x160/0x230
[  126.403538][ T5171] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[  126.404641][ T4208]  ? kobject_init+0x1d0/0x1d0
[  126.423710][ T4208]  ? klist_children_get+0x50/0x50
[  126.428752][ T4208]  ? get_device_parent+0x121/0x3f0
[  126.433887][ T4208]  device_add+0x483/0xfb0
[  126.438252][ T4208]  hci_conn_add_sysfs+0xd1/0x1e0
[  126.443213][ T4208]  le_conn_complete_evt+0xc48/0x15c0
[  126.448529][ T4208]  ? cs_le_create_conn+0x5e0/0x5e0
[  126.453667][ T4208]  ? __mutex_trylock_common+0x155/0x260
[  126.459237][ T4208]  hci_le_meta_evt+0x285/0x3c90
[  126.464116][ T4208]  ? hci_event_packet+0x37b/0x1370
[  126.469251][ T4208]  ? __lock_acquire+0x7d10/0x7d10
[  126.474302][ T4208]  ? hci_remote_host_features_evt+0x280/0x280
[  126.480399][ T4208]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  126.486053][ T4208]  ? mark_lock+0x94/0x320
[  126.490399][ T4208]  ? mutex_unlock+0x10/0x10
[  126.494921][ T4208]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  126.500946][ T4208]  ? lock_chain_count+0x20/0x20
[  126.505836][ T4208]  ? __rwlock_init+0x140/0x140
[  126.510622][ T4208]  hci_event_packet+0xe48/0x1370
[  126.515576][ T4208]  ? lockdep_hardirqs_on+0x94/0x140
[  126.520801][ T4208]  ? rcu_lock_release+0x20/0x20
[  126.525684][ T4208]  ? hci_send_to_monitor+0x9c/0x4a0
[  126.530925][ T4208]  hci_rx_work+0x255/0xa10
[  126.535469][ T4208]  process_one_work+0x85f/0x1010
[  126.540441][ T4208]  ? worker_detach_from_pool+0x240/0x240
[  126.546095][ T4208]  ? lockdep_hardirqs_off+0x70/0x100
[  126.551530][ T4208]  ? _raw_spin_lock_irq+0xb7/0xf0
[  126.556567][ T4208]  ? _raw_spin_lock_irqsave+0x100/0x100
[  126.562131][ T4208]  ? wq_worker_running+0x97/0x170
[  126.567307][ T4208]  worker_thread+0xaa6/0x1290
[  126.572022][ T4208]  ? lockdep_hardirqs_on+0x94/0x140
[  126.577251][ T4208]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  126.583185][ T4208]  kthread+0x436/0x520
[  126.587268][ T4208]  ? rcu_lock_release+0x20/0x20
[  126.592134][ T4208]  ? kthread_blkcg+0xd0/0xd0
[  126.596741][ T4208]  ret_from_fork+0x1f/0x30
[  126.601184][ T4208]  </TASK>
[  126.612097][ T4208] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  126.627482][ T4208] Bluetooth: hci4: failed to register connection device
[  126.711992][ T5194] loop0: detected capacity change from 0 to 128
[  126.740438][ T5197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.215'.
[  126.939252][ T5197] loop2: detected capacity change from 0 to 32768
[  127.011264][ T5197] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.215 (5197)
[  127.043224][ T5197] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  127.052231][ T5197] BTRFS info (device loop2): turning on sync discard
[  127.059447][ T5197] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  127.068881][ T5197] BTRFS info (device loop2): use zstd compression, level 3
[  127.076136][ T5197] BTRFS info (device loop2): turning on async discard
[  127.082983][ T5197] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  127.094384][ T5197] BTRFS info (device loop2): trying to use backup root at mount time
[  127.102541][ T5197] BTRFS info (device loop2): enabling auto defrag
[  127.109040][ T5197] BTRFS info (device loop2): using free space tree
[  127.115571][ T5197] BTRFS info (device loop2): has skinny extents
[  127.334454][ T4351] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  127.362649][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'.
[  127.372881][ T5197] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[  127.381456][ T4391] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  127.381482][ T5231] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  127.402922][ T4438] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  127.407478][ T5197] BTRFS warning (device loop2): couldn't read tree root
[  127.418420][ T5197] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[  127.428461][ T5197] BTRFS warning (device loop2): couldn't read tree root
[  127.506321][ T5197] BTRFS info (device loop2): enabling ssd optimizations
[  127.514688][ T5197] BTRFS info (device loop2): clearing free space tree
[  127.521704][ T5197] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  127.531674][ T5197] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  127.566510][ T5197] BTRFS info (device loop2): creating free space tree
[  127.574213][ T5197] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  127.583992][ T5197] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  128.321450][ T5239] loop3: detected capacity change from 0 to 131072
[  128.377466][ T4438] usb 1-1: Using ep0 maxpacket: 32
[  128.390960][ T5239] F2FS-fs (loop3): invalid crc value
[  128.611877][ T5239] F2FS-fs (loop3): Found nat_bits in checkpoint
[  128.630619][ T4438] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  128.671962][ T5239] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  128.723658][ T5239] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  128.942593][ T4438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.973459][ T4438] usb 1-1: config 0 descriptor??
[  129.276878][ T4438] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  129.383887][ T4438] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  129.521972][ T4438] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  129.642771][ T4438] usb 1-1: media controller created
[  129.960120][ T4438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  129.960565][ T5261] loop2: detected capacity change from 0 to 128
[  130.008923][ T4438] az6027: usb out operation failed. (-71)
[  130.034160][ T5262] loop3: detected capacity change from 0 to 4096
[  130.036874][ T4438] az6027: usb out operation failed. (-71)
[  130.053411][ T5261] EXT4-fs (loop2): Test dummy encryption mode enabled
[  130.060773][ T4438] stb0899_attach: Driver disabled by Kconfig
[  130.069739][ T4438] az6027: no front-end attached
[  130.069739][ T4438] 
[  130.078390][ T5261] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  130.107352][ T4438] az6027: usb out operation failed. (-71)
[  130.113277][ T5261] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.125955][ T4438] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  130.139319][ T4438] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  130.161223][ T4438] dvb-usb: schedule remote query interval to 400 msecs.
[  130.174055][ T4438] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  130.195881][ T4438] usb 1-1: USB disconnect, device number 4
[  130.421214][ T4438] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  130.863884][ T5276] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.898294][ T5270] loop0: detected capacity change from 0 to 32768
[  130.954107][ T5270] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.236 (5270)
[  130.978122][   T26] kauditd_printk_skb: 26 callbacks suppressed
[  130.978136][   T26] audit: type=1800 audit(1779717686.054:65): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.233" name="file1" dev="loop3" ino=15 res=0 errno=0
[  131.021045][ T5270] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  131.029862][ T5270] BTRFS info (device loop0): force clearing of disk cache
[  131.037559][ T5270] BTRFS info (device loop0): turning off barriers
[  131.044141][ T5270] BTRFS info (device loop0): use no compression
[  131.050447][ T5270] BTRFS info (device loop0): disabling free space tree
[  131.057364][ T5270] BTRFS info (device loop0): enabling ssd optimizations
[  131.064411][ T5270] BTRFS info (device loop0): using spread ssd allocation scheme
[  131.072142][ T5270] BTRFS info (device loop0): not using ssd optimizations
[  131.079247][ T5270] BTRFS info (device loop0): not using spread ssd allocation scheme
[  131.087986][ T5270] BTRFS info (device loop0): has skinny extents
[  131.285326][ T5268] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma?
