last executing test programs:

6m31.880232631s ago: executing program 1 (id=2466):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40f8ff01", @ANYRES16=0x0, @ANYBLOB="020005000000fddbdf2514000000080001000200000008001d00", @ANYRES32, @ANYBLOB="08000100030000000c000600030000000000000008001d00", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40094}, 0x20000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="6e696c7465720000000000000400"/28], &(0x7f0000000080)=0x24)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111, 0x9}}, 0x4c)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888)

6m30.219708026s ago: executing program 1 (id=2469):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
close(r3)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x10000038}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0)

6m25.794084107s ago: executing program 1 (id=2474):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)

6m25.507879694s ago: executing program 1 (id=2476):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40f8ff01", @ANYRES16=0x0, @ANYBLOB="020005000000fddbdf2514000000080001000200000008001d00", @ANYRES32, @ANYBLOB="08000100030000000c000600030000000000000008001d00", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40094}, 0x20000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="6e696c7465720000000000000400"/28], &(0x7f0000000080)=0x24)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111, 0x9}}, 0x4c)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888)

6m23.288822095s ago: executing program 1 (id=2481):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
close(r3)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x10000038}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0)

6m20.017566984s ago: executing program 1 (id=2484):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x35, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
getpgid(0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0xa3, 0x8080)
connect$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r5 = syz_open_dev$mouse(0x0, 0x92, 0x48000)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec207"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880)
r9 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, <r10=>0xffffffffffffffff})
ppoll(&(0x7f0000001080), 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r10, 0x50009418, &(0x7f0000000400)={{r0}, 0x0, 0xa, @unused=[0xe0, 0xa573, 0x5, 0x3], @name="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"})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

6m4.389439379s ago: executing program 32 (id=2484):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x35, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
getpgid(0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0xa3, 0x8080)
connect$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r5 = syz_open_dev$mouse(0x0, 0x92, 0x48000)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec207"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880)
r9 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, <r10=>0xffffffffffffffff})
ppoll(&(0x7f0000001080), 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r10, 0x50009418, &(0x7f0000000400)={{r0}, 0x0, 0xa, @unused=[0xe0, 0xa573, 0x5, 0x3], @name="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"})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

14.243226903s ago: executing program 2 (id=3315):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file7\x00', 0x40, &(0x7f0000000080)={[{@i_version}, {@errors_remount}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x507, &(0x7f0000001300)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000001f80), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e3d312c696f636861727365743d6d616363656e746575726f2c757466383d312c757466383d312c696f636861727365743d63833934392c6e66732c756e695f786c6174653d302c756e695f786c6174653d302c757466383d302c726f6469722c757466383d312c757466383d302c73686f72746e616d653d6d697865642c696f636861727365743d6d6163677265656b2c00"/166], 0x1, 0x372, &(0x7f0000000500)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

10.960161652s ago: executing program 2 (id=3321):
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

10.542366633s ago: executing program 4 (id=3325):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB='=', @ANYRESHEX=0x0, @ANYBLOB=',discard,allow_utime=00000000000000000000153,discard,iocharset=iso8859-3,dmask=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',time_offset=0x00000000000000e5,umask=00000000000000000200001,\x00'], 0x1, 0x152b, &(0x7f0000001dc0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FRp87/nPM7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ86+mcP+zN+7//1nBv7IR9z974/5nV7FXugD2X4Df/9lBjn+4hvufvXH/GcvOrvT95yu9QOS/7Dk4kvNCY/6q42eMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxv4Cp/1lCgAuja90XYwxxhhjjDHGGPvz+BxXugLGGGOMMcYYY4z970MQIEFBADGQA2IhJ+QCAQBXQx7ICxG4BuLgWsgH10F+KAAFoRDEQ2EoAhoMWCAIoSgUgyhcD8XhBigBJaEUlAYHZSABboSycBOUg5uhPNwCFeBWqAiVoDJUgdugKtwO1eAOqA53Qg2oCbWgNtwFdeBuqAv3QD24F+rDfdAA7oeG8AA0ggehMTwETeBhaAqPQDNoDi2gJbT6H+U/Dz3hBegFvSEJ+kBfeBH6QX8YAC/BQHgZBsErMBhehWQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQUmwER4GybBOzAZ3oUpMBVSYRpMh/dgBsyEWfA+zIYPYA7MhXkwH9LgQ1gACyEdPoJF8DFkwGJYAkthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW2EbbIcd8AnshE9hF+yGPfAZ7IXP/838U3+X3w0BAQUKVKgwBmMwFmMxF+bC3Jgb82AejGAE4zAO82E+zI/5sSAWxHiMxyJYBA0aJCQsikUxilEsjsWxBJbAUlgKHTpMwAQsizdhOSyH5bE8VsAKWBErYSWsglWwKlbFalgNq2N1rIE1sBbWwrvwLuyDdbEu1sN6WB/rX7o9hY2wETbGxtgEm2BTbIrNsBm2wBbYCltha2yNbbANtsN22B7bYwfsgImYiB2xI3bCTtgZO2MX7IJdsSt2w+7YPfP5HIAv4AvYG2uIPtgX+2I/TM4xAF/Cl/BlHISv4Cv4KibjEByKr+Fr+DoOx5M4AkfiKByFVcVbOAbHIonxmIIpOBEn4iSchFmFvotTMRWn4XScjjNwJs7E93E2foAf4Fyci/MxDdNwAS7EdEzHRXgKM3AxLsGluAyX4zJciatwJa7BtbgG1+N63IgbcTNuxq24FbfjdvwEFQB+irtxNybjXtyL+3Af7sf9eAAPYCZm4kE8iIfwEB7Gw3gEj+BRPIbH8RiewBN4Ek/haTyNZ/EsnsNn479u/EnJ1ckgsiihRIyIEbEiVuQSuURukVvkEXlEREREnIgT+UQ+kV/kFwVFQREv4kURUUQYYQSJMAYARFRERXFRXJQQJUQpUUo44USCSBBlRVlRTpQT5cUtooK4VVQUlURbV0VUEVVFO1dN3CGqi+qihqgpaonaoraoI+qIuqKuqCfqifqivmgg7hcNRR8cgA+KrM40EUOwqRiKzURzIS9+grUWw7GNaCvaicfFSByBHURrlyieEh3FGOwk/ibG4jOiixiPXcVzopvoLnqI50VP0cb1Er3FZOwj+oqp2E/0FwPES2IG1hTv4+yctcSrIlkMEUPFa2I+vi6GizfECDFSjBJvitHiLTFGjBXjxHiRIiaIieJtMUm8IyaLd8UUMVWkimliunhPzBAzxSzxvpgtPhBzxFwxT8wXaeJDsUAsFOniI7FIfCwyxGKxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFDfCJ2ik/FLrFb7BGfib3ic7FPfCH2iy/FAfGVyBRfi4PiG3FIfCsOi+/EEfG9OCqOiePiB3FC/ChOilPitDgjzoqfxDnxszgvvACJUkgplQxkjMwhY2VOmUteJXPL4OKze42Mk9fKfPI6mV8WkAVlIRkvC8siUksjrSQZyqKymIzK62VxeYMsIUvKUrK0dLKMTJA3yrLyJllO3izLy1tkBXmrrCgrycqyirxNVpW3S4hc2EcNWVPWkrXlXTIJ7pZ15T2ynrxX1pf3yQbyftlQPiAbyQdlY/mQbCIflk3lI7KZbC5byJaylXxUtpaPyTayrWwnH5ft5ROyg3xSJsqnZEfpL75EnpFd5LOyq3xOdpPdZQ/5szwvvewle0voA7KvfFH2k/3lgFgAkC/LQfIVOVi+KpPlEDlUviaHydflcPmGHCFHylHyTTlaviXHyLFynBwvU+QEOVG+LSfJd+Rk+a6cIqfKVDlNDpADf5lplpT/NP/tP8gf/MveN8pNcrPcIrfKbXK73CE/kTvlTrlL7pJ75B65V+6V++Q+uV/ulwfkAZkpM+VBeVAekofkYXlYHpFH5FF5TJ6RP8gT8kd5Up6Sp+QZeVaelecuPgegUAkllVKBilE5VKzKqXKpq1RudbXKo/KqiLpGxalrVT51ncqvCqiCqpCKV4VVEaWVUVaRClVRVUxF1fV48QWjSqnSyqkyKkHd+O/kq+LqBlVClfxN/qX6kv5Bfa1UK9VatVZtVBvVTrVT7VV71UF1UIkqUXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UkkpSfdWLqp/qrwaol9RA9bIapAapwWqwSlbJaqgaqoapYWq4Gq5GqBFqlBqlRqvRaowao8apcSpFpaiJaqKapCapyWqymqKmqFSVqqar6WqGmqFmqVlqtpqt5qg5ap6ap9JUmlqgFqh0la4WqUUqQy1Wi9VStVQtV8vVSrVSrVar1Vq1Vq1X61WG2qQ2qS1qi9qmtqkdaofaqXaqXWqX2qP2qL1qr9qn9qn9ar86oA6oTJWpDqqD6pA6pA6rw+qIOqKOqqPquDquTqgT6qQ6qU6r0+qsOqvOqXPqvDqfddoXiEAEKlBBTBATxAaxQa4gV5A7yB3kCfIEkSASxAVxQb7guiB/UCAoGBQK4oPCQZFAByawgbjY9GhwfVA8uCEoEZQMSgWlAxeUCRKCG4OywU1BueDmoHxwS1AhuDWoGFQKKgdVgtuCqsHtQbXgjqB6cGdQI6gZ1ApqB3cFdYK7g7rBPUG94N6gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs6B50CJoGbT6U+f3/mSBx1wv3Vsn6T66r35R99P99QD9kh6oX9aD9Ct6sH5VJ+sheqh+TQ/Tr+vh+g09Qo/Uo/SberR+S4/RY/U4PV6n6Al6on5bT9Lv6Mn6XT1FT9Wpepqert/TM/RMPUu/r2frD/QcPVfP0/N1mv5QL9ALdbr+SC/SH+sMvVgv0Uv1Mr1cr9Ar9Sq9Wq/Ra/U6vV5v0Bv1Jr1Zb9Fb9Ta9Xe/Qn+id+lO9S+/We/Rneq/+XO/TX+j9+kt9QH+lM/XX+qD+Rh/S3+rD+jt9RH+vj+pj+rj+QZ/QP+qT+pQ+rc/os/onfU7/rM9rn3Vyn/X1bpRRJsbEmFgTa3KZXCa3yW3ymDwmYiImzsSZfCafyW/ym4KmoIk38aaIKWKykCFT1BQ1URM1xU1xU8KUMKVMKeOMMwkmwZQ1ZU05U86UN+VNBVPBVDQVTWVT2dxmbjO3m9vNHeYOc6e509Q0NU1tU9vUMXVMXVPX1DP1TH1T3zQwDUxD09A0Mo1MY9PYNDFNTFPT1DQzzUwL08K0Mq1Ma9PatDFtTDvTzrQ37U0H08EkmkTT0XQ0nUwn09l0Nl1MF9PVdDXdTDfTw/QwPU1P08v0MkkmyfQ1fU0/088MMAPMQDPQDDKDzGAz2CSbZDPUDDXDzDAz3Aw3I8xIMyrrRNW8ZcaYsWacGW9STIqZaCaaSWaSmWwmmylmikk1qWa6mW5mmBlmlpllZpvZZo6ZY+aZeSbNpJkFZoFJN+lmkVlkMkyGWWKWmGVmmVlhVphVZpVZY9aYdbDObDAbzCazyWwxW8w2s83sMDvMTrPT7DK7zB6zx+w1e80+s8/sN/vNAXPAZJpMc9AcNIfMIXPYHDZHzBFz1Bw1x81xc8KcMCfNSXPanDZnTYGL35fexNqcNpe9yua2V9s8Nq/9+7igLWTjbWFbxGqb3xb4TWystSVsSVvKlrbOlrEJ9sbfxRVtJVvZVrG32ar2dlvtd3Ede7eta++x9ey9tra96zdxfXufbWAftg0RAWxz29i2tE3sw7apfcQ2s81tC9vStrdP2A72SZton8o6oF/HtqN92i6wC+0qu9qusWvtLrvbnrZn7CH7rT1rf7K9bG870L5sB9lX7GD7qk22Q34Xj7Jv2tH2LTvGjrXj7PjfxVPsVJtqp9np9j07w878XZxmP7SzbbqdY+faeXb+L3FWTen2I7vIfmwzbABL7FK7zC63K+zKS7X6vHa93WA32p32U7vFbrXb7Ha749KJsN1t99jP7F77uT1ov7H77Zf2gD1sM+3Xv8RZx3fYfmeP2O/tUXvMHrc/2BP2R3UpO+vYf7A/2/PWWyAkIEmKAoqhHBRLOSkXXUW56WrKQ3kpQtdQHF1L+eg6yk8FqCAVongqTEVIkyFLRCEVpWIUpevpUnmlqDQ5KkMJdCOVpZuoHN1M5ekWqkC3UkWqRJWpCt1GVel2qkZ3UHW6k2pQTapFtekuqkN3U126h+rRvVSf7qMGdD81pAeoET1IjekhakIPU1N6hJpRc2pBLakVPUqt6TFqQ22pHT1O7ekJ6kBPUiI9RR3paepEf6PO9Ax1oWepKz1H3ag79aDnqSe9QL2oNyVRH+pLL1I/6k8D6CUaSC/TIHqFBtOrlExDaCi9RsPodRpOb9AIGkmj6E0aTW/RGBpL42g8pdAEmkhv0yR6hybTuzSFplIqTaPp9B7NoJk0i96n2fQBzaG5NI/mUxp9SAtoIaXTR7SIPqYMWkxLaCkto+W0glbSKlpNa2gtraP1tIE20ibaTFtoK22j7bSDPqGd9Cntot20hz6jvfQ57aMvaD99SQfoK8qkr+kgfUOH6Fs6TN/53vQ9HaVjdJx+oBP0I52kU3SaztBZ+onO0c90njxBiKEIZajCIIwJc4SxYc4wV3hVmDu8OswT5g0j4TVhXHhtmC+8LswfFggLhoXC+LBwWCTUoQltSGEYFg2LhdHw+rB4eENYIiwZlgpLhy4sEyaEN4Zlw5vCcuHNYfnwlrBCeGtYMawUPnxvlfC2sGp4e1gtvCOsHt4Z1ghrhrXC2uFdYZ3w7rBueE9YL7w3LBfeFzYI7w8bhg+EjcIHw8bhQ2GT8OGwafhI2CxsHrYIW4atwkfD1uFjYZuwbdgufDxsHz4RdgifDBPDp8KO4dO/rL9v4T9enxT2CfuGL4Yvht7fI+dF50fToh9GF0QXRtOjH0UXRT+OZkQXR5dEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0a9r50DHDrhpFMucDEuh4t1OV0ud5XL7a52eVxeF3HXuDh3rcvnrnP5XQFX0BVy8a6wK+K0M846cqEr6oq5qLveFXc3uBKupCvlSjvnyrgE19K1cq1ca/eYa+Paunbucfe4e8I94Z50T7qnXEf3tOvk/uY6u2dcF/ese9Y957q57q6He971dBPyXHhPJrm+rq/r5/q5AW6AG+gGukFukBvsBrtkl+yGuqFumBvmhrvhboQb4Ua5UW60G+3GuDFunBvnUlyKm+gmuklukpvsJrspbopLdaluupvuZrgZrurMC3uZ4+a4eW6eS3NpboHLOmdMd4vcIpfhMtwSt8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/fCpG6v2+f2uf1uvzvgvnKZ7mt30H3jDrlv3WH3nTvivndH3TF33P3gTrgf3Ul3yp12Z9xZ95M753525513KZEJkYmRtyOTIu9EJkfejUyJTI2kRqZFpkfei8yIzIzMirwfmR35IDInMjcyLzI/khb5MLIgsjCSHvkosijycSQjsjiyJLI0siyyPOJ94S2hL+qL+ai/3hf3N/gSvqQv5Ut758v4BH+jL+tv8uX8zb68v8VX8Lf6ir6Sr+wf8c18c9/Ct/St/KO+tX/Mt/FtfTv/uG/vn/Ad/JM+0T/lO/qnfSf/N9/ZP+O7+Gd9V/+c7+a7+x7+ed/Tv+B7+d4+yffxff2Lvp/v7wf4l/xA/7If5F/xg/2rPtkP8UP9a36Yf90P92/4EX6kHxXzph996RIZxvsUP8FP9G/7Sf4dP9m/66f4qT7VT/PT/Xt+hp/pZ/n3/Wz/gZ/j5/p5fr5P8x/6BX6hT/cf+UX+Y5/hF1+6qexX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/hP/E7/qd/ld/s9/jO/13/u9/kv/H7/pT/gv/KZ/mt/0H/jD/lv/WH/nT/iv/dH/TF/3P/gT/gf/Ul/yp/2Z/xZ/5M/53/25/l31hhjjDHG/iUTLg/Fb9dcuJ3f5w9yxK827gsAV28tlPnr9VlnlOvyXxj3F/HtIwDwVO+uD15aatRISkq6uG2GhKDYXIBL/xOUJQYux4uhHTwBidAWyv5h/f1F97P0T+aP3gKQ61c5sXA5vjz/FwCY9AfzP/r4qAUVwtNx/5/55wKUKHY5JydcjhdDu1/ur7SFcv+g/gKt/0n9Ob9MAWjzq5zccDm+XH8CPAZPQ+JvtmSMMcYYY4wxxi7oLyp3vnT9eeknPv/o+jxeXc7JAZfjf3Z9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPUvD5rC/9bMPPjDgfcAlx5RAPAfTgiQNZB/5VFs/kv2lXzxrfP3q5ad8QH8d7Tyzxhc4Q8mxhhjjDHG2J/u8kn/bx9XV6ogxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/or/pzYlT5GxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Er7fwEAAP//W1f9jA==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)

