last executing test programs:

9.953473397s ago: executing program 4 (id=1085):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$dsp(r0, 0x0, 0xfffffe59)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f0000002840)=""/4096, 0x1000)

9.697483899s ago: executing program 0 (id=1087):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

9.556992551s ago: executing program 0 (id=1088):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12)

8.525782982s ago: executing program 0 (id=1090):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0)

8.375880975s ago: executing program 4 (id=1093):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x308, &(0x7f0000000400)="$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")
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0)

7.048213351s ago: executing program 0 (id=1096):
open(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r2, &(0x7f0000000040)=""/148, 0xffffff96)
close(0xffffffffffffffff)

6.893441425s ago: executing program 3 (id=1097):
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r4, 0xbc7ae000)

6.778544545s ago: executing program 2 (id=1098):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

5.69330196s ago: executing program 3 (id=1099):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

5.46947906s ago: executing program 2 (id=1100):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
setpgid(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
eventfd(0x8000)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001})
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x404, &(0x7f0000000580)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@discard}, {@debug}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x456, &(0x7f0000000840)="$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")

5.318970933s ago: executing program 3 (id=1101):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28)
write$binfmt_elf64(r1, 0x0, 0x4a2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)

5.24484687s ago: executing program 0 (id=1102):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r2=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0x0, 0x0, 0x4}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x10004000)

5.185446535s ago: executing program 2 (id=1103):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$xfs(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', 0x2800090, &(0x7f0000000180), 0x1, 0xc758, &(0x7f0000018f40)="$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")
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

4.281399624s ago: executing program 2 (id=1104):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x719}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5", 0x45}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f", 0x22}, {0x0}], 0x5}, 0x800)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

4.233423508s ago: executing program 1 (id=1105):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x5522, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000})

3.98882593s ago: executing program 4 (id=1106):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0)

3.965874182s ago: executing program 1 (id=1107):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

3.616883163s ago: executing program 2 (id=1108):
sendmsg(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000180)=""/18, 0x12}], 0x2}, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6)
r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff)
unshare(0x22020600)
getcwd(0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0x654, 0x100, 0x2, 0x1, 0x6, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x3, 0xf23, 0x6, 0xb, 0x8, 0x3, 0x8, 0x4, 0x10000, 0xfffffff8]})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_mr_vif\x00')
preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000500)=""/205, 0xcd}], 0x1, 0x1000, 0x101)

2.783915586s ago: executing program 4 (id=1109):
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r4, 0xbc7ae000)

2.777128016s ago: executing program 1 (id=1110):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)

2.362658883s ago: executing program 1 (id=1111):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='lblc\x00', &(0x7f00000002c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)

1.59317511s ago: executing program 3 (id=1112):
open(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r2, &(0x7f0000000040)=""/148, 0xffffff96)
close(0xffffffffffffffff)

1.534511525s ago: executing program 4 (id=1113):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
setpgid(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
eventfd(0x8000)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001})
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x404, &(0x7f0000000580)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@discard}, {@debug}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x456, &(0x7f0000000840)="$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")

1.463662481s ago: executing program 2 (id=1114):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022d00010000000009040000020300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.354385921s ago: executing program 1 (id=1115):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$xfs(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', 0x2800090, &(0x7f0000000180), 0x1, 0xc758, &(0x7f0000018f40)="$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")
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

1.062649497s ago: executing program 0 (id=1116):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x308, &(0x7f0000000400)="$eJzs3U1rE0EcBvBndtNma0tdbUXwIFIN2ItovYiXSMmH8CRqk0JxqagtviBYxZOIvXv36NXPIF4UwXM9eRLP9SAj85Ls+ybV7m6qzw8aNjs7s//J7OzMBJoFEf23ljs7by5+U38CcOECLy4DDgAPaAA4huPe5vrG2kbQ6xYV5OJk0+QSMDlF6piV9V5WVg82h+Wrdw3MRPdROaSUV77WHQTVTvd+6cZ3ntJ3gqbtnTrRqym+PE/3nuXHFICtMoIZK8UtJXaxiweYrSwcIiIaS8KM744d52fs/N1xgJYdTPRsfNzG/z+1W3cApZOFqZHxX7erFKrdD+ukcL2nl3Aq3emvErPKept4P5F4PwlzZcVml2LYqlLH4kytrgW9cyu3g66DZ2hbkcPm9WvXXLp9sWibqaIXMtamBQalTeUeIrJnlNO6DhOqDksm/vsAYvHPFZ6xBOKD+CSuCR+v0R3M/xpSqGbSLeUnWsrEfz6/RF1LXx0Fe9tot9tO7JAj+iQn7BmsIbX04OadcdKWGfuCwB8Wp851NJHL1O7CkFxzmbmW9PYinJxc87Fcqjara8H7/FNVQrwSV8UCvuMdOpH5v6Pia6GwZ4a9RrTMUKA/cdU74y0b0WjZO5EeOTa/7Dw2+9PdZfAppjus9bP4nkZ78BI3cQmz9x4+uuUGQe+u2rgRqMtVbwz23JmxG0Fv4jkQTRqXDWyFe5qQWurg/qBUZWCL+1qgun9kJKmOFe5RvWxYgU/+Nh51Hyj1o5seoRZ1bnQ+7s+F1J82xJJ+SSkrrM627RjJpPpuTVSdsNFHOz5jqkMHm2pSYdZ/4XqlYSZ76sXPnKeP+EWALVGqOfZgBRfmlWZGDuBQwQouq9jcFVx6zZVaM+o11+mzwJnRz+jbOP8RooPPuM7v/4mIiIiIiIiIiIiIiIiIiIiIiIiIDpoq/l+i7joSERERERERERERERERERERERERERERER10yx7M716j//xfjPb83+SjWFzzk+D78vzf7XXw+b9E5fsdAAD//4BCdqE=")
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0)

967.733785ms ago: executing program 4 (id=1117):
socket$nl_generic(0x10, 0x3, 0x10)
rseq(0x0, 0x0, 0x20000000000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x8, 0x4, 0xc, 0x0, r1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r1}, 0xfffffe4a)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2f0000000000000001000000", @ANYRES32=r2], 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2e}, 0x20)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x18, 0x140e, 0xa55a02fc4bbd621b, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc001}, 0x40000)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)

297.873154ms ago: executing program 3 (id=1118):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x719}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5", 0x45}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f", 0x22}, {0x0}], 0x5}, 0x800)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

140.067948ms ago: executing program 1 (id=1119):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0)

0s ago: executing program 3 (id=1120):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