[  131.471037][ T5270] BTRFS info (device loop0): clearing free space tree
[  131.478586][ T5270] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  131.488314][ T5270] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  131.504427][ T5270] BTRFS info (device loop0): checking UUID tree
[  131.569062][ T5305] tmpfs: Bad value for 'mpol'
[  132.301434][ T5317] loop4: detected capacity change from 0 to 64
[  132.414496][ T5317] Trying to free block not in datazone
[  132.428033][ T5321] loop2: detected capacity change from 0 to 8192
[  132.518049][ T5317] Trying to free block not in datazone
[  132.524172][ T5317] Trying to free block not in datazone
[  132.655741][ T5317] Trying to free block not in datazone
[  132.686444][ T5317] Trying to free block not in datazone
[  132.692718][ T5317] Trying to free block not in datazone
[  132.698596][ T5317] Trying to free block not in datazone
[  132.706087][ T5317] Trying to free block not in datazone
[  132.712277][ T5317] Trying to free block not in datazone
[  132.720605][ T5325] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.757807][ T5317] Trying to free block not in datazone
[  132.790498][ T5317] Trying to free block not in datazone
[  132.800762][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  132.807207][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  132.818862][ T5317] Trying to free block not in datazone
[  132.870296][ T5317] Trying to free block not in datazone
[  132.899497][ T5317] Trying to free block not in datazone
[  132.906325][ T5331] fuse: Bad value for 'fd'
[  132.938204][ T5317] Trying to free block not in datazone
[  132.945582][ T5317] Trying to free block not in datazone
[  132.951515][ T5317] Trying to free block not in datazone
[  132.957896][ T5317] Trying to free block not in datazone
[  132.963630][ T5317] Trying to free block not in datazone
[  132.969982][ T5317] Trying to free block not in datazone
[  132.975719][ T5317] Trying to free block not in datazone
[  133.121288][ T5317] Trying to free block not in datazone
[  133.197258][ T5317] Trying to free block not in datazone
[  133.985480][ T5317] Trying to free block not in datazone
[  134.186888][ T5317] Trying to free block not in datazone
[  134.195621][ T5317] Trying to free block not in datazone
[  134.294454][ T5317] Trying to free block not in datazone
[  134.336804][ T5345] loop3: detected capacity change from 0 to 128
[  134.361724][ T5317] Trying to free block not in datazone
[  134.406531][ T5317] Trying to free block not in datazone
[  134.412172][ T5317] Trying to free block not in datazone
[  134.417813][ T5317] Trying to free block not in datazone
[  134.423389][ T5317] Trying to free block not in datazone
[  134.446351][ T5345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  134.447866][ T5317] Trying to free block not in datazone
[  134.467617][ T5317] Trying to free block not in datazone
[  134.473272][ T5317] Trying to free block not in datazone
[  134.478989][ T5317] Trying to free block not in datazone
[  134.484593][ T5317] Trying to free block not in datazone
[  134.490600][ T5317] Trying to free block not in datazone
[  134.496200][ T5317] Trying to free block not in datazone
[  134.503432][ T5317] Trying to free block not in datazone
[  134.513165][ T5317] Trying to free block not in datazone
[  134.518876][ T5317] Trying to free block not in datazone
[  134.524473][ T5317] Trying to free block not in datazone
[  134.530065][ T5317] Trying to free block not in datazone
[  134.535655][ T5317] Trying to free block not in datazone
[  134.541272][ T5317] Trying to free block not in datazone
[  134.546869][ T5317] Trying to free block not in datazone
[  134.552401][ T5317] Trying to free block not in datazone
[  134.558243][ T5317] Trying to free block not in datazone
[  134.564228][ T5317] Trying to free block not in datazone
[  134.573248][ T5317] Trying to free block not in datazone
[  134.579083][ T5317] Trying to free block not in datazone
[  134.583892][ T5345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.584719][ T5317] Trying to free block not in datazone
[  134.604989][ T5317] Trying to free block not in datazone
[  134.618993][ T5317] Trying to free block not in datazone
[  134.624608][ T5317] Trying to free block not in datazone
[  134.637078][ T5317] Trying to free block not in datazone
[  134.645490][   T26] audit: type=1800 audit(1779717690.773:66): pid=5345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.253" name="file2" dev="loop3" ino=105 res=0 errno=0
[  134.651365][ T5317] Trying to free block not in datazone
[  134.686123][ T5317] Trying to free block not in datazone
[  134.697173][ T5317] Trying to free block not in datazone
[  134.703270][ T5317] Trying to free block not in datazone
[  134.713289][ T5317] Trying to free block not in datazone
[  134.731139][ T5317] Trying to free block not in datazone
[  134.760613][ T5317] Trying to free block not in datazone
[  134.794834][ T5317] Trying to free block not in datazone
[  135.135374][ T5317] Trying to free block not in datazone
[  135.156929][ T5317] Trying to free block not in datazone
[  135.163621][ T5317] Trying to free block not in datazone
[  135.208272][ T5317] Trying to free block not in datazone
[  135.306737][ T5317] Trying to free block not in datazone
[  135.546902][ T5317] Trying to free block not in datazone
[  135.552397][ T5317] Trying to free block not in datazone
[  135.557926][ T5317] Trying to free block not in datazone
[  135.563382][ T5317] Trying to free block not in datazone
[  135.568942][ T5317] Trying to free block not in datazone
[  135.574477][ T5317] Trying to free block not in datazone
[  135.580027][ T5317] Trying to free block not in datazone
[  135.585579][ T5317] Trying to free block not in datazone
[  135.596683][ T5317] Trying to free block not in datazone
[  135.602174][ T5317] Trying to free block not in datazone
[  135.612770][ T5317] Trying to free block not in datazone
[  135.636616][ T5317] Trying to free block not in datazone
[  135.662520][ T5317] Trying to free block not in datazone
[  135.682835][ T5317] Trying to free block not in datazone
[  135.696634][ T5317] Trying to free block not in datazone
[  135.702218][ T5317] Trying to free block not in datazone
[  135.846829][ T5360] loop2: detected capacity change from 0 to 32768
[  135.853919][ T5317] Trying to free block not in datazone
[  135.871230][ T5317] Trying to free block not in datazone
[  135.891576][ T5317] Trying to free block not in datazone
[  135.906745][ T5317] Trying to free block not in datazone
[  135.936703][ T5317] Trying to free block not in datazone
[  135.942194][ T5317] Trying to free block not in datazone
[  135.971072][ T5317] Trying to free block not in datazone
[  136.006026][ T5360] XFS (loop2): Mounting V5 Filesystem
[  136.031594][ T5317] Trying to free block not in datazone
[  136.063846][ T5361] loop3: detected capacity change from 0 to 32768
[  136.065994][ T5317] Trying to free block not in datazone
[  136.130019][ T5360] XFS (loop2): Ending clean mount
[  136.141072][ T5360] XFS (loop2): Quotacheck needed: Please wait.
[  136.196489][ T5317] Trying to free block not in datazone
[  136.259731][ T5317] Trying to free block not in datazone
[  136.269621][ T5317] Trying to free block not in datazone
[  136.275111][ T5317] Trying to free block not in datazone
[  136.321933][ T5360] XFS (loop2): Quotacheck: Done.