10.249140181s ago: executing program 4 (id=3326):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4)
write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$tipc(r0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000840)
sendmsg$tipc(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

8.790148341s ago: executing program 0 (id=3327):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784c", 0x1f)

8.775945081s ago: executing program 4 (id=3328):
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)
syz_genetlink_get_family_id$smc(0x0, r3)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r2, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16)
ppoll(&(0x7f00000000c0)=[{r2, 0x60}], 0x1, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4)

6.764961126s ago: executing program 3 (id=3329):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xe)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0)

5.457391301s ago: executing program 2 (id=3330):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x12, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0)

5.453341022s ago: executing program 4 (id=3331):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42)
close_range(r3, 0xffffffffffffffff, 0x4)
r4 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x4000)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8)
openat(r4, &(0x7f0000000240)='./file1\x00', 0xc00, 0x15)
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000400)='./file0\x00', 0x2818480, &(0x7f0000000380), 0x1, 0xbdf, &(0x7f0000003b80)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r5, &(0x7f0000000100)={0x1, 0x2, 0xc7, 0x80000000000011, 0xfffffe0000000005, 0x7, 0x4, 0xb})
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
unshare(0x22020600)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
faccessat2(r6, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200)

5.402161053s ago: executing program 3 (id=3332):
openat$kvm(0x0, &(0x7f0000000300), 0x20, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x3}})
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x1b88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.345888954s ago: executing program 0 (id=3333):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x116}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6b", 0x49}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x3, 0x2090)
epoll_create1(0x0)
close(0x3)

5.207942368s ago: executing program 0 (id=3334):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

4.968760445s ago: executing program 0 (id=3335):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x1f, 0x0, 0x6, 0x5}}, @nested_vmlaunch={0x12f, 0x18}], 0x68})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x11, 0xd, 0x204}, {0x804, 0x1, 0x1, 0x49, 0x87, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x8, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x4}], 0xffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x1, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.968110165s ago: executing program 3 (id=3336):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffbff, 0x40006})
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)

4.924271066s ago: executing program 2 (id=3337):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r1, &(0x7f0000000180)=[{0x0}], 0x1)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.483776038s ago: executing program 3 (id=3338):
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_open_procfs(0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x80000000000000a, 0x2, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8002, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x1, 0xdc, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000100)={{&(0x7f00008d3000/0x10000)=nil, 0x10000}, 0x1})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ftruncate(r0, 0x4a8e)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

4.482834108s ago: executing program 0 (id=3339):
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)
syz_genetlink_get_family_id$smc(0x0, r3)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r2, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16)
ppoll(&(0x7f00000000c0)=[{r2, 0x60}], 0x1, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4)

3.159233694s ago: executing program 4 (id=3340):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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")
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
mknod(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000)

1.290283045s ago: executing program 2 (id=3341):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x0, {}, {0x0, 0xff}, 0xfd}], 0x20)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000300))
keyctl$instantiate(0xc, 0x0, &(0x7f0000001940)=ANY=[], 0x2a, 0xfffffffffffffffb)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sendto$inet6(r2, &(0x7f0000000380)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x46)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0xc0, 0x6, &(0x7f00000001c0)="639b5977d447b7af7eb6e38b446c281d9c1d84f1cd19dd0f61aa7b03065d8c746bdb0bceef5c797648c17610f1c3bdd3bb0c7100483413fcf39d6d86265782dd0a4b393642117e8a04b6331fe912b7ef2873df15b97911029088c534b62855d45226a466fa4d22ee4fc32bcd1f30d3de56e6c1ba71ce198ea93a62be7eeab8ef3a7119ce8448c7421d0f92931de1945a7657a747ba45dbb19fe3201dbd416e797cb951f6dca3bd63d83881681079fc94e4ed02d678da7cf2ce1bd3c3ea06b0e8", &(0x7f0000000340)=""/6, 0xffffbd79, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f00000006c0), 0x2, 0x0, 0xa7d}, 0x50)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0)

1.217240407s ago: executing program 3 (id=3342):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

696.698261ms ago: executing program 0 (id=3343):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
eventfd(0xfffffff9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = gettid()
timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
vmsplice(r3, &(0x7f0000000540)=[{&(0x7f0000000140)="e1", 0x1}], 0x1, 0x0)

460.091098ms ago: executing program 2 (id=3344):
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84880)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0)
write$vga_arbiter(r1, 0x0, 0x0)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x1}, 0x7)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
fadvise64(r2, 0x7f, 0x0, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe)
syz_open_dev$loop(0x0, 0x236, 0x20042)
mlockall(0x7)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffff9, 0x2, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
munlockall()

346.567651ms ago: executing program 3 (id=3345):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x12, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0)

0s ago: executing program 4 (id=3346):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)

kernel console output (not intermixed with test programs):