/0x290
[  169.748771][   T48]  ? sysfs_warn_dup+0xa0/0xa0
[  169.753511][   T48]  ? do_raw_spin_unlock+0x11d/0x230
[  169.758764][   T48]  kobject_add_internal+0x61c/0xcc0
[  169.764019][   T48]  kobject_add+0x160/0x230
[  169.768488][   T48]  ? kobject_init+0x1d0/0x1d0
[  169.773214][   T48]  ? klist_children_get+0x50/0x50
[  169.778310][   T48]  ? get_device_parent+0x121/0x3f0
[  169.783490][   T48]  device_add+0x483/0xfb0
[  169.787876][   T48]  ? kmem_cache_free+0xf7/0x290
[  169.792791][   T48]  hci_conn_add_sysfs+0xd1/0x1e0
[  169.797800][   T48]  le_conn_complete_evt+0x105f/0x1670
[  169.803247][   T48]  ? le_conn_complete_evt+0xe6/0x1670
[  169.808694][   T48]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  169.815011][   T48]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  169.820723][   T48]  ? lockdep_hardirqs_on+0x94/0x140
[  169.826063][   T48]  ? skb_pull_data+0xf7/0x200
[  169.830805][   T48]  hci_le_enh_conn_complete_evt+0x185/0x460
[  169.836764][   T48]  ? hci_le_remote_conn_param_req_evt+0xd10/0xd10
[  169.843243][   T48]  ? hci_remote_host_features_evt+0x270/0x270
[  169.849380][   T48]  hci_event_packet+0x7b6/0x1280
[  169.854393][   T48]  ? bis_list+0x280/0x280
[  169.858781][   T48]  ? kcov_remote_start+0x27/0x7e0
[  169.863859][   T48]  ? hci_send_to_monitor+0x9c/0x4a0
[  169.869111][   T48]  hci_rx_work+0x3eb/0xd40
[  169.873592][   T48]  ? process_one_work+0x7b0/0x1160
[  169.878758][   T48]  process_one_work+0x8a2/0x1160
[  169.883780][   T48]  ? worker_detach_from_pool+0x240/0x240
[  169.889466][   T48]  ? _raw_spin_lock_irq+0xb7/0xf0
[  169.894537][   T48]  ? _raw_spin_lock_irqsave+0x100/0x100
[  169.900147][   T48]  ? kthread_data+0x4b/0xc0
[  169.904724][   T48]  worker_thread+0xaa2/0x1270
[  169.909574][   T48]  kthread+0x29d/0x330
[  169.913697][   T48]  ? worker_clr_flags+0x1a0/0x1a0
[  169.918781][   T48]  ? kthread_blkcg+0xd0/0xd0
[  169.923419][   T48]  ret_from_fork+0x1f/0x30
[  169.927916][   T48]  </TASK>
[  170.019133][   T48] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  170.040561][   T48] Bluetooth: hci1: failed to register connection device
[  170.052893][   T48] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  172.084183][   T48] Bluetooth: hci1: command 0x2016 tx timeout
[  172.717870][ T5143] loop8: detected capacity change from 0 to 1
[  172.760688][ T4479] Dev loop8: unable to read RDB block 1
[  172.777415][ T5145] loop1: detected capacity change from 0 to 65
[  172.789148][ T4479]  loop8: unable to read partition table
[  172.818971][ T5145] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  172.827594][ T4479] loop8: partition table beyond EOD, truncated
[  172.853216][ T5143] Dev loop8: unable to read RDB block 1
[  172.869355][ T5143]  loop8: unable to read partition table
[  172.899876][ T5143] loop8: partition table beyond EOD, truncated
[  172.938087][ T5143] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  173.513121][ T5141] loop2: detected capacity change from 0 to 32768
[  173.570592][ T5156] loop0: detected capacity change from 0 to 128
[  173.592126][ T5141] 
[  173.592126][ T5141]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  173.592126][ T5141] 
[  173.652961][ T5156] FAT-fs (loop0): bogus number of reserved sectors
[  173.672644][ T5156] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  173.700650][   T26] audit: type=1800 audit(1771647964.159:8): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.207" name="file1" dev="loop2" ino=4 res=0 errno=0
[  173.731529][ T5156] FAT-fs (loop0): Can't find a valid FAT filesystem
[  174.164195][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  174.533963][ T4271] 
[  174.533963][ T4271]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  174.533963][ T4271] 
[  174.538737][   T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  174.545241][ T4271] 
[  174.545241][ T4271]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  174.545241][ T4271] 
[  174.553916][   T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0
[  174.572095][   T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  174.582185][   T48] Workqueue: hci1 hci_rx_work
[  174.586974][   T48] Call Trace:
[  174.590280][   T48]  <TASK>
[  174.593242][   T48]  dump_stack_lvl+0x188/0x24e
[  174.597980][   T48]  ? show_regs_print_info+0x12/0x12
[  174.603306][   T48]  ? load_image+0x400/0x400
[  174.607870][   T48]  sysfs_create_dir_ns+0x26a/0x290
[  174.613058][   T48]  ? sysfs_warn_dup+0xa0/0xa0
[  174.617762][   T48]  ? do_raw_spin_unlock+0x11d/0x230
[  174.622983][   T48]  kobject_add_internal+0x61c/0xcc0
[  174.628232][   T48]  kobject_add+0x160/0x230
[  174.632687][   T48]  ? kobject_init+0x1d0/0x1d0
[  174.637379][   T48]  ? klist_children_get+0x50/0x50
[  174.642424][   T48]  ? get_device_parent+0x121/0x3f0
[  174.647558][   T48]  device_add+0x483/0xfb0
[  174.651928][   T48]  ? kmem_cache_free+0xf7/0x290
[  174.656820][   T48]  hci_conn_add_sysfs+0xd1/0x1e0
[  174.661831][   T48]  le_conn_complete_evt+0x105f/0x1670
[  174.667278][   T48]  ? le_conn_complete_evt+0xe6/0x1670
[  174.672689][   T48]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  174.678964][   T48]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  174.684679][   T48]  ? skb_pull_data+0xf7/0x200
[  174.689417][   T48]  hci_le_enh_conn_complete_evt+0x185/0x460
[  174.695361][   T48]  ? hci_le_remote_conn_param_req_evt+0xd10/0xd10
[  174.701814][   T48]  ? hci_remote_host_features_evt+0x270/0x270
[  174.707925][   T48]  hci_event_packet+0x7b6/0x1280
[  174.712914][   T48]  ? bis_list+0x280/0x280
[  174.717280][   T48]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  174.723222][   T48]  ? kcov_remote_start+0x4c7/0x7e0
[  174.728369][   T48]  ? sync_thread_backup+0x1510/0x2090
[  174.733781][   T48]  ? hci_send_to_monitor+0x9c/0x4a0
[  174.739054][   T48]  hci_rx_work+0x3eb/0xd40
[  174.743534][   T48]  ? _raw_spin_unlock+0x40/0x40
[  174.748421][   T48]  ? process_one_work+0x7b0/0x1160
[  174.753571][   T48]  process_one_work+0x8a2/0x1160
[  174.758554][   T48]  ? worker_detach_from_pool+0x240/0x240
[  174.764329][   T48]  ? _raw_spin_lock_irq+0xb7/0xf0
[  174.769399][   T48]  ? _raw_spin_lock_irqsave+0x100/0x100
[  174.774981][   T48]  ? kthread_data+0x4b/0xc0
[  174.779543][   T48]  worker_thread+0xaa2/0x1270
[  174.784371][   T48]  kthread+0x29d/0x330
[  174.788733][   T48]  ? worker_clr_flags+0x1a0/0x1a0
[  174.793792][   T48]  ? kthread_blkcg+0xd0/0xd0
[  174.798520][   T48]  ret_from_fork+0x1f/0x30
[  174.802990][   T48]  </TASK>
[  174.810487][   T48] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  174.824814][   T48] Bluetooth: hci1: failed to register connection device
[  174.833326][   T48] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  175.512637][ T5149] loop1: detected capacity change from 0 to 32768
[  175.689005][ T5149] add_index: next_index = 0.  Resetting!
[  175.752893][ T5149] find_entry called with index >= next_index
[  175.781438][ T5149] find_entry called with index >= next_index
[  175.822842][ T5149] find_entry called with index >= next_index
[  175.855765][ T5149] find_entry called with index >= next_index
[  176.622543][ T4425] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  176.884298][   T48] Bluetooth: hci1: command 0x2016 tx timeout
[  177.033739][ T4425] usb 5-1: Using ep0 maxpacket: 32
[  177.040905][ T4425] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  177.502038][ T5177] loop0: detected capacity change from 0 to 65536
[  177.536964][ T4425] usb 5-1: config 0 has no interface number 0
[  177.543142][ T4425] usb 5-1: config 0 interface 12 has no altsetting 0
[  177.597406][ T4425] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  177.643771][ T4425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.672611][ T4425] usb 5-1: Product: syz
[  177.677265][ T4425] usb 5-1: Manufacturer: syz
[  177.681915][ T4425] usb 5-1: SerialNumber: syz
[  177.711168][ T4425] usb 5-1: config 0 descriptor??
[  177.741934][ T5177] XFS (loop0): Mounting V5 Filesystem
[  177.946533][ T5177] XFS (loop0): Ending clean mount
[  178.141173][ T5179] loop2: detected capacity change from 0 to 32768
[  178.201205][ T5179] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  178.363983][ T4425] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  178.371553][ T4425] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  178.416441][ T5198] loop1: detected capacity change from 0 to 128
[  178.420930][ T4425] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  178.481209][ T4425] f81534: probe of 5-1:0.12 failed with error -71
[  178.483930][ T5198] FAT-fs (loop1): bogus number of reserved sectors
[  178.526154][ T5198] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  178.553207][ T4425] usb 5-1: USB disconnect, device number 3
[  178.576781][ T5198] FAT-fs (loop1): Can't find a valid FAT filesystem
[  178.638162][ T4388] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  178.705939][   T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0'
[  178.716451][   T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0
[  178.723909][   T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  178.734011][   T48] Workqueue: hci4 hci_rx_work
[  178.738742][   T48] Call Trace:
[  178.742054][   T48]  <TASK>
[  178.745035][   T48]  dump_stack_lvl+0x188/0x24e
[  178.749773][   T48]  ? show_regs_print_info+0x12/0x12
[  178.755115][   T48]  ? load_image+0x400/0x400
[  178.759676][   T48]  sysfs_create_dir_ns+0x26a/0x290
[  178.764846][   T48]  ? sysfs_warn_dup+0xa0/0xa0
[  178.769577][   T48]  ? do_raw_spin_unlock+0x11d/0x230
[  178.774822][   T48]  kobject_add_internal+0x61c/0xcc0
[  178.780074][   T48]  kobject_add+0x160/0x230
[  178.784550][   T48]  ? kobject_init+0x1d0/0x1d0
[  178.789279][   T48]  ? klist_children_get+0x50/0x50
[  178.794440][   T48]  ? get_device_parent+0x121/0x3f0
[  178.799608][   T48]  device_add+0x483/0xfb0
[  178.804703][   T48]  ? kmem_cache_free+0xf7/0x290
[  178.809611][   T48]  hci_conn_add_sysfs+0xd1/0x1e0
[  178.814611][   T48]  le_conn_complete_evt+0x105f/0x1670
[  178.820038][   T48]  ? le_conn_complete_evt+0xe6/0x1670
[  178.825464][   T48]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  178.831760][   T48]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  178.837453][   T48]  ? skb_pull_data+0xf7/0x200
[  178.842221][   T48]  hci_le_enh_conn_complete_evt+0x185/0x460
[  178.848197][   T48]  ? hci_le_remote_conn_param_req_evt+0xd10/0xd10
[  178.854759][   T48]  ? hci_remote_host_features_evt+0x270/0x270
[  178.860969][   T48]  hci_event_packet+0x7b6/0x1280
[  178.865969][   T48]  ? bis_list+0x280/0x280
[  178.870346][   T48]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  178.876311][   T48]  ? kcov_remote_start+0x4c7/0x7e0
[  178.881484][   T48]  ? sync_thread_backup+0x1510/0x2090
[  178.886913][   T48]  ? hci_send_to_monitor+0x9c/0x4a0
[  178.892166][   T48]  hci_rx_work+0x3eb/0xd40
[  178.896629][   T48]  ? _raw_spin_unlock+0x40/0x40
[  178.901533][   T48]  ? process_one_work+0x7b0/0x1160
[  178.906786][   T48]  process_one_work+0x8a2/0x1160
[  178.911796][   T48]  ? worker_detach_from_pool+0x240/0x240
[  178.917484][   T48]  ? _raw_spin_lock_irq+0xb7/0xf0
[  178.922551][   T48]  ? _raw_spin_lock_irqsave+0x100/0x100
[  178.928141][   T48]  ? kthread_data+0x4b/0xc0
[  178.932705][   T48]  worker_thread+0xaa2/0x1270
[  178.937692][   T48]  kthread+0x29d/0x330