[  136.450988][ T5317] Trying to free block not in datazone
[  136.837121][ T5317] Trying to free block not in datazone
[  136.903821][ T4190] XFS (loop2): Unmounting Filesystem
[  136.928724][ T5317] Trying to free block not in datazone
[  136.935472][ T5317] Trying to free block not in datazone
[  136.950020][ T5317] Trying to free block not in datazone
[  136.956074][ T5317] Trying to free block not in datazone
[  136.971191][ T5317] Trying to free block not in datazone
[  137.228691][ T5317] Trying to free block not in datazone
[  137.307753][ T5317] Trying to free block not in datazone
[  137.438536][ T5317] Trying to free block not in datazone
[  137.819816][ T5317] Trying to free block not in datazone
[  137.825383][ T5317] Trying to free block not in datazone
[  137.907422][ T5317] Trying to free block not in datazone
[  137.913373][ T5317] Trying to free block not in datazone
[  137.948668][ T5317] Trying to free block not in datazone
[  137.964304][ T5317] Trying to free block not in datazone
[  137.970866][ T5317] Trying to free block not in datazone
[  137.992052][ T5317] Trying to free block not in datazone
[  137.995542][   T26] audit: type=1800 audit(1779717694.123:67): pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.263" name="bus" dev="ramfs" ino=35249 res=0 errno=0
[  138.002777][ T5317] Trying to free block not in datazone
[  138.106814][ T5317] Trying to free block not in datazone
[  138.112313][ T5317] Trying to free block not in datazone
[  138.150183][ T5317] Trying to free block not in datazone
[  138.156158][ T5317] Trying to free block not in datazone
[  138.179843][ T5317] Trying to free block not in datazone
[  138.185335][ T5317] Trying to free block not in datazone
[  138.209531][ T5317] Trying to free block not in datazone
[  138.209542][ T5317] Trying to free block not in datazone
[  138.209548][ T5317] Trying to free block not in datazone
[  138.209555][ T5317] Trying to free block not in datazone
[  138.209562][ T5317] Trying to free block not in datazone
[  138.209568][ T5317] Trying to free block not in datazone
[  138.209575][ T5317] Trying to free block not in datazone
[  138.209582][ T5317] Trying to free block not in datazone
[  138.209588][ T5317] Trying to free block not in datazone
[  138.209594][ T5317] Trying to free block not in datazone
[  138.209599][ T5317] Trying to free block not in datazone
[  138.209605][ T5317] Trying to free block not in datazone
[  138.209610][ T5317] Trying to free block not in datazone
[  138.209615][ T5317] Trying to free block not in datazone
[  138.209620][ T5317] Trying to free block not in datazone
[  138.209625][ T5317] Trying to free block not in datazone
[  138.209630][ T5317] Trying to free block not in datazone
[  138.209635][ T5317] Trying to free block not in datazone
[  138.209640][ T5317] Trying to free block not in datazone
[  138.209646][ T5317] Trying to free block not in datazone
[  138.209651][ T5317] Trying to free block not in datazone
[  138.209657][ T5317] Trying to free block not in datazone
[  138.209663][ T5317] Trying to free block not in datazone
[  138.209668][ T5317] Trying to free block not in datazone
[  138.209674][ T5317] Trying to free block not in datazone
[  138.209679][ T5317] Trying to free block not in datazone
[  138.209685][ T5317] Trying to free block not in datazone
[  138.209691][ T5317] Trying to free block not in datazone
[  138.209697][ T5317] Trying to free block not in datazone
[  138.209703][ T5317] Trying to free block not in datazone
[  138.209708][ T5317] Trying to free block not in datazone
[  138.209714][ T5317] Trying to free block not in datazone
[  138.209719][ T5317] Trying to free block not in datazone
[  138.209725][ T5317] Trying to free block not in datazone
[  138.209731][ T5317] Trying to free block not in datazone
[  138.209737][ T5317] Trying to free block not in datazone
[  138.209743][ T5317] Trying to free block not in datazone
[  138.209748][ T5317] Trying to free block not in datazone
[  138.209752][ T5317] Trying to free block not in datazone
[  138.209758][ T5317] Trying to free block not in datazone
[  138.209763][ T5317] Trying to free block not in datazone
[  138.209770][ T5317] Trying to free block not in datazone
[  138.209776][ T5317] Trying to free block not in datazone
[  138.209782][ T5317] Trying to free block not in datazone
[  138.209788][ T5317] Trying to free block not in datazone
[  138.209794][ T5317] Trying to free block not in datazone
[  138.209800][ T5317] Trying to free block not in datazone
[  138.209805][ T5317] Trying to free block not in datazone
[  138.209811][ T5317] Trying to free block not in datazone
[  138.209817][ T5317] Trying to free block not in datazone
[  138.209823][ T5317] Trying to free block not in datazone
[  138.209829][ T5317] Trying to free block not in datazone
[  138.209835][ T5317] Trying to free block not in datazone
[  138.209840][ T5317] Trying to free block not in datazone
[  138.209846][ T5317] Trying to free block not in datazone
[  138.209853][ T5317] Trying to free block not in datazone
[  138.209859][ T5317] Trying to free block not in datazone
[  138.209865][ T5317] Trying to free block not in datazone
[  138.209872][ T5317] Trying to free block not in datazone
[  138.209878][ T5317] Trying to free block not in datazone
[  138.209884][ T5317] Trying to free block not in datazone
[  138.209891][ T5317] Trying to free block not in datazone
[  138.209896][ T5317] Trying to free block not in datazone
[  138.209902][ T5317] Trying to free block not in datazone
[  138.209907][ T5317] Trying to free block not in datazone
[  138.209912][ T5317] Trying to free block not in datazone
[  138.209918][ T5317] Trying to free block not in datazone
[  138.209923][ T5317] Trying to free block not in datazone
[  138.209930][ T5317] Trying to free block not in datazone
[  138.209936][ T5317] Trying to free block not in datazone
[  138.209942][ T5317] Trying to free block not in datazone
[  138.209948][ T5317] Trying to free block not in datazone
[  138.209952][ T5317] Trying to free block not in datazone
[  138.209959][ T5317] Trying to free block not in datazone
[  138.209965][ T5317] Trying to free block not in datazone
[  138.209971][ T5317] Trying to free block not in datazone
[  138.209977][ T5317] Trying to free block not in datazone
[  138.209983][ T5317] Trying to free block not in datazone
[  138.209989][ T5317] Trying to free block not in datazone
[  138.209995][ T5317] Trying to free block not in datazone
[  138.210001][ T5317] Trying to free block not in datazone
[  138.210006][ T5317] Trying to free block not in datazone
[  138.210011][ T5317] Trying to free block not in datazone
[  138.210017][ T5317] Trying to free block not in datazone
[  138.210023][ T5317] Trying to free block not in datazone
[  138.210029][ T5317] Trying to free block not in datazone
[  138.210034][ T5317] Trying to free block not in datazone
[  138.210040][ T5317] Trying to free block not in datazone
[  138.210046][ T5317] Trying to free block not in datazone
[  138.210053][ T5317] Trying to free block not in datazone
[  138.210059][ T5317] Trying to free block not in datazone
[  138.210066][ T5317] Trying to free block not in datazone
[  138.210072][ T5317] Trying to free block not in datazone
[  138.210078][ T5317] Trying to free block not in datazone
[  138.210084][ T5317] Trying to free block not in datazone
[  138.210089][ T5317] Trying to free block not in datazone
[  138.210095][ T5317] Trying to free block not in datazone
[  138.210100][ T5317] Trying to free block not in datazone
[  138.210105][ T5317] Trying to free block not in datazone
[  138.210111][ T5317] Trying to free block not in datazone
[  138.210117][ T5317] Trying to free block not in datazone
[  138.210123][ T5317] Trying to free block not in datazone
[  138.210128][ T5317] Trying to free block not in datazone
[  138.210134][ T5317] Trying to free block not in datazone
[  138.210141][ T5317] Trying to free block not in datazone
[  138.210146][ T5317] Trying to free block not in datazone
[  138.210152][ T5317] Trying to free block not in datazone
[  138.210158][ T5317] Trying to free block not in datazone
[  138.210164][ T5317] Trying to free block not in datazone
[  138.210170][ T5317] Trying to free block not in datazone
[  138.210175][ T5317] Trying to free block not in datazone
[  138.210181][ T5317] Trying to free block not in datazone
[  138.210187][ T5317] Trying to free block not in datazone
[  138.210194][ T5317] Trying to free block not in datazone
[  138.210200][ T5317] Trying to free block not in datazone
[  138.210206][ T5317] Trying to free block not in datazone
[  138.210212][ T5317] Trying to free block not in datazone
[  138.210218][ T5317] Trying to free block not in datazone
[  138.210224][ T5317] Trying to free block not in datazone
[  138.210229][ T5317] Trying to free block not in datazone
[  138.210234][ T5317] Trying to free block not in datazone
[  138.210240][ T5317] Trying to free block not in datazone
[  138.210246][ T5317] Trying to free block not in datazone
[  138.210252][ T5317] Trying to free block not in datazone
[  138.210257][ T5317] Trying to free block not in datazone
[  138.210263][ T5317] Trying to free block not in datazone
[  138.210268][ T5317] Trying to free block not in datazone
[  138.210273][ T5317] Trying to free block not in datazone
[  138.210278][ T5317] Trying to free block not in datazone
[  138.210284][ T5317] Trying to free block not in datazone
[  138.210290][ T5317] Trying to free block not in datazone
[  138.210297][ T5317] Trying to free block not in datazone
[  138.213728][ T5317] Trying to free block not in datazone
[  138.846823][ T4234] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  139.045731][ T5411] loop2: detected capacity change from 0 to 32768
[  139.275746][ T5411] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  139.346798][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.384367][ T5411] JBD2: Ignoring recovery information on journal
[  139.759066][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.770611][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  139.784159][ T4234] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  139.795362][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.807338][ T4234] usb 5-1: config 0 descriptor??