or -22
[  909.631721][T14216] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  909.680359][T11577] Bluetooth: hci0: command tx timeout
[  909.692359][T14216] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  909.722415][T14216] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  909.829966][T14191] chnl_net:caif_netlink_parms(): no params data found
[  910.129123][  T787] usb 3-1: USB disconnect, device number 15
[  910.419330][T14242] bridge2: entered promiscuous mode
[  910.444708][T14242] bridge2: entered allmulticast mode
[  910.501848][T14191] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.514608][T14191] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.526455][T14191] bridge_slave_0: entered allmulticast mode
[  910.553931][T14191] bridge_slave_0: entered promiscuous mode
[  910.597020][T14191] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.612412][T14191] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.635531][T14191] bridge_slave_1: entered allmulticast mode
[  910.890944][T14191] bridge_slave_1: entered promiscuous mode
[  910.935131][T14191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  910.948278][T14191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  910.996129][T14191] team0: Port device team_slave_0 added
[  911.028277][T14191] team0: Port device team_slave_1 added
[  911.271388][T14191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  911.293764][T14191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  911.439383][T14191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  911.512357][T14191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  911.563301][T14191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  911.656279][T14191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  911.744335][T11577] Bluetooth: hci0: command tx timeout
[  911.902540][T14191] hsr_slave_0: entered promiscuous mode
[  912.017361][T14191] hsr_slave_1: entered promiscuous mode
[  912.935961][T14191] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  912.974265][T14191] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.066782][T14284] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  913.286839][T14191] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  913.328223][T14191] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.641055][T14191] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  913.692061][T14191] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.824169][T11577] Bluetooth: hci0: command tx timeout
[  914.849741][T14315] bridge2: entered promiscuous mode
[  914.857018][T14315] bridge2: entered allmulticast mode
[  914.961615][T14191] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  915.051487][T14191] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  915.227801][T14191] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  915.299567][T14191] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  915.659008][T14191] 8021q: adding VLAN 0 to HW filter on device bond0
[  915.728643][T14191] 8021q: adding VLAN 0 to HW filter on device team0
[  915.769657][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.776868][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  915.796930][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.804200][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  916.776854][T14348] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  917.169406][T14191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  917.399879][T14191] veth0_vlan: entered promiscuous mode
[  917.453235][T14191] veth1_vlan: entered promiscuous mode
[  917.608350][T14191] veth0_macvtap: entered promiscuous mode
[  917.666265][T14191] veth1_macvtap: entered promiscuous mode
[  917.756045][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.770781][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.798496][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.826226][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.858954][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.893747][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.924924][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.943154][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.967690][T14191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  917.985899][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  918.014590][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.034089][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  918.045936][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.058384][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  918.072188][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.082741][T14191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  918.097409][T14191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  918.131221][T14191] batman_adv: batadv0: Interface activated: batadv_slave_1
[  918.202602][T14191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  918.230370][T14191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  918.259694][T14191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  918.298282][T14191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  918.550588][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.580591][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.662212][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.694021][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  919.400557][T14402] bridge3: entered promiscuous mode
[  919.426813][T14402] bridge3: entered allmulticast mode
[  920.590910][T14420] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  921.754424][T14440] syzkaller0: entered promiscuous mode
[  921.760010][T14440] syzkaller0: entered allmulticast mode
[  922.585176][T14465] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  923.110054][T14484] bridge4: entered promiscuous mode
[  923.118134][T14484] bridge4: entered allmulticast mode
[  926.154161][T14542] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  926.631960][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'.
[  926.641671][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'.
[  926.656258][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'.
[  926.665457][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'.
[  928.793693][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'.
[  928.802805][T14603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2605'.
[  928.829883][T14603] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  928.838763][T14603] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  928.847554][T14603] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  928.856367][T14603] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  928.896812][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'.
[  928.906000][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2605'.
[  929.861853][T14611] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  931.290296][T14631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  931.668243][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  931.686266][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  932.326378][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'.
[  932.335728][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2616'.
[  932.349316][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'.
[  932.358501][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2616'.
[  933.258607][T14673] overlayfs: missing 'workdir'
[  935.651523][T14678] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  937.243833][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'.
[  937.252849][T14728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2628'.
[  937.264197][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'.
[  937.273138][T14728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2628'.
[  938.706597][T14751] overlayfs: missing 'workdir'
[  941.306049][T14759] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  941.364782][T14761] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2634'.
[  942.146653][   T28] audit: type=1326 audit(1777522416.369:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e4b9cdd9 code=0x7ffc0000
[  942.248507][   T28] audit: type=1326 audit(1777522416.389:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e4b9cdd9 code=0x7ffc0000
[  942.393842][T14794] overlayfs: missing 'workdir'
[  943.448992][   T28] audit: type=1326 audit(1777522416.389:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79e4b9cdd9 code=0x7ffc0000
[  944.654959][   T28] audit: type=1326 audit(1777522416.389:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e4b9cdd9 code=0x7ffc0000
[  944.791115][   T28] audit: type=1326 audit(1777522416.409:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e4b9cdd9 code=0x7ffc0000
[  944.876129][   T28] audit: type=1326 audit(1777522416.409:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.4.2637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f79e4b9cdd9 code=0x7ffc0000
[  944.931470][T14801] syzkaller0: entered promiscuous mode
[  944.955027][T14801] syzkaller0: entered allmulticast mode
[  945.353288][T14814] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2644'.
[  945.780391][T14826] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  946.524287][T14846] trusted_key: encrypted_key: insufficient parameters specified
[  947.472660][T14856] overlayfs: missing 'lowerdir'
[  949.937002][T14876] syzkaller0: entered promiscuous mode
[  949.958441][T14876] syzkaller0: entered allmulticast mode
[  950.443990][T14886] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  951.070647][T14911] overlayfs: missing 'lowerdir'
[  954.305691][T14945] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  954.848767][T14963] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2916680627 (46666890032 ns) > initial count (16865692240 ns). Using initial count to start timer.
[  956.183093][T15002] bridge1: entered promiscuous mode
[  956.208096][T15002] bridge1: entered allmulticast mode
[  957.892096][T15030] syzkaller0: entered promiscuous mode
[  957.901583][T15030] syzkaller0: entered allmulticast mode
[  959.942935][T15082] syzkaller0: entered promiscuous mode
[  959.973750][T15082] syzkaller0: entered allmulticast mode
[  961.591099][T15121] syzkaller0: entered promiscuous mode
[  961.599861][T15121] syzkaller0: entered allmulticast mode
[  961.887076][   T28] audit: type=1326 audit(1777522436.109:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.2.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c999cdd9 code=0x7ffc0000
[  961.909931][   T28] audit: type=1326 audit(1777522436.139:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.2.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c999cdd9 code=0x7ffc0000
[  961.934177][   T28] audit: type=1326 audit(1777522436.159:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.2.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12c999cdd9 code=0x7ffc0000
[  961.959339][   T28] audit: type=1326 audit(1777522436.179:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.2.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c999cdd9 code=0x7ffc0000
[  961.986725][   T28] audit: type=1326 audit(1777522436.209:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.2.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c999cdd9 code=0x7ffc0000
[  962.034160][   T28] audit: type=1326 audit(1777522436.239:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.2.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f12c999cdd9 code=0x7ffc0000
[  962.482843][ T1131] tipc: Left network mode
[  963.784584][T15153] syzkaller0: entered promiscuous mode
[  963.790160][T15153] syzkaller0: entered allmulticast mode
[  963.993435][ T1131] gretap0 (unregistering): left promiscuous mode
[  964.211352][   T28] audit: type=1326 audit(1777522438.429:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15159 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c999cdd9 code=0x7ffc0000
[  964.279711][   T28] audit: type=1326 audit(1777522438.429:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15159 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c999cdd9 code=0x7ffc0000
[  964.457696][   T28] audit: type=1326 audit(1777522438.429:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15159 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12c999cdd9 code=0x7ffc0000
[  964.548597][   T28] audit: type=1326 audit(1777522438.429:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15159 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c999cdd9 code=0x7ffc0000
[  964.938598][ T1131] veth1_to_team: left promiscuous mode
[  965.090501][ T1131] hsr_slave_0: left promiscuous mode
[  965.144248][ T1131] hsr_slave_1: left promiscuous mode
[  965.192896][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  965.253781][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  965.275035][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  965.282637][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  965.366945][ T1131] bridge_slave_1: left allmulticast mode
[  965.414552][ T1131] bridge_slave_1: left promiscuous mode
[  965.441328][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state
[  965.501862][ T1131] bridge_slave_0: left allmulticast mode
[  965.510213][ T1131] bridge_slave_0: left promiscuous mode
[  965.526765][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state
[  965.666637][ T1131] veth1_macvtap: left promiscuous mode
[  965.672498][ T1131] veth0_macvtap: left promiscuous mode
[  965.860809][ T1131] veth1_vlan: left promiscuous mode
[  965.879328][ T1131] veth0_vlan: left promiscuous mode
[  967.332510][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  967.332530][   T28] audit: type=1326 audit(1777522441.549:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.0.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336799cdd9 code=0x7ffc0000
[  967.391393][   T28] audit: type=1326 audit(1777522441.549:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.0.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336799cdd9 code=0x7ffc0000
[  967.428004][   T28] audit: type=1326 audit(1777522441.549:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.0.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f336799cdd9 code=0x7ffc0000
[  967.457320][   T28] audit: type=1326 audit(1777522441.549:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.0.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336799cdd9 code=0x7ffc0000
[  967.513369][   T28] audit: type=1326 audit(1777522441.549:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.0.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336799cdd9 code=0x7ffc0000
[  967.541624][   T28] audit: type=1326 audit(1777522441.559:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.0.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f336799cdd9 code=0x7ffc0000
[  969.582207][ T1131] team0 (unregistering): Port device team_slave_1 removed
[  969.641746][ T1131] team0 (unregistering): Port device team_slave_0 removed
[  969.702459][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  969.767457][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  970.260628][ T1131] bond0 (unregistering): Released all slaves
[  970.400670][T15193] syzkaller0: entered promiscuous mode
[  970.407562][T15193] syzkaller0: entered allmulticast mode
[  971.467764][T15246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2916680627 (46666890032 ns) > initial count (16865692240 ns). Using initial count to start timer.
[  972.428937][T15260] syzkaller0: entered promiscuous mode
[  972.444754][T15260] syzkaller0: entered allmulticast mode
[  973.900457][T15294] syzkaller0: entered promiscuous mode
[  973.910809][T15294] syzkaller0: entered allmulticast mode
[  975.573115][T15321] loop4: detected capacity change from 0 to 256
[  975.581801][T15321] FAT-fs (loop4): "posix" option is obsolete, not supported now
[  976.050710][T15329] loop3: detected capacity change from 0 to 512
[  976.059766][T15329] EXT4-fs: Ignoring removed nobh option
[  976.096541][T15329] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size
[  976.286768][T15331] syzkaller0: entered promiscuous mode
[  976.292338][T15331] syzkaller0: entered allmulticast mode
[  977.976220][T15356] bridge4: entered promiscuous mode
[  977.981902][T15356] bridge4: entered allmulticast mode
[  979.439456][T15369] syzkaller0: entered promiscuous mode
[  979.449661][T15369] syzkaller0: entered allmulticast mode
[  979.827108][T15354] Bluetooth: hci2: command 0x0406 tx timeout
[  980.755186][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2800'.
[  980.764302][T15387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2800'.
[  980.776108][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2800'.
[  980.785505][T15387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2800'.
[  982.027982][T15398] loop2: detected capacity change from 0 to 1024
[  982.052491][T15398] EXT4-fs: inline encryption not supported
[  982.109208][T15398] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  982.322978][T15398] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.2803: Freeing blocks not in datazone - block = 0, count = 4096
[  982.396290][T15407] syzkaller0: entered promiscuous mode
[  982.418544][T15398] EXT4-fs (loop2): Remounting filesystem read-only
[  982.422502][T15407] syzkaller0: entered allmulticast mode
[  982.443398][T15398] EXT4-fs (loop2): 1 orphan inode deleted
[  982.463338][   T49] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  982.513312][T15398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  982.526599][   T49] Quota error (device loop2): write_blk: dquota write failed
[  982.563783][   T49] Quota error (device loop2): remove_free_dqentry: Can't write block (2) with free entries
[  982.601060][   T49] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  982.642635][   T49] Quota error (device loop2): write_blk: dquota write failed
[  982.675142][   T49] Quota error (device loop2): free_dqentry: Can't move quota data block (2) to free list
[  982.709457][   T49] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  982.752745][   T49] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  982.822483][T12518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  983.525969][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2811'.
[  983.535144][T15421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2811'.
[  983.547142][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2811'.
[  983.556322][T15421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2811'.
[  984.896325][T15431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2813'.
[  986.878136][T15444] syzkaller0: entered promiscuous mode
[  986.883895][T15444] syzkaller0: entered allmulticast mode
[  987.185862][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2821'.
[  987.195318][T15453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2821'.
[  987.207285][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2821'.
[  987.216318][T15453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2821'.
[  988.306766][T15456] loop0: detected capacity change from 0 to 256
[  988.690763][T15466] xt_hashlimit: size too large, truncated to 1048576
[  989.518536][T15473] loop2: detected capacity change from 0 to 512
[  989.568497][T15473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  989.601722][T15473] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  989.740201][T15473] EXT4-fs error (device loop2): ext4_get_first_dir_block:3595: inode #12: comm syz.2.2828: directory missing '.'
[  989.878185][T12518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  990.508088][T15488] bridge3: entered promiscuous mode
[  990.513475][T15488] bridge3: entered allmulticast mode
[  990.740124][T15493] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  991.544315][T15501] loop3: detected capacity change from 0 to 256
[  991.551695][T15501] exfat: Deprecated parameter 'utf8'