[  178.941824][   T48]  ? worker_clr_flags+0x1a0/0x1a0
[  178.946922][   T48]  ? kthread_blkcg+0xd0/0xd0
[  178.951557][   T48]  ret_from_fork+0x1f/0x30
[  178.956041][   T48]  </TASK>
[  178.973789][ T4284] Bluetooth: hci1: command 0x0406 tx timeout
[  179.003709][   T48] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  179.017720][   T48] Bluetooth: hci4: failed to register connection device
[  179.088649][   T48] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  180.477328][ T4272] XFS (loop0): Unmounting Filesystem
[  181.053675][ T4286] Bluetooth: hci4: command 0x2016 tx timeout
[  183.726452][ T4286] Bluetooth: hci4: command 0x0406 tx timeout
[  183.739437][ T5222] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  183.745797][ T5222] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  183.835748][ T5222] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  183.843237][ T5222] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  183.850129][ T5222] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  183.900153][ T5222] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  183.907795][ T5222] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  183.913842][ T5222] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  183.962537][ T5222] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  183.970254][ T5222] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  183.976290][ T5222] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  184.018963][ T5222] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  184.026419][ T5222] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  184.033131][ T5222] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  184.042173][ T5222] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  184.387845][ T5241] loop1: detected capacity change from 0 to 32768
[  184.404295][ T5241] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[  184.693842][ T4730] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  184.754990][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout
[  185.375359][ T5249] loop4: detected capacity change from 0 to 65536
[  185.433739][ T4730] usb 1-1: Using ep0 maxpacket: 32
[  185.484444][ T4730] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  185.576471][ T4479] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[  185.953735][   T48] Bluetooth: hci2: command 0x0c1a tx timeout
[  185.960086][   T48] Bluetooth: hci1: command 0x0c1a tx timeout
[  186.048416][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout
[  186.093716][   T48] Bluetooth: hci4: command 0x0c1a tx timeout
[  186.269994][ T5249] XFS (loop4): Mounting V5 Filesystem
[  186.561299][ T4730] usb 1-1: config 0 has no interface number 0
[  186.568548][ T4730] usb 1-1: config 0 interface 12 has no altsetting 0
[  186.653665][ T4730] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  186.803676][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  186.833759][ T4730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.772175][ T4730] usb 1-1: Product: syz
[  187.830507][ T4730] usb 1-1: Manufacturer: syz
[  187.904335][ T4730] usb 1-1: SerialNumber: syz
[  187.927670][ T4730] usb 1-1: config 0 descriptor??
[  187.944201][ T5249] XFS (loop4): Ending clean mount
[  187.986650][ T5275] loop3: detected capacity change from 0 to 4096
[  188.074828][ T4730] usb 1-1: can't set config #0, error -71
[  188.083182][ T4273] XFS (loop4): Unmounting Filesystem
[  188.093723][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  188.099807][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  188.106048][ T4286] Bluetooth: hci2: command 0x0406 tx timeout
[  188.127326][ T4730] usb 1-1: USB disconnect, device number 3
[  188.279079][ T5275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  188.314930][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  188.556208][ T4270] EXT4-fs (loop3): unmounting filesystem.
[  188.633768][ T4737] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  188.847610][ T4737] usb 3-1: config 0 has no interfaces?
[  188.863158][ T4737] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  189.037775][ T4737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.070970][ T4737] usb 3-1: Product: syz
[  189.085597][ T4737] usb 3-1: Manufacturer: syz
[  189.096302][ T4737] usb 3-1: SerialNumber: syz
[  189.121051][ T4737] usb 3-1: config 0 descriptor??
[  189.574344][ T5287] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  189.580521][ T5287] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  189.618344][ T5287] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  190.859885][ T5287] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  190.865906][ T5287] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  190.884608][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout
[  190.892141][ T5287] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  190.900475][ T5287] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  191.144195][ T5287] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  191.153303][ T5287] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  191.160586][ T5287] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  191.166602][ T5287] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  191.173814][ T5287] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  191.181028][ T5287] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  191.187060][ T5287] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  191.195539][ T5287] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  192.311456][  T127] usb 3-1: USB disconnect, device number 5
[  192.679912][ T5306] loop2: detected capacity change from 0 to 32768
[  192.691305][ T5306] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  192.884082][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout
[  193.690751][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  193.690785][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout
[  193.702909][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout
[  193.703819][ T4274] Bluetooth: hci2: command 0x0c1a tx timeout
[  194.253891][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  194.260253][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  195.503252][ T4479] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  195.763759][ T4286] Bluetooth: hci2: command 0x0406 tx timeout
[  195.769855][ T4286] Bluetooth: hci1: command 0x0406 tx timeout
[  195.777106][ T4274] Bluetooth: hci3: command 0x0406 tx timeout
[  195.783181][ T4274] Bluetooth: hci4: command 0x0406 tx timeout
[  196.274361][ T5321] loop0: detected capacity change from 0 to 65536
[  196.417016][ T5321] XFS (loop0): Mounting V5 Filesystem
[  196.481949][ T5321] XFS (loop0): Ending clean mount
[  197.245282][ T4272] XFS (loop0): Unmounting Filesystem
[  197.601864][ T5347] loop4: detected capacity change from 0 to 65
[  197.632361][ T5347] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  199.703077][ T5369] loop0: detected capacity change from 0 to 64
[  199.940991][ T5369] hfs: unable to locate alternate MDB
[  199.969491][ T5364] loop4: detected capacity change from 0 to 2048
[  200.015394][ T5369] hfs: continuing without an alternate MDB
[  200.471874][ T5364] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  200.589823][ T5357] loop2: detected capacity change from 0 to 32768
[  200.679131][ T5357] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  201.009901][ T4359] udevd[4359]: incorrect nilfs2 checksum on /dev/loop4
[  201.406229][ T5376] loop1: detected capacity change from 0 to 32768
[  201.417048][ T5376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.269 (5376)
[  201.433999][ T5376] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  201.445511][ T5376] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  201.454218][ T5376] BTRFS info (device loop1): using free space tree
[  201.642223][ T5376] BTRFS info (device loop1): enabling ssd optimizations
[  203.033971][ T4388] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  205.508522][ T4283] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  205.722369][ T5434] loop2: detected capacity change from 0 to 32768
[  205.766096][ T5434] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.281 (5434)
[  206.461273][ T5434] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.471876][ T5434] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  206.480763][ T5434] BTRFS info (device loop2): using free space tree
[  207.279357][ T5434] BTRFS info (device loop2): enabling ssd optimizations
[  207.468989][ T5463] loop0: detected capacity change from 0 to 32768
[  207.477004][ T5463] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  207.572224][ T4479] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4479)
[  207.613970][ T4388] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  208.483936][   T26] audit: type=1800 audit(1771647998.939:9): pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.281" name="file1" dev="loop2" ino=260 res=0 errno=0
[  210.156675][ T4271] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  210.478689][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'.
[  211.710242][ T5507] loop3: detected capacity change from 0 to 65536
[  212.087500][  T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  212.593612][  T127] usb 5-1: Using ep0 maxpacket: 32
[  212.644498][  T127] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  212.828303][  T127] usb 5-1: config 0 has no interface number 0
[  213.163638][  T127] usb 5-1: config 0 interface 12 has no altsetting 0
[  213.504567][ T5507] XFS (loop3): Mounting V5 Filesystem
[  213.685559][ T5507] XFS (loop3): Ending clean mount
[  213.788110][  T127] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  213.813602][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.834431][  T127] usb 5-1: Product: syz
[  213.838742][  T127] usb 5-1: Manufacturer: syz
[  213.843379][  T127] usb 5-1: SerialNumber: syz
[  213.875064][  T127] usb 5-1: config 0 descriptor??
[  214.185820][  T127] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  214.195095][  T127] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  214.222272][  T127] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  214.242910][  T127] f81534: probe of 5-1:0.12 failed with error -71
[  214.284311][  T127] usb 5-1: USB disconnect, device number 4
[  215.287615][ T4270] XFS (loop3): Unmounting Filesystem
[  215.660413][ T5542] loop0: detected capacity change from 0 to 4096
[  215.733429][ T5542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  216.662342][ T5544] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 363: padding at end of block bitmap is not set
[  216.816690][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  217.031123][ T5558] loop0: detected capacity change from 0 to 512
[  217.078073][ T5558] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  217.130252][ T5558] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  217.191882][ T5558] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  217.212323][ T5558] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006]
[  217.238491][ T5561] loop4: detected capacity change from 0 to 4096
[  217.299972][ T5558] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  217.348406][ T5561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  217.502897][ T5550] loop2: detected capacity change from 0 to 32768