[  139.812579][ T5411] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  139.872011][ T5411] ocfs2: Unmounting device (7,2) on (node local)
[  139.907967][ T5418] loop0: detected capacity change from 0 to 4096
[  140.090415][ T4194] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  140.104443][ T4194] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  140.288530][ T4234] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  140.303170][ T4234] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  140.542619][ T5430] mmap: syz.0.279 (5430) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  140.672467][ T4315] usb 5-1: USB disconnect, device number 4
[  140.686705][ T5406] usb 5-1: string descriptor 0 read error: -19
[  140.985112][ T5436] loop0: detected capacity change from 0 to 32768
[  141.014589][ T5436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.281 (5436)
[  141.055223][ T5436] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  141.198054][ T5436] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  141.226730][ T5436] BTRFS info (device loop0): use lzo compression, level 0
[  141.233939][ T5436] BTRFS info (device loop0): turning on async discard
[  141.250985][ T5436] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  141.264445][ T5436] BTRFS info (device loop0): trying to use backup root at mount time
[  141.347067][ T5436] BTRFS info (device loop0): enabling auto defrag
[  141.601994][ T5436] BTRFS info (device loop0): using free space tree
[  141.612925][ T5436] BTRFS info (device loop0): has skinny extents
[  142.023974][ T4325] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  142.063709][ T5436] BTRFS warning (device loop0): failed to read root (objectid=2): -5
[  142.163806][ T4790] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  142.226247][ T5436] BTRFS warning (device loop0): couldn't read tree root
[  142.247093][ T5436] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7
[  142.297156][ T5436] BTRFS warning (device loop0): couldn't read tree root
[  142.334905][ T5470] loop3: detected capacity change from 0 to 2048
[  142.427327][ T5436] BTRFS info (device loop0): enabling ssd optimizations
[  142.458367][ T5436] BTRFS info (device loop0): clearing free space tree
[  142.483646][ T5436] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  142.526681][ T5436] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  142.543766][ T5477] loop2: detected capacity change from 0 to 32768
[  142.584095][ T5436] BTRFS info (device loop0): creating free space tree
[  142.594268][ T5477] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.289 (5477)
[  142.616315][ T5436] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  142.655477][ T5475] loop4: detected capacity change from 0 to 32768
[  142.671641][ T5436] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  142.677734][ T5470] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  142.765618][ T5475] JBD2: Ignoring recovery information on journal
[  142.766904][ T5470] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.873391][ T4477] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4477)
[  143.124674][ T5475] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  143.283925][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.303267][ T5475] (syz.4.290,5475,0):ocfs2_group_add:487 ERROR: The disk is too old and small. Force to do offline resize.
[  143.411741][ T4192] ocfs2: Unmounting device (7,4) on (node local)
[  143.736856][    T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  143.986728][    T7] usb 4-1: Using ep0 maxpacket: 16
[  144.267478][    T7] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba
[  144.330740][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.461191][    T7] usb 4-1: Product: syz
[  144.507616][    T7] usb 4-1: Manufacturer: syz
[  144.562904][    T7] usb 4-1: SerialNumber: syz
[  144.723664][    T7] usb 4-1: config 0 descriptor??
[  145.373168][    T7] usb 4-1: can't set first interface for hiFace device.
[  145.400178][    T7] snd-usb-hiface: probe of 4-1:0.0 failed with error -5
[  145.434702][    T7] usb 4-1: USB disconnect, device number 4
[  146.504857][ T5538] overlayfs: failed to clone upperpath
[  147.046889][ T5548] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  147.073584][ T5548] CIFS mount error: No usable UNC path provided in device string!
[  147.073584][ T5548] 
[  147.084105][ T5548] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  147.344931][ T5543] loop0: detected capacity change from 0 to 2048
[  147.679283][ T5559] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  147.692494][ T5561] loop3: detected capacity change from 0 to 512
[  147.912859][ T5561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  147.927318][ T5561] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.126759][ T4433] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  149.717902][ T4433] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.776917][ T5598] tmpfs: Bad value for 'mpol'
[  149.787063][ T4433] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  149.803705][ T5597] loop0: detected capacity change from 0 to 8192
[  149.898178][ T4433] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  149.920136][ T4433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  149.949449][ T4433] usb 5-1: SerialNumber: syz
[  150.025291][ T4433] cdc_ether 5-1:1.0: invalid descriptor buffer length
[  150.043492][ T4433] cdc_ether: probe of 5-1:1.0 failed with error -22
[  150.100053][ T5618] netlink: 32 bytes leftover after parsing attributes in process `syz.2.326'.
[  150.763896][   T21] usb 5-1: USB disconnect, device number 5
[  151.201588][ T4208] Bluetooth: Unexpected continuation frame (len 10)
[  152.451790][ T5667] netlink: 136 bytes leftover after parsing attributes in process `syz.4.339'.
[  152.466197][ T5667] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  152.524032][ T5673] loop4: detected capacity change from 0 to 512
[  152.569159][ T5673] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  152.581324][ T5673] EXT4-fs (loop4): invalid journal inode
[  152.596390][ T5673] EXT4-fs (loop4): can't get journal size
[  152.636310][ T5673] EXT4-fs (loop4): orphan cleanup on readonly fs
[  152.664341][ T5673] EXT4-fs (loop4): 1 truncate cleaned up
[  152.677031][ T5673] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,sysvgroups,barrier,lazytime,,errors=continue. Quota mode: none.
[  152.900306][ T5689] loop4: detected capacity change from 0 to 64
[  152.992097][ T5689] device syz_tun entered promiscuous mode
[  153.018651][    T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  153.046164][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'.
[  153.061821][ T5689] device syz_tun left promiscuous mode
[  154.347409][    T7] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  154.377534][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'.
[  154.396533][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.471315][    T7] usb 1-1: Product: syz
[  154.579267][    T7] usb 1-1: Manufacturer: syz
[  154.583928][    T7] usb 1-1: SerialNumber: syz
[  154.644009][    T7] usb 1-1: config 0 descriptor??
[  155.809165][ T5717] loop3: detected capacity change from 0 to 32768
[  155.967765][ T5731] loop4: detected capacity change from 0 to 8192
[  156.076487][ T5738] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  156.167137][    T7] usb 1-1: unexpected transceiver, part 0xe9 version 0x6a
[  156.195937][    T7] usb 1-1: Firmware version (0.0) predates our first public release.
