last executing test programs:

2m28.86517453s ago: executing program 3 (id=403):
syz_emit_vhci(0x0, 0xf)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
syz_open_procfs(0x0, 0x0)
io_setup(0x2, &(0x7f0000000180))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000015c0)=[{0x0}], 0x1, 0xf0, 0x67)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40085)
write(r0, &(0x7f0000000340)="29000000010003", 0x7)

2m26.411780969s ago: executing program 3 (id=411):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ptrace(0x10, 0x1)

2m26.264340242s ago: executing program 3 (id=412):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000600), 0xfec8)
recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000440)=""/123, 0x7b}], 0x4, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

2m24.992065523s ago: executing program 3 (id=413):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

2m24.424537436s ago: executing program 3 (id=416):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
io_setup(0x2, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000940))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)

2m23.786853572s ago: executing program 3 (id=419):
syz_emit_vhci(0x0, 0xf)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
syz_open_procfs(0x0, 0x0)
io_setup(0x2, &(0x7f0000000180))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0xf0, 0x67)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40085)
write(r0, &(0x7f0000000340)="29000000010003", 0x7)

2m22.713864647s ago: executing program 32 (id=419):
syz_emit_vhci(0x0, 0xf)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
syz_open_procfs(0x0, 0x0)
io_setup(0x2, &(0x7f0000000180))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0xf0, 0x67)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40085)
write(r0, &(0x7f0000000340)="29000000010003", 0x7)

7.439270801s ago: executing program 4 (id=868):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0)
write(r0, &(0x7f0000001240)="62f5ff6ccf3d2ec97f0e4bc8a900d2e75067a5109d749cdf1ba00926335fdca4d2df9c6093533dbe86131af765f8be39df30e3e4f257006bf1826c92170c0a26ce80252e0834a6915575ea7d81837053c6c447", 0x53)
write$P9_RWRITE(r0, 0x0, 0x0)

7.248841656s ago: executing program 4 (id=870):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)

7.05800162s ago: executing program 4 (id=873):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)={[{@largeio}, {@filestreams}, {@filestreams}, {@prjquota}]}, 0x8, 0xb919, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x5c)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4010586e, &(0x7f00000000c0)={0x6e41, 0x300000000000000, 0x0, 0x7, 0x1})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x5c)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r2, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x4010586e, &(0x7f00000000c0)={0x6e41, 0x300000000000000, 0x0, 0x7, 0x1})

3.876743597s ago: executing program 4 (id=884):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000001c0))
r3 = syz_open_procfs(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0x0)
r4 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x200, 0xf0, [0x6, 0x30000000, 0x8]}})
keyctl$session_to_parent(0x12)

3.113538125s ago: executing program 1 (id=889):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', 0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)

2.370856713s ago: executing program 1 (id=890):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, 0x0, 0x0)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)

2.042826641s ago: executing program 1 (id=894):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x240, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0)
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302)
r1 = syz_open_dev$evdev(&(0x7f0000000380), 0xfffffffffffffffe, 0xc2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a01, "0f9d0000002000000000b82100"})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket(0x29, 0x5, 0x24)
connect$vsock_stream(r3, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
readv(r2, &(0x7f00000026c0)=[{&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/73, 0x49}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/44, 0x2c}, {&(0x7f0000002600)=""/177, 0xb1}], 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4$unix(r3, 0x0, 0x0, 0x80000)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0))
ioctl$SNAPSHOT_S2RAM(r0, 0x330b)

1.906635065s ago: executing program 2 (id=895):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea07", 0xd, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)

1.843321696s ago: executing program 0 (id=896):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}})
syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[], 0x0)

1.67942591s ago: executing program 0 (id=897):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.480942095s ago: executing program 0 (id=898):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', 0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)

1.381975377s ago: executing program 0 (id=899):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf)
r4 = accept$alg(r3, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000600), 0xfec8)
recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000440)=""/123, 0x7b}], 0x4, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

1.318823999s ago: executing program 2 (id=900):
semop(0x0, 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0xfffd}, {0x1, 0xffff}], 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000240)=[{0x1, 0xacd, 0x1000}, {0x4, 0xf}], 0x2, 0x0)

1.24315025s ago: executing program 2 (id=901):
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.184943822s ago: executing program 2 (id=902):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, 0x0, 0x0)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)

811.94294ms ago: executing program 4 (id=903):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(0xffffffffffffffff, 0xfffffffc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40)

471.664179ms ago: executing program 2 (id=904):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, 0x0}, 0x4)

366.639831ms ago: executing program 0 (id=905):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}})
syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)

348.532822ms ago: executing program 1 (id=906):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80805, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

154.794527ms ago: executing program 1 (id=907):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', 0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)

148.059766ms ago: executing program 4 (id=908):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,coherency=full,resv_level=00000000000000000000\x00\x00\x00\x00\x00\x00\x00\x00ocks,coherency=full,inode64,\x00'], 0x1, 0x4421, &(0x7f0000004500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0xa, 0x9, 0x6}}, 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x5, 0x8ffff)

130.692567ms ago: executing program 0 (id=909):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ptrace(0x10, 0x1)

50.834009ms ago: executing program 2 (id=910):
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0)

0s ago: executing program 1 (id=911):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000001c0))
r3 = syz_open_procfs(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0x0)
r4 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x200, 0xf0, [0x6, 0x30000000, 0x8]}})
keyctl$session_to_parent(0x12)

kernel console output (not intermixed with test programs):