[  217.528614][ T5555] fscrypt (loop0, inode 12): Error -61 getting encryption context
[  217.672451][ T5567] loop3: detected capacity change from 0 to 32768
[  217.680540][ T5567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.299 (5567)
[  217.697816][ T5567] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  217.708058][ T5567] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  217.716872][ T5567] BTRFS info (device loop3): using free space tree
[  217.774044][ T5550] 
[  217.774044][ T5550]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.774044][ T5550] 
[  217.868255][ T5550] ERROR: (device loop2): diWrite: ixpxd invalid
[  217.868255][ T5550] 
[  217.957715][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  217.968453][ T5550] ERROR: (device loop2): txCommit: 
[  217.968453][ T5550] 
[  218.156390][ T4271] 
[  218.156390][ T4271]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  218.156390][ T4271] 
[  218.171775][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  218.192966][ T4271] 
[  218.192966][ T4271]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  218.192966][ T4271] 
[  218.754797][ T5567] BTRFS info (device loop3): enabling ssd optimizations
[  220.016990][   T26] audit: type=1800 audit(1771648010.479:10): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.299" name="file1" dev="loop3" ino=260 res=0 errno=0
[  220.491147][ T4270] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  220.703002][ T5605] loop4: detected capacity change from 0 to 4096
[  221.825327][ T5605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  222.910486][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  224.327033][ T5638] atomic_op ffff888076362198 conn xmit_atomic 0000000000000000
[  224.555308][ T5628] comedi comedi2: reset error (fatal)
[  226.205935][ T5649] loop3: detected capacity change from 0 to 32768
[  226.215028][ T5649] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.324 (5649)
[  226.246483][ T5649] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.256718][ T5649] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  226.265543][ T5649] BTRFS info (device loop3): using free space tree
[  226.781109][ T5649] BTRFS info (device loop3): enabling ssd optimizations
[  227.377485][ T5676] loop4: detected capacity change from 0 to 4096
[  227.418290][   T26] audit: type=1800 audit(1771648017.879:11): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.324" name="file1" dev="loop3" ino=260 res=0 errno=0
[  227.496253][ T5676] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  228.235180][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  228.479065][ T5686] loop1: detected capacity change from 0 to 512
[  228.487649][ T5686] EXT4-fs: Ignoring removed mblk_io_submit option
[  228.510707][ T5686] EXT4-fs: journaled quota format not specified
[  228.551398][ T4270] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  229.531813][ T5701] loop4: detected capacity change from 0 to 4096
[  229.641026][ T5701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  230.308923][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  232.789156][ T5729] loop4: detected capacity change from 0 to 4096
[  232.958552][ T5729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  233.185663][ T5734] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 363: padding at end of block bitmap is not set
[  233.878070][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  234.168310][ T5695] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  235.415447][ T5695] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  235.432207][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.595015][ T5695] usb 4-1: config 0 descriptor??
[  235.605669][ T5695] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  235.808139][ T5695] gp8psk: usb in 128 operation failed.
[  235.832811][ T5695] gp8psk: usb in 137 operation failed.
[  235.854198][ T5695] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  235.936944][ T5695] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  236.889590][ T5695] usb 4-1: media controller created
[  236.954765][ T5768] 8021q: VLANs not supported on wg2
[  237.041309][ T5769] loop4: detected capacity change from 0 to 512
[  237.048636][ T5769] EXT4-fs: Ignoring removed mblk_io_submit option
[  237.267242][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  237.511599][ T5695] gp8psk_fe: Frontend attached
[  237.522385][ T5695] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  237.531526][ T5695] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  237.583774][ T5769] EXT4-fs: journaled quota format not specified
[  237.743809][ T5695] gp8psk: usb in 138 operation failed.
[  237.854221][ T5695] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  237.896790][ T5695] gp8psk: found Genpix USB device pID = 203 (hex)
[  238.021870][ T5695] usb 4-1: USB disconnect, device number 5
[  238.218275][ T5695] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  238.688501][ T5786] loop4: detected capacity change from 0 to 4096
[  238.838962][ T5786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  240.347758][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  240.357960][ T5800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.365'.
[  240.647667][ T5804] loop3: detected capacity change from 0 to 32768
[  240.670006][ T5804] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  240.774058][ T4359] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  241.882148][ T5806] loop0: detected capacity change from 0 to 8
[  241.901670][ T5806] squashfs: Unknown parameter 'CÇ?#�¹€'
[  243.984162][ T5831] loop2: detected capacity change from 0 to 4096
[  244.869891][ T5831] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  245.491752][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  246.006620][ T5848] loop2: detected capacity change from 0 to 4096
[  246.089769][ T5848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  247.011803][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  248.520208][ T5878] loop4: detected capacity change from 0 to 128
[  248.864642][ T5878] FAT-fs (loop4): bogus number of reserved sectors
[  249.243914][ T5878] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  249.253354][ T5878] FAT-fs (loop4): Can't find a valid FAT filesystem
[  250.123683][ T5695] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  250.134134][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  250.143865][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:6 Not tainted syzkaller #0
[  250.151479][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  250.161596][ T4286] Workqueue: hci3 hci_rx_work
[  250.166307][ T4286] Call Trace:
[  250.169593][ T4286]  <TASK>
[  250.172551][ T4286]  dump_stack_lvl+0x188/0x24e
[  250.177250][ T4286]  ? show_regs_print_info+0x12/0x12
[  250.182477][ T4286]  ? load_image+0x400/0x400
[  250.187035][ T4286]  sysfs_create_dir_ns+0x26a/0x290
[  250.192168][ T4286]  ? sysfs_warn_dup+0xa0/0xa0
[  250.196872][ T4286]  ? do_raw_spin_unlock+0x11d/0x230
[  250.202100][ T4286]  kobject_add_internal+0x61c/0xcc0
[  250.207346][ T4286]  kobject_add+0x160/0x230
[  250.211890][ T4286]  ? kobject_init+0x1d0/0x1d0
[  250.216603][ T4286]  ? klist_children_get+0x50/0x50
[  250.221642][ T4286]  ? get_device_parent+0x121/0x3f0
[  250.226776][ T4286]  device_add+0x483/0xfb0
[  250.231126][ T4286]  ? kmem_cache_free+0xf7/0x290
[  250.236002][ T4286]  hci_conn_add_sysfs+0xd1/0x1e0
[  250.240958][ T4286]  le_conn_complete_evt+0x105f/0x1670
[  250.246382][ T4286]  ? le_conn_complete_evt+0xe6/0x1670
[  250.251775][ T4286]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  250.258060][ T4286]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  250.263756][ T4286]  ? skb_pull_data+0xf7/0x200
[  250.268485][ T4286]  hci_le_enh_conn_complete_evt+0x185/0x460
[  250.274409][ T4286]  ? hci_le_remote_conn_param_req_evt+0xd10/0xd10
[  250.280863][ T4286]  ? hci_remote_host_features_evt+0x270/0x270
[  250.286971][ T4286]  hci_event_packet+0x7b6/0x1280
[  250.291964][ T4286]  ? bis_list+0x280/0x280
[  250.296310][ T4286]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  250.302332][ T4286]  ? kcov_remote_start+0x4c7/0x7e0
[  250.307479][ T4286]  ? sync_thread_backup+0x1510/0x2090
[  250.312870][ T4286]  ? hci_send_to_monitor+0x9c/0x4a0
[  250.318082][ T4286]  hci_rx_work+0x3eb/0xd40
[  250.322514][ T4286]  ? _raw_spin_unlock+0x40/0x40
[  250.327467][ T4286]  ? process_one_work+0x7b0/0x1160
[  250.332590][ T4286]  process_one_work+0x8a2/0x1160
[  250.337552][ T4286]  ? worker_detach_from_pool+0x240/0x240
[  250.343201][ T4286]  ? _raw_spin_lock_irq+0xb7/0xf0
[  250.348237][ T4286]  ? _raw_spin_lock_irqsave+0x100/0x100
[  250.353811][ T4286]  ? kthread_data+0x4b/0xc0
[  250.358371][ T4286]  worker_thread+0xaa2/0x1270
[  250.363108][ T4286]  kthread+0x29d/0x330
[  250.367221][ T4286]  ? worker_clr_flags+0x1a0/0x1a0
[  250.372282][ T4286]  ? kthread_blkcg+0xd0/0xd0
[  250.376905][ T4286]  ret_from_fork+0x1f/0x30
[  250.381361][ T4286]  </TASK>
[  250.385541][ T4286] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  250.399534][ T4286] Bluetooth: hci3: failed to register connection device
[  250.407578][ T4286] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3
[  250.510668][ T5883] loop2: detected capacity change from 0 to 4096
[  250.619077][ T5885] loop0: detected capacity change from 0 to 32768
[  250.630684][ T5885] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  250.654840][ T5883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  250.662345][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.749527][ T5695] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  250.775698][ T5695] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00
[  250.788418][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.802511][ T5695] usb 2-1: config 0 descriptor??
[  250.812573][ T4359] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  251.746015][ T5695] hid-generic 0003:0458:5017.0001: item fetching failed at offset 1/5
[  251.755292][ T5891] loop3: detected capacity change from 0 to 4096
[  251.774144][ T5695] hid-generic: probe of 0003:0458:5017.0001 failed with error -22
[  251.838268][ T5891] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  251.841828][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  251.921916][ T4648] usb 2-1: USB disconnect, device number 6
[  252.649315][ T4286] Bluetooth: hci3: command 0x2016 tx timeout
[  252.683402][ T4270] EXT4-fs (loop3): unmounting filesystem.
[  253.635688][ T5908] loop2: detected capacity change from 0 to 64
[  253.681449][ T5908] hfs: unable to locate alternate MDB
[  253.687900][ T5908] hfs: continuing without an alternate MDB
[  253.839792][ T5910] mmap: syz.3.394 (5910) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  254.723658][ T4286] Bluetooth: hci3: command 0x0406 tx timeout
[  255.714874][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  255.721352][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  257.332909][ T5932] loop4: detected capacity change from 0 to 128
[  257.372773][ T5932] FAT-fs (loop4): bogus number of reserved sectors
[  257.401210][ T5932] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  257.436907][ T5932] FAT-fs (loop4): Can't find a valid FAT filesystem
[  259.409722][ T5937] loop0: detected capacity change from 0 to 32768