[  156.446030][    T7] usb 1-1: Please update to version 0.2 or newer
[  156.552864][    T7] usb 1-1: atusb_probe: initialization failed, error = -19
[  156.657167][    T7] usb 1-1: USB disconnect, device number 5
[  157.980742][ T5753] loop2: detected capacity change from 0 to 4096
[  158.007483][ T5753] ntfs3: Unknown parameter 'hide_dot_files'
[  158.859932][ T5769] loop0: detected capacity change from 0 to 32768
[  158.903701][ T5769] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  158.912657][ T5769] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  158.968125][ T5769] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  158.991489][ T4432] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  159.015817][ T4432] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  159.486699][ T4315] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  159.621554][ T4432] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 605ms
[  159.651186][ T4432] gfs2: fsid=syz:syz.0: jid=0: Done
[  159.666925][ T5769] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  161.007612][ T5784] ubi31: attaching mtd0
[  161.015776][ T5784] ubi31: scanning is finished
[  161.021787][ T5784] ubi31: empty MTD device detected
[  161.285375][ T5784] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  161.617018][ T4315] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  161.667378][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.702399][ T4315] usb 5-1: Product: syz
[  161.726764][ T4482] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  161.775117][ T4315] usb 5-1: Manufacturer: syz
[  161.836731][ T4315] usb 5-1: SerialNumber: syz
[  161.968318][ T4315] usb 5-1: can't set config #1, error -71
[  161.996946][ T4315] usb 5-1: USB disconnect, device number 6
[  162.109987][ T4482] usb 3-1: Using ep0 maxpacket: 8
[  162.720435][ T5797] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input13
[  162.909164][ T4482] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  163.072843][ T5807] loop4: detected capacity change from 0 to 32768
[  163.153919][ T5807] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.385 (5807)
[  163.203365][ T5809] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  164.007570][ T4482] usb 3-1: config 179 has no interface number 0
[  164.014984][ T4482] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  164.027647][ T4482] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  164.039986][ T4482] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  164.053593][ T4482] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  164.067200][ T4482] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  164.117806][ T4482] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  164.132810][ T4482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.184997][ T5807] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  164.195656][ T5807] BTRFS info (device loop4): metadata ratio 0
[  164.202638][ T5807] BTRFS info (device loop4): setting nodatasum
[  164.213345][ T5807] BTRFS info (device loop4): using free space tree
[  164.221104][ T5807] BTRFS info (device loop4): has skinny extents
[  164.232302][ T5792] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  164.719909][ T4482] usb 3-1: USB disconnect, device number 4
[  164.746645][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  164.843285][   T26] audit: type=1326 audit(1779717720.973:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.3.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe11c3e59 code=0x7ffc0000
[  164.896507][ T5837] loop0: detected capacity change from 0 to 256
[  164.911308][   T26] audit: type=1326 audit(1779717721.003:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.3.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f6fe11c3e59 code=0x7ffc0000
[  164.943780][   T26] audit: type=1326 audit(1779717721.003:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.3.379" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe11c3e59 code=0x7ffc0000
[  164.970084][ T5837] exfat: Deprecated parameter 'utf8'
[  164.994145][ T5837] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  165.098841][ T5836] loop2: detected capacity change from 0 to 32768
[  165.201448][ T5836] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.378 (5836)
[  165.276895][ T5807] BTRFS info (device loop4): enabling ssd optimizations
[  166.147107][ T5836] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  166.159409][ T5836] BTRFS info (device loop2): enabling disk space caching
[  166.171092][ T5836] BTRFS info (device loop2): force clearing of disk cache
[  166.185298][ T5836] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  166.199818][ T5836] BTRFS info (device loop2): use zstd compression, level 3
[  166.211975][ T5836] BTRFS info (device loop2): disk space caching is enabled
[  166.220629][ T5836] BTRFS info (device loop2): has skinny extents
[  167.793352][   T26] audit: type=1800 audit(1779717723.863:71): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.385" name="file1" dev="loop4" ino=260 res=0 errno=0
[  169.015246][ T5836] BTRFS error (device loop2): open_ctree failed: -12
[  169.136714][ T4479] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (4479)
[  169.209565][ T5878] ubi31: attaching mtd0
[  169.215334][ T5878] ubi31: scanning is finished
[  169.837635][ T5878] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  170.508245][ T5893] loop0: detected capacity change from 0 to 32768
[  172.572894][   T26] audit: type=1326 audit(1779717728.703:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8d3c9e59 code=0x7ffc0000
[  172.692856][   T26] audit: type=1326 audit(1779717728.743:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8d3c9e59 code=0x7ffc0000
[  172.824181][   T26] audit: type=1326 audit(1779717728.753:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8d3c9e59 code=0x7ffc0000
[  172.967858][   T26] audit: type=1326 audit(1779717728.753:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8d3c9e59 code=0x7ffc0000
[  173.083468][   T26] audit: type=1326 audit(1779717728.753:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7efd8d3c9e59 code=0x7ffc0000
[  173.254660][   T26] audit: type=1326 audit(1779717728.753:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8d3c9e59 code=0x7ffc0000
[  173.417579][ T5893] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  173.432929][ T5893] BTRFS info (device loop0): enabling disk space caching
[  173.443330][ T5893] BTRFS info (device loop0): force clearing of disk cache
[  173.454830][ T5893] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  173.473596][ T5893] BTRFS info (device loop0): use zstd compression, level 3
[  173.487557][ T5893] BTRFS info (device loop0): disk space caching is enabled
[  173.498265][ T5893] BTRFS info (device loop0): has skinny extents
[  173.580672][ T5913] loop3: detected capacity change from 0 to 32768
[  173.617814][   T26] audit: type=1326 audit(1779717728.753:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8d3c9e59 code=0x7ffc0000
[  174.907038][ T5936] sd 0:0:1:0: device reset
[  176.879014][   T26] audit: type=1326 audit(1779717728.753:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8d3c9e59 code=0x7ffc0000
[  177.007676][   T26] audit: type=1326 audit(1779717728.753:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8d3c9e59 code=0x7ffc0000
[  177.041446][   T26] audit: type=1326 audit(1779717728.753:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.1.393" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7efd8d3c9e59 code=0x7ffc0000
[  178.318738][ T5893] BTRFS error (device loop0): open_ctree failed: -12
[  178.318900][ T5913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.395 (5913)
[  178.410570][ T5913] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  178.422319][ T5952] loop4: detected capacity change from 0 to 2048
[  178.425523][ T5913] BTRFS info (device loop3): metadata ratio 0
[  178.446996][ T5913] BTRFS info (device loop3): setting nodatasum
[  178.457469][ T5913] BTRFS info (device loop3): using free space tree
[  178.469359][ T5913] BTRFS info (device loop3): has skinny extents
[  178.727093][ T5952] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  178.890162][   T26] kauditd_printk_skb: 24 callbacks suppressed
[  178.890178][   T26] audit: type=1800 audit(1779717735.023:106): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.402" name="file1" dev="loop4" ino=15 res=0 errno=0
[  179.297506][ T5913] BTRFS error (device loop3): open_ctree failed: -12
[  179.382505][ T4328] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  179.463445][ T4328] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28
[  179.499261][ T4479] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4479)
[  179.502718][ T4328] EXT4-fs (loop4): This should not happen!! Data will be lost
[  179.502718][ T4328] 
[  179.637193][ T4328] EXT4-fs (loop4): Total free blocks count 0
[  179.661906][ T5948] loop2: detected capacity change from 0 to 40427
[  179.686610][ T4328] EXT4-fs (loop4): Free/Dirty block details
[  179.751777][ T4328] EXT4-fs (loop4): free_blocks=4096
[  179.823903][ T5948] F2FS-fs (loop2): invalid crc value