e: batadv_slave_0
[   80.391686][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.418087][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.437193][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.444237][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.470530][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.483907][ T5777] team0: Port device team_slave_1 added
[   80.497855][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.505345][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.513021][ T5775] bridge_slave_1: entered allmulticast mode
[   80.519904][ T5775] bridge_slave_1: entered promiscuous mode
[   80.557375][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.564675][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.573062][ T5774] bridge_slave_0: entered allmulticast mode
[   80.580051][ T5774] bridge_slave_0: entered promiscuous mode
[   80.615656][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.624815][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.632718][ T5774] bridge_slave_1: entered allmulticast mode
[   80.639574][ T5774] bridge_slave_1: entered promiscuous mode
[   80.679051][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.691327][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.701146][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.708343][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.734329][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.747853][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.754935][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.780998][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.814543][ T5776] hsr_slave_0: entered promiscuous mode
[   80.820936][ T5776] hsr_slave_1: entered promiscuous mode
[   80.855948][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.869486][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.893831][ T5775] team0: Port device team_slave_0 added
[   80.908977][ T5775] team0: Port device team_slave_1 added
[   80.982424][ T5774] team0: Port device team_slave_0 added
[   81.008451][ T5777] hsr_slave_0: entered promiscuous mode
[   81.015012][ T5777] hsr_slave_1: entered promiscuous mode
[   81.021124][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.029181][ T5777] Cannot create hsr debugfs directory
[   81.035524][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.043048][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.070678][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.085063][ T5774] team0: Port device team_slave_1 added
[   81.091505][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.098677][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.126316][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.215945][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.223222][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.249566][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.262665][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.269635][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.295741][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.342740][ T5775] hsr_slave_0: entered promiscuous mode
[   81.349313][ T5775] hsr_slave_1: entered promiscuous mode
[   81.355582][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.363375][ T5775] Cannot create hsr debugfs directory
[   81.383156][ T5779] Bluetooth: hci1: command tx timeout
[   81.389159][ T5779] Bluetooth: hci0: command tx timeout
[   81.395186][ T5790] Bluetooth: hci3: command tx timeout
[   81.400791][ T5790] Bluetooth: hci2: command tx timeout
[   81.439594][ T5774] hsr_slave_0: entered promiscuous mode
[   81.448893][ T5774] hsr_slave_1: entered promiscuous mode
[   81.455162][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.463398][ T5774] Cannot create hsr debugfs directory
[   81.705307][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.740402][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.774151][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.785207][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.857181][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.887161][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.897392][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.915422][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.986703][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.003208][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.015907][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.028241][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.101104][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.123449][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.134376][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.145013][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.267008][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.320015][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   82.338098][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.358144][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.365439][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.386244][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   82.401519][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.408693][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.421857][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.429118][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.473173][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.480398][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.525647][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.640569][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.670338][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.715241][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   82.740705][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   82.768284][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.775468][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.791160][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.798389][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.860639][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.867841][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.905590][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.912802][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.938431][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.170979][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.270164][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.346794][ T5777] veth0_vlan: entered promiscuous mode
[   83.376356][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.389918][ T5777] veth1_vlan: entered promiscuous mode
[   83.404731][ T5776] veth0_vlan: entered promiscuous mode
[   83.430578][ T5776] veth1_vlan: entered promiscuous mode
[   83.462625][ T5779] Bluetooth: hci3: command tx timeout
[   83.468074][ T5779] Bluetooth: hci0: command tx timeout
[   83.473721][ T5790] Bluetooth: hci2: command tx timeout
[   83.476031][ T5788] Bluetooth: hci1: command tx timeout
[   83.514975][ T5777] veth0_macvtap: entered promiscuous mode
[   83.528319][ T5777] veth1_macvtap: entered promiscuous mode
[   83.548041][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.595963][ T5776] veth0_macvtap: entered promiscuous mode
[   83.610127][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.645030][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.657580][ T5776] veth1_macvtap: entered promiscuous mode
[   83.679637][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.688845][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.698352][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.708425][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.728158][ T5775] veth0_vlan: entered promiscuous mode
[   83.752938][ T5775] veth1_vlan: entered promiscuous mode
[   83.793970][ T5774] veth0_vlan: entered promiscuous mode
[   83.809222][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.825179][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.836620][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.849530][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.861388][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.876542][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.904170][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.913106][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.921814][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.930890][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.959479][ T5774] veth1_vlan: entered promiscuous mode
[   84.040169][ T5775] veth0_macvtap: entered promiscuous mode
[   84.060484][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.087155][ T5775] veth1_macvtap: entered promiscuous mode
[   84.093119][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.119238][ T5774] veth0_macvtap: entered promiscuous mode
[   84.134905][ T5774] veth1_macvtap: entered promiscuous mode
[   84.181271][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.196599][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.207642][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.218140][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.229618][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.247661][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.258788][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.269599][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.280120][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.290124][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.301195][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.321050][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.346516][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.360403][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.371697][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.386098][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.397934][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.411305][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.417603][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.430092][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.438874][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.441386][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.447735][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.469094][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.483463][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.504728][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.519697][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.529675][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.540899][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.550821][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.561278][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.572721][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.599754][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.610508][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.620751][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.629494][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.637727][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.648924][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.240911][ T5841] 9pnet_virtio: no channels available for device syz
[   85.542122][ T5788] Bluetooth: hci1: command tx timeout
[   85.547619][ T5788] Bluetooth: hci0: command tx timeout
[   85.566894][ T5788] Bluetooth: hci2: command tx timeout
[   85.588618][ T5788] Bluetooth: hci3: command tx timeout
[   85.663863][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.715795][ T5845] syz.3.4[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   85.856333][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.891665][ T5845] loop3: detected capacity change from 0 to 128
[   85.907244][ T3413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.921291][ T3413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.060818][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.102873][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.187928][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.224918][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.622681][ T5779] Bluetooth: hci3: command tx timeout
[   87.628146][ T5779] Bluetooth: hci2: command tx timeout
[   87.634032][ T5788] Bluetooth: hci0: command tx timeout
[   87.639455][ T5788] Bluetooth: hci1: command tx timeout
[   89.074793][ T5864] loop0: detected capacity change from 0 to 2048
[   89.157169][ T5867] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.340404][ T5873] Zero length message leads to an empty skb
[   89.423163][ T5866] syzkaller0: entered promiscuous mode
[   89.451859][ T5866] syzkaller0: entered allmulticast mode
[   89.496504][ T5875] loop3: detected capacity change from 0 to 128
[   89.528251][ T5875] =======================================================
[   89.528251][ T5875] WARNING: The mand mount option has been deprecated and
[   89.528251][ T5875]          and is ignored by this kernel. Remove the mand
[   89.528251][ T5875]          option from the mount to silence this warning.
[   89.528251][ T5875] =======================================================
[   89.563119][    C1] vkms_vblank_simulate: vblank timer overrun
[   89.647785][ T5875] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   89.703124][ T5875] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.032857][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.604012][ T5886] 9pnet_virtio: no channels available for device syz
[   91.945498][   T35] cfg80211: failed to load regulatory.db
[   93.714754][ T5903] loop0: detected capacity change from 0 to 128
[   93.978438][ T5907] loop1: detected capacity change from 0 to 128
[   94.040683][ T5907] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   94.089675][ T5907] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   94.443825][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   95.059535][ T5919] input: syz1 as /devices/virtual/input/input5
[   96.602550][ T5937] Bluetooth: MGMT ver 1.22
[   96.893691][ T5940] syzkaller0: entered promiscuous mode
[   96.899689][ T5940] syzkaller0: entered allmulticast mode
[   96.961067][ T5943] loop3: detected capacity change from 0 to 128
[   97.040238][ T5943] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.111836][ T5943] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   97.591516][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.874344][ T5948] 9pnet_virtio: no channels available for device syz
[   98.662068][ T5781] Bluetooth: hci0: command 0x0401 tx timeout
[  100.830479][ T5976] loop2: detected capacity change from 0 to 128
[  100.882249][ T5976] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.906128][ T5976] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  100.998492][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  101.164840][ T5982] fuse: Bad value for 'rootmode'
[  101.331821][ T5984] 9pnet_virtio: no channels available for device syz
[  102.970501][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'.
[  103.837804][ T6003] loop1: detected capacity change from 0 to 128
[  103.857087][ T6003] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  103.878402][ T6003] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  103.933184][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.656770][ T6021] 9pnet_virtio: no channels available for device syz
[  106.653066][ T5787] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  106.852090][ T5787] usb 4-1: Using ep0 maxpacket: 32
[  106.981076][ T5787] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  107.006682][ T5787] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  107.045991][ T5787] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  107.074744][ T5787] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  107.094588][ T5787] usb 4-1: config 0 interface 0 has no altsetting 0
[  107.113856][ T5787] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  107.127652][ T5787] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  107.139547][ T5787] usb 4-1: Product: syz
[  107.145069][ T5787] usb 4-1: Manufacturer: syz
[  107.154734][ T5787] usb 4-1: SerialNumber: syz
[  107.169742][ T5787] usb 4-1: config 0 descriptor??