[  259.437317][ T5937] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  260.474125][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  260.483916][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:6 Not tainted syzkaller #0
[  260.491588][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  260.501660][ T4286] Workqueue: hci3 hci_rx_work
[  260.506354][ T4286] Call Trace:
[  260.509636][ T4286]  <TASK>
[  260.512572][ T4286]  dump_stack_lvl+0x188/0x24e
[  260.517375][ T4286]  ? show_regs_print_info+0x12/0x12
[  260.522607][ T4286]  ? load_image+0x400/0x400
[  260.527153][ T4286]  sysfs_create_dir_ns+0x26a/0x290
[  260.532281][ T4286]  ? sysfs_warn_dup+0xa0/0xa0
[  260.536973][ T4286]  ? preempt_schedule_thunk+0x16/0x18
[  260.542378][ T4286]  kobject_add_internal+0x61c/0xcc0
[  260.547610][ T4286]  kobject_add+0x160/0x230
[  260.552042][ T4286]  ? kobject_init+0x1d0/0x1d0
[  260.556827][ T4286]  ? klist_children_get+0x50/0x50
[  260.561865][ T4286]  ? get_device_parent+0x121/0x3f0
[  260.567346][ T4286]  device_add+0x483/0xfb0
[  260.571695][ T4286]  ? kmem_cache_free+0xf7/0x290
[  260.576565][ T4286]  hci_conn_add_sysfs+0xd1/0x1e0
[  260.581515][ T4286]  le_conn_complete_evt+0x105f/0x1670
[  260.586903][ T4286]  ? le_conn_complete_evt+0xe6/0x1670
[  260.592292][ T4286]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  260.598557][ T4286]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  260.604205][ T4286]  ? skb_pull_data+0xf7/0x200
[  260.608906][ T4286]  hci_le_enh_conn_complete_evt+0x185/0x460
[  260.614847][ T4286]  ? hci_le_remote_conn_param_req_evt+0xd10/0xd10
[  260.621272][ T4286]  ? hci_remote_host_features_evt+0x270/0x270
[  260.627355][ T4286]  hci_event_packet+0x7b6/0x1280
[  260.632334][ T4286]  ? bis_list+0x280/0x280
[  260.636682][ T4286]  ? kcov_remote_start+0x27/0x7e0
[  260.641805][ T4286]  ? hci_send_to_monitor+0x9c/0x4a0
[  260.647027][ T4286]  hci_rx_work+0x3eb/0xd40
[  260.651468][ T4286]  ? _raw_spin_unlock+0x40/0x40
[  260.656330][ T4286]  ? process_one_work+0x7b0/0x1160
[  260.661456][ T4286]  process_one_work+0x8a2/0x1160
[  260.666416][ T4286]  ? worker_detach_from_pool+0x240/0x240
[  260.672071][ T4286]  ? _raw_spin_lock_irq+0xb7/0xf0
[  260.677101][ T4286]  ? _raw_spin_lock_irqsave+0x100/0x100
[  260.682656][ T4286]  ? kthread_data+0x4b/0xc0
[  260.687187][ T4286]  worker_thread+0xaa2/0x1270
[  260.691899][ T4286]  kthread+0x29d/0x330
[  260.695973][ T4286]  ? worker_clr_flags+0x1a0/0x1a0
[  260.701003][ T4286]  ? kthread_blkcg+0xd0/0xd0
[  260.705598][ T4286]  ret_from_fork+0x1f/0x30
[  260.710126][ T4286]  </TASK>
[  260.718546][ T4286] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  260.733876][ T4286] Bluetooth: hci3: failed to register connection device
[  261.056178][ T4286] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3
[  261.783398][ T5947] loop0: detected capacity change from 0 to 4096
[  261.883391][ T5947] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  262.004718][ T5952] 8021q: VLANs not supported on wg2
[  262.134774][ T4727] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  262.234134][ T5951] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 363: padding at end of block bitmap is not set
[  262.790857][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  262.804896][ T4274] Bluetooth: hci3: command 0x2016 tx timeout
[  262.863595][ T4727] usb 4-1: Using ep0 maxpacket: 32
[  262.892156][ T4727] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  262.921889][ T4727] usb 4-1: config 0 has no interface number 0
[  262.928173][ T4727] usb 4-1: config 0 interface 12 has no altsetting 0
[  262.946092][ T4727] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  262.969989][ T4727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.993633][ T4727] usb 4-1: Product: syz
[  262.997859][ T4727] usb 4-1: Manufacturer: syz
[  263.012697][ T4727] usb 4-1: SerialNumber: syz
[  263.024308][ T4727] usb 4-1: config 0 descriptor??
[  263.035747][ T4727] f81534 4-1:0.12: required endpoints missing
[  264.013132][ T5964] loop2: detected capacity change from 0 to 64
[  264.058041][ T5964] hfs: unable to locate alternate MDB
[  264.096569][ T5964] hfs: continuing without an alternate MDB
[  264.881908][ T5975] loop1: detected capacity change from 0 to 32768
[  264.909609][ T5977] loop4: detected capacity change from 0 to 32768
[  266.140283][ T5975] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[  266.152262][ T4286] Bluetooth: hci3: command 0x0406 tx timeout
[  266.177028][ T5977] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.413 (5977)
[  266.193388][ T5977] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.203663][ T5977] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  266.212389][ T5977] BTRFS info (device loop4): using free space tree
[  266.536154][ T5693] usb 4-1: USB disconnect, device number 6
[  266.813711][ T5977] BTRFS info (device loop4): enabling ssd optimizations
[  267.011386][   T26] audit: type=1800 audit(1771648057.469:12): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.413" name="file1" dev="loop4" ino=260 res=0 errno=0
[  267.080446][ T4479] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by udevd (4479)
[  267.248402][ T4273] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.671773][ T6011] 8021q: VLANs not supported on wg2
[  269.245430][ T6017] loop4: detected capacity change from 0 to 4096
[  269.325997][ T6022] loop3: detected capacity change from 0 to 64
[  269.473364][ T6022] hfs: unable to locate alternate MDB
[  269.480824][ T6017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  269.647895][ T6022] hfs: continuing without an alternate MDB
[  269.773161][ T6028] loop0: detected capacity change from 0 to 128
[  270.414170][ T6028] FAT-fs (loop0): bogus number of reserved sectors
[  270.678841][ T6028] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  270.753629][ T6028] FAT-fs (loop0): Can't find a valid FAT filesystem
[  270.824658][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  271.903972][ T4286] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  273.823637][ T4727] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  273.838660][ T6046] loop2: detected capacity change from 0 to 32768
[  273.850828][ T6046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.427 (6046)
[  273.942850][ T6046] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.953666][ T6046] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  273.962407][ T6046] BTRFS info (device loop2): using free space tree
[  274.113718][ T4727] usb 2-1: Using ep0 maxpacket: 32
[  274.120965][ T4727] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  274.139777][ T4727] usb 2-1: config 0 has no interface number 0
[  274.153630][ T4727] usb 2-1: config 0 interface 12 has no altsetting 0
[  274.189702][ T4727] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  274.200143][ T6046] BTRFS info (device loop2): enabling ssd optimizations
[  274.242012][ T4727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.310484][ T4727] usb 2-1: Product: syz
[  274.342649][ T4727] usb 2-1: Manufacturer: syz
[  274.355780][ T4727] usb 2-1: SerialNumber: syz
[  274.395446][ T4727] usb 2-1: config 0 descriptor??
[  274.434155][   T26] audit: type=1800 audit(1771648064.899:13): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.427" name="file1" dev="loop2" ino=260 res=0 errno=0
[  274.466682][ T4727] f81534 2-1:0.12: required endpoints missing
[  274.898147][ T4271] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  274.977621][ T6079] 8021q: VLANs not supported on wg2
[  277.155900][ T6084] loop3: detected capacity change from 0 to 4096
[  277.296115][ T6084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  277.411580][ T6100] loop0: detected capacity change from 0 to 64
[  277.471145][   T22] usb 2-1: USB disconnect, device number 7
[  277.554023][ T6100] hfs: unable to locate alternate MDB
[  277.559473][ T6100] hfs: continuing without an alternate MDB
[  278.176972][ T4270] EXT4-fs (loop3): unmounting filesystem.
[  278.393462][ T6112] loop0: detected capacity change from 0 to 128
[  278.519557][ T6112] FAT-fs (loop0): bogus number of reserved sectors
[  278.531664][ T6112] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  278.602281][ T6110] loop2: detected capacity change from 0 to 32768
[  278.610424][ T6112] FAT-fs (loop0): Can't find a valid FAT filesystem
[  278.624837][ T6110] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  278.635254][ T6110] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  278.644112][ T6110] BTRFS info (device loop2): enabling disk space caching
[  278.651925][ T6110] BTRFS info (device loop2): force clearing of disk cache
[  278.659161][ T6110] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  278.668632][ T6110] BTRFS info (device loop2): use zstd compression, level 3
[  278.675949][ T6110] BTRFS info (device loop2): disk space caching is enabled
[  279.041142][ T6121] loop1: detected capacity change from 0 to 32768
[  279.055931][ T6121] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.441 (6121)
[  279.073613][ T4274] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  279.716031][ T6110] BTRFS info (device loop2): enabling ssd optimizations
[  279.731359][ T6110] BTRFS info (device loop2): rebuilding free space tree
[  279.751274][ T6110] BTRFS info (device loop2): disabling free space tree
[  279.758345][ T6110] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  279.768244][ T6110] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  279.816763][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'.
[  280.554021][ T6121] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.566580][ T6121] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  280.575593][ T6121] BTRFS info (device loop1): using free space tree
[  280.780704][ T6138] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  281.054138][ T6138] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  281.400694][ T6121] BTRFS info (device loop1): enabling ssd optimizations
[  282.237778][   T26] audit: type=1800 audit(1771648072.699:14): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.441" name="file1" dev="loop1" ino=260 res=0 errno=0
[  282.460790][ T4283] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.514577][ T4727] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  282.814881][ T4727] usb 4-1: Using ep0 maxpacket: 32
[  282.847041][ T4727] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  283.011136][ T4727] usb 4-1: config 0 has no interface number 0
[  283.059870][ T4727] usb 4-1: config 0 interface 12 has no altsetting 0
[  283.133195][ T4727] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  283.156667][ T4727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.199810][ T4727] usb 4-1: Product: syz
[  283.232106][ T4727] usb 4-1: Manufacturer: syz
[  283.236897][ T4727] usb 4-1: SerialNumber: syz
[  283.270461][ T4727] usb 4-1: config 0 descriptor??
[  284.138694][ T4727] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  284.166851][ T4727] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  284.258189][ T4727] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  284.308806][ T4727] f81534: probe of 4-1:0.12 failed with error -71
[  284.400056][ T4727] usb 4-1: USB disconnect, device number 7
[  284.609052][ T6196] loop4: detected capacity change from 0 to 128