[  991.557186][T15501] exfat: Deprecated parameter 'utf8'
[  991.563210][T15501] exfat: Deprecated parameter 'utf8'
[  991.568672][T15501] exfat: Bad value for 'gid'
[  993.745508][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  993.752273][T14195] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  993.976570][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  994.914017][T15508] veth1_macvtap: left promiscuous mode
[  994.919650][T15508] macsec0: entered promiscuous mode
[  996.790000][T15516] loop3: detected capacity change from 0 to 512
[  996.810541][T15516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  996.831465][T15516] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  996.883258][T15516] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  996.905579][T15516] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  996.946691][T15516] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  996.967834][T15516] EXT4-fs (loop3): orphan cleanup on readonly fs
[  997.014488][T15516] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2841: bg 0: block 34: padding at end of block bitmap is not set
[  997.052777][T15516] Quota error (device loop3): write_blk: dquota write failed
[  997.061477][T15516] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  997.071657][T15516] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2841: Failed to acquire dquot type 1
[  997.115638][T15516] EXT4-fs (loop3): 1 truncate cleaned up
[  997.146488][T15516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  997.218157][T15516] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.2841: deleted inode referenced: 12
[  997.377067][T14191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  997.450948][T15523] loop4: detected capacity change from 0 to 4096
[  997.490092][T15523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  997.953773][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  998.166818][ T5816] usb 5-1: Using ep0 maxpacket: 16
[  998.176320][ T5816] usb 5-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config
[  998.187621][ T5816] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  998.203011][ T5816] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  998.212914][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.223555][ T5816] usb 5-1: Product: syz
[  998.243986][ T5816] usb 5-1: Manufacturer: syz
[  998.248961][ T5816] usb 5-1: SerialNumber: syz
[  998.470506][ T5816] usb 5-1: 0:2 : does not exist
[  998.500435][ T5816] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  998.598251][ T5816] usb 5-1: USB disconnect, device number 2
[  998.824798][T14195] udevd[14195]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  999.210187][T14036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1000.552733][T15562] trusted_key: encrypted_key: insufficient parameters specified
[ 1000.572674][T15562] trusted_key: encrypted_key: insufficient parameters specified
[ 1001.444112][T13897] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1001.522073][T15575] loop4: detected capacity change from 0 to 128
[ 1001.881533][T13897] usb 3-1: device descriptor read/64, error -71
[ 1002.332538][T13897] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1003.590541][T15581] loop0: detected capacity change from 0 to 4096
[ 1003.605317][T15581] EXT4-fs: Ignoring removed bh option
[ 1003.632091][T13897] usb 3-1: device descriptor read/64, error -71
[ 1003.761625][T15581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1003.861450][T13897] usb usb3-port1: attempt power cycle
[ 1004.114753][T15581] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.2862: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[ 1004.291835][T15581] EXT4-fs (loop0): Remounting filesystem read-only
[ 1004.298592][T15581] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.2862: directory missing '..'
[ 1005.543002][T13676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1005.878924][T15595] bridge5: entered promiscuous mode
[ 1005.932146][T15595] bridge5: entered allmulticast mode
[ 1005.989136][T15600] trusted_key: encrypted_key: insufficient parameters specified
[ 1006.007011][T15600] trusted_key: encrypted_key: insufficient parameters specified
[ 1007.367459][T15610] loop0: detected capacity change from 0 to 512
[ 1008.073796][T13897] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1008.404065][T13897] usb 3-1: Using ep0 maxpacket: 8
[ 1008.510355][T13897] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1008.586705][T13897] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1008.595500][T13897] usb 3-1: can't read configurations, error -61
[ 1008.977987][T13897] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1009.277186][T15623] syzkaller0: entered promiscuous mode
[ 1009.293130][T15623] syzkaller0: entered allmulticast mode
[ 1009.301141][T13897] usb 3-1: Using ep0 maxpacket: 8
[ 1009.325904][T13897] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1009.358251][T13897] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1009.381163][T13897] usb 3-1: can't read configurations, error -61
[ 1009.388550][T13897] usb usb3-port1: attempt power cycle
[ 1009.874131][T13897] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1009.928239][T13897] usb 3-1: Using ep0 maxpacket: 8
[ 1009.953356][T13897] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1009.964045][T15635] trusted_key: encrypted_key: insufficient parameters specified
[ 1009.968677][T13897] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1009.979984][T13897] usb 3-1: can't read configurations, error -61
[ 1010.145528][T13897] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1010.174682][T15635] trusted_key: encrypted_key: insufficient parameters specified
[ 1010.200041][T13897] usb 3-1: Using ep0 maxpacket: 8
[ 1010.212670][T15634] loop3: detected capacity change from 0 to 4096
[ 1010.219193][T13897] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1010.225096][T13897] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1010.235226][T13897] usb 3-1: can't read configurations, error -61
[ 1010.241865][T13897] usb usb3-port1: unable to enumerate USB device
[ 1010.464953][T15634] ext4: Unknown parameter 'context'
[ 1010.545239][T11577] Bluetooth: hci3: command 0x0406 tx timeout
[ 1010.681516][T15643] bridge4: entered promiscuous mode
[ 1010.687337][T15643] bridge4: entered allmulticast mode
[ 1011.362649][T15652] loop0: detected capacity change from 0 to 128
[ 1012.066111][T15662] syzkaller0: entered promiscuous mode
[ 1012.071668][T15662] syzkaller0: entered allmulticast mode
[ 1012.358556][T15663] syzkaller0: entered promiscuous mode
[ 1012.378881][T15663] syzkaller0: entered allmulticast mode
[ 1012.677893][T15669] trusted_key: encrypted_key: insufficient parameters specified
[ 1012.686766][T15669] trusted_key: encrypted_key: insufficient parameters specified
[ 1013.642705][T15679] 9pnet: p9_errstr2errno: server reported unknown error õ1
[ 1015.177548][T15708] trusted_key: encrypted_key: insufficient parameters specified
[ 1015.307691][T15708] trusted_key: encrypted_key: insufficient parameters specified
[ 1017.505804][  T787] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1017.800549][  T787] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[ 1017.809852][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.818529][  T787] usb 3-1: Product: syz
[ 1017.822768][  T787] usb 3-1: Manufacturer: syz
[ 1017.827921][  T787] usb 3-1: SerialNumber: syz
[ 1018.959094][T15692] bridge5: entered promiscuous mode
[ 1018.964864][T15692] bridge5: entered allmulticast mode
[ 1018.988157][T15694] syzkaller0: entered promiscuous mode
[ 1019.133757][T15694] syzkaller0: entered allmulticast mode
[ 1020.039410][T15736] trusted_key: encrypted_key: insufficient parameters specified
[ 1020.050387][T15736] trusted_key: encrypted_key: insufficient parameters specified
[ 1022.345820][  T787] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[ 1022.352956][  T787] usb 3-1: MIDIStreaming interface descriptor not found
[ 1022.700369][  T787] usb 3-1: USB disconnect, device number 23
[ 1022.788166][T14141] udevd[14141]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1023.141061][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'.
[ 1023.150144][T15755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2913'.
[ 1023.161851][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'.
[ 1023.171483][T15755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2913'.
[ 1023.912570][T15758] syzkaller0: entered promiscuous mode
[ 1023.955550][T15758] syzkaller0: entered allmulticast mode
[ 1024.032459][T15752] bridge6: entered promiscuous mode
[ 1024.038133][T15752] bridge6: entered allmulticast mode
[ 1024.775451][T15772] bridge2: entered promiscuous mode
[ 1024.781127][T15772] bridge2: entered allmulticast mode
[ 1025.318399][T15776] loop0: detected capacity change from 0 to 1024
[ 1025.339578][T15776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1025.410540][T15776] EXT4-fs error (device loop0): ext4_get_first_dir_block:3606: inode #11: comm syz.0.2920: directory missing '..'
[ 1025.469338][T15783] loop2: detected capacity change from 0 to 512
[ 1025.504104][T15783] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[ 1025.567475][T15783] EXT4-fs (loop2): 1 truncate cleaned up
[ 1025.604682][T15783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1025.610582][T13676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1025.757602][   T28] audit: type=1800 audit(1777522499.969:692): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2921" name="file1" dev="loop2" ino=15 res=0 errno=0
[ 1026.157901][T15794] syzkaller0: entered promiscuous mode
[ 1026.163431][T15794] syzkaller0: entered allmulticast mode
[ 1026.265968][T12518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1026.329558][T15797] syzkaller0: entered promiscuous mode
[ 1026.337702][T15797] syzkaller0: entered allmulticast mode
[ 1027.216658][T15813] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1029.265422][T15830] syzkaller0: entered promiscuous mode
[ 1029.270986][T15830] syzkaller0: entered allmulticast mode
[ 1029.405307][T15832] syzkaller0: entered promiscuous mode
[ 1029.410882][T15832] syzkaller0: entered allmulticast mode
[ 1030.300036][T15858] loop4: detected capacity change from 0 to 128
[ 1030.831881][T15867] loop3: detected capacity change from 0 to 2048
[ 1030.840710][T15867] EXT4-fs: quotafile must be on filesystem root
[ 1031.028637][T11577] Bluetooth: hci0: command 0x0406 tx timeout
[ 1035.344916][T15926] loop3: detected capacity change from 0 to 256
[ 1035.353170][T15926] exfat: Deprecated parameter 'utf8'
[ 1035.370258][T15926] exfat: Deprecated parameter 'namecase'
[ 1035.377949][T15926] exfat: Deprecated parameter 'namecase'
[ 1035.387416][T15926] exfat: Deprecated parameter 'utf8'
[ 1035.468131][T15926] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[ 1039.370588][T15982] loop4: detected capacity change from 0 to 512
[ 1039.400498][T15982] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 1039.471518][T15982] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1039.572975][T15982] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2984: invalid indirect mapped block 9 (level 0)
[ 1039.950935][T15982] EXT4-fs (loop4): 1 truncate cleaned up
[ 1040.166954][T15982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1041.594177][T15354] Bluetooth: hci0: command 0x0406 tx timeout
[ 1042.535036][T14036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1045.113874][T16027] KVM: debugfs: duplicate directory 16027-6
[ 1045.593718][ T5771] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1048.343694][ T5771] usb 5-1: Using ep0 maxpacket: 16
[ 1048.546059][ T5771] usb 5-1: device descriptor read/all, error -71
[ 1052.021162][T16068] bridge6: entered promiscuous mode
[ 1052.046325][T16068] bridge6: entered allmulticast mode
[ 1054.550932][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.823794][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.844880][T15354] Bluetooth: hci2: command 0x0406 tx timeout
[ 1056.080299][T16089] loop4: detected capacity change from 0 to 1024
[ 1056.102711][T16089] EXT4-fs: Ignoring removed bh option
[ 1056.125173][T16089] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 9
[ 1056.704668][T16100] trusted_key: encrypted_key: insufficient parameters specified
[ 1056.751670][T16100] trusted_key: encrypted_key: insufficient parameters specified
[ 1057.490379][T16108] x_tables: duplicate underflow at hook 1
[ 1057.548082][T16108] vlan2: entered allmulticast mode
[ 1057.553780][T16108] macsec0: entered allmulticast mode
[ 1057.559213][T16108] veth1_macvtap: entered allmulticast mode
[ 1058.507875][T16097] loop3: detected capacity change from 0 to 40427
[ 1058.574105][T16097] F2FS-fs (loop3): Invalid SB checksum offset: 0
[ 1058.594289][T16097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1058.648124][T16097] F2FS-fs (loop3): invalid crc value
[ 1058.894575][ T5833] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1059.141069][T16118] bridge7: entered promiscuous mode
[ 1059.153888][ T5833] usb 1-1: Using ep0 maxpacket: 8
[ 1059.170983][T16118] bridge7: entered allmulticast mode
[ 1059.255892][ T5833] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1059.292608][ T5833] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1059.320425][T16097] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[ 1059.335560][T16097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1059.353571][ T5833] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[ 1059.378587][ T5833] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1059.426748][ T5833] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1059.476040][ T5833] usb 1-1: Manufacturer: syz
[ 1059.492343][ T5833] usb 1-1: SerialNumber: syz
[ 1059.806028][ T5833] usb 1-1: USB disconnect, device number 28
[ 1060.513419][T16129] syzkaller0: entered promiscuous mode
[ 1060.924025][ T5834] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1061.067998][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'.
[ 1061.077582][T16135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3028'.
[ 1061.210522][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'.
[ 1061.219911][T16137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3028'.
[ 1061.261797][ T5834] usb 4-1: Using ep0 maxpacket: 32
[ 1061.391476][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1061.536174][ T5834] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[ 1061.545752][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.588358][ T5834] usb 4-1: Product: syz
[ 1061.592623][ T5834] usb 4-1: Manufacturer: syz
[ 1061.618915][ T5834] usb 4-1: SerialNumber: syz
[ 1061.798782][T16143] syzkaller0: entered promiscuous mode
[ 1061.804775][T16143] syzkaller0: entered allmulticast mode
[ 1061.862133][ T5834] usb 4-1: unit 4 not found!
[ 1061.869109][ T5834] usb 4-1: unit 0 not found!
[ 1062.271317][ T5834] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[ 1062.342776][ T5834] usb 4-1: unit 4 not found!
[ 1062.364458][ T5834] usb 4-1: unit 0 not found!
[ 1062.442611][ T5834] snd-usb-audio: probe of 4-1:1.1 failed with error -22
[ 1062.468772][ T5834] usb 4-1: unit 4 not found!
[ 1062.501518][ T5834] usb 4-1: unit 0 not found!
[ 1062.613740][ T3066] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1062.700429][T16157] bridge7: entered promiscuous mode
[ 1062.708309][T16157] bridge7: entered allmulticast mode
[ 1062.748523][ T5834] snd-usb-audio: probe of 4-1:1.2 failed with error -22
[ 1062.827519][ T5834] usb 4-1: USB disconnect, device number 22
[ 1062.834857][ T3066] usb 5-1: Using ep0 maxpacket: 8
[ 1062.846562][ T3066] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1063.001027][ T3066] usb 5-1: config 4 interface 0 has no altsetting 0
[ 1063.023784][T14141] udevd[14141]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1063.052985][ T3066] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1063.063304][ T3066] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1063.076666][ T3066] usb 5-1: Manufacturer: syz
[ 1063.081368][ T3066] usb 5-1: SerialNumber: syz
[ 1063.436847][T16162] syzkaller0: entered promiscuous mode
[ 1063.481037][ T3066] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1063.524704][ T3066] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1063.562424][ T3066] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1063.595394][ T3066] usb 5-1: media controller created
[ 1063.671017][ T3066] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1063.758017][ T3066] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1063.898600][ T3066] usb 5-1: USB disconnect, device number 5
[ 1067.861793][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3041'.
[ 1067.871577][T16174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3041'.
[ 1067.891650][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3041'.
[ 1067.902001][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3041'.
[ 1068.451951][T16211] syzkaller0: entered promiscuous mode
[ 1068.460447][T16211] syzkaller0: entered allmulticast mode
[ 1069.296555][T16213] loop0: detected capacity change from 0 to 4096
[ 1069.310094][T16213] EXT4-fs: Ignoring removed bh option
[ 1069.633480][T16213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1069.766694][T16213] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.3047: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[ 1069.792130][T16213] EXT4-fs (loop0): Remounting filesystem read-only
[ 1069.799982][T16213] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.3047: directory missing '..'
[ 1070.593695][ T5834] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1070.798662][T13676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1071.924945][T16219] bridge8: entered promiscuous mode
[ 1071.930208][T16219] bridge8: entered allmulticast mode
[ 1072.024097][ T5834] usb 4-1: Using ep0 maxpacket: 8
[ 1072.048339][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1072.069831][T16223] syzkaller0: entered promiscuous mode
[ 1072.110977][ T5834] usb 4-1: config 4 interface 0 has no altsetting 0
[ 1072.126402][ T5834] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1072.153737][ T5834] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1072.177089][ T5834] usb 4-1: Manufacturer: syz
[ 1072.181769][ T5834] usb 4-1: SerialNumber: syz
[ 1073.193314][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'.
[ 1073.216506][T16227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3053'.
[ 1073.336934][T16227] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1073.346573][T16227] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1073.355852][T16227] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1073.365003][T16227] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1073.403229][ T5834] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1073.422524][ T5834] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1073.437650][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'.
[ 1073.475821][ T5834] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1073.498629][ T5834] usb 4-1: media controller created
[ 1073.511119][T16228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3053'.
[ 1073.576878][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1073.634789][ T5834] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1073.964067][ T5834] usb 4-1: USB disconnect, device number 23
[ 1074.006723][T16248] syzkaller0: entered promiscuous mode
[ 1074.028845][T16248] syzkaller0: entered allmulticast mode
[ 1074.176232][T16246] syzkaller0: entered promiscuous mode
[ 1074.181807][T16246] syzkaller0: entered allmulticast mode
[ 1074.777042][T16257] syzkaller0: entered promiscuous mode
[ 1074.794873][T16257] syzkaller0: entered allmulticast mode
[ 1075.096652][T16259] syzkaller0: entered promiscuous mode
[ 1075.380697][T16265] bridge8: entered promiscuous mode
[ 1075.392471][T16265] bridge8: entered allmulticast mode
[ 1075.741575][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'.