[  107.187657][ T5787] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  107.208676][ T5787] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  108.703049][ T6058] X.509: signatureAlgorithm (99) differs from tbsCertificate.signature (7)
[  108.817093][    C1] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  108.817221][ T5836] usb 4-1: USB disconnect, device number 2
[  108.862210][ T6032] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  108.894442][ T6056] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  108.927344][ T5836] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  111.222837][ T5781] Bluetooth: hci2: command 0x0405 tx timeout
[  111.252667][ T6093] tipc: Can't bind to reserved service type 1
[  113.231123][ T6119] loop1: detected capacity change from 0 to 512
[  113.257369][ T6119] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  113.314452][ T6119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  113.397653][ T6119] EXT4-fs (loop1): 1 truncate cleaned up
[  113.404670][ T6119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.540789][   T27] audit: type=1804 audit(1786606470.481:2): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.90" name="/newroot/24/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  113.750176][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.733457][ T6135] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  117.118441][ T6165] netlink: 348 bytes leftover after parsing attributes in process `syz.2.104'.
[  117.127772][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'.
[  121.291297][ T6207] loop0: detected capacity change from 0 to 1024
[  121.336976][ T6207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.699596][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.546408][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'.
[  122.891847][ T6221] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  123.742149][ T6228] loop1: detected capacity change from 0 to 128
[  123.801252][ T6228] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  123.850506][ T6228] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.821825][ T6247] loop0: detected capacity change from 0 to 128
[  126.202272][ T5769] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  126.933253][ T6247] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.132'.
[  127.957332][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.246242][ T6277] loop2: detected capacity change from 0 to 512
[  131.287215][ T6277] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  131.341314][ T6277] EXT4-fs (loop2): 1 truncate cleaned up
[  131.383339][ T6277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.492488][   T27] audit: type=1804 audit(1786606488.431:3): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.142" name="/newroot/32/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  131.599359][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.980980][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  132.992077][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  133.392348][ T6297] loop3: detected capacity change from 0 to 128
[  133.608738][ T5769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  133.637229][ T6297] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.143'.
[  134.282224][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  135.208826][ T6309] loop3: detected capacity change from 0 to 512
[  135.262127][ T6309] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  135.299522][ T6309] EXT4-fs (loop3): 1 truncate cleaned up
[  135.311941][ T6311] loop0: detected capacity change from 0 to 128
[  135.327120][ T6309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.371841][ T6311] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.402720][ T6311] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.553554][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.641355][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.988275][ T6335] input: syz1 as /devices/virtual/input/input6
[  137.020048][ T6338] loop2: detected capacity change from 0 to 128
[  137.158130][ T6338] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.163'.
[  138.213893][ T6357] loop2: detected capacity change from 0 to 512
[  138.230585][ T6357] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  138.284661][ T6357] EXT4-fs (loop2): 1 truncate cleaned up
[  138.336406][ T6357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.420057][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.975007][ T6368] input: syz1 as /devices/virtual/input/input7
[  139.457913][ T6371] loop0: detected capacity change from 0 to 128
[  140.384929][ T6383] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6383]
[  141.582437][ T5781] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  141.591085][ T5781] Bluetooth: hci3: Injecting HCI hardware error event
[  141.600107][ T5781] Bluetooth: hci3: hardware error 0x00
[  142.043366][ T6389] loop2: detected capacity change from 0 to 32768
[  142.131639][ T6389] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.182 (6389)
[  142.598484][ T6389] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.640135][ T6389] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  142.692168][ T6389] BTRFS info (device loop2): setting nodatasum
[  142.698391][ T6389] BTRFS info (device loop2): force zlib compression, level 3
[  142.743618][ T6389] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  142.755041][ T6404] loop3: detected capacity change from 0 to 128
[  142.812071][ T6389] BTRFS info (device loop2): use lzo compression, level 0
[  142.819366][ T6389] BTRFS info (device loop2): turning on flush-on-commit
[  142.908753][ T6389] BTRFS info (device loop2): enabling auto defrag
[  142.942240][ T6389] BTRFS info (device loop2): max_inline at 4096
[  142.948556][ T6389] BTRFS info (device loop2): using free space tree
[  143.145300][ T6417] loop1: detected capacity change from 0 to 8192
[  143.201187][ T6417] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  143.223468][ T6417] FAT-fs (loop1): error, clusters badly computed (1 != 0)
[  143.230772][ T6417] FAT-fs (loop1): Filesystem has been set read-only
[  143.415325][ T6427] block device autoloading is deprecated and will be removed.
[  143.540894][ T6426] fuse: Unknown parameter '0x0000000000000003'
[  143.712332][ T5781] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  143.807798][ T6389] BTRFS info (device loop2): enabling ssd optimizations
[  144.282520][ T5815] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  144.502087][ T5815] usb 2-1: Using ep0 maxpacket: 16
[  144.527609][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.551253][ T5777] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.563215][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.622192][ T5815] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  144.652038][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.714079][ T5815] usb 2-1: config 0 descriptor??
[  144.838768][ T6445] loop3: detected capacity change from 0 to 128
[  145.166818][ T5815] apple 0003:05AC:024B.0001: bogus close delimiter
[  145.214866][ T5815] apple 0003:05AC:024B.0001: item 0 0 2 10 parsing failed
[  145.235873][ T5815] apple 0003:05AC:024B.0001: parse failed
[  145.277524][ T5815] apple: probe of 0003:05AC:024B.0001 failed with error -22
[  145.365073][   T35] usb 2-1: USB disconnect, device number 2
[  145.709301][ T6455] fuse: Unknown parameter '0x0000000000000003'
[  146.083851][ T6459] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6459]
[  146.848869][ T6463] loop1: detected capacity change from 0 to 1024
[  146.881238][ T6463] EXT4-fs: Ignoring removed bh option
[  146.958443][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.058945][   T27] audit: type=1800 audit(1786606504.001:4): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.203" name="file1" dev="loop1" ino=15 res=0 errno=0
[  147.128275][ T6463] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  147.396802][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.455006][ T6487] Bluetooth: MGMT ver 1.22
[  149.642259][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  150.059081][ T6494] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6494]
[  152.492720][ T6525] loop3: detected capacity change from 0 to 128
[  152.644895][ T6530] loop0: detected capacity change from 0 to 128
[  152.651156][ T6525] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  152.672353][ T6525] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.629499][ T6539] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6539]
[  155.053332][ T6541] loop0: detected capacity change from 0 to 4096
[  155.146963][ T6541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.213364][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.875171][ T5788] Bluetooth: hci2: command 0x0405 tx timeout
[  159.405414][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'.
[  159.445832][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[  159.703703][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.131137][ T6570] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  160.216121][ T6570] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  160.333104][ T6570] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  160.374795][ T6570] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  160.402090][ T6570] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  160.416380][ T6570] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  160.444348][ T6570] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  160.450707][ T6570] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  161.902096][ T5788] Bluetooth: hci0: command 0x0401 tx timeout
[  162.012630][ T6570] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  162.084386][ T6590] loop1: detected capacity change from 0 to 128
[  162.422078][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout
[  162.502396][ T5788] Bluetooth: hci2: command 0x0405 tx timeout
[  162.573054][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'.
[  162.625148][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'.
[  162.799529][ T6600] loop1: detected capacity change from 0 to 128
[  162.912749][ T6600] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.025032][ T6600] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  164.592330][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  164.872272][ T5788] Bluetooth: hci0: command 0x0401 tx timeout
[  164.872298][ T5779] Bluetooth: hci2: command 0x0405 tx timeout
[  164.884512][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout
[  164.925611][ T6616] loop0: detected capacity change from 0 to 128
[  165.941226][ T6620] loop0: detected capacity change from 0 to 32768
[  166.003365][ T6620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.253 (6620)
[  166.053935][ T6620] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.082392][ T6620] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  166.103326][ T6620] BTRFS info (device loop0): using free space tree
[  166.216213][ T6635] loop2: detected capacity change from 0 to 256
[  166.319167][ T6620] BTRFS info (device loop0): enabling ssd optimizations
[  166.342132][ T6620] BTRFS info (device loop0): auto enabling async discard
[  166.430452][ T6635] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  166.503286][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'.
[  166.536443][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.605897][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'.
[  166.628258][   T27] audit: type=1800 audit(1786606523.571:5): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.252" name="file2" dev="loop2" ino=1048594 res=0 errno=0
[  166.726208][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  166.902267][ T5779] Bluetooth: hci2: command 0x0405 tx timeout
[  166.908355][ T5779] Bluetooth: hci0: command 0x0401 tx timeout
[  166.914951][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout
[  167.812198][ T6657] input: syz1 as /devices/virtual/input/input8
[  169.439785][ T6663] loop1: detected capacity change from 0 to 128
[  169.698840][ T6668] loop0: detected capacity change from 0 to 128
[  169.752649][ T6668] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  169.768864][ T6668] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  169.975950][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  170.195121][    T9] usb 2-1: Using ep0 maxpacket: 32
[  170.232037][    T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  170.250460][    T9] usb 2-1: config 0 has no interface number 0
[  170.265860][    T9] usb 2-1: config 0 interface 12 has no altsetting 0
[  170.289169][    T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  170.302379][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.324593][    T9] usb 2-1: Product: syz
[  170.337149][    T9] usb 2-1: Manufacturer: syz
[  170.355987][    T9] usb 2-1: SerialNumber: syz
[  170.453705][    T9] usb 2-1: config 0 descriptor??
[  171.080069][    T9] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  171.101691][    T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  171.136987][    T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  171.177385][    T9] f81534: probe of 2-1:0.12 failed with error -71
[  171.222390][    T9] usb 2-1: USB disconnect, device number 3
[  171.362257][ T6686] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6686]
[  172.186861][ T6688] loop1: detected capacity change from 0 to 2048
[  172.233823][ T6688] EXT4-fs (loop1): unsupported inode size: 25856
[  172.254159][ T6688] EXT4-fs (loop1): blocksize: 2048
[  172.517584][ T6695] loop3: detected capacity change from 0 to 128
[  172.587372][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  173.979745][ T6709] loop1: detected capacity change from 0 to 8192
[  174.029258][ T6709] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  174.045358][ T6709] FAT-fs (loop1): error, clusters badly computed (1 != 0)
[  174.052658][ T6709] FAT-fs (loop1): Filesystem has been set read-only
[  174.210270][ T5779] Bluetooth: hci2: command 0x0405 tx timeout
[  175.607511][ T6728] loop1: detected capacity change from 0 to 128
[  179.107000][ T6758] capability: warning: `syz.1.290' uses 32-bit capabilities (legacy support in use)
[  179.201648][ T6760] loop3: detected capacity change from 0 to 128
[  179.281755][ T6435] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  179.293397][ T6760] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.291'.
[  179.732058][ T5155] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  179.982171][ T5155] usb 2-1: Using ep0 maxpacket: 16
[  179.993617][ T5155] usb 2-1: unable to get BOS descriptor or descriptor too short
[  180.007225][ T5155] usb 2-1: config 0 has an invalid interface number: 228 but max is 2
[  180.020392][ T5155] usb 2-1: config 0 has an invalid interface number: 172 but max is 2
[  180.034823][ T5155] usb 2-1: config 0 has an invalid interface number: 181 but max is 2
[  180.044439][ T5155] usb 2-1: config 0 has no interface number 0
[  180.050713][ T5155] usb 2-1: config 0 has no interface number 1
[  180.058767][ T5155] usb 2-1: config 0 has no interface number 2
[  180.068287][ T5155] usb 2-1: config 0 interface 228 has no altsetting 0
[  180.081498][ T5155] usb 2-1: config 0 interface 172 has no altsetting 0
[  180.088770][ T5155] usb 2-1: config 0 interface 181 has no altsetting 0
[  180.140510][ T5155] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f
[  180.151918][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.168367][ T5155] usb 2-1: Product: syz
[  180.176400][ T5155] usb 2-1: Manufacturer: syz
[  180.181347][ T5155] usb 2-1: SerialNumber: syz
[  180.189525][ T5155] usb 2-1: config 0 descriptor??
[  180.292184][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  180.419380][ T5155] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  180.427735][ T5155] usb 2-1: selecting invalid altsetting 0
[  180.436676][ T2321] pvrusb2: Invalid write control endpoint
[  180.444167][ T5155] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  180.455650][ T5155] usb 2-1: selecting invalid altsetting 0
[  180.473992][ T5155] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  180.490360][ T5155] usb 2-1: selecting invalid altsetting 0
[  180.496347][   T23] usb 3-1: Using ep0 maxpacket: 32