[  284.663683][ T6196] FAT-fs (loop4): bogus number of reserved sectors
[  284.670391][ T6196] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  284.690514][ T6196] FAT-fs (loop4): Can't find a valid FAT filesystem
[  284.783672][ T4356] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  284.841405][ T4286] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3
[  284.983814][ T4356] usb 1-1: device descriptor read/64, error -71
[  287.111776][ T4356] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  287.255296][ T4271] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  287.273339][ T6213] loop3: detected capacity change from 0 to 512
[  287.364619][ T6213] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  287.906588][ T6213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  288.162022][ T6213] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.458: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  288.343648][ T6213] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.458: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  288.767904][ T4270] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  289.070958][ T4270] EXT4-fs (loop3): unmounting filesystem.
[  289.921672][ T6239] loop1: detected capacity change from 0 to 128
[  290.093063][ T6239] FAT-fs (loop1): bogus number of reserved sectors
[  290.194798][ T6239] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  290.336125][ T6239] FAT-fs (loop1): Can't find a valid FAT filesystem
[  290.628638][ T4274] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0'
[  290.638975][ T4274] CPU: 1 PID: 4274 Comm: kworker/u5:1 Not tainted syzkaller #0
[  290.646611][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  290.656734][ T4274] Workqueue: hci4 hci_rx_work
[  290.661475][ T4274] Call Trace:
[  290.664792][ T4274]  <TASK>
[  290.667765][ T4274]  dump_stack_lvl+0x188/0x24e
[  290.672585][ T4274]  ? show_regs_print_info+0x12/0x12
[  290.677845][ T4274]  ? load_image+0x400/0x400
[  290.682408][ T4274]  sysfs_create_dir_ns+0x26a/0x290
[  290.687585][ T4274]  ? sysfs_warn_dup+0xa0/0xa0
[  290.692398][ T4274]  ? do_raw_spin_unlock+0x11d/0x230
[  290.697653][ T4274]  kobject_add_internal+0x61c/0xcc0
[  290.702919][ T4274]  kobject_add+0x160/0x230
[  290.707388][ T4274]  ? kobject_init+0x1d0/0x1d0
[  290.712114][ T4274]  ? klist_children_get+0x50/0x50
[  290.717198][ T4274]  ? get_device_parent+0x121/0x3f0
[  290.722369][ T4274]  device_add+0x483/0xfb0
[  290.726756][ T4274]  ? kmem_cache_free+0xf7/0x290
[  290.731661][ T4274]  hci_conn_add_sysfs+0xd1/0x1e0
[  290.736667][ T4274]  le_conn_complete_evt+0x105f/0x1670
[  290.742195][ T4274]  ? le_conn_complete_evt+0xe6/0x1670
[  290.747629][ T4274]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  290.753930][ T4274]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  290.759623][ T4274]  ? skb_pull_data+0xf7/0x200
[  290.764385][ T4274]  hci_le_enh_conn_complete_evt+0x185/0x460
[  290.770335][ T4274]  ? hci_le_remote_conn_param_req_evt+0xd10/0xd10
[  290.776802][ T4274]  ? hci_remote_host_features_evt+0x270/0x270
[  290.783016][ T4274]  hci_event_packet+0x7b6/0x1280
[  290.788028][ T4274]  ? bis_list+0x280/0x280
[  290.792405][ T4274]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  290.798358][ T4274]  ? kcov_remote_start+0x4c7/0x7e0
[  290.803522][ T4274]  ? sync_thread_backup+0x1510/0x2090
[  290.808950][ T4274]  ? hci_send_to_monitor+0x9c/0x4a0
[  290.814209][ T4274]  hci_rx_work+0x3eb/0xd40
[  290.818674][ T4274]  ? _raw_spin_unlock+0x40/0x40
[  290.823585][ T4274]  ? process_one_work+0x7b0/0x1160
[  290.828853][ T4274]  process_one_work+0x8a2/0x1160
[  290.833861][ T4274]  ? worker_detach_from_pool+0x240/0x240
[  290.839553][ T4274]  ? _raw_spin_lock_irq+0xb7/0xf0
[  290.844627][ T4274]  ? _raw_spin_lock_irqsave+0x100/0x100
[  290.850308][ T4274]  ? kthread_data+0x4b/0xc0
[  290.854872][ T4274]  worker_thread+0xaa2/0x1270
[  290.859621][ T4274]  kthread+0x29d/0x330
[  290.863738][ T4274]  ? worker_clr_flags+0x1a0/0x1a0
[  290.868806][ T4274]  ? kthread_blkcg+0xd0/0xd0
[  290.873446][ T4274]  ret_from_fork+0x1f/0x30
[  290.877928][ T4274]  </TASK>
[  290.894034][ T4274] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  290.907283][ T4274] Bluetooth: hci4: failed to register connection device
[  291.556080][ T4274] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  292.824293][ T6253] loop0: detected capacity change from 0 to 32768
[  292.849442][ T6253] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.470 (6253)
[  293.006753][ T4274] Bluetooth: hci4: command 0x2016 tx timeout
[  293.640790][ T6253] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  293.651109][ T6253] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  293.660107][ T6253] BTRFS info (device loop0): enabling disk space caching
[  293.667248][ T6253] BTRFS info (device loop0): force clearing of disk cache
[  293.674490][ T6253] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  293.684686][ T6253] BTRFS info (device loop0): use zstd compression, level 3
[  293.692031][ T6253] BTRFS info (device loop0): disk space caching is enabled
[  294.175652][ T6269] 8021q: VLANs not supported on wg2
[  294.329137][ T6253] BTRFS info (device loop0): enabling ssd optimizations
[  294.337312][ T6253] BTRFS info (device loop0): rebuilding free space tree
[  294.353936][ T6253] BTRFS info (device loop0): disabling free space tree
[  294.360923][ T6253] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  294.371238][ T6253] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  295.631747][ T4272] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  295.683951][ T4274] Bluetooth: hci4: command 0x0406 tx timeout
[  300.576424][ T6337] loop4: detected capacity change from 0 to 32768
[  300.592290][ T6337] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.486 (6337)
[  300.624331][ T6337] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  300.634544][ T6337] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  300.643294][ T6337] BTRFS info (device loop4): enabling disk space caching
[  300.650466][ T6337] BTRFS info (device loop4): force clearing of disk cache
[  300.657613][ T6337] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  300.667753][ T6337] BTRFS info (device loop4): use zstd compression, level 3
[  300.675285][ T6337] BTRFS info (device loop4): disk space caching is enabled
[  302.510669][ T6364] 8021q: VLANs not supported on wg2
[  302.516731][ T6337] BTRFS info (device loop4): enabling ssd optimizations
[  302.535308][ T6337] BTRFS info (device loop4): rebuilding free space tree
[  302.549662][ T6337] BTRFS info (device loop4): disabling free space tree
[  302.556717][ T6337] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  302.566576][ T6337] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  303.011839][ T6371] loop2: detected capacity change from 0 to 32768
[  303.265373][ T6371] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.491 (6371)
[  303.335948][ T4273] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  303.403735][ T4479] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  311.505799][ T6420] loop3: detected capacity change from 0 to 65536
[  311.597655][ T6421] loop0: detected capacity change from 0 to 512
[  311.610086][ T6421] EXT4-fs: Ignoring removed mblk_io_submit option
[  311.746590][ T6421] EXT4-fs: journaled quota format not specified
[  312.207637][ T6428] 8021q: VLANs not supported on wg2
[  312.224352][ T6420] XFS (loop3): Mounting V5 Filesystem
[  312.271101][ T6420] XFS (loop3): Ending clean mount
[  312.539269][ T4270] XFS (loop3): Unmounting Filesystem
[  312.750882][ T6435] loop1: detected capacity change from 0 to 32768
[  312.858270][ T6435] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.505 (6435)
[  312.889810][ T6435] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  312.907571][ T6435] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  312.916424][ T6435] BTRFS info (device loop1): enabling disk space caching
[  312.923542][ T6435] BTRFS info (device loop1): force clearing of disk cache
[  312.930699][ T6435] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  312.940171][ T6435] BTRFS info (device loop1): use zstd compression, level 3
[  312.947470][ T6435] BTRFS info (device loop1): disk space caching is enabled
[  313.028438][ T6439] loop4: detected capacity change from 0 to 1024
[  313.570411][ T6439] hfsplus: catalog searching failed
[  313.606903][ T6435] BTRFS info (device loop1): enabling ssd optimizations
[  313.615117][ T6435] BTRFS info (device loop1): rebuilding free space tree
[  313.634038][ T6435] BTRFS info (device loop1): disabling free space tree
[  313.641142][ T6435] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  313.652571][ T6435] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  313.891722][ T4381] hfsplus: b-tree write err: -5, ino 3
[  313.944178][ T4273] hfsplus: node 4:3 still has 1 user(s)!
[  314.348967][   T26] audit: type=1804 audit(1771648104.539:15): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.505" name="/newroot/104/file1/bus" dev="loop1" ino=263 res=1 errno=0
[  315.022221][ T4283] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  315.635103][ T6474] loop0: detected capacity change from 0 to 256
[  316.362700][ T6478] loop1: detected capacity change from 0 to 4096
[  316.390945][ T6478] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  317.167609][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  317.174204][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  318.077802][ T4283] EXT4-fs (loop1): unmounting filesystem.
[  318.364915][ T6492] binder: BINDER_SET_CONTEXT_MGR already set
[  318.736499][ T6492] binder: 6491:6492 ioctl 4018620d 2000000002c0 returned -16
[  319.414290][ T6499] 8021q: VLANs not supported on wg2
[  319.509776][ T6497] loop2: detected capacity change from 0 to 512
[  319.516693][ T6497] EXT4-fs: Ignoring removed mblk_io_submit option
[  319.529443][ T6497] EXT4-fs: journaled quota format not specified
[  319.792602][ T6506] loop4: detected capacity change from 0 to 16
[  319.920812][ T6506] erofs: (device loop4): mounted with root inode @ nid 36.
[  319.940159][ T6508] loop0: detected capacity change from 0 to 2048
[  319.996971][ T6508] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  320.131877][ T6506] syz.4.521: attempt to access beyond end of device
[  320.131877][ T6506] loop4: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  320.277201][ T6506] syz.4.521: attempt to access beyond end of device
[  320.277201][ T6506] loop4: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  320.340238][   T26] audit: type=1800 audit(1771648110.799:16): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.521" name="file1" dev="loop4" ino=86 res=0 errno=0
[  320.429902][ T6515] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  322.028543][ T6531] 8021q: VLANs not supported on wg2
[  322.109278][ T6526] loop1: detected capacity change from 0 to 4096
[  322.199435][ T6526] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  322.684130][ T6535] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 363: padding at end of block bitmap is not set
[  322.952613][ T6544] binder: BINDER_SET_CONTEXT_MGR already set
[  322.975271][ T6544] binder: 6543:6544 ioctl 4018620d 2000000002c0 returned -16
[  323.155873][ T4283] EXT4-fs (loop1): unmounting filesystem.