[ 1075.750669][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3065'.
[ 1076.246434][ T3066] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1076.723804][ T3066] usb 4-1: Using ep0 maxpacket: 8
[ 1076.736424][ T3066] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1076.757077][ T3066] usb 4-1: config 4 interface 0 has no altsetting 0
[ 1076.773763][ T3066] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1076.795395][ T3066] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1076.807065][ T3066] usb 4-1: Manufacturer: syz
[ 1076.823868][ T3066] usb 4-1: SerialNumber: syz
[ 1076.934035][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'.
[ 1076.954037][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3065'.
[ 1077.046131][ T3066] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1077.095300][ T3066] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1077.124128][ T3066] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1077.189578][ T3066] usb 4-1: media controller created
[ 1077.279457][ T3066] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1077.344018][ T3066] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1077.526710][ T3066] usb 4-1: USB disconnect, device number 24
[ 1078.152915][T16290] bridge9: entered promiscuous mode
[ 1078.239173][T16290] bridge9: entered allmulticast mode
[ 1078.294836][T16288] syzkaller0: entered promiscuous mode
[ 1078.327828][T16288] syzkaller0: entered allmulticast mode
[ 1078.926197][T16305] syzkaller0: entered promiscuous mode
[ 1079.961969][T11577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1079.973717][T11577] CPU: 1 PID: 11577 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1079.981428][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1079.991540][T11577] Workqueue: hci2 hci_rx_work
[ 1079.996299][T11577] Call Trace:
[ 1079.999626][T11577]  <TASK>
[ 1080.002600][T11577]  dump_stack_lvl+0x18c/0x250
[ 1080.007362][T11577]  ? show_regs_print_info+0x20/0x20
[ 1080.012617][T11577]  ? load_image+0x420/0x420
[ 1080.017193][T11577]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1080.022352][T11577]  ? sysfs_warn_dup+0xa0/0xa0
[ 1080.027078][T11577]  ? do_raw_spin_unlock+0x121/0x230
[ 1080.032328][T11577]  kobject_add_internal+0x61c/0xcc0
[ 1080.037597][T11577]  kobject_add+0x164/0x240
[ 1080.042070][T11577]  ? __rwlock_init+0x150/0x150
[ 1080.046894][T11577]  ? kobject_init+0x1e0/0x1e0
[ 1080.051634][T11577]  ? _raw_spin_unlock+0x28/0x40
[ 1080.056538][T11577]  ? get_device_parent+0x366/0x390
[ 1080.061727][T11577]  device_add+0x408/0xc20
[ 1080.066111][T11577]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1080.071109][T11577]  le_conn_complete_evt+0xf5d/0x1540
[ 1080.076445][T11577]  ? hci_event_packet+0x4cb/0x1270
[ 1080.081624][T11577]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1080.087917][T11577]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1080.093607][T11577]  ? skb_pull_data+0xfb/0x200
[ 1080.098352][T11577]  hci_le_conn_complete_evt+0x187/0x440
[ 1080.103957][T11577]  ? hci_remote_host_features_evt+0x150/0x150
[ 1080.110106][T11577]  hci_event_packet+0x7ba/0x1270
[ 1080.115101][T11577]  ? bis_list+0x290/0x290
[ 1080.119478][T11577]  ? lockdep_hardirqs_on+0x98/0x150
[ 1080.124768][T11577]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1080.130041][T11577]  hci_rx_work+0x43a/0xd60
[ 1080.134544][T11577]  ? process_scheduled_works+0x96f/0x15d0
[ 1080.140353][T11577]  process_scheduled_works+0xa5d/0x15d0
[ 1080.145994][T11577]  ? worker_attach_to_pool+0x380/0x380
[ 1080.151519][T11577]  ? assign_work+0x3d2/0x5d0
[ 1080.156202][T11577]  worker_thread+0xa55/0xfc0
[ 1080.160845][T11577]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1080.166813][T11577]  ? _raw_spin_unlock+0x40/0x40
[ 1080.171710][T11577]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1080.177689][T11577]  kthread+0x2fa/0x390
[ 1080.181808][T11577]  ? pr_cont_work+0x560/0x560
[ 1080.186550][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1080.191188][T11577]  ret_from_fork+0x48/0x80
[ 1080.195652][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1080.200304][T11577]  ret_from_fork_asm+0x11/0x20
[ 1080.205137][T11577]  </TASK>
[ 1082.446577][T11577] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1082.462545][T11577] Bluetooth: hci2: failed to register connection device
[ 1084.114282][T16337] trusted_key: encrypted_key: insufficient parameters specified
[ 1084.167671][T16337] trusted_key: encrypted_key: insufficient parameters specified
[ 1084.476207][T15354] Bluetooth: hci2: command 0x0406 tx timeout
[ 1084.544680][ T9355] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1084.787093][ T9355] usb 4-1: Using ep0 maxpacket: 8
[ 1084.823751][ T9355] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1084.835643][ T9355] usb 4-1: config 4 interface 0 has no altsetting 0
[ 1084.848528][ T9355] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1084.867011][ T9355] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1084.887875][ T9355] usb 4-1: Manufacturer: syz
[ 1084.892532][ T9355] usb 4-1: SerialNumber: syz
[ 1085.158809][ T9355] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1085.169762][ T9355] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1085.183463][ T9355] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1085.190819][ T9355] usb 4-1: media controller created
[ 1085.230312][ T9355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1085.292109][ T9355] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1085.393366][ T9355] usb 4-1: USB disconnect, device number 25
[ 1087.372831][T16331] bridge5: entered promiscuous mode
[ 1087.378287][T16331] bridge5: entered allmulticast mode
[ 1089.966308][T15354] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[ 1089.976518][T15354] CPU: 0 PID: 15354 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1089.984193][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1089.994294][T15354] Workqueue: hci0 hci_rx_work
[ 1089.999027][T15354] Call Trace:
[ 1090.002364][T15354]  <TASK>
[ 1090.005326][T15354]  dump_stack_lvl+0x18c/0x250
[ 1090.010046][T15354]  ? show_regs_print_info+0x20/0x20
[ 1090.015290][T15354]  ? load_image+0x420/0x420
[ 1090.019860][T15354]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1090.025019][T15354]  ? sysfs_warn_dup+0xa0/0xa0
[ 1090.029732][T15354]  ? do_raw_spin_unlock+0x121/0x230
[ 1090.035060][T15354]  kobject_add_internal+0x61c/0xcc0
[ 1090.040298][T15354]  kobject_add+0x164/0x240
[ 1090.044753][T15354]  ? __rwlock_init+0x150/0x150
[ 1090.049600][T15354]  ? kobject_init+0x1e0/0x1e0
[ 1090.054312][T15354]  ? _raw_spin_unlock+0x28/0x40
[ 1090.059202][T15354]  ? get_device_parent+0x366/0x390
[ 1090.064397][T15354]  device_add+0x408/0xc20
[ 1090.068791][T15354]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1090.073773][T15354]  le_conn_complete_evt+0xf5d/0x1540
[ 1090.079103][T15354]  ? hci_event_packet+0x4cb/0x1270
[ 1090.084257][T15354]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1090.090527][T15354]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1090.096195][T15354]  ? skb_pull_data+0xfb/0x200
[ 1090.100905][T15354]  hci_le_conn_complete_evt+0x187/0x440
[ 1090.106492][T15354]  ? hci_remote_host_features_evt+0x150/0x150
[ 1090.112596][T15354]  hci_event_packet+0x7ba/0x1270
[ 1090.117584][T15354]  ? bis_list+0x290/0x290
[ 1090.121982][T15354]  ? lockdep_hardirqs_on+0x98/0x150
[ 1090.127221][T15354]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1090.132449][T15354]  hci_rx_work+0x43a/0xd60
[ 1090.136922][T15354]  ? process_scheduled_works+0x96f/0x15d0
[ 1090.142674][T15354]  process_scheduled_works+0xa5d/0x15d0
[ 1090.148280][T15354]  ? worker_attach_to_pool+0x380/0x380
[ 1090.153789][T15354]  ? assign_work+0x3d2/0x5d0
[ 1090.158422][T15354]  worker_thread+0xa55/0xfc0
[ 1090.163070][T15354]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1090.169025][T15354]  ? _raw_spin_unlock+0x40/0x40
[ 1090.173921][T15354]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1090.179881][T15354]  kthread+0x2fa/0x390
[ 1090.183991][T15354]  ? pr_cont_work+0x560/0x560
[ 1090.188718][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1090.193336][T15354]  ret_from_fork+0x48/0x80
[ 1090.197791][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1090.202412][T15354]  ret_from_fork_asm+0x11/0x20
[ 1090.207223][T15354]  </TASK>
[ 1090.264028][T15354] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1090.280642][T15354] Bluetooth: hci0: failed to register connection device
[ 1090.838886][T16404] trusted_key: encrypted_key: insufficient parameters specified
[ 1090.857407][T16404] trusted_key: encrypted_key: insufficient parameters specified
[ 1091.853802][ T5771] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1091.988387][T16416] syzkaller0: entered promiscuous mode
[ 1091.994248][T16416] syzkaller0: entered allmulticast mode
[ 1092.051284][T16414] syzkaller0: entered promiscuous mode
[ 1092.073749][ T5771] usb 1-1: Using ep0 maxpacket: 8
[ 1092.081778][ T5771] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1092.091444][ T5771] usb 1-1: config 4 interface 0 has no altsetting 0
[ 1092.112648][ T5771] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1092.133157][ T5771] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1092.154681][ T5771] usb 1-1: Manufacturer: syz
[ 1092.173779][ T5771] usb 1-1: SerialNumber: syz
[ 1092.304513][T15354] Bluetooth: hci0: command 0x0406 tx timeout
[ 1092.349652][T16418] syzkaller0: entered promiscuous mode
[ 1092.363954][T16418] syzkaller0: entered allmulticast mode
[ 1092.643025][ T5771] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1092.668624][ T5771] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1092.694286][ T5771] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1092.748111][ T5771] usb 1-1: media controller created
[ 1092.850277][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1092.909704][T16425] bridge9: entered promiscuous mode
[ 1092.942244][T16425] bridge9: entered allmulticast mode
[ 1092.954256][ T5771] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1093.294052][ T5771] usb 1-1: USB disconnect, device number 29
[ 1095.337372][T16439] trusted_key: encrypted_key: insufficient parameters specified
[ 1095.359230][T16439] trusted_key: encrypted_key: insufficient parameters specified
[ 1096.095693][T15354] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[ 1096.105350][T15354] CPU: 0 PID: 15354 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1096.113046][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1096.123158][T15354] Workqueue: hci0 hci_rx_work
[ 1096.127925][T15354] Call Trace:
[ 1096.131249][T15354]  <TASK>
[ 1096.134233][T15354]  dump_stack_lvl+0x18c/0x250
[ 1096.138980][T15354]  ? show_regs_print_info+0x20/0x20
[ 1096.144239][T15354]  ? load_image+0x420/0x420
[ 1096.148812][T15354]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1096.153980][T15354]  ? sysfs_warn_dup+0xa0/0xa0
[ 1096.158707][T15354]  ? do_raw_spin_unlock+0x121/0x230
[ 1096.163978][T15354]  kobject_add_internal+0x61c/0xcc0
[ 1096.169248][T15354]  kobject_add+0x164/0x240
[ 1096.173720][T15354]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1096.179426][T15354]  ? kobject_init+0x1e0/0x1e0
[ 1096.184182][T15354]  ? get_device_parent+0x366/0x390
[ 1096.189369][T15354]  device_add+0x408/0xc20
[ 1096.193763][T15354]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1096.198758][T15354]  le_conn_complete_evt+0xf5d/0x1540
[ 1096.204093][T15354]  ? hci_event_packet+0x4cb/0x1270
[ 1096.209280][T15354]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1096.215669][T15354]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1096.221357][T15354]  ? skb_pull_data+0xfb/0x200
[ 1096.226098][T15354]  hci_le_conn_complete_evt+0x187/0x440
[ 1096.231700][T15354]  ? hci_remote_host_features_evt+0x150/0x150
[ 1096.237825][T15354]  hci_event_packet+0x7ba/0x1270
[ 1096.242831][T15354]  ? bis_list+0x290/0x290
[ 1096.247242][T15354]  ? lockdep_hardirqs_on+0x98/0x150
[ 1096.252504][T15354]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1096.257761][T15354]  hci_rx_work+0x43a/0xd60
[ 1096.262256][T15354]  ? process_scheduled_works+0x96f/0x15d0
[ 1096.268039][T15354]  process_scheduled_works+0xa5d/0x15d0
[ 1096.273716][T15354]  ? worker_attach_to_pool+0x380/0x380
[ 1096.279239][T15354]  ? assign_work+0x3d2/0x5d0
[ 1096.283897][T15354]  worker_thread+0xa55/0xfc0
[ 1096.288552][T15354]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1096.294526][T15354]  ? _raw_spin_unlock+0x40/0x40
[ 1096.299451][T15354]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1096.305432][T15354]  kthread+0x2fa/0x390
[ 1096.309586][T15354]  ? pr_cont_work+0x560/0x560
[ 1096.314341][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1096.319016][T15354]  ret_from_fork+0x48/0x80
[ 1096.323523][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1096.328166][T15354]  ret_from_fork_asm+0x11/0x20
[ 1096.333006][T15354]  </TASK>
[ 1098.113810][T15354] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1098.128077][T15354] Bluetooth: hci0: failed to register connection device
[ 1098.869574][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'.
[ 1098.879798][T16460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3103'.
[ 1099.843712][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3103'.
[ 1099.888219][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3103'.
[ 1100.116372][T16464] syzkaller0: entered promiscuous mode
[ 1100.143785][T15354] Bluetooth: hci0: command 0x0406 tx timeout
[ 1100.348809][T16470] syzkaller0: entered promiscuous mode
[ 1100.354492][T16470] syzkaller0: entered allmulticast mode
[ 1100.391661][T16469] syzkaller0: entered promiscuous mode
[ 1100.409318][T16469] syzkaller0: entered allmulticast mode
[ 1102.634513][T16489] trusted_key: encrypted_key: insufficient parameters specified
[ 1102.642964][T16489] trusted_key: encrypted_key: insufficient parameters specified
[ 1103.088712][T16501] bridge6: entered promiscuous mode
[ 1103.114677][T16501] bridge6: entered allmulticast mode
[ 1103.262376][T15354] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[ 1103.272199][T15354] CPU: 1 PID: 15354 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1103.279908][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1103.290117][T15354] Workqueue: hci0 hci_rx_work
[ 1103.294880][T15354] Call Trace:
[ 1103.298248][T15354]  <TASK>
[ 1103.301227][T15354]  dump_stack_lvl+0x18c/0x250
[ 1103.305996][T15354]  ? show_regs_print_info+0x20/0x20
[ 1103.311258][T15354]  ? load_image+0x420/0x420
[ 1103.315838][T15354]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1103.321016][T15354]  ? sysfs_warn_dup+0xa0/0xa0
[ 1103.325750][T15354]  ? do_raw_spin_unlock+0x121/0x230
[ 1103.331023][T15354]  kobject_add_internal+0x61c/0xcc0
[ 1103.336301][T15354]  kobject_add+0x164/0x240
[ 1103.340782][T15354]  ? __rwlock_init+0x150/0x150
[ 1103.345617][T15354]  ? kobject_init+0x1e0/0x1e0
[ 1103.350371][T15354]  ? _raw_spin_unlock+0x28/0x40
[ 1103.355279][T15354]  ? get_device_parent+0x366/0x390
[ 1103.360462][T15354]  device_add+0x408/0xc20
[ 1103.364867][T15354]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1103.369885][T15354]  le_conn_complete_evt+0xf5d/0x1540
[ 1103.375258][T15354]  ? hci_event_packet+0x4cb/0x1270
[ 1103.380450][T15354]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1103.386764][T15354]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1103.392469][T15354]  ? skb_pull_data+0xfb/0x200
[ 1103.397214][T15354]  hci_le_conn_complete_evt+0x187/0x440
[ 1103.402829][T15354]  ? hci_remote_host_features_evt+0x150/0x150
[ 1103.408969][T15354]  hci_event_packet+0x7ba/0x1270
[ 1103.413979][T15354]  ? bis_list+0x290/0x290
[ 1103.418364][T15354]  ? lockdep_hardirqs_on+0x98/0x150
[ 1103.423622][T15354]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1103.428876][T15354]  hci_rx_work+0x43a/0xd60
[ 1103.433385][T15354]  ? process_scheduled_works+0x96f/0x15d0
[ 1103.439176][T15354]  process_scheduled_works+0xa5d/0x15d0
[ 1103.444821][T15354]  ? worker_attach_to_pool+0x380/0x380
[ 1103.450413][T15354]  ? assign_work+0x3d2/0x5d0
[ 1103.455075][T15354]  worker_thread+0xa55/0xfc0
[ 1103.459754][T15354]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1103.465726][T15354]  ? _raw_spin_unlock+0x40/0x40
[ 1103.470636][T15354]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1103.476621][T15354]  kthread+0x2fa/0x390
[ 1103.480761][T15354]  ? pr_cont_work+0x560/0x560
[ 1103.485504][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1103.490155][T15354]  ret_from_fork+0x48/0x80
[ 1103.494634][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1103.499281][T15354]  ret_from_fork_asm+0x11/0x20
[ 1103.504110][T15354]  </TASK>
[ 1103.511160][T15354] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1105.642852][T15354] Bluetooth: hci0: failed to register connection device
[ 1106.100819][T16509] syzkaller0: entered promiscuous mode
[ 1106.555065][T16515] syzkaller0: entered promiscuous mode
[ 1106.561678][T16515] syzkaller0: entered allmulticast mode
[ 1107.663998][T11577] Bluetooth: hci0: command 0x0406 tx timeout
[ 1107.978488][T16521] loop4: detected capacity change from 0 to 4096
[ 1107.985713][T16521] EXT4-fs: Ignoring removed bh option
[ 1110.795047][T16521] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1110.795507][T16521] EXT4-fs: failed to create workqueue
[ 1110.810583][T16521] EXT4-fs (loop4): mount failed
[ 1111.707588][T16531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3121'.
[ 1112.311405][T16549] trusted_key: encrypted_key: insufficient parameters specified
[ 1112.333353][T16549] trusted_key: encrypted_key: insufficient parameters specified
[ 1113.445193][T16553] syzkaller0: entered promiscuous mode
[ 1113.695188][T16557] bridge3: entered promiscuous mode
[ 1113.721531][T16557] bridge3: entered allmulticast mode
[ 1113.983218][T16562] syzkaller0: entered promiscuous mode
[ 1114.003924][T16562] syzkaller0: entered allmulticast mode
[ 1115.338621][T16567] loop4: detected capacity change from 0 to 4096
[ 1115.345809][T16567] EXT4-fs: Ignoring removed bh option
[ 1116.064275][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.070660][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.763991][T16567] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1117.764426][T16567] EXT4-fs: failed to create workqueue
[ 1117.779494][T16567] EXT4-fs (loop4): mount failed
[ 1118.204065][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3131'.
[ 1118.853377][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'.
[ 1118.862497][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3133'.
[ 1118.875482][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'.
[ 1118.884553][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3133'.
[ 1119.709217][T16587] trusted_key: encrypted_key: insufficient parameters specified
[ 1119.744593][T16587] trusted_key: encrypted_key: insufficient parameters specified
[ 1120.299389][T16591] syzkaller0: entered promiscuous mode
[ 1120.888219][T16601] syzkaller0: entered promiscuous mode
[ 1120.895133][T16601] syzkaller0: entered allmulticast mode
[ 1121.948939][T16607] loop0: detected capacity change from 0 to 4096
[ 1121.956107][T16607] EXT4-fs: Ignoring removed bh option
[ 1123.767927][T16607] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1123.768352][T16607] EXT4-fs: failed to create workqueue
[ 1123.783377][T16607] EXT4-fs (loop0): mount failed
[ 1125.554590][T16604] bridge4: entered promiscuous mode
[ 1125.559855][T16604] bridge4: entered allmulticast mode
[ 1125.794189][T16616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3142'.
[ 1127.673321][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'.
[ 1127.682503][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'.
[ 1127.709713][T16628] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1127.718659][T16628] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1127.727486][T16628] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1127.736291][T16628] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1128.051020][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'.