[  180.509546][   T23] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  180.549389][ T5155] usb 2-1: USB disconnect, device number 4
[  180.558104][   T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  180.574550][   T23] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  180.589917][   T23] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  180.641512][ T2321] pvrusb2: Invalid write control endpoint
[  180.645190][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[  180.660514][ T2321] pvrusb2: Invalid write control endpoint
[  180.681464][   T23] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  180.699481][   T23] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  180.702880][ T2321] pvrusb2: Invalid write control endpoint
[  180.709784][   T23] usb 3-1: Product: syz
[  180.718484][   T23] usb 3-1: Manufacturer: syz
[  180.727435][   T23] usb 3-1: SerialNumber: syz
[  180.743189][ T2321] pvrusb2: Invalid write control endpoint
[  180.752642][ T2321] pvrusb2: Invalid write control endpoint
[  180.762153][   T23] usb 3-1: config 0 descriptor??
[  180.772051][ T2321] pvrusb2: Invalid write control endpoint
[  180.787713][ T2321] pvrusb2: Invalid write control endpoint
[  180.788938][   T23] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  180.805869][ T2321] pvrusb2: Invalid write control endpoint
[  180.818565][ T2321] pvrusb2: Invalid write control endpoint
[  180.829453][   T23] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  180.848162][ T2321] pvrusb2: Invalid write control endpoint
[  180.862530][ T2321] pvrusb2: Invalid write control endpoint
[  180.882201][ T2321] pvrusb2: Invalid write control endpoint
[  180.887973][ T2321] pvrusb2: Invalid write control endpoint
[  180.909329][ T2321] pvrusb2: Invalid write control endpoint
[  180.936106][ T2321] pvrusb2: Invalid write control endpoint
[  180.958903][ T2321] pvrusb2: Invalid write control endpoint
[  180.978673][ T2321] pvrusb2: Invalid write control endpoint
[  180.991748][ T2321] pvrusb2: Invalid write control endpoint
[  181.005012][   T23] usb 3-1: USB disconnect, device number 2
[  181.026517][ T2321] pvrusb2: Invalid write control endpoint
[  181.033392][   T23] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  181.054038][ T2321] pvrusb2: Invalid write control endpoint
[  181.059785][ T2321] pvrusb2: Invalid write control endpoint
[  181.095582][ T2321] pvrusb2: Invalid write control endpoint
[  181.101722][ T2321] pvrusb2: Invalid write control endpoint
[  181.114268][ T2321] pvrusb2: Invalid write control endpoint
[  181.120129][ T2321] pvrusb2: Invalid write control endpoint
[  181.146520][ T2321] pvrusb2: Invalid write control endpoint
[  181.156608][ T2321] pvrusb2: Invalid write control endpoint
[  181.172017][ T2321] pvrusb2: Invalid write control endpoint
[  181.178443][ T2321] pvrusb2: Invalid write control endpoint
[  181.218776][ T2321] pvrusb2: Invalid write control endpoint
[  181.241998][ T2321] pvrusb2: Invalid write control endpoint
[  181.264313][ T2321] pvrusb2: Invalid write control endpoint
[  181.275274][ T2321] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  181.490253][ T6804] loop1: detected capacity change from 0 to 128
[  181.528758][ T2321] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  181.896286][ T6804] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.304'.
[  181.999400][ T2321] pvrusb2: Invalid write control endpoint
[  182.282448][ T2321] pvrusb2: Invalid write control endpoint
[  182.288278][ T2321] pvrusb2: Invalid write control endpoint
[  182.329450][ T2321] pvrusb2: Invalid write control endpoint
[  182.349553][ T2321] pvrusb2: Invalid write control endpoint
[  182.380277][ T2321] pvrusb2: Invalid write control endpoint
[  182.412023][ T2321] pvrusb2: Invalid write control endpoint
[  182.441659][ T2321] pvrusb2: Invalid write control endpoint
[  182.465570][ T2321] pvrusb2: Invalid write control endpoint
[  182.471358][ T2321] pvrusb2: Invalid write control endpoint
[  182.535195][   T27] audit: type=1326 audit(1786606539.471:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.3.306" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb9b0397e57 code=0x0
[  182.562309][ T2321] pvrusb2: Invalid write control endpoint
[  182.568079][ T2321] pvrusb2: Invalid write control endpoint
[  182.599745][ T2321] pvrusb2: Invalid write control endpoint
[  182.617900][ T2321] pvrusb2: Invalid write control endpoint
[  182.874765][ T2321] pvrusb2: Invalid write control endpoint
[  182.920179][ T2321] pvrusb2: Invalid write control endpoint
[  182.951115][ T2321] pvrusb2: Invalid write control endpoint
[  182.971715][ T2321] pvrusb2: Invalid write control endpoint
[  183.003398][ T2321] pvrusb2: Invalid write control endpoint
[  183.019709][ T2321] pvrusb2: Invalid write control endpoint
[  183.035748][ T2321] pvrusb2: Invalid write control endpoint
[  183.050943][ T6827] netlink: 348 bytes leftover after parsing attributes in process `syz.1.310'.
[  183.063976][ T2321] pvrusb2: Attached sub-driver cs53l32a
[  183.113057][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'.
[  183.176866][ T2321] pvrusb2: Invalid write control endpoint
[  183.197735][ T2321] pvrusb2: Invalid write control endpoint
[  183.218211][ T2321] pvrusb2: Invalid write control endpoint
[  183.241788][ T2321] pvrusb2: Invalid write control endpoint
[  183.261882][ T2321] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  183.291345][ T2321] pvrusb2: Device being rendered inoperable
[  183.297413][ T6827] netlink: 348 bytes leftover after parsing attributes in process `syz.1.310'.
[  183.297415][ T2321] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  183.311593][ T2321] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  183.383449][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'.
[  183.417112][ T2321] pvrusb2: Invalid write control endpoint
[  183.948903][ T2321] pvrusb2: Invalid write control endpoint
[  183.955837][ T2321] pvrusb2: Invalid write control endpoint
[  183.961683][ T2321] pvrusb2: Invalid write control endpoint
[  183.967852][ T2321] pvrusb2: Invalid write control endpoint
[  183.974292][ T2321] pvrusb2: Invalid write control endpoint
[  183.980047][ T2321] pvrusb2: Invalid write control endpoint
[  183.985937][ T2321] pvrusb2: Invalid write control endpoint
[  183.991701][ T2321] pvrusb2: Invalid write control endpoint
[  183.997595][ T2321] pvrusb2: Invalid write control endpoint
[  184.003391][ T2321] pvrusb2: Invalid write control endpoint
[  184.009232][ T2321] pvrusb2: Invalid write control endpoint
[  184.015085][ T2321] pvrusb2: Invalid write control endpoint
[  184.020914][ T2321] pvrusb2: Invalid write control endpoint
[  184.026733][ T2321] pvrusb2: Invalid write control endpoint
[  184.032646][ T2321] pvrusb2: Invalid write control endpoint
[  184.038406][ T2321] pvrusb2: Invalid write control endpoint
[  184.044297][ T2321] pvrusb2: Invalid write control endpoint
[  184.051024][ T2321] pvrusb2: Invalid write control endpoint
[  184.056941][ T2321] pvrusb2: Invalid write control endpoint
[  184.078082][ T2321] pvrusb2: Invalid write control endpoint
[  184.104931][ T2321] pvrusb2: Invalid write control endpoint
[  184.160075][ T2321] pvrusb2: Invalid write control endpoint
[  184.171008][ T2321] pvrusb2: Invalid write control endpoint
[  184.186756][ T2321] pvrusb2: Invalid write control endpoint
[  184.196042][ T2321] pvrusb2: Invalid write control endpoint
[  184.201822][ T2321] pvrusb2: Invalid write control endpoint
[  184.248353][ T2321] pvrusb2: Invalid write control endpoint
[  184.268610][ T2321] pvrusb2: Invalid write control endpoint
[  184.292097][ T2321] pvrusb2: Invalid write control endpoint
[  184.297887][ T2321] pvrusb2: Invalid write control endpoint
[  184.306516][ T6847] loop1: detected capacity change from 0 to 128
[  184.326999][ T2321] pvrusb2: Invalid write control endpoint
[  184.353349][ T6847] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.316'.
[  184.362712][ T2321] pvrusb2: Invalid write control endpoint
[  184.365815][ T2321] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  184.606778][ T6849] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6849]
[  184.830976][ T2321] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b)
[  184.853759][ T2321] pvrusb2: Invalid write control endpoint
[  184.859531][ T2321] pvrusb2: Invalid write control endpoint
[  184.866100][ T2321] pvrusb2: Invalid write control endpoint
[  184.872885][ T2321] pvrusb2: Invalid write control endpoint
[  184.878779][ T2321] pvrusb2: Invalid write control endpoint
[  184.901904][ T2321] pvrusb2: Invalid write control endpoint
[  184.910885][ T2321] pvrusb2: Invalid write control endpoint
[  184.928426][ T2321] pvrusb2: Invalid write control endpoint
[  184.953428][ T2321] pvrusb2: Invalid write control endpoint
[  184.967530][ T2321] pvrusb2: Invalid write control endpoint
[  185.037991][ T2321] pvrusb2: Invalid write control endpoint
[  185.109714][ T2321] pvrusb2: Invalid write control endpoint
[  185.140059][ T2321] pvrusb2: Invalid write control endpoint
[  185.148867][ T6865] loop2: detected capacity change from 0 to 2048
[  185.150298][ T2321] pvrusb2: Invalid write control endpoint
[  185.177262][ T2321] pvrusb2: Invalid write control endpoint
[  185.183276][ T2321] pvrusb2: Invalid write control endpoint
[  185.189086][ T2321] pvrusb2: Invalid write control endpoint
[  185.195431][ T2321] pvrusb2: Invalid write control endpoint
[  185.201282][ T2321] pvrusb2: Invalid write control endpoint
[  185.208696][ T2321] pvrusb2: Invalid write control endpoint
[  185.214786][ T2321] pvrusb2: Invalid write control endpoint
[  185.220936][ T2321] pvrusb2: Attached sub-driver cs53l32a
[  185.258929][ T6865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.289682][ T6873] loop0: detected capacity change from 0 to 128
[  185.296962][ T2321] pvrusb2: Invalid write control endpoint
[  185.330097][ T2321] pvrusb2: Invalid write control endpoint
[  185.342382][ T2321] pvrusb2: Invalid write control endpoint
[  185.348281][ T2321] pvrusb2: Invalid write control endpoint
[  185.354165][ T2321] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  185.371557][ T2321] pvrusb2: Device being rendered inoperable
[  185.378413][ T2321] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  185.399390][ T2321] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  185.420412][ T2321] pvrusb2: Invalid write control endpoint
[  185.562982][ T2321] pvrusb2: Invalid write control endpoint
[  185.568787][ T2321] pvrusb2: Invalid write control endpoint
[  185.590910][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.619605][ T2321] pvrusb2: Invalid write control endpoint
[  185.626817][ T2321] pvrusb2: Invalid write control endpoint
[  185.632775][ T2321] pvrusb2: Invalid write control endpoint
[  185.638536][ T2321] pvrusb2: Invalid write control endpoint
[  185.652364][ T2321] pvrusb2: Invalid write control endpoint
[  185.658165][ T2321] pvrusb2: Invalid write control endpoint
[  185.697273][ T2321] pvrusb2: Invalid write control endpoint
[  185.712239][ T2321] pvrusb2: Invalid write control endpoint
[  185.718569][ T2321] pvrusb2: Invalid write control endpoint
[  185.724668][ T2321] pvrusb2: Invalid write control endpoint
[  185.730501][ T2321] pvrusb2: Invalid write control endpoint
[  185.738209][ T2321] pvrusb2: Invalid write control endpoint
[  185.744250][ T2321] pvrusb2: Invalid write control endpoint
[  185.750052][ T2321] pvrusb2: Invalid write control endpoint
[  185.756048][ T2321] pvrusb2: Invalid write control endpoint
[  185.761852][ T2321] pvrusb2: Invalid write control endpoint
[  185.767857][ T2321] pvrusb2: Invalid write control endpoint
[  185.785040][ T2321] pvrusb2: Invalid write control endpoint
[  185.845495][ T6878] mmap: syz.1.327 (6878) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  185.860067][ T2321] pvrusb2: Invalid write control endpoint
[  185.951042][ T2321] pvrusb2: Invalid write control endpoint
[  186.018760][ T2321] pvrusb2: Invalid write control endpoint
[  186.118881][ T2321] pvrusb2: Invalid write control endpoint
[  186.490392][ T2321] pvrusb2: Invalid write control endpoint
[  186.496643][ T2321] pvrusb2: Invalid write control endpoint
[  186.502433][ T2321] pvrusb2: Invalid write control endpoint
[  186.508832][ T2321] pvrusb2: Invalid write control endpoint
[  186.519522][ T2321] pvrusb2: Invalid write control endpoint
[  186.525338][ T2321] pvrusb2: Invalid write control endpoint
[  186.531085][ T2321] pvrusb2: Invalid write control endpoint
[  186.536925][ T2321] pvrusb2: Invalid write control endpoint
[  186.543463][ T2321] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  186.945710][ T2321] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_c)
[  187.052415][ T2321] pvrusb2: Invalid write control endpoint
[  187.058425][ T2321] pvrusb2: Invalid write control endpoint
[  187.064568][ T2321] pvrusb2: Invalid write control endpoint
[  187.070524][ T2321] pvrusb2: Invalid write control endpoint
[  187.076408][ T2321] pvrusb2: Invalid write control endpoint
[  187.083468][ T2321] pvrusb2: Invalid write control endpoint
[  187.089268][ T2321] pvrusb2: Invalid write control endpoint
[  187.096338][ T2321] pvrusb2: Invalid write control endpoint
[  187.105353][ T2321] pvrusb2: Invalid write control endpoint
[  187.111119][ T2321] pvrusb2: Invalid write control endpoint
[  187.134926][ T2321] pvrusb2: Invalid write control endpoint
[  187.172038][ T2321] pvrusb2: Invalid write control endpoint
[  187.177895][ T2321] pvrusb2: Invalid write control endpoint
[  187.221321][ T2321] pvrusb2: Invalid write control endpoint
[  187.246996][ T2321] pvrusb2: Invalid write control endpoint
[  187.265045][ T2321] pvrusb2: Invalid write control endpoint
[  187.270861][ T2321] pvrusb2: Invalid write control endpoint
[  187.440372][ T6896] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6896]
[  187.482104][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  187.638411][ T2321] pvrusb2: Invalid write control endpoint
[  187.696006][ T2321] pvrusb2: Invalid write control endpoint
[  187.729881][ T2321] pvrusb2: Invalid write control endpoint
[  187.823576][ T2321] pvrusb2: Invalid write control endpoint
[  187.852432][ T2321] pvrusb2: Attached sub-driver cs53l32a
[  188.054404][ T2321] pvrusb2: Invalid write control endpoint
[  188.077720][ T2321] pvrusb2: Invalid write control endpoint
[  188.111854][ T2321] pvrusb2: Invalid write control endpoint
[  188.137912][ T2321] pvrusb2: Invalid write control endpoint
[  188.150412][ T2321] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  188.171874][ T2321] pvrusb2: Device being rendered inoperable
[  188.178137][ T2321] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  188.192634][ T2321] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  189.226513][ T6916] loop0: detected capacity change from 0 to 128
[  189.862253][ T6932] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6932]
[  194.630535][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.663501][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  196.425771][ T6981] loop1: detected capacity change from 0 to 128
[  199.069473][ T7005] loop1: detected capacity change from 0 to 2048
[  199.162071][ T7016] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.837552][ T7020] loop2: detected capacity change from 0 to 128
[  200.334408][ T7027] syz.0.371 (7027) used greatest stack depth: 20824 bytes left
[  201.916411][ T7046] 9pnet_virtio: no channels available for device syz
[  203.405703][ T7059] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7059]
[  203.851156][ T7069] xt_hashlimit: size too large, truncated to 1048576
[  204.812944][ T7074] 9pnet_virtio: no channels available for device syz
[  206.200042][ T7085] loop3: detected capacity change from 0 to 128
[  206.383009][ T7087] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7087]
[  208.170735][ T7108] loop3: detected capacity change from 0 to 512
[  208.332349][ T7111] 9pnet_virtio: no channels available for device syz
[  208.519954][ T7108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.542154][ T7108] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.349260][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.621107][ T7120] loop1: detected capacity change from 0 to 2048
[  209.680120][ T7121] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.243281][ T7128] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7128]