[  323.249684][ T6552] loop3: detected capacity change from 0 to 1024
[  323.313886][ T3599] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  323.534246][ T3599] usb 1-1: Using ep0 maxpacket: 32
[  323.549113][ T3599] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  323.695180][ T3599] usb 1-1: config 0 has no interface number 0
[  323.848419][ T3599] usb 1-1: config 0 interface 12 has no altsetting 0
[  324.035162][ T3599] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  324.195818][ T4886] hfsplus: b-tree write err: -5, ino 4
[  324.278877][ T3599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.287882][ T3599] usb 1-1: Product: syz
[  324.292180][ T3599] usb 1-1: Manufacturer: syz
[  324.297012][ T3599] usb 1-1: SerialNumber: syz
[  324.303757][ T3599] usb 1-1: config 0 descriptor??
[  324.640171][ T6564] loop3: detected capacity change from 0 to 256
[  325.354571][ T6565] 8021q: VLANs not supported on wg2
[  325.727963][ T6573] loop4: detected capacity change from 0 to 2048
[  325.885812][ T3599] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  325.893380][ T3599] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  325.911657][ T3599] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  325.919401][ T3599] f81534: probe of 1-1:0.12 failed with error -71
[  325.920066][ T6573] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  326.718266][ T4479] udevd[4479]: incorrect nilfs2 checksum on /dev/loop4
[  326.821713][ T3599] usb 1-1: USB disconnect, device number 6
[  327.388237][ T4479] udevd[4479]: incorrect nilfs2 checksum on /dev/loop4
[  327.579445][ T6592] loop4: detected capacity change from 0 to 4096
[  327.593751][ T4318] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  328.100078][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.126264][ T6592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  328.135310][ T4318] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  328.144940][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.171866][ T4318] usb 2-1: config 0 descriptor??
[  328.581676][ T4318] usbhid 2-1:0.0: can't add hid device: -71
[  328.589953][ T4318] usbhid: probe of 2-1:0.0 failed with error -71
[  328.613404][ T4318] usb 2-1: USB disconnect, device number 8
[  328.842747][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  329.155590][ T6609] loop4: detected capacity change from 0 to 4096
[  329.178928][ T6609] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  329.193976][ T4318] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  330.050474][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  330.058224][ T4318] usb 2-1: Using ep0 maxpacket: 16
[  330.077290][ T4318] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.134735][ T4318] usb 2-1: config 0 interface 0 has no altsetting 0
[  330.141426][ T4318] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  330.189408][ T6610] binder: 6601:6610 ioctl 4018620d 0 returned -22
[  330.209632][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.257972][ T4318] usb 2-1: config 0 descriptor??
[  330.300717][ T4318] usb 2-1: can't set config #0, error -71
[  330.328579][ T4318] usb 2-1: USB disconnect, device number 9
[  330.457220][ T6624] loop4: detected capacity change from 0 to 2048
[  330.483667][ T5693] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  330.501487][ T6624] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  330.604680][ T4479] udevd[4479]: incorrect nilfs2 checksum on /dev/loop4
[  330.683819][ T5693] usb 1-1: Using ep0 maxpacket: 32
[  330.700820][ T5693] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  330.734415][ T5693] usb 1-1: config 0 has no interface number 0
[  330.769683][ T5693] usb 1-1: config 0 interface 12 has no altsetting 0
[  330.833665][ T5693] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  330.843597][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.851717][ T5693] usb 1-1: Product: syz
[  330.856507][ T5693] usb 1-1: Manufacturer: syz
[  330.861268][ T5693] usb 1-1: SerialNumber: syz
[  330.880805][ T5693] usb 1-1: config 0 descriptor??
[  331.908112][ T5693] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  331.987506][ T6640] loop1: detected capacity change from 0 to 512
[  331.996457][ T5693] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  332.115922][ T6640] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  332.143433][ T6640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  332.211820][ T5693] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  332.219660][ T5693] f81534: probe of 1-1:0.12 failed with error -71
[  332.249337][ T5693] usb 1-1: USB disconnect, device number 7
[  332.271327][ T6640] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.565: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  333.167570][ T6640] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 12: comm syz.1.565: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  333.301784][ T6654] loop3: detected capacity change from 0 to 4096
[  333.558635][ T6654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  333.802104][ T4283] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  333.916761][ T6666] fuse: Bad value for 'fd'
[  334.324731][ T4283] EXT4-fs (loop1): unmounting filesystem.
[  334.405493][ T6656] loop0: detected capacity change from 0 to 4096
[  334.441730][ T4270] EXT4-fs (loop3): unmounting filesystem.
[  334.479526][ T6656] ntfs3: loop0: mft corrupted
[  334.504791][ T6656] ntfs3: loop0: Failed to load $MFT.
[  334.599272][ T6669] loop4: detected capacity change from 0 to 512
[  334.679411][ T6669] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  334.861848][ T6669] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.574: bg 0: block 255: padding at end of block bitmap is not set
[  335.172835][ T6669] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem
[  335.922221][ T6669] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.574: invalid indirect mapped block 1 (level 1)
[  335.981554][ T6669] EXT4-fs (loop4): 1 truncate cleaned up
[  336.052836][ T6669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  336.245299][   T26] audit: type=1800 audit(1771648126.709:17): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.574" name="bus" dev="loop4" ino=18 res=0 errno=0
[  336.537145][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  337.121918][ T6706] loop4: detected capacity change from 0 to 4096
[  340.760907][ T4273] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  340.793597][ T4273] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  343.335325][ T6752] loop4: detected capacity change from 0 to 128
[  347.023717][ T4736] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  347.205755][ T6786] sch_tbf: burst 3 is lower than device tunl0 mtu (1480) !
[  347.273662][ T4736] usb 2-1: unable to get BOS descriptor or descriptor too short
[  348.544522][ T4736] usb 2-1: not running at top speed; connect to a high speed hub
[  348.670215][ T4736] usb 2-1: config 17 has an invalid interface number: 8 but max is 1
[  348.802442][ T4736] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[  348.883032][ T4736] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2
[  348.919578][ T4736] usb 2-1: config 17 has no interface number 0
[  348.929978][ T4736] usb 2-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  348.943393][ T4736] usb 2-1: config 17 interface 8 has no altsetting 0
[  348.989947][ T4736] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  349.039431][ T4736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.052994][ T4736] usb 2-1: Product: syz
[  349.060264][ T4736] usb 2-1: Manufacturer: syz
[  349.069020][ T4736] usb 2-1: SerialNumber: syz
[  349.321445][ T4736] usb 2-1: selecting invalid altsetting 0
[  349.361973][ T6797] loop0: detected capacity change from 0 to 1024
[  349.389396][ T4736] usb 2-1: USB disconnect, device number 10
[  349.654348][ T4479] udevd[4479]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  349.747426][ T4459] hfsplus: b-tree write err: -5, ino 4
[  350.590623][ T6808] loop0: detected capacity change from 0 to 64
[  353.815085][ T6845] loop4: detected capacity change from 0 to 4096
[  354.606159][ T4273] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  354.612665][ T4273] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  357.168577][ T6871] netlink: 944 bytes leftover after parsing attributes in process `syz.4.638'.
[  360.773838][ T4274] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  360.966907][ T6912] netlink: 944 bytes leftover after parsing attributes in process `syz.1.654'.
[  362.640078][ T6925] loop3: detected capacity change from 0 to 32768
[  362.732574][ T6925] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.657 (6925)
[  362.843805][ T6925] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  362.894010][ T6925] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  362.984297][ T6925] BTRFS info (device loop3): enabling disk space caching
[  363.005796][ T6925] BTRFS info (device loop3): force clearing of disk cache
[  363.031382][ T6925] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  363.081658][ T6925] BTRFS info (device loop3): use zstd compression, level 3
[  363.103937][ T6925] BTRFS info (device loop3): disk space caching is enabled
[  364.413741][ T6925] BTRFS info (device loop3): enabling ssd optimizations
[  364.477838][ T6925] BTRFS info (device loop3): rebuilding free space tree
[  364.554732][ T6925] BTRFS info (device loop3): disabling free space tree
[  364.561815][ T6925] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  364.613705][ T6925] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  365.015255][ T4270] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  368.494974][ T6984] netlink: 944 bytes leftover after parsing attributes in process `syz.3.665'.
[  368.635912][ T6989] fuse: Bad value for 'fd'
[  374.999527][ T7037] loop0: detected capacity change from 0 to 32768
[  375.022072][ T7037] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.685 (7037)
[  375.036995][ T7037] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  375.047359][ T7037] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  375.056128][ T7037] BTRFS info (device loop0): enabling disk space caching
[  375.063304][ T7037] BTRFS info (device loop0): force clearing of disk cache
[  375.070524][ T7037] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  375.080025][ T7037] BTRFS info (device loop0): use zstd compression, level 3
[  375.087333][ T7037] BTRFS info (device loop0): disk space caching is enabled
[  378.002241][ T7037] BTRFS error (device loop0): open_ctree failed: -12
[  378.067823][ T4479] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by udevd (4479)
[  378.183602][ T5693] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  378.342208][ T4726] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  378.383589][ T5693] usb 3-1: Using ep0 maxpacket: 32
[  378.475564][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  378.518510][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  378.533760][ T4726] usb 2-1: Using ep0 maxpacket: 32
[  378.544316][ T4726] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  378.552483][ T4726] usb 2-1: config 0 has no interface number 0