[ 1128.061539][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'.
[ 1128.734295][T16633] bridge7: entered promiscuous mode
[ 1128.772621][T16633] bridge7: entered allmulticast mode
[ 1129.383125][T16645] syzkaller0: entered promiscuous mode
[ 1130.728118][T16651] loop3: detected capacity change from 0 to 512
[ 1131.311307][T16652] loop2: detected capacity change from 0 to 4096
[ 1131.318556][T16652] EXT4-fs: Ignoring removed bh option
[ 1131.784280][T16651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[ 1132.743798][T16651] System zones: 1-12
[ 1132.978815][T16652] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1132.979234][T16652] EXT4-fs: failed to create workqueue
[ 1132.994328][T16652] EXT4-fs (loop2): mount failed
[ 1133.479511][T16651] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.3151: missing EA_INODE flag
[ 1133.560475][T16651] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3151: error while reading EA inode 12 err=-117
[ 1133.651491][T16651] EXT4-fs (loop3): 1 orphan inode deleted
[ 1133.699635][T16651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1134.037270][T14191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1134.231469][T16662] bridge10: entered promiscuous mode
[ 1134.264730][T16662] bridge10: entered allmulticast mode
[ 1135.476085][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'.
[ 1135.485135][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3156'.
[ 1135.496786][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'.
[ 1135.505851][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3156'.
[ 1136.794316][T16692] loop3: detected capacity change from 0 to 4096
[ 1136.810589][T16692] EXT4-fs: Ignoring removed bh option
[ 1136.976708][T16692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1137.163955][T16695] syzkaller0: entered promiscuous mode
[ 1137.262667][T16690] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.3160: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[ 1137.419023][T16690] EXT4-fs (loop3): Remounting filesystem read-only
[ 1137.504797][T16690] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.3160: directory missing '..'
[ 1138.143751][ T5834] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1138.358552][ T5834] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1138.378275][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1138.403778][ T5834] usb 1-1: Product: syz
[ 1138.408039][ T5834] usb 1-1: Manufacturer: syz
[ 1138.455714][ T5834] usb 1-1: SerialNumber: syz
[ 1138.508339][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3167'.
[ 1138.517574][T16715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3167'.
[ 1138.529904][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3167'.
[ 1138.539145][T16715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3167'.
[ 1139.815388][ T5834] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[ 1139.834195][ T5834] cdc_ncm 1-1:1.0: bind() failure
[ 1139.857942][ T5834] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[ 1139.876875][ T5834] cdc_ncm 1-1:1.1: bind() failure
[ 1139.901088][ T5834] usb 1-1: USB disconnect, device number 30
[ 1139.945144][T16726] syzkaller0: entered promiscuous mode
[ 1140.995950][T16737] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3174'.
[ 1141.393262][T16741] bridge10: entered promiscuous mode
[ 1141.502874][T16741] bridge10: entered allmulticast mode
[ 1141.840596][T14191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1142.358049][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'.
[ 1142.367164][T16751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3176'.
[ 1142.379031][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'.
[ 1142.388548][T16751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3176'.
[ 1143.555657][T16758] syzkaller0: entered promiscuous mode
[ 1149.261562][T16775] loop3: detected capacity change from 0 to 4096
[ 1149.290412][T16775] EXT4-fs: Ignoring removed bh option
[ 1149.625640][T16775] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1149.626059][T16775] EXT4-fs: failed to create workqueue
[ 1149.641202][T16775] EXT4-fs (loop3): mount failed
[ 1152.320129][T11577] Bluetooth: hci3: command 0x0406 tx timeout
[ 1152.409005][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'.
[ 1152.418412][T16795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3187'.
[ 1152.430597][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'.
[ 1152.440720][T16795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3187'.
[ 1154.577985][T16818] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3194'.
[ 1156.074912][T16825] loop3: detected capacity change from 0 to 4096
[ 1156.082038][T16825] EXT4-fs: Ignoring removed bh option
[ 1157.543837][T16825] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1157.544223][T16825] EXT4-fs: failed to create workqueue
[ 1157.560214][T16825] EXT4-fs (loop3): mount failed
[ 1158.276351][T16831] binder: BINDER_SET_CONTEXT_MGR already set
[ 1158.334051][T16831] binder: 16830:16831 ioctl 4018620d 200000004a80 returned -16
[ 1161.436233][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'.
[ 1161.446215][T16849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3200'.
[ 1161.457938][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'.
[ 1161.466968][T16849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3200'.
[ 1162.659591][T16859] loop3: detected capacity change from 0 to 256
[ 1162.764880][T16859] exfat: Deprecated parameter 'utf8'
[ 1162.786209][T11577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1162.795935][T11577] CPU: 0 PID: 11577 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1162.803647][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1162.813786][T11577] Workqueue: hci2 hci_rx_work
[ 1162.818519][T11577] Call Trace:
[ 1162.821848][T11577]  <TASK>
[ 1162.824836][T11577]  dump_stack_lvl+0x18c/0x250
[ 1162.829603][T11577]  ? show_regs_print_info+0x20/0x20
[ 1162.834488][T16859] exfat: Deprecated parameter 'utf8'
[ 1162.834856][T11577]  ? load_image+0x420/0x420
[ 1162.840454][T16859] exfat: Deprecated parameter 'utf8'
[ 1162.844683][T11577]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1162.844715][T11577]  ? sysfs_warn_dup+0xa0/0xa0
[ 1162.844737][T11577]  ? do_raw_spin_unlock+0x121/0x230
[ 1162.844770][T11577]  kobject_add_internal+0x61c/0xcc0
[ 1162.870388][T11577]  kobject_add+0x164/0x240
[ 1162.874839][T11577]  ? __rwlock_init+0x150/0x150
[ 1162.879682][T11577]  ? kobject_init+0x1e0/0x1e0
[ 1162.884424][T11577]  ? _raw_spin_unlock+0x28/0x40
[ 1162.889304][T11577]  ? get_device_parent+0x366/0x390
[ 1162.894538][T11577]  device_add+0x408/0xc20
[ 1162.898928][T11577]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1162.903906][T11577]  le_conn_complete_evt+0xf5d/0x1540
[ 1162.909245][T11577]  ? hci_event_packet+0x4cb/0x1270
[ 1162.914396][T11577]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1162.920657][T11577]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1162.926314][T11577]  ? skb_pull_data+0xfb/0x200
[ 1162.931029][T11577]  hci_le_conn_complete_evt+0x187/0x440
[ 1162.936614][T11577]  ? hci_remote_host_features_evt+0x150/0x150
[ 1162.942697][T11577]  hci_event_packet+0x7ba/0x1270
[ 1162.947663][T11577]  ? bis_list+0x290/0x290
[ 1162.952009][T11577]  ? lockdep_hardirqs_on+0x98/0x150
[ 1162.957231][T11577]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1162.962466][T11577]  hci_rx_work+0x43a/0xd60
[ 1162.966928][T11577]  ? process_scheduled_works+0x96f/0x15d0
[ 1162.972666][T11577]  process_scheduled_works+0xa5d/0x15d0
[ 1162.978277][T11577]  ? worker_attach_to_pool+0x380/0x380
[ 1162.983793][T11577]  ? assign_work+0x3d2/0x5d0
[ 1162.988416][T11577]  worker_thread+0xa55/0xfc0
[ 1162.993033][T11577]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1162.998953][T11577]  ? _raw_spin_unlock+0x40/0x40
[ 1163.003834][T11577]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1163.009786][T11577]  kthread+0x2fa/0x390
[ 1163.013869][T11577]  ? pr_cont_work+0x560/0x560
[ 1163.018597][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1163.023223][T11577]  ret_from_fork+0x48/0x80
[ 1163.027690][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1163.032295][T11577]  ret_from_fork_asm+0x11/0x20
[ 1163.037090][T11577]  </TASK>
[ 1163.068464][T11577] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1163.086544][T11577] Bluetooth: hci2: failed to register connection device
[ 1163.893041][T16859] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1165.103708][T11577] Bluetooth: hci2: command 0x0406 tx timeout
[ 1168.206170][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'.
[ 1168.215347][T16881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3210'.
[ 1168.226879][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'.
[ 1168.243673][T16881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3210'.
[ 1169.068091][T11577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[ 1169.078245][T11577] CPU: 1 PID: 11577 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1169.085941][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1169.096030][T11577] Workqueue: hci3 hci_rx_work
[ 1169.100753][T11577] Call Trace:
[ 1169.104059][T11577]  <TASK>
[ 1169.107010][T11577]  dump_stack_lvl+0x18c/0x250
[ 1169.111731][T11577]  ? show_regs_print_info+0x20/0x20
[ 1169.116957][T11577]  ? load_image+0x420/0x420
[ 1169.121505][T11577]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1169.126656][T11577]  ? sysfs_warn_dup+0xa0/0xa0
[ 1169.131398][T11577]  ? do_raw_spin_unlock+0x121/0x230
[ 1169.136637][T11577]  kobject_add_internal+0x61c/0xcc0
[ 1169.141908][T11577]  kobject_add+0x164/0x240
[ 1169.146396][T11577]  ? kobject_init+0x1e0/0x1e0
[ 1169.151126][T11577]  ? _raw_spin_unlock+0x3a/0x40
[ 1169.156043][T11577]  ? get_device_parent+0x366/0x390
[ 1169.161207][T11577]  device_add+0x408/0xc20
[ 1169.165600][T11577]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1169.170584][T11577]  le_conn_complete_evt+0xf5d/0x1540
[ 1169.175926][T11577]  ? hci_event_packet+0x4cb/0x1270
[ 1169.181094][T11577]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1169.187399][T11577]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1169.193076][T11577]  ? skb_pull_data+0xfb/0x200
[ 1169.197815][T11577]  hci_le_conn_complete_evt+0x187/0x440
[ 1169.203409][T11577]  ? hci_remote_host_features_evt+0x150/0x150
[ 1169.209534][T11577]  hci_event_packet+0x7ba/0x1270
[ 1169.214544][T11577]  ? bis_list+0x290/0x290
[ 1169.218923][T11577]  ? kcov_remote_start+0x2b/0x7e0
[ 1169.223999][T11577]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1169.229261][T11577]  hci_rx_work+0x43a/0xd60
[ 1169.233749][T11577]  ? process_scheduled_works+0x96f/0x15d0
[ 1169.239526][T11577]  process_scheduled_works+0xa5d/0x15d0
[ 1169.245160][T11577]  ? worker_attach_to_pool+0x380/0x380
[ 1169.250682][T11577]  ? assign_work+0x3d2/0x5d0
[ 1169.255338][T11577]  worker_thread+0xa55/0xfc0
[ 1169.259981][T11577]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1169.265923][T11577]  ? _raw_spin_unlock+0x40/0x40
[ 1169.270827][T11577]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1169.276810][T11577]  kthread+0x2fa/0x390
[ 1169.280926][T11577]  ? pr_cont_work+0x560/0x560
[ 1169.285658][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1169.290304][T11577]  ret_from_fork+0x48/0x80
[ 1169.294778][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1169.299411][T11577]  ret_from_fork_asm+0x11/0x20
[ 1169.304251][T11577]  </TASK>
[ 1169.332176][T11577] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1169.350072][T11577] Bluetooth: hci3: failed to register connection device
[ 1171.543932][T11577] Bluetooth: hci3: command 0x0406 tx timeout
[ 1172.073657][T13897] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1172.287838][T13897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1172.332254][T13897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1172.348922][T13897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1172.362714][T13897] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1172.383685][T13897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1172.428504][T13897] usb 4-1: config 0 descriptor??
[ 1172.763740][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3221'.
[ 1172.772900][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3221'.
[ 1172.784933][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3221'.
[ 1172.793996][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3221'.
[ 1173.559898][T13897] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[ 1173.593142][T13897] plantronics 0003:047F:FFFF.0015: unbalanced collection at end of report description
[ 1173.612336][T13897] plantronics 0003:047F:FFFF.0015: parse failed
[ 1173.623672][T13897] plantronics: probe of 0003:047F:FFFF.0015 failed with error -22
[ 1173.856229][ T5771] usb 4-1: USB disconnect, device number 26
[ 1174.023006][T16924] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[ 1174.036922][T16924] syzkaller0: entered promiscuous mode
[ 1174.210208][T16924] syzkaller0: entered allmulticast mode
[ 1175.479795][T16931] loop2: detected capacity change from 0 to 4096
[ 1175.487734][T16931] EXT4-fs: Ignoring removed bh option
[ 1177.584756][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.591091][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.625783][T16931] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1177.626226][T16931] EXT4-fs: failed to create workqueue
[ 1177.641260][T16931] EXT4-fs (loop2): mount failed
[ 1179.537006][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'.
[ 1179.546183][T16961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3232'.
[ 1179.558270][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'.
[ 1179.567938][T16961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3232'.
[ 1180.525583][T11577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[ 1180.535354][T11577] CPU: 0 PID: 11577 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1180.543047][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1180.553150][T11577] Workqueue: hci3 hci_rx_work
[ 1180.557914][T11577] Call Trace:
[ 1180.561244][T11577]  <TASK>
[ 1180.564215][T11577]  dump_stack_lvl+0x18c/0x250
[ 1180.568980][T11577]  ? show_regs_print_info+0x20/0x20
[ 1180.574237][T11577]  ? load_image+0x420/0x420
[ 1180.578821][T11577]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1180.583986][T11577]  ? sysfs_warn_dup+0xa0/0xa0
[ 1180.588794][T11577]  ? do_raw_spin_unlock+0x121/0x230
[ 1180.594063][T11577]  kobject_add_internal+0x61c/0xcc0
[ 1180.599326][T11577]  kobject_add+0x164/0x240
[ 1180.603809][T11577]  ? kobject_init+0x1e0/0x1e0
[ 1180.608540][T11577]  ? _raw_spin_unlock+0x3a/0x40
[ 1180.613466][T11577]  ? get_device_parent+0x366/0x390
[ 1180.618642][T11577]  device_add+0x408/0xc20
[ 1180.623038][T11577]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1180.628027][T11577]  le_conn_complete_evt+0xf5d/0x1540
[ 1180.633362][T11577]  ? hci_event_packet+0x4cb/0x1270
[ 1180.638591][T11577]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1180.644920][T11577]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1180.650610][T11577]  ? skb_pull_data+0xfb/0x200
[ 1180.655371][T11577]  hci_le_conn_complete_evt+0x187/0x440
[ 1180.660984][T11577]  ? hci_remote_host_features_evt+0x150/0x150
[ 1180.667102][T11577]  hci_event_packet+0x7ba/0x1270
[ 1180.672104][T11577]  ? bis_list+0x290/0x290
[ 1180.676503][T11577]  ? lockdep_hardirqs_on+0x98/0x150
[ 1180.681791][T11577]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1180.687068][T11577]  hci_rx_work+0x43a/0xd60
[ 1180.691564][T11577]  ? process_scheduled_works+0x96f/0x15d0
[ 1180.697369][T11577]  process_scheduled_works+0xa5d/0x15d0
[ 1180.703037][T11577]  ? worker_attach_to_pool+0x380/0x380
[ 1180.708558][T11577]  ? assign_work+0x3d2/0x5d0
[ 1180.713219][T11577]  worker_thread+0xa55/0xfc0
[ 1180.717876][T11577]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1180.723826][T11577]  ? _raw_spin_unlock+0x40/0x40
[ 1180.728768][T11577]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1180.734736][T11577]  kthread+0x2fa/0x390
[ 1180.738855][T11577]  ? pr_cont_work+0x560/0x560
[ 1180.743592][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1180.748253][T11577]  ret_from_fork+0x48/0x80
[ 1180.752725][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1180.757358][T11577]  ret_from_fork_asm+0x11/0x20
[ 1180.762203][T11577]  </TASK>
[ 1180.842063][T11577] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1180.862072][T11577] Bluetooth: hci3: failed to register connection device
[ 1180.981388][ T9355] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1181.517507][ T9355] usb 3-1: Using ep0 maxpacket: 8
[ 1183.080512][T15354] Bluetooth: hci3: command 0x0406 tx timeout
[ 1183.161983][ T9355] usb 3-1: device descriptor read/all, error -71
[ 1183.346818][T16969] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[ 1183.381114][T16969] syzkaller0: entered promiscuous mode
[ 1183.404836][T16969] syzkaller0: entered allmulticast mode
[ 1187.147786][T16983] loop2: detected capacity change from 0 to 4096
[ 1187.162829][T16983] EXT4-fs: Ignoring removed bh option
[ 1187.987752][T16983] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1187.988217][T16983] EXT4-fs: failed to create workqueue
[ 1188.003479][T16983] EXT4-fs (loop2): mount failed
[ 1190.195026][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3242'.
[ 1190.204281][T17001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3242'.
[ 1190.217008][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3242'.
[ 1190.226122][T17001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3242'.
[ 1190.991470][ T5771] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1191.253656][ T5771] usb 4-1: Using ep0 maxpacket: 8
[ 1191.536403][ T5771] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1191.560328][ T5771] usb 4-1: config 4 interface 0 has no altsetting 0
[ 1191.588991][T17007] netlink: 'syz.0.3244': attribute type 12 has an invalid length.
[ 1191.597366][ T5771] usb 4-1: string descriptor 0 read error: -22
[ 1191.606873][ T5771] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1191.688328][ T5771] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1191.950674][ T5771] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1192.299833][ T5771] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1192.335785][T17010] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[ 1192.418349][ T5771] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1192.453077][T17012] syzkaller0: entered promiscuous mode
[ 1192.517553][ T5771] usb 4-1: media controller created
[ 1192.528122][T17012] syzkaller0: entered allmulticast mode
[ 1193.521043][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1194.344752][ T5771] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1194.858317][ T5771] usb 4-1: USB disconnect, device number 27
[ 1196.999910][T17029] loop2: detected capacity change from 0 to 4096
[ 1197.016559][T17029] EXT4-fs: Ignoring removed bh option
[ 1200.362352][T17029] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1200.362814][T17029] EXT4-fs: failed to create workqueue
[ 1200.378740][T17029] EXT4-fs (loop2): mount failed
[ 1201.597308][ T5771] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1201.843697][ T5771] usb 5-1: Using ep0 maxpacket: 8
[ 1201.851233][ T5771] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1201.932665][T15354] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1201.952088][T15354] CPU: 0 PID: 15354 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1201.959787][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1201.969887][T15354] Workqueue: hci2 hci_rx_work
[ 1201.974608][T15354] Call Trace:
[ 1201.977915][T15354]  <TASK>
[ 1201.980886][T15354]  dump_stack_lvl+0x18c/0x250
[ 1201.985650][T15354]  ? show_regs_print_info+0x20/0x20
[ 1201.990885][T15354]  ? load_image+0x420/0x420