[  212.619984][ T7138] loop2: detected capacity change from 0 to 128
[  212.891807][ T7143] 9pnet_virtio: no channels available for device syz
[  213.893501][ T7155] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7155]
[  214.472815][ T7151] loop2: detected capacity change from 0 to 32768
[  215.027761][ T7151] read_mapping_page failed!
[  215.062329][ T7151] ERROR: (device loop2): txCommit: 
[  215.062329][ T7151] 
[  215.128518][ T7151] ERROR: (device loop2): remounting filesystem as read-only
[  215.269361][  T112] ERROR: (device loop2): diUpdatePMap: the inode is not allocated in the working map
[  215.269361][  T112] 
[  215.340110][ T7163] loop3: detected capacity change from 0 to 512
[  215.362254][ T7163] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  215.442373][ T7163] EXT4-fs (loop3): 1 truncate cleaned up
[  215.459536][ T7163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.846911][ T6751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.913985][ T7169] loop0: detected capacity change from 0 to 128
[  216.096625][ T7171] 9pnet_virtio: no channels available for device syz
[  216.201942][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  216.380779][ T5776] syz-executor (5776) used greatest stack depth: 20744 bytes left
[  216.398495][ T7174] loop2: detected capacity change from 0 to 2048
[  216.448827][ T7175] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.100619][   T33] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.235314][   T33] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.333810][   T33] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.464769][   T33] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.675029][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  218.684684][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  218.698153][ T7208] loop1: detected capacity change from 0 to 128
[  218.707101][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  218.715539][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  218.732458][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  218.741351][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  219.909659][ T7222] 9pnet_virtio: no channels available for device syz
[  220.517009][ T7205] chnl_net:caif_netlink_parms(): no params data found
[  220.887469][ T5779] Bluetooth: hci2: command tx timeout
[  222.321942][    C0] sched: RT throttling activated
[  222.785338][ T7255] loop1: detected capacity change from 0 to 128
[  222.853995][   T33] hsr_slave_0: left promiscuous mode
[  222.861123][   T33] hsr_slave_1: left promiscuous mode
[  222.883474][ T7260] loop0: detected capacity change from 0 to 128
[  222.910940][ T5779] Bluetooth: hci2: command tx timeout
[  222.917333][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.925492][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.954858][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.964902][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.974317][   T27] audit: type=1800 audit(1786606579.921:7): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.438" name="file2" dev="loop0" ino=1048598 res=0 errno=0
[  223.013369][   T33] bridge_slave_1: left allmulticast mode
[  223.019059][   T33] bridge_slave_1: left promiscuous mode
[  223.047065][ T7260] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  223.075101][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.087988][ T7260] FAT-fs (loop0): Filesystem has been set read-only
[  223.106510][ T7260] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  223.136841][   T33] bridge_slave_0: left allmulticast mode
[  223.149121][ T7260] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  223.162055][   T33] bridge_slave_0: left promiscuous mode
[  223.182234][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.193044][ T7260] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  223.245786][ T7260] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  223.340046][ T7260] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  223.742217][ T7260] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  223.772526][ T7260] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  223.812052][ T7260] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  223.823707][   T33] veth1_macvtap: left promiscuous mode
[  223.830251][   T33] veth0_macvtap: left promiscuous mode
[  223.850389][ T7260] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  223.850684][   T33] veth1_vlan: left promiscuous mode
[  223.919768][   T33] veth0_vlan: left promiscuous mode
[  224.179601][ T7266] 9pnet_virtio: no channels available for device syz
[  224.969234][ T7272] loop2: detected capacity change from 0 to 2048
[  224.984436][ T5779] Bluetooth: hci2: command tx timeout
[  225.112802][ T7276] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.477140][ T7287] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  226.559709][   T33] team0 (unregistering): Port device team_slave_1 removed
[  226.653170][   T33] team0 (unregistering): Port device team_slave_0 removed
[  226.704693][ T7288] loop2: detected capacity change from 0 to 1764
[  226.862637][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.000009][ T7291] loop1: detected capacity change from 0 to 128
[  227.062130][ T5779] Bluetooth: hci2: command tx timeout
[  227.322598][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  228.588389][   T33] bond0 (unregistering): Released all slaves
[  229.052116][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.092083][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.099363][ T7205] bridge_slave_0: entered allmulticast mode
[  229.119040][ T7205] bridge_slave_0: entered promiscuous mode
[  229.143923][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.192179][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.199499][ T7205] bridge_slave_1: entered allmulticast mode
[  229.252240][ T7205] bridge_slave_1: entered promiscuous mode
[  229.464981][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.515173][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.606905][ T7205] team0: Port device team_slave_0 added
[  229.634606][ T7205] team0: Port device team_slave_1 added
[  230.067914][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.102319][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.162983][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.221346][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.262082][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.335294][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.583582][ T7315] fuse: Bad value for 'group_id'
[  230.716425][ T7205] hsr_slave_0: entered promiscuous mode
[  230.788659][ T7205] hsr_slave_1: entered promiscuous mode
[  231.016587][ T7324] 9pnet_virtio: no channels available for device syz
[  231.711442][ T7205] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  231.806050][ T7205] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  231.993874][ T7205] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  232.392539][ T7205] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  232.969758][ T7350] loop0: detected capacity change from 0 to 1024
[  233.030532][ T7350] EXT4-fs: Ignoring removed orlov option
[  233.144118][ T7205] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.162432][ T7352] netlink: 148 bytes leftover after parsing attributes in process `syz.1.464'.
[  233.224139][ T7352] netlink: 164 bytes leftover after parsing attributes in process `syz.1.464'.
[  233.229435][ T7350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.266758][ T7205] 8021q: adding VLAN 0 to HW filter on device team0
[  233.345394][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.352738][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.499006][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.506303][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.579545][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.075625][ T7363] 9pnet_virtio: no channels available for device syz
[  234.805342][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.049412][ T7205] veth0_vlan: entered promiscuous mode
[  236.118343][ T7205] veth1_vlan: entered promiscuous mode
[  236.253685][ T7205] veth0_macvtap: entered promiscuous mode
[  236.286876][ T7205] veth1_macvtap: entered promiscuous mode
[  236.371571][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.413015][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  236.421795][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.486881][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.535871][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.560902][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.602678][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.637864][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.651253][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.673427][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.674787][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.712102][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.722213][    T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  236.731628][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.743107][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.762670][    T9] usb 2-1: config 0 descriptor??
[  236.767863][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.809005][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.836554][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.878786][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.911190][ T7205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.024309][ T7205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.034870][ T7205] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.045608][ T7410] 9pnet_virtio: no channels available for device syz
[  237.232678][ T7205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.247371][    T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  237.267635][    T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  237.275190][    T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  237.282717][    T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  237.292097][    T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0
[  237.321138][    T9] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[  237.452315][    T9] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 9: -71
[  237.503817][    T9] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -71
[  237.554516][    T9] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense
[  237.626861][    T9] playstation 0003:054C:0DF2.0002: Failed to create dualsense.
[  237.677061][    T9] playstation: probe of 0003:054C:0DF2.0002 failed with error -71
[  237.701595][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.735593][    T9] usb 2-1: USB disconnect, device number 5
[  237.760838][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.859301][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.892145][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.244371][ T7425] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7205] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7425]
[  238.432217][ T5853] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  238.627925][ T5853] usb 1-1: Using ep0 maxpacket: 16
[  238.639914][ T5853] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.669412][   T35] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  238.692091][ T5853] usb 1-1: config 0 interface 0 has no altsetting 0
[  238.712068][ T5853] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  238.740891][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.763615][ T5853] usb 1-1: config 0 descriptor??
[  238.889018][   T35] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  238.910946][   T35] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.951632][   T35] usb 2-1: config 0 has no interface number 0
[  238.973611][   T35] usb 2-1: config 0 interface 41 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  239.022059][   T35] usb 2-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  239.082022][   T35] usb 2-1: config 0 interface 41 has no altsetting 0
[  239.101864][   T35] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  239.121465][   T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.151631][   T35] usb 2-1: Product: syz
[  239.156005][   T35] usb 2-1: Manufacturer: syz
[  239.172071][   T35] usb 2-1: SerialNumber: syz
[  239.213689][   T35] usb 2-1: config 0 descriptor??
[  239.219233][ T5853] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  239.246355][   T35] CoreChips: probe of 2-1:0.41 failed with error -22
[  239.328602][ T7430] loop4: detected capacity change from 0 to 32768
[  239.423389][ T7430] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.479 (7430)
[  239.522003][ T7430] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.555787][ T5853] usb 2-1: USB disconnect, device number 6
[  239.602916][ T7430] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  239.644898][ T7430] BTRFS info (device loop4): setting nodatasum
[  239.655798][ T5155] usb 1-1: USB disconnect, device number 2
[  239.687617][ T7430] BTRFS info (device loop4): force zlib compression, level 3
[  239.721348][ T7430] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  239.748343][ T7430] BTRFS info (device loop4): use lzo compression, level 0
[  239.757244][ T7430] BTRFS info (device loop4): turning on flush-on-commit
[  239.778327][ T7430] BTRFS info (device loop4): enabling auto defrag
[  239.810730][ T7430] BTRFS info (device loop4): max_inline at 4096
[  239.832313][ T7430] BTRFS info (device loop4): using free space tree
[  239.993110][ T7430] BTRFS info (device loop4): enabling ssd optimizations
[  240.476894][ T7205] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  240.716604][ T7481] loop1: detected capacity change from 0 to 512
[  240.853582][ T7481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.973070][ T7481] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.417001][ T5155] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  241.626524][ T7492] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7492]
[  241.652107][ T5155] usb 5-1: Using ep0 maxpacket: 32
[  241.679896][ T5155] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  241.692779][ T5155] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  241.742036][ T5155] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  241.779885][ T5155] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  241.811489][ T5155] usb 5-1: config 0 interface 0 has no altsetting 0
[  241.864117][ T5155] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  241.873649][ T5155] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  241.882564][ T5155] usb 5-1: Product: syz
[  241.886772][ T5155] usb 5-1: Manufacturer: syz
[  241.891397][ T5155] usb 5-1: SerialNumber: syz
[  241.905504][ T5155] usb 5-1: config 0 descriptor??
[  241.924484][ T5155] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  241.958245][ T5155] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  242.171380][    T9] usb 5-1: USB disconnect, device number 2
[  242.189995][    T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  242.272785][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.081287][ T7515] loop4: detected capacity change from 0 to 2048
[  244.282475][ T7524] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  246.212276][ T7557] syz.4.503 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000
[  246.232396][ T7557] CPU: 1 PID: 7557 Comm: syz.4.503 Not tainted syzkaller #0
[  246.239776][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  246.249875][ T7557] Call Trace:
[  246.253193][ T7557]  <TASK>
[  246.256166][ T7557]  dump_stack_lvl+0x18c/0x250
[  246.260919][ T7557]  ? show_regs_print_info+0x20/0x20
[  246.266186][ T7557]  ? load_image+0x420/0x420
[  246.270737][ T7557]  ? ___ratelimit+0x478/0x610
[  246.275469][ T7557]  ? radix_tree_cpu_dead+0x160/0x160
[  246.280816][ T7557]  dump_header+0xd8/0x820
[  246.285205][ T7557]  oom_kill_process+0x390/0x580
[  246.290130][ T7557]  out_of_memory+0xe0e/0x1200
[  246.294869][ T7557]  ? mem_cgroup_out_of_memory+0xc1/0x390
[  246.300552][ T7557]  ? mutex_lock_nested+0x20/0x20
[  246.305576][ T7557]  ? unregister_oom_notifier+0x20/0x20
[  246.311112][ T7557]  mem_cgroup_out_of_memory+0x2c2/0x390