[  179.833925][ T4328] EXT4-fs (loop4): dirty_blocks=512
[  179.903049][ T4328] EXT4-fs (loop4): Block reservation details
[  179.928850][ T5948] F2FS-fs (loop2): Found nat_bits in checkpoint
[  179.963672][ T4328] EXT4-fs (loop4): i_reserved_data_blocks=32
[  180.090973][ T5948] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  180.191540][ T5991] xt_hashlimit: size too large, truncated to 1048576
[  180.228195][ T5948] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  181.046935][ T5995] loop4: detected capacity change from 0 to 1024
[  181.071033][ T5995] hfsplus: unable to parse mount options
[  182.436815][ T4303] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  182.918045][ T4303] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  183.036888][ T6013] loop0: detected capacity change from 0 to 2048
[  183.123096][ T6013] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  183.140600][ T6013] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  183.164405][ T6013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.947234][ T4303] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  183.971898][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.996685][ T4303] usb 4-1: Product: syz
[  184.061216][ T4303] usb 4-1: Manufacturer: syz
[  184.086763][ T4303] usb 4-1: SerialNumber: syz
[  184.189198][ T4303] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  184.558956][ T6015] loop0: detected capacity change from 0 to 4096
[  184.652757][ T6015] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  184.653636][ T4303] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  184.765966][ T4303] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  184.823811][ T4303] usb 4-1: media controller created
[  184.901436][ T4303] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  185.219465][ T4303] usb 4-1: USB disconnect, device number 5
[  185.406790][ T4435] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  185.946853][ T4435] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.554217][ T4435] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  186.759588][ T4487] Bluetooth: hci3: command 0x0406 tx timeout
[  186.838749][ T4487] Bluetooth: hci2: command 0x0406 tx timeout
[  187.100814][ T4437] Bluetooth: hci4: command 0x0406 tx timeout
[  187.112011][ T4437] Bluetooth: hci1: command 0x0406 tx timeout
[  187.156734][ T4435] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  187.176816][ T4435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  187.216641][ T4435] usb 1-1: SerialNumber: syz
[  187.258851][ T6042] loop3: detected capacity change from 0 to 8192
[  187.278484][ T4435] cdc_ether 1-1:1.0: invalid descriptor buffer length
[  187.338721][ T4435] cdc_ether: probe of 1-1:1.0 failed with error -22
[  188.281820][ T6046] loop2: detected capacity change from 0 to 32768
[  188.472347][ T4482] usb 1-1: USB disconnect, device number 6
[  188.546737][ T4489] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  188.806696][ T4489] usb 5-1: Using ep0 maxpacket: 8
[  188.947428][ T4489] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  189.268440][ T4489] usb 5-1: config 0 has no interface number 0
[  189.334398][ T4489] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  189.354273][ T4489] usb 5-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  189.724796][ T4489] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  189.750531][ T4489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.166491][ T4489] usb 5-1: config 0 descriptor??
[  190.218183][ T4489] iowarrior 5-1:0.1: no interrupt-in endpoint found
[  190.392573][ T6092] loop0: detected capacity change from 0 to 256
[  190.525978][ T4437] usb 5-1: USB disconnect, device number 7
[  190.673315][ T6096] sd 0:0:1:0: device reset
[  191.599654][ T6106] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  191.666192][ T6109] gfs2: path_lookup on  returned error -2
[  192.314519][ T6114] loop0: detected capacity change from 0 to 8192
[  192.356677][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  192.441331][ T6118] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  192.713826][ T6116] loop3: detected capacity change from 0 to 32768
[  192.890770][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  193.064968][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26232, setting to 64
[  193.162898][ T6116] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  193.175974][ T6116] BTRFS info (device loop3): metadata ratio 0
[  193.183295][ T6116] BTRFS info (device loop3): setting nodatasum
[  193.190221][ T6116] BTRFS info (device loop3): using free space tree
[  193.197201][ T6116] BTRFS info (device loop3): has skinny extents
[  193.337161][    T7] usb 3-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[  193.352199][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.376736][    T7] usb 3-1: Product: syz
[  193.402293][    T7] usb 3-1: Manufacturer: syz
[  193.414875][    T7] usb 3-1: SerialNumber: syz
[  193.422039][ T6124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.452541][    T7] usb 3-1: config 0 descriptor??
[  193.500996][    T7] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  193.514450][    T7] usb 3-1: Detected SIO
[  193.521379][    T7] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[  193.536715][    T7] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  193.547023][ T6116] BTRFS info (device loop3): enabling ssd optimizations
[  193.715137][ T4489] usb 3-1: USB disconnect, device number 5
[  193.771629][ T4489] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  193.798555][ T4489] ftdi_sio 3-1:0.0: device disconnected
[  193.986126][   T26] audit: type=1800 audit(1779717750.013:107): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.454" name="file1" dev="loop3" ino=260 res=0 errno=0
[  194.268000][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.275015][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  195.605863][ T6164] sd 0:0:1:0: device reset
[  196.707614][ T6172] loop2: detected capacity change from 0 to 8192
[  197.749701][ T6183] loop0: detected capacity change from 0 to 32768
[  198.266814][ T6183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.471 (6183)
[  198.567933][ T6183] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  198.579544][ T6183] BTRFS info (device loop0): metadata ratio 0
[  198.587852][ T6183] BTRFS info (device loop0): setting nodatasum
[  198.594315][ T6183] BTRFS info (device loop0): using free space tree
[  198.604472][ T6183] BTRFS info (device loop0): has skinny extents
[  199.020622][ T6221] sd 0:0:1:0: device reset
[  199.533935][ T6183] BTRFS info (device loop0): enabling ssd optimizations
[  199.886901][ T4489] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  200.646770][   T26] audit: type=1800 audit(1779717756.183:108): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.471" name="file1" dev="loop0" ino=260 res=0 errno=0
[  201.076662][ T4489] usb 3-1: Using ep0 maxpacket: 32
[  201.288123][ T4489] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  201.316743][ T4489] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  201.336787][ T4489] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  201.348777][ T4489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  201.416591][ T4489] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  201.486647][ T4489] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  201.560485][ T4489] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  201.609222][ T4489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.676938][ T6241] loop3: detected capacity change from 0 to 4096
[  201.736938][ T6242] loop4: detected capacity change from 0 to 4096
[  201.768568][ T4489] usb 3-1: config 0 descriptor??
[  202.086407][ T4489] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  202.205553][ T4489] usb 3-1: USB disconnect, device number 6
[  203.119561][ T4489] usblp0: removed
[  204.103146][ T6253] loop2: detected capacity change from 0 to 8192
[  206.464966][ T6287] loop3: detected capacity change from 0 to 512
[  206.584822][ T6287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  206.879011][ T6287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  206.996045][ T6287] System zones: 1-12
[  207.265569][ T6287] EXT4-fs (loop3): 1 truncate cleaned up
[  207.341839][ T6287] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[  207.415124][ T1347] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  207.696651][ T1347] usb 5-1: Using ep0 maxpacket: 32
[  208.397081][ T1347] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  208.487730][ T1347] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  209.110801][ T1347] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  209.141225][ T1347] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  209.357256][ T1347] usb 5-1: config 0 interface 0 has no altsetting 0
[  210.716869][ T1347] usb 5-1: string descriptor 0 read error: -71
[  210.747256][ T1347] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  210.849397][ T1347] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  210.990378][ T1347] usb 5-1: config 0 descriptor??