[ 1201.995464][T15354]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1202.000595][T15354]  ? sysfs_warn_dup+0xa0/0xa0
[ 1202.005287][T15354]  ? do_raw_spin_unlock+0x121/0x230
[ 1202.010512][T15354]  kobject_add_internal+0x61c/0xcc0
[ 1202.015741][T15354]  kobject_add+0x164/0x240
[ 1202.020184][T15354]  ? __rwlock_init+0x150/0x150
[ 1202.024980][T15354]  ? kobject_init+0x1e0/0x1e0
[ 1202.029678][T15354]  ? _raw_spin_unlock+0x28/0x40
[ 1202.034555][T15354]  ? get_device_parent+0x366/0x390
[ 1202.039690][T15354]  device_add+0x408/0xc20
[ 1202.044052][T15354]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1202.049016][T15354]  le_conn_complete_evt+0xf5d/0x1540
[ 1202.054318][T15354]  ? hci_event_packet+0x4cb/0x1270
[ 1202.059457][T15354]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1202.065717][T15354]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1202.071388][T15354]  ? skb_pull_data+0xfb/0x200
[ 1202.076111][T15354]  hci_le_conn_complete_evt+0x187/0x440
[ 1202.081681][T15354]  ? hci_remote_host_features_evt+0x150/0x150
[ 1202.087773][T15354]  hci_event_packet+0x7ba/0x1270
[ 1202.092734][T15354]  ? bis_list+0x290/0x290
[ 1202.097090][T15354]  ? lockdep_hardirqs_on+0x98/0x150
[ 1202.102317][T15354]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1202.107540][T15354]  hci_rx_work+0x43a/0xd60
[ 1202.111994][T15354]  ? process_scheduled_works+0x96f/0x15d0
[ 1202.117734][T15354]  process_scheduled_works+0xa5d/0x15d0
[ 1202.123317][T15354]  ? worker_attach_to_pool+0x380/0x380
[ 1202.128795][T15354]  ? assign_work+0x3d2/0x5d0
[ 1202.133407][T15354]  worker_thread+0xa55/0xfc0
[ 1202.138021][T15354]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1202.143938][T15354]  ? _raw_spin_unlock+0x40/0x40
[ 1202.148801][T15354]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1202.154725][T15354]  kthread+0x2fa/0x390
[ 1202.158808][T15354]  ? pr_cont_work+0x560/0x560
[ 1202.163507][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1202.168159][T15354]  ret_from_fork+0x48/0x80
[ 1202.172610][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1202.177213][T15354]  ret_from_fork_asm+0x11/0x20
[ 1202.182008][T15354]  </TASK>
[ 1202.567012][T15354] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1202.584288][T15354] Bluetooth: hci2: failed to register connection device
[ 1202.670666][ T5771] usb 5-1: config 4 interface 0 has no altsetting 0
[ 1202.681814][ T5771] usb 5-1: string descriptor 0 read error: -22
[ 1202.688423][ T5771] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1202.697900][ T5771] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1204.723882][T11577] Bluetooth: hci2: command 0x0406 tx timeout
[ 1205.863367][ T5771] usb 5-1: can't set config #4, error -71
[ 1205.886263][ T5771] usb 5-1: USB disconnect, device number 6
[ 1207.139119][T17070] trusted_key: encrypted_key: insufficient parameters specified
[ 1207.246798][T17070] trusted_key: encrypted_key: insufficient parameters specified
[ 1208.820209][T17084] loop4: detected capacity change from 0 to 4096
[ 1209.201325][T17084] EXT4-fs: Ignoring removed bh option
[ 1210.764875][T17084] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1210.765373][T17084] EXT4-fs: failed to create workqueue
[ 1210.780488][T17084] EXT4-fs (loop4): mount failed
[ 1211.824534][T11577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[ 1211.834035][T11577] CPU: 0 PID: 11577 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1211.841685][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1211.851764][T11577] Workqueue: hci0 hci_rx_work
[ 1211.856492][T11577] Call Trace:
[ 1211.859802][T11577]  <TASK>
[ 1211.862763][T11577]  dump_stack_lvl+0x18c/0x250
[ 1211.867487][T11577]  ? show_regs_print_info+0x20/0x20
[ 1211.872720][T11577]  ? load_image+0x420/0x420
[ 1211.877277][T11577]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1211.882416][T11577]  ? sysfs_warn_dup+0xa0/0xa0
[ 1211.887116][T11577]  ? do_raw_spin_unlock+0x121/0x230
[ 1211.892363][T11577]  kobject_add_internal+0x61c/0xcc0
[ 1211.897596][T11577]  kobject_add+0x164/0x240
[ 1211.902037][T11577]  ? __rwlock_init+0x150/0x150
[ 1211.906826][T11577]  ? kobject_init+0x1e0/0x1e0
[ 1211.911532][T11577]  ? _raw_spin_unlock+0x28/0x40
[ 1211.916426][T11577]  ? get_device_parent+0x366/0x390
[ 1211.921569][T11577]  device_add+0x408/0xc20
[ 1211.925946][T11577]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1211.930934][T11577]  le_conn_complete_evt+0xf5d/0x1540
[ 1211.936247][T11577]  ? hci_event_packet+0x4cb/0x1270
[ 1211.941391][T11577]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1211.947679][T11577]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1211.953333][T11577]  ? skb_pull_data+0xfb/0x200
[ 1211.958130][T11577]  hci_le_conn_complete_evt+0x187/0x440
[ 1211.963724][T11577]  ? hci_remote_host_features_evt+0x150/0x150
[ 1211.969846][T11577]  hci_event_packet+0x7ba/0x1270
[ 1211.975021][T11577]  ? bis_list+0x290/0x290
[ 1211.979387][T11577]  ? lockdep_hardirqs_on+0x98/0x150
[ 1211.984616][T11577]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1211.989835][T11577]  hci_rx_work+0x43a/0xd60
[ 1211.994304][T11577]  ? process_scheduled_works+0x96f/0x15d0
[ 1212.000083][T11577]  process_scheduled_works+0xa5d/0x15d0
[ 1212.005675][T11577]  ? worker_attach_to_pool+0x380/0x380
[ 1212.011165][T11577]  ? assign_work+0x3d2/0x5d0
[ 1212.015785][T11577]  worker_thread+0xa55/0xfc0
[ 1212.020403][T11577]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1212.026325][T11577]  ? _raw_spin_unlock+0x40/0x40
[ 1212.031203][T11577]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1212.037159][T11577]  kthread+0x2fa/0x390
[ 1212.041253][T11577]  ? pr_cont_work+0x560/0x560
[ 1212.045954][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1212.050558][T11577]  ret_from_fork+0x48/0x80
[ 1212.055026][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1212.059631][T11577]  ret_from_fork_asm+0x11/0x20
[ 1212.064434][T11577]  </TASK>
[ 1213.348847][T11577] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1213.364134][T11577] Bluetooth: hci0: failed to register connection device
[ 1215.103889][ T5834] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1215.272147][T17109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1215.333848][ T5834] usb 5-1: Using ep0 maxpacket: 8
[ 1215.343227][ T5834] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1215.354318][ T5834] usb 5-1: config 4 interface 0 has no altsetting 0
[ 1215.367689][ T5834] usb 5-1: string descriptor 0 read error: -22
[ 1215.376032][ T5834] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1215.385626][ T5834] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1215.427151][T15354] Bluetooth: hci0: command 0x0406 tx timeout
[ 1215.439611][ T5834] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1215.461963][ T5834] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1215.474954][ T5834] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1215.482199][ T5834] usb 5-1: media controller created
[ 1215.513093][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1215.853109][ T5834] usb 5-1: USB disconnect, device number 7
[ 1216.094248][T17123] loop0: detected capacity change from 0 to 256
[ 1216.114319][T17123] exfat: Deprecated parameter 'utf8'
[ 1216.120882][T17123] exfat: Deprecated parameter 'utf8'
[ 1216.161615][T17123] exfat: Deprecated parameter 'utf8'
[ 1216.197852][T17123] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[ 1217.526208][T17135] loop0: detected capacity change from 0 to 4096
[ 1217.533347][T17135] EXT4-fs: Ignoring removed bh option
[ 1219.773400][T17135] EXT4-fs: error -4 creating inode table initialization thread
[ 1219.782287][T17135] EXT4-fs (loop0): mount failed
[ 1220.541359][T17149] trusted_key: encrypted_key: insufficient parameters specified
[ 1220.587499][T17149] trusted_key: encrypted_key: insufficient parameters specified
[ 1221.250528][T17151] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1221.560838][T15354] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[ 1221.570509][T15354] CPU: 1 PID: 15354 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1221.578204][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1221.588322][T15354] Workqueue: hci0 hci_rx_work
[ 1221.593113][T15354] Call Trace:
[ 1221.596452][T15354]  <TASK>
[ 1221.599438][T15354]  dump_stack_lvl+0x18c/0x250
[ 1221.604204][T15354]  ? show_regs_print_info+0x20/0x20
[ 1221.609482][T15354]  ? load_image+0x420/0x420
[ 1221.614207][T15354]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1221.619383][T15354]  ? sysfs_warn_dup+0xa0/0xa0
[ 1221.624128][T15354]  ? do_raw_spin_unlock+0x121/0x230
[ 1221.629396][T15354]  kobject_add_internal+0x61c/0xcc0
[ 1221.634676][T15354]  kobject_add+0x164/0x240
[ 1221.639164][T15354]  ? kobject_init+0x1e0/0x1e0
[ 1221.643925][T15354]  ? _raw_spin_unlock+0x3a/0x40
[ 1221.648853][T15354]  ? get_device_parent+0x366/0x390
[ 1221.654051][T15354]  device_add+0x408/0xc20
[ 1221.658464][T15354]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1221.663476][T15354]  le_conn_complete_evt+0xf5d/0x1540
[ 1221.668830][T15354]  ? hci_event_packet+0x4cb/0x1270
[ 1221.674025][T15354]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1221.680341][T15354]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1221.686045][T15354]  ? skb_pull_data+0xfb/0x200
[ 1221.690798][T15354]  hci_le_conn_complete_evt+0x187/0x440
[ 1221.696434][T15354]  ? hci_remote_host_features_evt+0x150/0x150
[ 1221.702577][T15354]  hci_event_packet+0x7ba/0x1270
[ 1221.707599][T15354]  ? bis_list+0x290/0x290
[ 1221.712001][T15354]  ? kcov_remote_start+0x2b/0x7e0
[ 1221.717095][T15354]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1221.722375][T15354]  hci_rx_work+0x43a/0xd60
[ 1221.726904][T15354]  ? process_scheduled_works+0x96f/0x15d0
[ 1221.732704][T15354]  process_scheduled_works+0xa5d/0x15d0
[ 1221.738360][T15354]  ? worker_attach_to_pool+0x380/0x380
[ 1221.744076][T15354]  ? assign_work+0x3d2/0x5d0
[ 1221.748737][T15354]  worker_thread+0xa55/0xfc0
[ 1221.753400][T15354]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1221.759382][T15354]  ? _raw_spin_unlock+0x40/0x40
[ 1221.764304][T15354]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1221.770284][T15354]  kthread+0x2fa/0x390
[ 1221.774419][T15354]  ? pr_cont_work+0x560/0x560
[ 1221.779160][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1221.783803][T15354]  ret_from_fork+0x48/0x80
[ 1221.788281][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1221.792924][T15354]  ret_from_fork_asm+0x11/0x20
[ 1221.797778][T15354]  </TASK>
[ 1222.097885][T15354] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1222.115766][T15354] Bluetooth: hci0: failed to register connection device
[ 1224.143845][T15354] Bluetooth: hci0: command 0x0406 tx timeout
[ 1224.637722][T17171] loop4: detected capacity change from 0 to 512
[ 1224.675278][T17171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1224.695230][T17171] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1224.886774][T14036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1225.756144][T17181] loop3: detected capacity change from 0 to 4096
[ 1225.768654][T17181] EXT4-fs: Ignoring removed bh option
[ 1225.784493][ T5816] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1226.037923][T17181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1226.173596][ T5816] usb 1-1: Using ep0 maxpacket: 8
[ 1226.430336][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1226.492721][ T5816] usb 1-1: config 4 interface 0 has no altsetting 0
[ 1226.567755][ T5816] usb 1-1: string descriptor 0 read error: -22
[ 1226.586465][ T5816] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1226.661367][ T5816] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1226.758837][ T5816] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1226.880261][ T5816] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1226.939487][T17188] loop2: detected capacity change from 0 to 256
[ 1226.954031][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1227.024664][ T5816] usb 1-1: media controller created
[ 1227.179986][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1227.458060][T14191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1227.566299][ T5816] usb 1-1: USB disconnect, device number 31
[ 1227.790966][T17197] loop4: detected capacity change from 0 to 256
[ 1227.884198][T17197] FAT-fs (loop4): Directory bread(block 64) failed
[ 1227.908529][T17197] FAT-fs (loop4): Directory bread(block 65) failed
[ 1227.930823][T17197] FAT-fs (loop4): Directory bread(block 66) failed
[ 1227.942875][T17197] FAT-fs (loop4): Directory bread(block 67) failed
[ 1227.953167][T17197] FAT-fs (loop4): Directory bread(block 68) failed
[ 1227.961123][T17197] FAT-fs (loop4): Directory bread(block 69) failed
[ 1227.971320][T17197] FAT-fs (loop4): Directory bread(block 70) failed
[ 1227.994818][T17197] FAT-fs (loop4): Directory bread(block 71) failed
[ 1228.024658][T17197] FAT-fs (loop4): Directory bread(block 72) failed
[ 1228.038378][T17197] FAT-fs (loop4): Directory bread(block 73) failed
[ 1228.153398][T15354] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[ 1228.163176][T15354] CPU: 1 PID: 15354 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1228.170876][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1228.180996][T15354] Workqueue: hci0 hci_rx_work
[ 1228.185764][T15354] Call Trace:
[ 1228.189093][T15354]  <TASK>
[ 1228.192076][T15354]  dump_stack_lvl+0x18c/0x250
[ 1228.196841][T15354]  ? show_regs_print_info+0x20/0x20
[ 1228.202143][T15354]  ? load_image+0x420/0x420
[ 1228.206736][T15354]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1228.211927][T15354]  ? sysfs_warn_dup+0xa0/0xa0
[ 1228.216671][T15354]  ? do_raw_spin_unlock+0x121/0x230
[ 1228.221948][T15354]  kobject_add_internal+0x61c/0xcc0
[ 1228.227287][T15354]  kobject_add+0x164/0x240
[ 1228.231747][T15354]  ? __rwlock_init+0x150/0x150
[ 1228.236559][T15354]  ? kobject_init+0x1e0/0x1e0
[ 1228.241290][T15354]  ? _raw_spin_unlock+0x28/0x40
[ 1228.246191][T15354]  ? get_device_parent+0x366/0x390
[ 1228.251350][T15354]  device_add+0x408/0xc20
[ 1228.255722][T15354]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1228.260701][T15354]  le_conn_complete_evt+0xf5d/0x1540
[ 1228.266024][T15354]  ? hci_event_packet+0x4cb/0x1270
[ 1228.271188][T15354]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1228.277477][T15354]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1228.283151][T15354]  ? skb_pull_data+0xfb/0x200
[ 1228.287895][T15354]  hci_le_conn_complete_evt+0x187/0x440
[ 1228.293505][T15354]  ? hci_remote_host_features_evt+0x150/0x150
[ 1228.299631][T15354]  hci_event_packet+0x7ba/0x1270
[ 1228.304643][T15354]  ? bis_list+0x290/0x290
[ 1228.309032][T15354]  ? lockdep_hardirqs_on+0x98/0x150
[ 1228.314294][T15354]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1228.319543][T15354]  hci_rx_work+0x43a/0xd60
[ 1228.324017][T15354]  ? process_scheduled_works+0x96f/0x15d0
[ 1228.329783][T15354]  process_scheduled_works+0xa5d/0x15d0
[ 1228.335424][T15354]  ? worker_attach_to_pool+0x380/0x380
[ 1228.340948][T15354]  ? assign_work+0x3d2/0x5d0
[ 1228.345614][T15354]  worker_thread+0xa55/0xfc0
[ 1228.350255][T15354]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1228.356201][T15354]  ? _raw_spin_unlock+0x40/0x40
[ 1228.361107][T15354]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1228.367079][T15354]  kthread+0x2fa/0x390
[ 1228.371199][T15354]  ? pr_cont_work+0x560/0x560
[ 1228.375925][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1228.380577][T15354]  ret_from_fork+0x48/0x80
[ 1228.385033][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1228.389658][T15354]  ret_from_fork_asm+0x11/0x20
[ 1228.394483][T15354]  </TASK>
[ 1228.637972][T15354] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1228.656053][T15354] Bluetooth: hci0: failed to register connection device
[ 1230.715932][T11577] Bluetooth: hci0: command 0x0406 tx timeout
[ 1231.375781][   T28] audit: type=1326 audit(1777522705.599:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17206 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79e4b96b57 code=0x7ffc0000
[ 1231.460792][   T28] audit: type=1326 audit(1777522705.629:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17206 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79e4b3e159 code=0x7ffc0000
[ 1231.512836][   T28] audit: type=1326 audit(1777522705.629:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17206 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79e4b96b57 code=0x7ffc0000
[ 1231.535700][   T28] audit: type=1326 audit(1777522705.629:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17206 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79e4b3e159 code=0x7ffc0000
[ 1231.561079][   T28] audit: type=1326 audit(1777522705.629:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17206 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79e4b96b57 code=0x7ffc0000
[ 1231.593641][   T28] audit: type=1326 audit(1777522705.629:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17206 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79e4b3e159 code=0x7ffc0000
[ 1231.637458][   T28] audit: type=1326 audit(1777522705.629:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17206 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79e4b96b57 code=0x7ffc0000
[ 1231.667192][T17219] loop2: detected capacity change from 0 to 256
[ 1231.674798][T17219] exfat: Bad value for 'uid'
[ 1231.703658][   T28] audit: type=1326 audit(1777522705.629:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17206 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79e4b3e159 code=0x7ffc0000
[ 1231.745939][T17069] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1231.765997][   T28] audit: type=1326 audit(1777522705.629:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17206 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79e4b96b57 code=0x7ffc0000
[ 1231.861966][   T28] audit: type=1326 audit(1777522705.629:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17206 comm="syz.4.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79e4b3e159 code=0x7ffc0000
[ 1232.257299][T17228] loop0: detected capacity change from 0 to 256
[ 1232.591344][T17231] loop2: detected capacity change from 0 to 512
[ 1232.685386][T17231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1232.769016][T17231] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1232.878573][T17236] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1233.076143][T11577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[ 1233.085751][T11577] CPU: 0 PID: 11577 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1233.093449][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1233.103572][T11577] Workqueue: hci3 hci_rx_work
[ 1233.108335][T11577] Call Trace:
[ 1233.111672][T11577]  <TASK>
[ 1233.114654][T11577]  dump_stack_lvl+0x18c/0x250
[ 1233.119403][T11577]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1233.125109][T11577]  ? show_regs_print_info+0x20/0x20
[ 1233.130376][T11577]  ? load_image+0x420/0x420
[ 1233.134948][T11577]  ? ret_from_fork_asm+0x11/0x20
[ 1233.139962][T11577]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1233.145181][T11577]  ? sysfs_warn_dup+0xa0/0xa0
[ 1233.149917][T11577]  ? do_raw_spin_unlock+0x121/0x230
[ 1233.155180][T11577]  kobject_add_internal+0x61c/0xcc0
[ 1233.160493][T11577]  kobject_add+0x164/0x240
[ 1233.165018][T11577]  ? kobject_init+0x1e0/0x1e0
[ 1233.169764][T11577]  ? _raw_spin_unlock+0x3a/0x40
[ 1233.174687][T11577]  ? get_device_parent+0x366/0x390
[ 1233.179876][T11577]  device_add+0x408/0xc20
[ 1233.184269][T11577]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1233.189269][T11577]  le_conn_complete_evt+0xf5d/0x1540
[ 1233.194645][T11577]  ? hci_event_packet+0x4cb/0x1270
[ 1233.199828][T11577]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1233.206139][T11577]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1233.211834][T11577]  ? skb_pull_data+0xfb/0x200
[ 1233.216581][T11577]  hci_le_conn_complete_evt+0x187/0x440