[  246.316715][ T7557]  ? try_charge_memcg+0xc91/0x17c0
[  246.321877][ T7557]  ? drain_local_stock+0x630/0x630
[  246.327054][ T7557]  ? do_raw_spin_unlock+0x121/0x230
[  246.332319][ T7557]  try_charge_memcg+0xca1/0x17c0
[  246.337332][ T7557]  ? folio_flags+0x120/0x120
[  246.341969][ T7557]  ? percpu_ref_tryget+0x15/0x180
[  246.347050][ T7557]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  246.352829][ T7557]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  246.358853][ T7557]  ? percpu_ref_tryget+0x15/0x180
[  246.363923][ T7557]  ? percpu_ref_tryget+0x15/0x180
[  246.368980][ T7557]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  246.374740][ T7557]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  246.380508][ T7557]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[  246.386357][ T7557]  obj_cgroup_charge+0x36e/0x630
[  246.391365][ T7557]  ? get_obj_cgroup_from_current+0xd4/0x280
[  246.397311][ T7557]  ? obj_cgroup_charge+0xed/0x630
[  246.402372][ T7557]  ? mod_objcg_mlstate+0x320/0x320
[  246.407530][ T7557]  ? percpu_ref_tryget+0x15/0x180
[  246.412597][ T7557]  ? percpu_ref_tryget+0x15/0x180
[  246.417680][ T7557]  ? get_obj_cgroup_from_current+0xd4/0x280
[  246.423644][ T7557]  slab_pre_alloc_hook+0x2e2/0x300
[  246.428799][ T7557]  ? netlink_broadcast_filtered+0x10c4/0x1130
[  246.434905][ T7557]  ? __addrconf_sysctl_register+0xa6/0x3f0
[  246.440752][ T7557]  ? __addrconf_sysctl_register+0xa6/0x3f0
[  246.446591][ T7557]  __kmem_cache_alloc_node+0x53/0x250
[  246.452029][ T7557]  ? __addrconf_sysctl_register+0xa6/0x3f0
[  246.457873][ T7557]  __kmalloc_node_track_caller+0xa4/0x230
[  246.463634][ T7557]  kmemdup+0x2b/0x70
[  246.467572][ T7557]  __addrconf_sysctl_register+0xa6/0x3f0
[  246.473343][ T7557]  ? addrconf_verify_work+0x30/0x30
[  246.478594][ T7557]  ? kmemdup+0x55/0x70
[  246.482711][ T7557]  ? __asan_memcpy+0x40/0x70
[  246.487355][ T7557]  addrconf_init_net+0x4fb/0x790
[  246.492385][ T7557]  ops_init+0x391/0x640
[  246.496602][ T7557]  setup_net+0x3b6/0xa20
[  246.500889][ T7557]  ? copy_net_ns+0x5d0/0x5d0
[  246.505514][ T7557]  ? copy_net_ns+0x342/0x5d0
[  246.510137][ T7557]  ? down_read_killable+0x1d0/0x340
[  246.515399][ T7557]  copy_net_ns+0x35e/0x5d0
[  246.519856][ T7557]  create_new_namespaces+0x3ce/0x700
[  246.525202][ T7557]  unshare_nsproxy_namespaces+0x11a/0x160
[  246.530969][ T7557]  ksys_unshare+0x4fa/0x8f0
[  246.535521][ T7557]  ? sighand_ctor+0x50/0x50
[  246.540082][ T7557]  ? lock_chain_count+0x20/0x20
[  246.544980][ T7557]  ? syscall_enter_from_user_mode+0x25/0x80
[  246.550944][ T7557]  __x64_sys_unshare+0x38/0x40
[  246.555743][ T7557]  do_syscall_64+0x55/0xb0
[  246.560188][ T7557]  ? clear_bhb_loop+0x40/0x90
[  246.564918][ T7557]  ? clear_bhb_loop+0x40/0x90
[  246.569634][ T7557]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  246.575568][ T7557] RIP: 0033:0x7fcd7599e0d9
[  246.580014][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.599650][ T7557] RSP: 002b:00007fcd76888028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  246.608099][ T7557] RAX: ffffffffffffffda RBX: 00007fcd75c25fa0 RCX: 00007fcd7599e0d9
[  246.616112][ T7557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  246.624120][ T7557] RBP: 00007fcd75a35024 R08: 0000000000000000 R09: 0000000000000000
[  246.632112][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  246.640127][ T7557] R13: 00007fcd75c26038 R14: 00007fcd75c25fa0 R15: 00007ffc3d393678
[  246.648138][ T7557]  </TASK>
[  246.706268][ T7557] memory: usage 96kB, limit 96kB, failcnt 34
[  246.713805][ T7557] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0
[  246.727303][ T7557] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0
[  246.734619][ T7557] Memory cgroup stats for /syz4/test:
[  246.735227][ T7557] cache 0
[  246.744252][ T7557] rss 0
[  246.747180][ T7557] rss_huge 0
[  246.750400][ T7557] shmem 0
[  246.753897][ T7557] mapped_file 0
[  246.757533][ T7557] dirty 0
[  246.760496][ T7557] writeback 0
[  246.765534][ T7563] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7563]
[  246.808809][ T7557] workingset_refault_anon 0
[  246.827378][ T7557] workingset_refault_file 0
[  246.846593][ T7557] swap 0
[  246.856710][ T7557] pgpgin 0
[  246.896004][ T7557] pgpgout 0
[  246.927819][ T7557] pgfault 1
[  246.950546][ T7557] pgmajfault 0
[  246.970780][ T7557] inactive_anon 0
[  246.989493][ T7557] active_anon 0
[  247.037129][ T7557] inactive_file 0
[  247.040817][ T7557] active_file 0
[  247.072489][ T7557] unevictable 0
[  247.076006][ T7557] hierarchical_memory_limit 98304
[  247.118109][ T7557] hierarchical_memsw_limit 9223372036854771712
[  247.159469][ T7557] total_cache 0
[  247.182058][ T7557] total_rss 0
[  247.198463][ T7557] total_rss_huge 0
[  247.219013][ T7557] total_shmem 0
[  247.232184][ T7557] total_mapped_file 0
[  247.275506][ T7557] total_dirty 0
[  247.279008][ T7557] total_writeback 0
[  247.335676][ T7557] total_workingset_refault_anon 0
[  247.346694][ T7557] total_workingset_refault_file 0
[  247.351783][ T7557] total_swap 0
[  247.367878][ T7557] total_pgpgin 0
[  247.378034][ T7557] total_pgpgout 0
[  247.390025][ T7557] total_pgfault 1
[  247.394435][ T7557] total_pgmajfault 0
[  247.398441][ T7557] total_inactive_anon 0
[  247.402871][ T7557] total_active_anon 0
[  247.406976][ T7557] total_inactive_file 0
[  247.411296][ T7557] total_active_file 0
[  247.415445][ T7557] total_unevictable 0
[  247.419747][ T7557] anon_cost 0
[  247.423484][ T7557] file_cost 0
[  247.426903][ T7557] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.503,pid=7556,uid=0
[  247.688386][ T7557] Memory cgroup out of memory: Killed process 7556 (syz.4.503) total-vm:102244kB, anon-rss:1404kB, file-rss:22912kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  247.717380][ T7549] loop0: detected capacity change from 0 to 32768
[  247.763103][ T7549] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.501 (7549)
[  247.825785][ T7549] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.863057][ T7549] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  247.897317][ T7549] BTRFS info (device loop0): setting nodatasum
[  247.927501][ T7549] BTRFS info (device loop0): force zlib compression, level 3
[  247.954156][ T7549] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  247.985129][ T7549] BTRFS info (device loop0): use lzo compression, level 0
[  248.012183][ T7549] BTRFS info (device loop0): turning on flush-on-commit
[  248.077221][ T7549] BTRFS info (device loop0): enabling auto defrag
[  248.111674][ T7549] BTRFS info (device loop0): max_inline at 4096
[  248.132307][ T7549] BTRFS info (device loop0): using free space tree
[  248.264453][ T7549] BTRFS info (device loop0): enabling ssd optimizations
[  248.552069][ T5787] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  248.565006][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  248.622083][  T173] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  248.686363][ T6435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop0 scanned by udevd (6435)
[  248.916279][  T173] usb 3-1: device descriptor read/64, error -71
[  248.922710][ T5787] usb 5-1: Using ep0 maxpacket: 32
[  248.931669][ T5787] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  248.942197][ T5787] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  248.956306][ T5787] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  248.983457][ T5787] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  249.004400][ T5787] usb 5-1: config 0 interface 0 has no altsetting 0
[  249.043780][ T5787] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  249.063129][ T5787] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  249.071609][ T5787] usb 5-1: Product: syz
[  249.088040][ T5787] usb 5-1: Manufacturer: syz
[  249.095739][ T5787] usb 5-1: SerialNumber: syz
[  249.113047][ T5787] usb 5-1: config 0 descriptor??
[  249.123567][ T5787] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  249.158720][ T5787] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  249.212581][  T173] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  249.363067][  T173] usb 3-1: device descriptor read/64, error -71
[  249.444268][ T5155] usb 5-1: USB disconnect, device number 3
[  249.444543][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  249.457128][ T7599] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  249.467956][ T7621] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  249.484911][  T173] usb usb3-port1: attempt power cycle
[  249.497451][ T5155] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  249.795056][ T7628] pim6reg1: entered promiscuous mode
[  249.800382][ T7628] pim6reg1: entered allmulticast mode
[  249.837782][   T27] audit: type=1326 audit(1786606606.781:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.0.513" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f4f9e0d9 code=0x0
[  249.933404][  T173] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  249.973326][  T173] usb 3-1: device descriptor read/8, error -71
[  250.375478][  T173] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  250.433238][  T173] usb 3-1: device descriptor read/8, error -71
[  250.772848][  T173] usb usb3-port1: unable to enumerate USB device
[  251.252201][ T2132] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  251.442008][ T2132] usb 1-1: Using ep0 maxpacket: 16
[  251.460937][ T2132] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.476144][ T2132] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.487017][ T2132] usb 1-1: config 0 interface 0 has no altsetting 0
[  251.494307][ T2132] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  251.503712][ T2132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.522173][ T2132] usb 1-1: config 0 descriptor??
[  251.997749][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.025455][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.043673][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.052315][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.092277][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.099337][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.120274][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.128015][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.135156][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.142202][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.167368][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.181613][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.189835][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.196947][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.204202][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.211280][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.235354][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.244049][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.253905][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.261007][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.269415][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.293698][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.341060][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.430497][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.493415][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.563046][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.642173][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.717026][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.806939][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.911434][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  252.996677][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.067104][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.141011][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.161453][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.177935][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.185125][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.192501][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.199724][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.212009][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.219104][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.278187][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.291468][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.314985][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.344343][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.351359][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.403488][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.410512][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.472731][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.481330][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.510153][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.522387][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.529383][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.552229][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.592506][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.599514][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.647712][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.663948][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.699290][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.722735][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x1
[  253.732028][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.739043][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.767053][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.794129][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.822126][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x1
[  253.842643][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.868516][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.882600][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.901453][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.918677][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.931953][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.942245][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.959377][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.966590][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x5
[  253.978350][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  253.995700][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  254.011979][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  254.022383][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  254.039531][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  254.056608][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  254.065304][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  254.073193][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  254.088369][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  254.119996][ T2132] cougar 0003:060B:500A.0004: unknown main item tag 0x0
[  254.149565][ T2132] cougar 0003:060B:500A.0004: unexpected long global item
[  254.170764][ T2132] cougar 0003:060B:500A.0004: parse failed
[  254.179189][ T2132] cougar: probe of 0003:060B:500A.0004 failed with error -22
[  254.203653][ T2132] usb 1-1: USB disconnect, device number 3
[  255.208395][ T7713] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  255.234752][ T7713] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  255.251097][ T7713] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  255.262146][ T7713] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  255.279612][ T7713] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  255.787568][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  255.794112][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  256.502083][ T5788] Bluetooth: hci0: command 0x0401 tx timeout
[  257.302238][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout
[  257.308351][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout
[  257.632093][  T173] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  257.833800][  T173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.851969][  T173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.873052][  T173] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  257.892002][  T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.913330][  T173] usb 3-1: config 0 descriptor??