[  211.031782][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[  211.053178][ T6306] loop2: detected capacity change from 0 to 8192
[  211.121233][ T1347] usb 5-1: can't set config #0, error -71
[  211.132934][ T1347] usb 5-1: USB disconnect, device number 8
[  213.438447][   T26] audit: type=1326 audit(1779717769.573:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  213.859282][ T6353] loop4: detected capacity change from 0 to 2048
[  214.343229][ T6353] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  214.359825][ T6353] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  215.111862][ T6353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.152308][   T26] audit: type=1326 audit(1779717769.653:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  215.573184][   T26] audit: type=1326 audit(1779717769.653:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  216.245367][   T26] audit: type=1326 audit(1779717769.653:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  216.286674][   T26] audit: type=1326 audit(1779717769.653:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  216.335037][   T26] audit: type=1326 audit(1779717769.653:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  216.472960][   T26] audit: type=1326 audit(1779717769.653:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  216.539432][   T26] audit: type=1326 audit(1779717769.653:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  218.148129][ T4208] Bluetooth: hci0: link tx timeout
[  218.281367][ T4208] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  218.709346][   T26] audit: type=1326 audit(1779717769.653:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  218.848653][ T6370] loop0: detected capacity change from 0 to 8192
[  218.862750][   T26] audit: type=1326 audit(1779717769.653:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  219.575695][   T26] audit: type=1326 audit(1779717769.653:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  219.635795][   T26] audit: type=1326 audit(1779717769.653:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  219.756933][   T26] audit: type=1326 audit(1779717769.653:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  221.081027][ T4487] Bluetooth: hci0: command 0x0406 tx timeout
[  221.186858][   T26] audit: type=1326 audit(1779717769.653:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  221.253405][ T6393] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  221.291712][   T26] audit: type=1326 audit(1779717769.653:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  221.334648][   T26] audit: type=1326 audit(1779717769.653:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  221.489011][   T26] audit: type=1326 audit(1779717769.663:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  221.546313][   T26] audit: type=1326 audit(1779717769.663:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.514" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fecf5103e59 code=0x7ffc0000
[  221.654808][ T4328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.800538][ T6413] loop2: detected capacity change from 0 to 8192
[  221.973669][ T4328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.986194][ T6412] loop0: detected capacity change from 0 to 32768
[  222.095823][ T4328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.126881][ T6412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.537 (6412)
[  222.151264][ T6412] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  222.165783][ T6412] BTRFS info (device loop0): metadata ratio 0
[  222.180796][ T6412] BTRFS info (device loop0): setting nodatasum
[  222.197248][ T6412] BTRFS info (device loop0): using free space tree
[  222.206000][ T6412] BTRFS info (device loop0): has skinny extents
[  222.616864][ T6412] BTRFS info (device loop0): enabling ssd optimizations
[  227.631581][ T6444] chnl_net:caif_netlink_parms(): no params data found
[  227.831506][ T6484] ==================================================================
[  227.849319][ T6484] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370
[  227.861638][ T6484] Read of size 8 at addr ffff88814bbec418 by task syz.0.545/6484
[  227.872823][ T6484] 
[  227.879079][ T6484] CPU: 1 PID: 6484 Comm: syz.0.545 Not tainted syzkaller #0
[  227.893546][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  227.908233][ T6484] Call Trace:
[  227.914661][ T6484]  <TASK>
[  227.918823][ T6484]  dump_stack_lvl+0x188/0x250
[  227.927178][ T6484]  ? show_regs_print_info+0x20/0x20
[  227.932852][ T6484]  ? _printk+0xda/0x130
[  227.939822][ T6484]  ? dvb_device_open+0xc6/0x370
[  227.947194][ T6484]  ? load_image+0x400/0x400
[  227.957257][ T6484]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  227.968930][ T6484]  print_address_description+0x60/0x2d0
[  227.977271][ T6484]  ? dvb_device_open+0xc6/0x370
[  227.984310][ T6484]  kasan_report+0xdf/0x130
[  227.990044][ T6484]  ? dvb_device_open+0xc6/0x370
[  227.995912][ T6484]  dvb_device_open+0xc6/0x370
[  228.006291][ T6484]  ? do_raw_spin_unlock+0x11d/0x230
[  228.016691][ T6484]  chrdev_open+0x5c5/0x6a0
[  228.022800][ T6484]  ? cd_forget+0x160/0x160
[  228.032198][ T6484]  ? fsnotify_perm+0x3a7/0x560
[  228.040229][ T6484]  ? cd_forget+0x160/0x160
[  228.045720][ T6484]  do_dentry_open+0x7ff/0xf80
[  228.053112][ T6484]  path_openat+0x26f5/0x2fa0
[  228.058887][ T6484]  ? verify_lock_unused+0x140/0x140
[  228.067910][ T6484]  ? slab_post_alloc_hook+0x4c/0x380
[  228.075305][ T6484]  ? do_filp_open+0x410/0x410
[  228.083152][ T6484]  do_filp_open+0x1e2/0x410
[  228.090583][ T6484]  ? vfs_tmpfile+0x300/0x300
[  228.098368][ T6484]  ? _raw_spin_unlock+0x24/0x40
[  228.106884][ T6484]  ? alloc_fd+0x598/0x630
[  228.112984][ T6484]  do_sys_openat2+0x150/0x4b0
[  228.123924][ T6484]  ? __lock_acquire+0x7d10/0x7d10
[  228.131432][ T6484]  ? do_sys_open+0xe0/0xe0
[  228.139667][ T6484]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  228.149881][ T6484]  ? lock_chain_count+0x20/0x20
[  228.155761][ T6484]  ? vtime_user_exit+0x2c8/0x3e0
[  228.166341][ T6484]  __x64_sys_openat+0x135/0x160
[  228.177519][ T6484]  do_syscall_64+0x4c/0xa0
[  228.188107][ T6484]  ? clear_bhb_loop+0x30/0x80
[  228.195295][ T6484]  ? clear_bhb_loop+0x30/0x80
[  228.201916][ T6484]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  228.213361][ T6484] RIP: 0033:0x7f0b0ab8968e
[  228.218449][ T6484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  228.248702][ T6484] RSP: 002b:00007f0b08e00b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  228.261746][ T6484] RAX: ffffffffffffffda RBX: 00007f0b08e016c0 RCX: 00007f0b0ab8968e
[  228.275859][ T6484] RDX: 0000000000000002 RSI: 00007f0b08e00c00 RDI: ffffffffffffff9c
[  228.292797][ T6484] RBP: 00007f0b08e00c00 R08: 0000000000000000 R09: 0000000000000000
[  228.306952][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  228.321977][ T6484] R13: 00007f0b0ae42128 R14: 00007f0b0ae42090 R15: 00007ffc2008c038
[  228.333248][ T6484]  </TASK>
[  228.339584][ T6484] 
[  228.342237][ T6484] Allocated by task 1:
[  228.346847][ T6484]  __kasan_kmalloc+0xb5/0xf0
[  228.353051][ T6484]  dvb_register_device+0x311/0x2170
[  228.360210][ T6484]  dvb_register_frontend+0x645/0x920
[  228.367511][ T6484]  vidtv_bridge_probe+0x9a1/0xf70
[  228.378692][ T6484]  platform_probe+0x137/0x1c0