[ 1233.222192][T11577]  ? hci_remote_host_features_evt+0x150/0x150
[ 1233.228331][T11577]  hci_event_packet+0x7ba/0x1270
[ 1233.233349][T11577]  ? bis_list+0x290/0x290
[ 1233.237748][T11577]  ? kcov_remote_start+0x2b/0x7e0
[ 1233.242847][T11577]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1233.248111][T11577]  hci_rx_work+0x43a/0xd60
[ 1233.252611][T11577]  ? process_scheduled_works+0x96f/0x15d0
[ 1233.258397][T11577]  process_scheduled_works+0xa5d/0x15d0
[ 1233.264044][T11577]  ? worker_attach_to_pool+0x380/0x380
[ 1233.269585][T11577]  ? assign_work+0x3d2/0x5d0
[ 1233.274254][T11577]  worker_thread+0xa55/0xfc0
[ 1233.278907][T11577]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1233.284859][T11577]  ? _raw_spin_unlock+0x40/0x40
[ 1233.289776][T11577]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1233.295766][T11577]  kthread+0x2fa/0x390
[ 1233.299894][T11577]  ? pr_cont_work+0x560/0x560
[ 1233.304631][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1233.309278][T11577]  ret_from_fork+0x48/0x80
[ 1233.313759][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1233.318424][T11577]  ret_from_fork_asm+0x11/0x20
[ 1233.323756][T11577]  </TASK>
[ 1233.352809][T11577] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1233.369863][T11577] Bluetooth: hci3: failed to register connection device
[ 1235.423759][T11577] Bluetooth: hci3: command 0x0406 tx timeout
[ 1236.072083][T12518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1236.596554][T17258] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 1236.621932][T17258] overlayfs: missing 'lowerdir'
[ 1236.778537][T17267] loop2: detected capacity change from 0 to 512
[ 1236.806730][T17267] EXT4-fs: Ignoring removed i_version option
[ 1236.851664][T17267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1236.928509][ T5771] kernel write not supported for file /563/net/ip6_tables_matches (pid: 5771 comm: kworker/0:3)
[ 1236.970169][T17267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1237.059491][T11577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1237.069093][T11577] CPU: 0 PID: 11577 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1237.076791][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1237.086912][T11577] Workqueue: hci2 hci_rx_work
[ 1237.091677][T11577] Call Trace:
[ 1237.095006][T11577]  <TASK>
[ 1237.097986][T11577]  dump_stack_lvl+0x18c/0x250
[ 1237.102748][T11577]  ? show_regs_print_info+0x20/0x20
[ 1237.108022][T11577]  ? load_image+0x420/0x420
[ 1237.112604][T11577]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1237.117781][T11577]  ? sysfs_warn_dup+0xa0/0xa0
[ 1237.122525][T11577]  ? do_raw_spin_unlock+0x121/0x230
[ 1237.127797][T11577]  kobject_add_internal+0x61c/0xcc0
[ 1237.133091][T11577]  kobject_add+0x164/0x240
[ 1237.137596][T11577]  ? kobject_init+0x1e0/0x1e0
[ 1237.142338][T11577]  ? _raw_spin_unlock+0x3a/0x40
[ 1237.147254][T11577]  ? get_device_parent+0x366/0x390
[ 1237.152489][T11577]  device_add+0x408/0xc20
[ 1237.156893][T11577]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1237.161897][T11577]  le_conn_complete_evt+0xf5d/0x1540
[ 1237.167247][T11577]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1237.173556][T11577]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1237.179273][T11577]  ? lockdep_hardirqs_on+0x98/0x150
[ 1237.184535][T11577]  ? skb_pull_data+0xfb/0x200
[ 1237.189280][T11577]  hci_le_conn_complete_evt+0x187/0x440
[ 1237.194890][T11577]  ? hci_remote_host_features_evt+0x150/0x150
[ 1237.201014][T11577]  hci_event_packet+0x7ba/0x1270
[ 1237.206023][T11577]  ? bis_list+0x290/0x290
[ 1237.210412][T11577]  ? lockdep_hardirqs_on+0x98/0x150
[ 1237.215669][T11577]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1237.220926][T11577]  hci_rx_work+0x43a/0xd60
[ 1237.225422][T11577]  ? process_scheduled_works+0x96f/0x15d0
[ 1237.231199][T11577]  process_scheduled_works+0xa5d/0x15d0
[ 1237.236846][T11577]  ? worker_attach_to_pool+0x380/0x380
[ 1237.242383][T11577]  ? assign_work+0x3d2/0x5d0
[ 1237.247041][T11577]  worker_thread+0xa55/0xfc0
[ 1237.251699][T11577]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1237.257755][T11577]  ? _raw_spin_unlock+0x40/0x40
[ 1237.262689][T11577]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1237.268680][T11577]  kthread+0x2fa/0x390
[ 1237.272807][T11577]  ? pr_cont_work+0x560/0x560
[ 1237.277547][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1237.282200][T11577]  ret_from_fork+0x48/0x80
[ 1237.286683][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1237.291350][T11577]  ret_from_fork_asm+0x11/0x20
[ 1237.296214][T11577]  </TASK>
[ 1237.336809][T11577] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1237.363398][T11577] Bluetooth: hci2: failed to register connection device
[ 1237.449804][T17267] ext4 filesystem being mounted at /263/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1238.784461][T17281] syzkaller0: entered promiscuous mode
[ 1238.868661][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.876782][T17281] syzkaller0: entered allmulticast mode
[ 1238.907610][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.423912][T11577] Bluetooth: hci2: command 0x0406 tx timeout
[ 1239.601434][T17267] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.3315: Unrecognised inode hash code 20
[ 1239.841158][T17267] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3315: Corrupt directory, running e2fsck is recommended
[ 1240.035568][T12518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1240.057920][T12518] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 119259 in block_group 0
[ 1240.118685][T12518] EXT4-fs (loop2): Remounting filesystem read-only
[ 1240.482464][T17299] loop4: detected capacity change from 0 to 256
[ 1240.527276][T17299] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[ 1240.549764][ T5816] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1240.586545][T17296] loop0: detected capacity change from 0 to 4096
[ 1240.605737][T17296] EXT4-fs: Ignoring removed orlov option
[ 1240.645022][T17296] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1240.676059][T17296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1240.760586][ T5816] usb 4-1: Using ep0 maxpacket: 8
[ 1240.801459][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1240.844662][ T5816] usb 4-1: config 4 interface 0 has no altsetting 0
[ 1240.875005][ T5816] usb 4-1: string descriptor 0 read error: -22
[ 1240.898079][ T5816] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1241.105808][T17296] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1241.144031][ T5816] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1241.161712][ T5816] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1241.173390][ T5816] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1241.184619][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1241.191848][ T5816] usb 4-1: media controller created
[ 1241.219600][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1242.132751][T13676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1242.333700][T11577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[ 1242.344262][T11577] CPU: 0 PID: 11577 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1242.351977][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1242.362115][T11577] Workqueue: hci3 hci_rx_work
[ 1242.366883][T11577] Call Trace:
[ 1242.370211][T11577]  <TASK>
[ 1242.373193][T11577]  dump_stack_lvl+0x18c/0x250
[ 1242.377987][T11577]  ? show_regs_print_info+0x20/0x20
[ 1242.383259][T11577]  ? load_image+0x420/0x420
[ 1242.387843][T11577]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1242.393037][T11577]  ? sysfs_warn_dup+0xa0/0xa0
[ 1242.397808][T11577]  ? do_raw_spin_unlock+0x121/0x230
[ 1242.403253][T11577]  kobject_add_internal+0x61c/0xcc0
[ 1242.408545][T11577]  kobject_add+0x164/0x240
[ 1242.413028][T11577]  ? __rwlock_init+0x150/0x150
[ 1242.417870][T11577]  ? kobject_init+0x1e0/0x1e0
[ 1242.422615][T11577]  ? _raw_spin_unlock+0x28/0x40
[ 1242.427541][T11577]  ? get_device_parent+0x366/0x390
[ 1242.432723][T11577]  device_add+0x408/0xc20
[ 1242.437143][T11577]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1242.442160][T11577]  le_conn_complete_evt+0xf5d/0x1540
[ 1242.447528][T11577]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1242.453851][T11577]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1242.459554][T11577]  ? lockdep_hardirqs_on+0x98/0x150
[ 1242.464841][T11577]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1242.470555][T11577]  ? hci_remote_host_features_evt+0x150/0x150
[ 1242.476710][T11577]  hci_le_conn_complete_evt+0x187/0x440
[ 1242.482336][T11577]  ? hci_remote_host_features_evt+0x150/0x150
[ 1242.488467][T11577]  hci_event_packet+0x7ba/0x1270
[ 1242.493484][T11577]  ? bis_list+0x290/0x290
[ 1242.497875][T11577]  ? kasan_check_range+0x234/0x290
[ 1242.503073][T11577]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1242.508353][T11577]  hci_rx_work+0x43a/0xd60
[ 1242.512913][T11577]  ? process_scheduled_works+0x96f/0x15d0
[ 1242.518711][T11577]  process_scheduled_works+0xa5d/0x15d0
[ 1242.524372][T11577]  ? worker_attach_to_pool+0x380/0x380
[ 1242.529908][T11577]  ? assign_work+0x3d2/0x5d0
[ 1242.534569][T11577]  worker_thread+0xa55/0xfc0
[ 1242.539237][T11577]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1242.545201][T11577]  ? _raw_spin_unlock+0x40/0x40
[ 1242.550121][T11577]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1242.556106][T11577]  kthread+0x2fa/0x390
[ 1242.560229][T11577]  ? pr_cont_work+0x560/0x560
[ 1242.564970][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1242.569622][T11577]  ret_from_fork+0x48/0x80
[ 1242.574104][T11577]  ? kthread_blkcg+0xd0/0xd0
[ 1242.578756][T11577]  ret_from_fork_asm+0x11/0x20
[ 1242.583606][T11577]  </TASK>
[ 1242.625891][T11577] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1242.648495][T11577] Bluetooth: hci3: failed to register connection device
[ 1243.210414][ T5816] usb 4-1: USB disconnect, device number 28
[ 1244.704021][T11577] Bluetooth: hci3: command 0x0406 tx timeout
[ 1245.672947][T17324] syzkaller0: entered promiscuous mode
[ 1245.690159][T17324] syzkaller0: entered allmulticast mode
[ 1245.834692][   T49] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1245.844477][  T744] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1245.851790][ T3493] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1246.110161][T17330] loop4: detected capacity change from 0 to 4096
[ 1246.393720][ T5834] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1246.593727][ T5834] usb 3-1: Using ep0 maxpacket: 8
[ 1246.605336][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1246.617075][ T5834] usb 3-1: config 4 interface 0 has no altsetting 0
[ 1246.647540][T15354] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1246.657193][T15354] CPU: 0 PID: 15354 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1246.664888][ T5834] usb 3-1: string descriptor 0 read error: -22
[ 1246.664894][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1246.664910][T15354] Workqueue: hci2 hci_rx_work
[ 1246.671371][ T5834] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1246.681190][T15354] 
[ 1246.681202][T15354] Call Trace:
[ 1246.681212][T15354]  <TASK>
[ 1246.681222][T15354]  dump_stack_lvl+0x18c/0x250
[ 1246.681264][T15354]  ? show_regs_print_info+0x20/0x20
[ 1246.681298][T15354]  ? load_image+0x420/0x420
[ 1246.681341][T15354]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1246.681367][T15354]  ? sysfs_warn_dup+0xa0/0xa0
[ 1246.728071][T15354]  ? do_raw_spin_unlock+0x121/0x230
[ 1246.733306][T15354]  kobject_add_internal+0x61c/0xcc0
[ 1246.738536][T15354]  kobject_add+0x164/0x240
[ 1246.742989][T15354]  ? __rwlock_init+0x150/0x150
[ 1246.747804][T15354]  ? kobject_init+0x1e0/0x1e0
[ 1246.752510][T15354]  ? _raw_spin_unlock+0x28/0x40
[ 1246.757402][T15354]  ? get_device_parent+0x366/0x390
[ 1246.762565][T15354]  device_add+0x408/0xc20
[ 1246.766952][T15354]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1246.771933][T15354]  le_conn_complete_evt+0xf5d/0x1540
[ 1246.777259][T15354]  ? hci_event_packet+0x4cb/0x1270
[ 1246.782413][T15354]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1246.788708][T15354]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1246.794410][T15354]  ? skb_pull_data+0xfb/0x200
[ 1246.799131][T15354]  hci_le_conn_complete_evt+0x187/0x440
[ 1246.804717][T15354]  ? hci_remote_host_features_evt+0x150/0x150
[ 1246.810820][T15354]  hci_event_packet+0x7ba/0x1270
[ 1246.815809][T15354]  ? bis_list+0x290/0x290
[ 1246.820178][T15354]  ? lockdep_hardirqs_on+0x98/0x150
[ 1246.825417][T15354]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1246.830657][T15354]  hci_rx_work+0x43a/0xd60
[ 1246.835140][T15354]  ? process_scheduled_works+0x96f/0x15d0
[ 1246.840893][T15354]  process_scheduled_works+0xa5d/0x15d0
[ 1246.846498][T15354]  ? worker_attach_to_pool+0x380/0x380
[ 1246.852044][T15354]  ? assign_work+0x3d2/0x5d0
[ 1246.856707][T15354]  worker_thread+0xa55/0xfc0
[ 1246.861353][T15354]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1246.867295][T15354]  ? _raw_spin_unlock+0x40/0x40
[ 1246.872181][T15354]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1246.878135][T15354]  kthread+0x2fa/0x390
[ 1246.882242][T15354]  ? pr_cont_work+0x560/0x560
[ 1246.886956][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1246.891581][T15354]  ret_from_fork+0x48/0x80
[ 1246.896032][T15354]  ? kthread_blkcg+0xd0/0xd0
[ 1246.900654][T15354]  ret_from_fork_asm+0x11/0x20
[ 1246.905469][T15354]  </TASK>
[ 1247.052574][T15354] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1247.074331][T15354] Bluetooth: hci2: failed to register connection device
[ 1247.100823][ T5834] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1247.586776][ T5834] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1247.849342][ T5834] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1247.903725][T11577] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1248.001360][ T5834] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1248.104102][ T5834] usb 3-1: media controller created
[ 1249.104776][T17348] Bluetooth: hci2: command 0x0406 tx timeout
[ 1249.246872][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1249.662551][ T5834] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1249.722547][T17352] loop4: detected capacity change from 0 to 512
[ 1249.872956][T17354] trusted_key: encrypted_key: insufficient parameters specified
[ 1249.906619][T17353] trusted_key: encrypted_key: insufficient parameters specified
[ 1250.411377][T17352] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1250.472389][ T5834] usb 3-1: USB disconnect, device number 26
[ 1250.516750][T17352] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3340: invalid indirect mapped block 9 (level 0)
[ 1250.671993][T17352] EXT4-fs (loop4): 1 truncate cleaned up
[ 1250.703008][T17352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1250.803475][T17366] syzkaller0: entered promiscuous mode
[ 1250.815747][T17365] loop2: detected capacity change from 0 to 2048
[ 1250.846862][T17366] syzkaller0: entered allmulticast mode
[ 1250.875179][T17365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1250.898167][T17365] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1250.999069][T14036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1251.113973][T17370] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.3344: bg 0: block 345: padding at end of block bitmap is not set
[ 1251.189033][T17370] EXT4-fs (loop2): Remounting filesystem read-only
[ 1251.222637][   T11] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[ 1251.234443][   T11] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 1251.242901][   T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0
[ 1251.250322][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1251.260432][   T11] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work
[ 1251.267281][   T11] RIP: 0010:ext4_ext_map_blocks+0x2d04/0x6800
[ 1251.273417][   T11] Code: 8b 04 24 89 18 89 9c 24 38 01 00 00 4c 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 f7 e0 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 41 0f b7 47 08 c1 e0 04 48
[ 1251.293084][   T11] RSP: 0018:ffffc90000107520 EFLAGS: 00010246
[ 1251.299184][   T11] RAX: 0000000000000000 RBX: fffffffffffffffb RCX: ffff88801a273c00
[ 1251.307182][   T11] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000003
[ 1251.315261][   T11] RBP: ffffc900001077d0 R08: ffffffff911c659f R09: 1ffffffff2238cb3
[ 1251.323254][   T11] R10: dffffc0000000000 R11: fffffbfff2238cb4 R12: 0000000000000001
[ 1251.331248][   T11] R13: 1ffff92000020ed0 R14: dffffc0000000000 R15: fffffffffffffffb
[ 1251.339249][   T11] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1251.348216][   T11] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1251.354833][   T11] CR2: 00002000000b3000 CR3: 00000000216ca000 CR4: 00000000003506e0
[ 1251.362844][   T11] Call Trace:
[ 1251.366149][   T11]  <TASK>
[ 1251.369113][   T11]  ? rwsem_down_read_slowpath+0x880/0x880
[ 1251.374877][   T11]  ? ext4_ext_release+0x10/0x10
[ 1251.379768][   T11]  ? ext4_es_lookup_extent+0x60e/0xa00
[ 1251.385313][   T11]  ext4_map_blocks+0x9e2/0x1b80
[ 1251.390233][   T11]  ? ext4_issue_zeroout+0x250/0x250
[ 1251.395484][   T11]  ? ext4_journal_check_start+0x178/0x250
[ 1251.401233][   T11]  ? __ext4_journal_start_sb+0x259/0x560
[ 1251.406912][   T11]  ext4_convert_unwritten_extents+0x2c2/0x5f0
[ 1251.413020][   T11]  ? trace_ext4_fallocate_exit+0x1d0/0x1d0
[ 1251.418865][   T11]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1251.424786][   T11]  ? lockdep_hardirqs_on+0x98/0x150
[ 1251.430038][   T11]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1251.435959][   T11]  ? _raw_spin_unlock+0x40/0x40
[ 1251.440861][   T11]  ext4_convert_unwritten_io_end_vec+0xff/0x170
[ 1251.447147][   T11]  ext4_end_io_rsv_work+0x2f5/0x690
[ 1251.452381][   T11]  ? ext4_last_io_end_vec+0x70/0x70
[ 1251.457620][   T11]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1251.462854][   T11]  ? process_scheduled_works+0x96f/0x15d0
[ 1251.468638][   T11]  ? process_scheduled_works+0x96f/0x15d0
[ 1251.474392][   T11]  process_scheduled_works+0xa5d/0x15d0
[ 1251.479978][   T11]  ? worker_attach_to_pool+0x380/0x380
[ 1251.485463][   T11]  ? assign_work+0x3d2/0x5d0
[ 1251.490087][   T11]  worker_thread+0xa55/0xfc0
[ 1251.494721][   T11]  kthread+0x2fa/0x390
[ 1251.498817][   T11]  ? pr_cont_work+0x560/0x560
[ 1251.503527][   T11]  ? kthread_blkcg+0xd0/0xd0
[ 1251.508147][   T11]  ret_from_fork+0x48/0x80
[ 1251.512586][   T11]  ? kthread_blkcg+0xd0/0xd0
[ 1251.517202][   T11]  ret_from_fork_asm+0x11/0x20
[ 1251.521999][   T11]  </TASK>
[ 1251.525047][   T11] Modules linked in:
[ 1251.561942][   T11] ---[ end trace 0000000000000000 ]---
[ 1251.567545][   T11] RIP: 0010:ext4_ext_map_blocks+0x2d04/0x6800
[ 1251.581471][   T11] Code: 8b 04 24 89 18 89 9c 24 38 01 00 00 4c 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 f7 e0 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 41 0f b7 47 08 c1 e0 04 48
[ 1251.603813][   T11] RSP: 0018:ffffc90000107520 EFLAGS: 00010246
[ 1251.610023][   T11] RAX: 0000000000000000 RBX: fffffffffffffffb RCX: ffff88801a273c00
[ 1251.619902][   T11] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000003
[ 1251.628238][   T11] RBP: ffffc900001077d0 R08: ffffffff911c659f R09: 1ffffffff2238cb3
[ 1251.638223][   T11] R10: dffffc0000000000 R11: fffffbfff2238cb4 R12: 0000000000000001
[ 1251.648150][   T11] R13: 1ffff92000020ed0 R14: dffffc0000000000 R15: fffffffffffffffb
[ 1251.663997][   T11] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1251.683868][   T11] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1251.690592][   T11] CR2: 00002000000b3000 CR3: 000000002ed03000 CR4: 00000000003506e0
[ 1251.707189][   T11] Kernel panic - not syncing: Fatal exception
[ 1251.713910][   T11] Kernel Offset: disabled
[ 1251.718250][   T11] Rebooting in 86400 seconds..