[  258.336635][  T173] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  258.344245][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  258.350560][ T5788] Bluetooth: hci4: command 0x1003 tx timeout
[  258.365568][  T173] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  258.373376][  T173] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  258.380815][  T173] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  258.388335][  T173] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  258.409200][  T173] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[  258.527363][  T173] playstation 0003:054C:0DF2.0005: Invalid reportID received, expected 9 got 0
[  258.568047][  T173] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -22
[  258.599098][  T173] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense
[  258.631984][  T173] playstation 0003:054C:0DF2.0005: Failed to create dualsense.
[  258.655824][  T173] playstation: probe of 0003:054C:0DF2.0005 failed with error -22
[  258.735458][ T5787] usb 3-1: USB disconnect, device number 7
[  259.392846][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout
[  259.804205][  T173] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  260.132303][  T173] usb 5-1: Using ep0 maxpacket: 16
[  260.152787][  T173] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.181981][  T173] usb 5-1: config 0 interface 0 has no altsetting 0
[  260.188671][  T173] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  260.253597][  T173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.478049][  T173] usb 5-1: config 0 descriptor??
[  260.569965][ T7780] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7780]
[  261.310543][  T173] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  261.429465][  T173] usb 5-1: USB disconnect, device number 4
[  261.470665][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout
[  261.509341][ T7803] fido_id[7803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  261.850910][ T7817] input: syz1 as /devices/virtual/input/input11
[  262.449776][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'.
[  263.415745][ T7845] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7205] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7845]
[  264.616803][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.625600][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.812401][ T5787] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  265.031998][ T5787] usb 5-1: Using ep0 maxpacket: 16
[  265.039053][ T5787] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.062338][ T5787] usb 5-1: config 0 interface 0 has no altsetting 0
[  265.070738][ T5787] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  265.105261][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.124288][ T5787] usb 5-1: config 0 descriptor??
[  265.393991][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.475390][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'.
[  265.500816][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.543598][ T5787] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  265.960618][ T2132] usb 5-1: USB disconnect, device number 5
[  266.260036][ T7838] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.269033][ T7838] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.278981][ T7838] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.287953][ T7838] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.954851][ T7893] input: syz1 as /devices/virtual/input/input13
[  267.970841][ T7926] loop1: detected capacity change from 0 to 1764
[  268.241267][ T7935] input: syz1 as /devices/virtual/input/input14
[  273.376285][ T5787] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  273.435646][ T8014] loop0: detected capacity change from 0 to 1764
[  273.652043][ T5787] usb 5-1: Using ep0 maxpacket: 32
[  273.674412][ T5787] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  273.692027][ T5787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.752461][ T5787] usb 5-1: config 0 interface 0 has no altsetting 0
[  273.764050][ T5787] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  273.786050][ T5787] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  273.801058][ T5787] usb 5-1: Product: syz
[  273.809745][ T5787] usb 5-1: Manufacturer: syz
[  273.818749][ T5787] usb 5-1: SerialNumber: syz
[  273.830757][ T5787] usb 5-1: config 0 descriptor??
[  273.844293][ T5787] ldusb 5-1:0.0: Interrupt in endpoint not found
[  274.133805][ T5155] usb 5-1: USB disconnect, device number 6
[  279.077600][ T8092] loop2: detected capacity change from 0 to 1764
[  279.184093][ T6435] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  279.355888][ T8102] loop0: detected capacity change from 0 to 1024
[  279.574434][ T8103] loop1: detected capacity change from 0 to 4096
[  279.639693][ T8107] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.828951][ T8103] loop0: detected capacity change from 1024 to 960
[  282.162200][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  282.401987][    T9] usb 5-1: Using ep0 maxpacket: 32
[  282.443434][    T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  282.459028][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.492016][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  282.502192][    T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  282.540315][    T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  282.572000][    T9] usb 5-1: Product: syz
[  282.576239][    T9] usb 5-1: Manufacturer: syz
[  282.620668][    T9] usb 5-1: SerialNumber: syz
[  282.655930][    T9] usb 5-1: config 0 descriptor??
[  282.692184][    T9] ldusb 5-1:0.0: Interrupt in endpoint not found
[  282.913682][  T173] usb 5-1: USB disconnect, device number 7
[  283.530951][ T8132] loop0: detected capacity change from 0 to 32768
[  284.042273][ T8132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.645 (8132)
[  284.228596][ T8132] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  285.109183][ T8132] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  285.118605][ T8132] BTRFS info (device loop0): using free space tree
[  285.131988][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  285.134450][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  285.144716][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  285.160998][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  285.171766][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  285.181818][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  285.191995][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  285.201761][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  285.214303][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  285.226184][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  285.237030][ T8132] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  285.302878][ T8132] BTRFS error (device loop0): open_ctree failed: -12
[  285.362682][ T6435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (6435)
[  287.312696][ T8192] fuse: Bad value for 'fd'
[  288.239738][ T8199] loop2: detected capacity change from 0 to 4096
[  289.013281][ T8208] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  289.433886][ T8199] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  290.034492][ T8211] loop4: detected capacity change from 0 to 32768
[  290.131713][ T8211] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  290.147352][ T8221] fuse: Bad value for 'fd'
[  290.356043][ T8211] XFS (loop4): Ending clean mount
[  290.399164][ T8211] XFS (loop4): Quotacheck needed: Please wait.
[  290.525809][ T8211] XFS (loop4): Quotacheck: Done.
[  290.578239][ T8211] jffs2: notice: (8211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  291.290267][ T8223] loop1: detected capacity change from 0 to 32768
[  291.297564][ T7205] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  291.428642][ T8223] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.088121][ T8223] XFS (loop1): Ending clean mount
[  292.117957][ T8223] XFS (loop1): Quotacheck needed: Please wait.
[  292.258561][ T8223] XFS (loop1): Quotacheck: Done.
[  292.275204][ T8268] fuse: Bad value for 'fd'
[  292.762296][ T8276] loop0: detected capacity change from 0 to 1024
[  293.983657][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  294.046146][ T8269] loop4: detected capacity change from 0 to 32768
[  295.014079][ T8269] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  295.332691][ T8301] fuse: Bad value for 'fd'
[  295.363928][ T8269] XFS (loop4): Ending clean mount
[  295.385227][ T8269] XFS (loop4): Quotacheck needed: Please wait.
[  295.482122][ T8269] XFS (loop4): Quotacheck: Done.
[  295.544802][ T8304] syzkaller0: entered promiscuous mode
[  295.566753][ T8304] syzkaller0: entered allmulticast mode
[  295.586663][ T7205] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  297.087150][ T8327] netlink: 'syz.1.697': attribute type 32 has an invalid length.
[  297.112630][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'.
[  297.189089][ T8333] fuse: Bad value for 'fd'
[  297.225779][ T8327] bond1: Setting coupled_control to off (0)
[  297.412125][ T5787] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  297.524450][ T8338] syzkaller0: entered promiscuous mode
[  297.529992][ T8338] syzkaller0: entered allmulticast mode
[  297.612166][ T5787] usb 5-1: Using ep0 maxpacket: 32
[  297.619492][ T5787] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  297.642959][ T5787] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  297.694658][ T5787] usb 5-1: config 0 interface 0 has no altsetting 0
[  297.701334][ T5787] usb 5-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  297.739029][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.776189][ T5787] usb 5-1: config 0 descriptor??
[  299.291999][   T35] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  299.542516][   T35] usb 1-1: Using ep0 maxpacket: 32
[  299.564742][   T35] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  299.595007][   T35] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  299.634727][   T35] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  299.685679][   T35] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  299.749960][   T35] usb 1-1: config 0 interface 0 has no altsetting 0
[  299.781383][   T35] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  299.809659][ T8359] fuse: Bad value for 'fd'
[  299.817308][   T35] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  299.845013][   T35] usb 1-1: Product: syz
[  299.861706][   T35] usb 1-1: Manufacturer: syz
[  299.879623][   T35] usb 1-1: SerialNumber: syz
[  299.903325][   T35] usb 1-1: config 0 descriptor??
[  299.934253][   T35] ldusb 1-1:0.0: Interrupt in endpoint not found
[  300.159137][   T35] usb 1-1: USB disconnect, device number 4
[  300.202479][ T5787] usbhid 5-1:0.0: can't add hid device: -71
[  300.208616][ T5787] usbhid: probe of 5-1:0.0 failed with error -71
[  300.218843][ T5787] usb 5-1: USB disconnect, device number 8
[  301.449019][ T8384] fuse: Invalid rootmode
[  302.458940][ T8397] syzkaller0: entered promiscuous mode
[  302.488812][ T8397] syzkaller0: entered allmulticast mode
[  302.794763][ T8390] loop1: detected capacity change from 0 to 32768
[  302.909334][ T8390] JBD2: Ignoring recovery information on journal
[  302.985101][ T8390] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  304.206710][ T8390] (syz.1.717,8390,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  304.540354][ T5774] ocfs2: Unmounting device (7,1) on (node local)
[  305.808965][ T8446] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7205] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8446]
[  306.014270][ T8450] loop1: detected capacity change from 0 to 512
[  306.067799][ T8450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.573294][   T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  306.771970][   T23] usb 2-1: Using ep0 maxpacket: 8
[  306.779422][   T23] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  306.801950][   T23] usb 2-1: config 179 has no interface number 0
[  306.808284][   T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  306.832237][   T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  306.861939][   T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 97, changing to 10
[  306.881950][   T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24929, setting to 1024
[  306.902210][   T23] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  306.931966][   T23] usb 2-1: config 179 interface 65 has no altsetting 0
[  306.938895][   T23] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  306.962070][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.007669][   T23] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input15
[  307.116159][ T8465] loop4: detected capacity change from 0 to 32768
[  307.180767][ T5124] input input15: unable to receive magic message: -110
[  307.193028][ T8465] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.740 (8465)
[  307.262259][ T8465] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  307.292475][ T8465] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  307.318758][ T8465] BTRFS info (device loop4): using free space tree
[  307.326055][   T23] usb 2-1: USB disconnect, device number 7
[  307.326121][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  307.326538][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  307.378903][   T23] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  307.900417][ T8465] BTRFS info (device loop4): enabling ssd optimizations
[  307.995605][ T8465] BTRFS info (device loop4): auto enabling async discard
[  308.340969][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.612931][ T8494] loop0: detected capacity change from 0 to 1024
[  308.991439][ T8498] loop0: detected capacity change from 0 to 256
[  309.074100][ T8498] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  309.265377][ T8501] BTRFS info (device loop4): balance: start -d -m
[  309.405172][ T8501] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata
[  309.695697][ T8504] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8504]
[  309.814744][ T8501] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata
[  310.311453][ T8501] BTRFS info (device loop4): found 17 extents, stage: move data extents
[  310.530740][ T8484] syz.4.740 (8484) used greatest stack depth: 20088 bytes left
[  311.174881][ T8501] BTRFS info (device loop4): balance: canceled
[  311.645092][ T7205] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  311.877087][ T8521] loop1: detected capacity change from 0 to 1024
[  312.171043][ T8529] xt_hashlimit: size too large, truncated to 1048576
[  313.553982][ T8543] loop4: detected capacity change from 0 to 32768
[  313.589928][ T8543] (syz.4.762,8543,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  313.639407][ T8543] (syz.4.762,8543,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  313.704583][ T8543] JBD2: Ignoring recovery information on journal
[  313.854220][ T8543] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  314.105810][ T7205] ocfs2: Unmounting device (7,4) on (node local)
[  315.278201][ T8557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.767'.
[  316.479272][ T8572] loop0: detected capacity change from 0 to 1764
[  316.537460][ T6435] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  317.142475][ T8553] loop4: detected capacity change from 0 to 131072
[  317.205721][ T8553] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9)
[  317.228058][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  317.234432][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  317.260988][ T8553] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  317.335087][ T8553] F2FS-fs (loop4): invalid crc value
[  317.671700][ T8553] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[  317.723541][ T8553] F2FS-fs (loop4): Bad quota inode 2:50331648
[  317.742120][ T8553] F2FS-fs (loop4): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[  317.806724][ T8553] F2FS-fs (loop4): Cannot turn on quotas: error -22
[  318.851976][   T35] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  319.102141][   T35] usb 1-1: Using ep0 maxpacket: 8
[  319.130400][   T35] usb 1-1: config 0 has no interfaces?