[  228.385422][ T6484]  really_probe+0x284/0xc80
[  228.392548][ T6484]  __driver_probe_device+0x18c/0x330
[  228.404555][ T6484]  driver_probe_device+0x4f/0x420
[  228.416866][ T6484]  __driver_attach+0x46b/0x670
[  228.424243][ T6484]  bus_for_each_dev+0x182/0x1f0
[  228.434661][ T6484]  bus_add_driver+0x30a/0x5a0
[  228.443505][ T6484]  driver_register+0x32d/0x430
[  228.451967][ T6484]  vidtv_bridge_init+0x39/0x70
[  228.459963][ T6484]  do_one_initcall+0x272/0x730
[  228.467917][ T6484]  do_initcall_level+0x137/0x1f0
[  228.474849][ T6484]  do_initcalls+0x4b/0x90
[  228.476692][ T1347] Bluetooth: hci1: command 0x0409 tx timeout
[  228.485192][ T6484]  kernel_init_freeable+0x3e9/0x570
[  228.485261][ T6484]  kernel_init+0x19/0x1b0
[  228.485284][ T6484]  ret_from_fork+0x1f/0x30
[  228.485304][ T6484] 
[  228.529983][ T6484] Freed by task 6393:
[  228.538123][ T6484]  kasan_set_track+0x4b/0x70
[  228.544667][ T6484]  kasan_set_free_info+0x1f/0x40
[  228.553076][ T6484]  ____kasan_slab_free+0xd5/0x110
[  228.561960][ T6484]  slab_free_freelist_hook+0xea/0x170
[  228.569843][ T6484]  kfree+0xef/0x2a0
[  228.576965][ T6484]  dvb_device_open+0x2e7/0x370
[  228.584645][ T6484]  chrdev_open+0x5c5/0x6a0
[  228.591193][ T6484]  do_dentry_open+0x7ff/0xf80
[  228.596100][ T6484]  path_openat+0x26f5/0x2fa0
[  228.604020][ T6484]  do_filp_open+0x1e2/0x410
[  228.610501][ T6484]  do_sys_openat2+0x150/0x4b0
[  228.619216][ T6484]  __x64_sys_openat+0x135/0x160
[  228.626035][ T6484]  do_syscall_64+0x4c/0xa0
[  228.631748][ T6484]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  228.639019][ T6484] 
[  228.641845][ T6484] The buggy address belongs to the object at ffff88814bbec400
[  228.641845][ T6484]  which belongs to the cache kmalloc-256 of size 256
[  228.660342][ T6484] The buggy address is located 24 bytes inside of
[  228.660342][ T6484]  256-byte region [ffff88814bbec400, ffff88814bbec500)
[  228.677467][ T6484] The buggy address belongs to the page:
[  228.683814][ T6484] page:ffffea00052efb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14bbec
[  228.699040][ T6484] head:ffffea00052efb00 order:1 compound_mapcount:0
[  228.707553][ T6484] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff)
[  228.718580][ T6484] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888016c41b40
[  228.729843][ T6484] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  228.742142][ T6484] page dumped because: kasan: bad access detected
[  228.753261][ T6484] page_owner tracks the page as allocated
[  228.761920][ T6484] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 18022922423, free_ts 0
[  228.788675][ T6484]  get_page_from_freelist+0x1bbd/0x1ca0
[  228.796621][ T6484]  __alloc_pages+0x1ee/0x480
[  228.801688][ T6484]  alloc_page_interleave+0x24/0x1e0
[  228.810090][ T6484]  new_slab+0xc0/0x4b0
[  228.819713][ T6484]  ___slab_alloc+0x80a/0xdd0
[  228.826296][ T6484]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  228.836565][ T6484]  bus_add_driver+0xda/0x5a0
[  228.845352][ T6484]  driver_register+0x32d/0x430
[  228.850617][ T6484]  i2c_register_driver+0xb6/0x160
[  228.855978][ T6484]  do_one_initcall+0x272/0x730
[  228.862282][ T6484]  do_initcall_level+0x137/0x1f0
[  228.868288][ T6484]  do_initcalls+0x4b/0x90
[  228.873286][ T6484]  kernel_init_freeable+0x3e9/0x570
[  228.879281][ T6484]  kernel_init+0x19/0x1b0
[  228.883954][ T6484]  ret_from_fork+0x1f/0x30
[  228.889409][ T6484] page_owner free stack trace missing
[  228.897534][ T6484] 
[  228.901739][ T6484] Memory state around the buggy address:
[  228.908467][ T6484]  ffff88814bbec300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  228.918410][ T6484]  ffff88814bbec380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  228.929248][ T6484] >ffff88814bbec400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.939160][ T6484]                             ^
[  228.945002][ T6484]  ffff88814bbec480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  228.956332][ T6484]  ffff88814bbec500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  228.965232][ T6484] ==================================================================
[  228.974077][ T6484] Disabling lock debugging due to kernel taint
[  228.982376][ T6484] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  228.992870][ T6484] CPU: 1 PID: 6484 Comm: syz.0.545 Tainted: G    B             syzkaller #0
[  229.003652][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  229.016716][ T6484] Call Trace:
[  229.021164][ T6484]  <TASK>
[  229.025519][ T6484]  dump_stack_lvl+0x188/0x250
[  229.031272][ T6484]  ? show_regs_print_info+0x20/0x20
[  229.036934][ T6484]  ? load_image+0x400/0x400
[  229.042747][ T6484]  panic+0x2e5/0x810
[  229.047536][ T6484]  ? bpf_jit_dump+0xd0/0xd0
[  229.052306][ T6484]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  229.058947][ T6484]  ? check_panic_on_warn+0x6c/0xa0
[  229.066887][ T6484]  ? dvb_device_open+0xc6/0x370
[  229.072528][ T6484]  check_panic_on_warn+0x80/0xa0
[  229.078641][ T6484]  ? dvb_device_open+0xc6/0x370
[  229.084557][ T6484]  end_report+0x6d/0xf0
[  229.089217][ T6484]  kasan_report+0x102/0x130
[  229.096212][ T6484]  ? dvb_device_open+0xc6/0x370
[  229.103285][ T6484]  dvb_device_open+0xc6/0x370
[  229.109259][ T6484]  ? do_raw_spin_unlock+0x11d/0x230
[  229.116649][ T6484]  chrdev_open+0x5c5/0x6a0
[  229.122058][ T6484]  ? cd_forget+0x160/0x160
[  229.129137][ T6484]  ? fsnotify_perm+0x3a7/0x560
[  229.135296][ T6484]  ? cd_forget+0x160/0x160
[  229.142463][ T6484]  do_dentry_open+0x7ff/0xf80
[  229.150785][ T6484]  path_openat+0x26f5/0x2fa0
[  229.156102][ T6484]  ? verify_lock_unused+0x140/0x140
[  229.162037][ T6484]  ? slab_post_alloc_hook+0x4c/0x380
[  229.170854][ T6484]  ? do_filp_open+0x410/0x410
[  229.178245][ T6484]  do_filp_open+0x1e2/0x410
[  229.186161][ T6484]  ? vfs_tmpfile+0x300/0x300
[  229.191630][ T6484]  ? _raw_spin_unlock+0x24/0x40
[  229.197173][ T6484]  ? alloc_fd+0x598/0x630
[  229.202844][ T6484]  do_sys_openat2+0x150/0x4b0
[  229.209224][ T6484]  ? __lock_acquire+0x7d10/0x7d10
[  229.219615][ T6484]  ? do_sys_open+0xe0/0xe0
[  229.224359][ T6484]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  229.231272][ T6484]  ? lock_chain_count+0x20/0x20
[  229.237378][ T6484]  ? vtime_user_exit+0x2c8/0x3e0
[  229.243227][ T6484]  __x64_sys_openat+0x135/0x160
[  229.250406][ T6484]  do_syscall_64+0x4c/0xa0
[  229.258389][ T6484]  ? clear_bhb_loop+0x30/0x80
[  229.263794][ T6484]  ? clear_bhb_loop+0x30/0x80
[  229.270144][ T6484]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  229.278019][ T6484] RIP: 0033:0x7f0b0ab8968e
[  229.283252][ T6484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  229.310071][ T6484] RSP: 002b:00007f0b08e00b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  229.322343][ T6484] RAX: ffffffffffffffda RBX: 00007f0b08e016c0 RCX: 00007f0b0ab8968e
[  229.332808][ T6484] RDX: 0000000000000002 RSI: 00007f0b08e00c00 RDI: ffffffffffffff9c
[  229.344636][ T6484] RBP: 00007f0b08e00c00 R08: 0000000000000000 R09: 0000000000000000
[  229.358375][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  229.369070][ T6484] R13: 00007f0b0ae42128 R14: 00007f0b0ae42090 R15: 00007ffc2008c038
[  229.380952][ T6484]  </TASK>
[  229.386144][ T6484] Kernel Offset: disabled
[  229.396436][ T6484] Rebooting in 86400 seconds..