[  319.158615][   T35] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  319.271969][   T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.280026][   T35] usb 1-1: Product: syz
[  319.328956][   T35] usb 1-1: Manufacturer: syz
[  319.334051][   T35] usb 1-1: SerialNumber: syz
[  319.363384][   T35] usb 1-1: config 0 descriptor??
[  319.622449][   T23] usb 1-1: USB disconnect, device number 5
[  319.837139][ T8600] fuse: Unknown parameter 'use00000000000000000000'
[  321.037336][ T8605] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.782'.
[  321.937312][ T8626] fuse: Unknown parameter 'user_i00000000000000000000'
[  326.409561][ T5779] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  327.886172][ T8670] syzkaller0: entered promiscuous mode
[  327.891797][ T8670] syzkaller0: entered allmulticast mode
[  330.642441][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  333.218000][ T8618] Set syz1 is full, maxelem 65536 reached
[  334.360324][ T8715] loop0: detected capacity change from 0 to 32768
[  334.546346][ T8715] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  334.753347][ T8715] XFS (loop0): Ending clean mount
[  334.809599][   T23] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 
[  334.863059][   T23] XFS (loop0): Unmount and run xfs_repair
[  334.874560][   T23] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  335.225939][   T23] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  335.244375][   T23] 00000010: 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 10  ................
[  335.254362][   T23] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  335.263551][   T23] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37  ....f.........@7
[  335.277163][   T23] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  335.291161][   T23] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  335.329728][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  335.381104][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  335.431474][ T8715] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74
[  335.509332][ T8715] XFS (loop0): Failed to initialize disk quotas.
[  335.690655][ T5775] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  336.868462][ T8773] loop4: detected capacity change from 0 to 1764
[  337.792474][ T6435] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  339.379615][ T8789] syzkaller0: entered promiscuous mode
[  339.417004][ T8789] syzkaller0: entered allmulticast mode
[  339.462365][ T5155] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  339.657772][ T5155] usb 2-1: Using ep0 maxpacket: 16
[  339.723240][ T5155] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.773641][ T5155] usb 2-1: config 0 interface 0 has no altsetting 0
[  339.823172][ T5155] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  339.890245][ T5155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.994094][ T5155] usb 2-1: config 0 descriptor??
[  340.569394][ T5155] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  340.996643][ T5155] usb 2-1: USB disconnect, device number 8
[  344.591995][  T173] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  344.885893][  T173] usb 1-1: Using ep0 maxpacket: 32
[  344.894150][  T173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.909212][  T173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.939834][  T173] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  344.964959][  T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.008101][  T173] usb 1-1: config 0 descriptor??
[  345.025721][  T173] hub 1-1:0.0: USB hub found
[  345.056224][ T5787] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  345.227217][  T173] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  345.322708][ T5787] usb 2-1: Using ep0 maxpacket: 16
[  345.335303][ T5787] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.356100][ T5787] usb 2-1: config 0 interface 0 has no altsetting 0
[  345.369229][ T5787] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  345.384842][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.403314][ T5787] usb 2-1: config 0 descriptor??
[  345.799105][  T173] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1
[  345.850817][ T5787] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  345.882846][  T173] hid-generic: probe of 0003:046D:C31C.0009 failed with error -22
[  346.291747][ T5787] usb 2-1: USB disconnect, device number 9
[  348.411987][   T23] usb 1-1: USB disconnect, device number 6
[  348.626570][ T8766] Set syz1 is full, maxelem 65536 reached
[  348.635860][ T8842] syzkaller1: entered promiscuous mode
[  348.641379][ T8842] syzkaller1: entered allmulticast mode
[  349.749687][ T8854] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  353.213616][ T8886] syzkaller0: entered promiscuous mode
[  353.219177][ T8886] syzkaller0: entered allmulticast mode
[  355.525360][ T8888] loop4: detected capacity change from 0 to 65536
[  355.615155][ T8888] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  355.672028][ T8888] XFS (loop4): Ending clean mount
[  355.719657][ T8888] XFS (loop4): Quotacheck needed: Please wait.
[  355.785468][ T3501] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2e4/0x11d0, inode 0x25 dinode
[  355.842091][ T3501] XFS (loop4): Unmount and run xfs_repair
[  355.886869][ T3501] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  355.917553][ T3501] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00  IN..............
[  355.947077][ T3501] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  355.976376][ T3501] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[  356.000725][ T3501] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27  4.Xhz.DM.......'
[  356.020923][ T3501] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  356.041132][ T3501] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4  .............DI.
[  356.071898][ T3501] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02  ................
[  356.091182][ T3501] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  356.152840][ T8888] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  356.658535][ T7205] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  358.103904][ T8949] syzkaller0: entered promiscuous mode
[  358.109448][ T8949] syzkaller0: entered allmulticast mode
[  358.644217][   T35] IPVS: starting estimator thread 0...
[  358.652291][ T8973] IPVS: lblcr: FWM 3 0x00000003 - no destination available
[  358.732225][ T8974] IPVS: using max 21 ests per chain, 50400 per kthread
[  359.051594][ T8954] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  359.058361][ T8954] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  359.066103][ T8954] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  360.422068][ T5779] Bluetooth: hci0: command 0x0401 tx timeout
[  360.441174][ T9014] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9014]
[  360.647540][ T9008] loop4: detected capacity change from 0 to 32768
[  360.686567][ T9008] JBD2: Ignoring recovery information on journal
[  360.745772][ T9008] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  360.801247][ T9008] 
[  360.803641][ T9008] ======================================================
[  360.810683][ T9008] WARNING: possible circular locking dependency detected
[  360.817750][ T9008] syzkaller #0 Not tainted
[  360.822196][ T9008] ------------------------------------------------------
[  360.829240][ T9008] syz.4.908/9008 is trying to acquire lock:
[  360.835146][ T9008] ffff888076b19538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770
[  360.844509][ T9008] 
[  360.844509][ T9008] but task is already holding lock:
[  360.851899][ T9008] ffff888023c6c0e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  360.862215][ T9008] 
[  360.862215][ T9008] which lock already depends on the new lock.
[  360.862215][ T9008] 
[  360.872662][ T9008] 
[  360.872662][ T9008] the existing dependency chain (in reverse order) is:
[  360.881704][ T9008] 
[  360.881704][ T9008] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  360.890258][ T9008]        down_read+0x46/0x2e0
[  360.894987][ T9008]        ocfs2_start_trans+0x3a8/0x6f0
[  360.900497][ T9008]        ocfs2_mknod+0xf33/0x2310
[  360.905556][ T9008]        ocfs2_create+0x196/0x430
[  360.910618][ T9008]        path_openat+0x1705/0x3270
[  360.915764][ T9008]        do_filp_open+0x1f2/0x430
[  360.920821][ T9008]        do_sys_openat2+0x134/0x1d0
[  360.926068][ T9008]        __x64_sys_openat+0x139/0x160
[  360.931500][ T9008]        do_syscall_64+0x55/0xb0
[  360.936494][ T9008]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  360.943123][ T9008] 
[  360.943123][ T9008] -> #1 (sb_internal#5){.+.+}-{0:0}:
[  360.950668][ T9008]        ocfs2_start_trans+0x2a9/0x6f0
[  360.956170][ T9008]        ocfs2_xattr_set+0xe98/0x13a0
[  360.961581][ T9008]        __vfs_setxattr+0x437/0x470
[  360.966815][ T9008]        __vfs_setxattr_noperm+0x12a/0x5e0
[  360.972679][ T9008]        vfs_setxattr+0x16b/0x2f0
[  360.977732][ T9008]        path_setxattr+0x33a/0x590
[  360.984534][ T9008]        __x64_sys_setxattr+0xbb/0xd0
[  360.989946][ T9008]        do_syscall_64+0x55/0xb0
[  360.994912][ T9008]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.001364][ T9008] 
[  361.001364][ T9008] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  361.009225][ T9008]        __lock_acquire+0x37ef/0x7d80
[  361.014635][ T9008]        lock_acquire+0x19e/0x420
[  361.019663][ T9008]        down_read+0x46/0x2e0
[  361.024343][ T9008]        ocfs2_init_acl+0x30a/0x770
[  361.029551][ T9008]        ocfs2_mknod+0x1427/0x2310
[  361.034695][ T9008]        ocfs2_create+0x196/0x430
[  361.039728][ T9008]        path_openat+0x1705/0x3270
[  361.044864][ T9008]        do_filp_open+0x1f2/0x430
[  361.049893][ T9008]        do_sys_openat2+0x134/0x1d0
[  361.055134][ T9008]        __x64_sys_openat+0x139/0x160
[  361.060522][ T9008]        do_syscall_64+0x55/0xb0
[  361.062191][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout
[  361.065461][ T9008]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.077902][ T9008] 
[  361.077902][ T9008] other info that might help us debug this:
[  361.077902][ T9008] 
[  361.088127][ T9008] Chain exists of:
[  361.088127][ T9008]   &oi->ip_xattr_sem --> sb_internal#5 --> &journal->j_trans_barrier
[  361.088127][ T9008] 
[  361.102045][ T9008]  Possible unsafe locking scenario:
[  361.102045][ T9008] 
[  361.109506][ T9008]        CPU0                    CPU1
[  361.114866][ T9008]        ----                    ----
[  361.120230][ T9008]   rlock(&journal->j_trans_barrier);
[  361.125630][ T9008]                                lock(sb_internal#5);
[  361.132409][ T9008]                                lock(&journal->j_trans_barrier);
[  361.140256][ T9008]   rlock(&oi->ip_xattr_sem);
[  361.142203][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout
[  361.144937][ T9008] 
[  361.144937][ T9008]  *** DEADLOCK ***
[  361.144937][ T9008] 
[  361.144942][ T9008] 8 locks held by syz.4.908/9008:
[  361.144954][ T9008]  #0: ffff888023eb6418 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  361.173353][ T9008]  #1: ffff888076b19818 (&type->i_mutex_dir_key#15){++++}-{3:3}, at: path_openat+0x7f4/0x3270
[  361.183676][ T9008]  #2: ffff888051c2ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  361.197344][ T9008]  #3: ffff888076b1b498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0
[  361.211139][ T9008]  #4: ffff888051c2df58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2620
[  361.225104][ T9008]  #5: ffff888023eb6608 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0xf33/0x2310
[  361.234393][ T9008]  #6: ffff888023c6c0e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  361.245185][ T9008]  #7: ffff8880782e0990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  361.255019][ T9008] 
[  361.255019][ T9008] stack backtrace:
[  361.260921][ T9008] CPU: 1 PID: 9008 Comm: syz.4.908 Not tainted syzkaller #0
[  361.268203][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  361.278293][ T9008] Call Trace:
[  361.281589][ T9008]  <TASK>
[  361.284524][ T9008]  dump_stack_lvl+0x18c/0x250
[  361.289228][ T9008]  ? load_image+0x420/0x420
[  361.293760][ T9008]  ? show_regs_print_info+0x20/0x20
[  361.298985][ T9008]  ? print_circular_bug+0x12b/0x1a0
[  361.304296][ T9008]  check_noncircular+0x2fc/0x400
[  361.309274][ T9008]  ? print_deadlock_bug+0x5d0/0x5d0
[  361.314500][ T9008]  ? _find_first_zero_bit+0xd6/0x100
[  361.319823][ T9008]  ? add_lock_to_list+0x191/0x280
[  361.324851][ T9008]  __lock_acquire+0x37ef/0x7d80
[  361.329706][ T9008]  ? ocfs2_lock_res_init_common+0x32a/0x450
[  361.335693][ T9008]  ? verify_lock_unused+0x140/0x140
[  361.340911][ T9008]  ? __lock_acquire+0x7d80/0x7d80
[  361.345939][ T9008]  ? do_raw_spin_lock+0x11f/0x2b0
[  361.350992][ T9008]  lock_acquire+0x19e/0x420
[  361.355511][ T9008]  ? ocfs2_init_acl+0x30a/0x770
[  361.360369][ T9008]  ? __might_sleep+0xe0/0xe0
[  361.364974][ T9008]  ? read_lock_is_recursive+0x20/0x20
[  361.370339][ T9008]  ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0
[  361.376952][ T9008]  ? mark_lock+0x94/0x320
[  361.381328][ T9008]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  361.387325][ T9008]  down_read+0x46/0x2e0
[  361.391493][ T9008]  ? ocfs2_init_acl+0x30a/0x770
[  361.396364][ T9008]  ocfs2_init_acl+0x30a/0x770
[  361.401050][ T9008]  ? ocfs2_mknod_locked+0x159/0x290
[  361.406287][ T9008]  ? ocfs2_acl_chmod+0x340/0x340
[  361.411256][ T9008]  ? dquot_alloc_inode+0x211/0xa40
[  361.416377][ T9008]  ? ocfs2_block_signals+0x9b/0xe0
[  361.421503][ T9008]  ? ocfs2_free_mem_caches+0x50/0x50
[  361.426810][ T9008]  ? ocfs2_init_security_get+0x139/0x1a0
[  361.432474][ T9008]  ocfs2_mknod+0x1427/0x2310
[  361.437097][ T9008]  ? ocfs2_mkdir+0x430/0x430
[  361.441705][ T9008]  ? __lock_acquire+0x7d80/0x7d80
[  361.446736][ T9008]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  361.452772][ T9008]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  361.458695][ T9008]  ? _raw_spin_unlock+0x40/0x40
[  361.463583][ T9008]  ? ocfs2_inode_unlock+0xa5/0x140
[  361.468802][ T9008]  ? __lock_acquire+0x7d80/0x7d80
[  361.473832][ T9008]  ? __rwlock_init+0x150/0x150
[  361.478633][ T9008]  ? do_raw_spin_unlock+0x121/0x230
[  361.483852][ T9008]  ? rcu_is_watching+0x15/0xb0
[  361.488641][ T9008]  ? ocfs2_lookup+0x4ac/0x960
[  361.493341][ T9008]  ocfs2_create+0x196/0x430
[  361.497865][ T9008]  ? ocfs2_update_inode_fsync_trans+0x230/0x230
[  361.504105][ T9008]  ? ocfs2_lookup+0x960/0x960
[  361.508793][ T9008]  ? HAS_UNMAPPED_ID+0x101/0x170
[  361.513741][ T9008]  ? inode_permission+0xf3/0x480
[  361.518678][ T9008]  ? bpf_lsm_inode_create+0x9/0x10
[  361.523801][ T9008]  ? security_inode_create+0xb7/0x100
[  361.529217][ T9008]  ? ocfs2_lookup+0x960/0x960
[  361.533915][ T9008]  path_openat+0x1705/0x3270
[  361.538529][ T9008]  ? do_filp_open+0x430/0x430
[  361.543215][ T9008]  do_filp_open+0x1f2/0x430
[  361.547719][ T9008]  ? vfs_tmpfile+0x620/0x620
[  361.552326][ T9008]  ? _raw_spin_unlock+0x28/0x40
[  361.557210][ T9008]  ? alloc_fd+0x590/0x640
[  361.561578][ T9008]  do_sys_openat2+0x134/0x1d0
[  361.566281][ T9008]  ? do_sys_open+0xe0/0xe0
[  361.570714][ T9008]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  361.576725][ T9008]  ? lock_chain_count+0x20/0x20
[  361.581603][ T9008]  __x64_sys_openat+0x139/0x160
[  361.586463][ T9008]  do_syscall_64+0x55/0xb0
[  361.590884][ T9008]  ? clear_bhb_loop+0x40/0x90
[  361.595558][ T9008]  ? clear_bhb_loop+0x40/0x90
[  361.600236][ T9008]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.606128][ T9008] RIP: 0033:0x7fcd7599e0d9
[  361.610545][ T9008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  361.630152][ T9008] RSP: 002b:00007fcd76888028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  361.638571][ T9008] RAX: ffffffffffffffda RBX: 00007fcd75c25fa0 RCX: 00007fcd7599e0d9
[  361.646549][ T9008] RDX: 0000000000183341 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  361.654524][ T9008] RBP: 00007fcd75a35024 R08: 0000000000000000 R09: 0000000000000000
[  361.662498][ T9008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.670475][ T9008] R13: 00007fcd75c26038 R14: 00007fcd75c25fa0 R15: 00007ffc3d393678
[  361.678471][ T9008]  </TASK>
[  361.681588][    C1] vkms_vblank_simulate: vblank timer overrun
[  361.918096][ T7205] ocfs2: Unmounting device (7,4) on (node local)