[  378.560601][ T5693] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  378.574005][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  378.574099][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  378.619253][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  378.625914][ T4726] usb 2-1: config 0 interface 12 has no altsetting 0
[  378.648391][ T5693] usb 3-1: Product: syz
[  378.652659][ T5693] usb 3-1: Manufacturer: syz
[  378.665390][ T4726] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  378.678987][ T5693] usb 3-1: SerialNumber: syz
[  378.693579][ T4726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.717392][ T4726] usb 2-1: Product: syz
[  378.718674][ T5693] usb 3-1: config 0 descriptor??
[  378.729659][ T4726] usb 2-1: Manufacturer: syz
[  378.744577][ T4726] usb 2-1: SerialNumber: syz
[  378.765672][ T4726] usb 2-1: config 0 descriptor??
[  379.312982][ T4276] usb 3-1: USB disconnect, device number 6
[  379.478275][ T7084] loop3: detected capacity change from 0 to 32768
[  379.527348][ T7084] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  379.558309][ T7084] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  379.583332][ T7084] BTRFS info (device loop3): enabling disk space caching
[  379.590941][ T7084] BTRFS info (device loop3): force clearing of disk cache
[  379.599265][ T7084] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  379.617659][ T7084] BTRFS info (device loop3): use zstd compression, level 3
[  379.625131][ T7084] BTRFS info (device loop3): disk space caching is enabled
[  379.849582][ T7112] binder: 7111:7112 ioctl 4018620d 0 returned -22
[  380.123174][ T4726] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  380.803948][ T7084] BTRFS info (device loop3): enabling ssd optimizations
[  380.812060][ T7084] BTRFS info (device loop3): rebuilding free space tree
[  380.903191][ T7084] BTRFS info (device loop3): disabling free space tree
[  380.931903][ T7084] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  381.043033][ T4726] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  381.043817][ T7084] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  381.051218][ T4726] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  381.069238][ T4726] f81534: probe of 2-1:0.12 failed with error -71
[  381.086596][ T4726] usb 2-1: USB disconnect, device number 11
[  381.854761][ T4270] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  381.943247][ T7133] loop2: detected capacity change from 0 to 256
[  382.044376][ T7129] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  382.103815][ T7129] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  382.111283][ T7129] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  382.127731][ T7129] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  382.144965][ T7133] FAT-fs (loop2): Directory bread(block 1285) failed
[  382.187378][ T7129] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  382.256581][ T4479] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop3 scanned by udevd (4479)
[  382.690193][ T7145] loop0: detected capacity change from 0 to 4096
[  382.773590][ T5695] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  382.840743][ T7145] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  382.877145][ T7145] ntfs3: loop0: Failed to load $Extend.
[  382.983740][ T5695] usb 5-1: Using ep0 maxpacket: 16
[  382.991378][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  383.043718][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  383.068950][ T7154] binder: 7153:7154 ioctl 4018620d 0 returned -22
[  383.070350][ T5695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  383.103631][ T4314] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  383.123939][ T5695] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  383.143385][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.166443][ T5695] usb 5-1: config 0 descriptor??
[  383.267868][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  383.278946][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  383.288068][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  383.319221][ T4314] usb 2-1: Using ep0 maxpacket: 32
[  383.341948][ T4314] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  383.367381][ T7158] device bridge_slave_0 left promiscuous mode
[  383.392612][ T4314] usb 2-1: config 0 has no interface number 0
[  383.404736][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.413747][ T4314] usb 2-1: config 0 interface 12 has no altsetting 0
[  383.439244][ T7158] device bridge_slave_1 left promiscuous mode
[  383.445749][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.462560][ T4314] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  383.475858][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.484698][ T7158] bond0: (slave bond_slave_0): Releasing backup interface
[  383.498957][ T4314] usb 2-1: Product: syz
[  383.503217][ T4314] usb 2-1: Manufacturer: syz
[  383.512085][ T4314] usb 2-1: SerialNumber: syz
[  383.529909][ T4314] usb 2-1: config 0 descriptor??
[  383.557357][ T7158] bond0: (slave bond_slave_1): Releasing backup interface
[  383.582567][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.601740][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.649079][ T5695] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  383.671988][ T5695] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max
[  383.675542][ T7158] team0: Port device team_slave_0 removed
[  383.709535][ T7158] team0: Port device team_slave_1 removed
[  383.737613][ T7158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  383.753718][ T7158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.763105][ T5695] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input7
[  383.780998][ T7158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.794058][ T7158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.843638][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout
[  383.962309][ T5695] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  384.032887][ T5695] usb 5-1: USB disconnect, device number 5
[  384.163682][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout
[  384.169822][ T4274] Bluetooth: hci2: command 0x0c1a tx timeout
[  384.176009][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout
[  384.243601][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout
[  384.581923][ T4314] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  384.657169][ T4314] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  384.761742][ T4314] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  384.889724][ T4314] f81534: probe of 2-1:0.12 failed with error -71
[  384.951191][ T4314] usb 2-1: USB disconnect, device number 12
[  385.252511][ T7166] fido_id[7166]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  385.626865][ T7164] loop2: detected capacity change from 0 to 32768
[  385.641538][ T7164] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11
[  388.660964][ T7202] binder: 7199:7202 ioctl 4018620d 0 returned -22
[  390.063376][ T7213] loop0: detected capacity change from 0 to 32768
[  390.071076][ T7213] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11
[  390.104261][ T7218] loop1: detected capacity change from 0 to 512
[  390.123941][ T7218] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  390.510159][ T7218] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  391.143751][ T4283] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  391.254621][ T4283] EXT4-fs (loop1): unmounting filesystem.
[  392.530867][ T7251] binder: BINDER_SET_CONTEXT_MGR already set
[  392.537073][ T7251] binder: 7250:7251 ioctl 4018620d 2000000002c0 returned -16
[  392.998976][ T7254] loop1: detected capacity change from 0 to 8
[  393.687465][ T7254] SQUASHFS error: zstd decompression error: 10
[  393.773389][ T7254] SQUASHFS error: zstd decompression failed, data probably corrupt
[  393.848577][ T7254] SQUASHFS error: Failed to read block 0x62b: -5
[  393.855753][ T7254] SQUASHFS error: Unable to read metadata cache entry [629]
[  393.863215][ T7254] SQUASHFS error: Unable to read directory block [629:ff26]
[  394.190453][ T7259] loop1: detected capacity change from 0 to 32768
[  394.198409][ T7259] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  395.837161][ T4479] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  397.698316][ T7296] loop1: detected capacity change from 0 to 32768
[  397.711057][ T7296] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  397.970460][ T7294] binder: BINDER_SET_CONTEXT_MGR already set
[  398.249567][ T7294] binder: 7293:7294 ioctl 4018620d 2000000002c0 returned -16
[  398.761410][ T7303] loop3: detected capacity change from 0 to 4096
[  398.771701][ T7307] loop2: detected capacity change from 0 to 512
[  398.851755][ T7303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  398.895785][ T7307] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  399.093723][ T7309] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 363: padding at end of block bitmap is not set
[  399.170620][ T7307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  399.237555][ T7307] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.767: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  399.366232][ T7307] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.767: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  399.431741][ T7307] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.767: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  399.474410][ T7307] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 14: comm syz.2.767: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  399.640324][ T4270] EXT4-fs (loop3): unmounting filesystem.
[  399.722239][ T4271] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  399.732984][ T7305] loop4: detected capacity change from 0 to 32768
[  399.765163][ T7305] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11
[  399.794525][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  401.295563][ T7092] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11
[  402.006074][ T7333] 8021q: VLANs not supported on wg2
[  403.038087][ T7336] loop2: detected capacity change from 0 to 32768
[  403.048089][ T7336] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11
[  403.417321][ T7348] ptrace attach of "./syz-executor exec"[4283] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  404.627480][ T7352] loop1: detected capacity change from 0 to 4096
[  405.043713][ T7352] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  405.388234][ T7367] ptrace attach of "./syz-executor exec"[4272] was attempted by "./syz-executor exec"[7367]
[  405.666277][ T4283] EXT4-fs (loop1): unmounting filesystem.
[  406.454950][ T7382] 8021q: VLANs not supported on wg2
[  407.729291][ T7375] loop3: detected capacity change from 0 to 32768
[  407.914604][ T7375] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  407.933578][ T7375] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  407.942704][ T7375] BTRFS info (device loop3): enabling disk space caching
[  407.961457][ T7375] BTRFS info (device loop3): force clearing of disk cache
[  407.973567][ T7375] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  408.000537][ T7375] BTRFS info (device loop3): use zstd compression, level 3
[  408.020658][ T7375] BTRFS info (device loop3): disk space caching is enabled
[  408.393690][ T7375] BTRFS info (device loop3): enabling ssd optimizations
[  408.419214][ T7375] BTRFS info (device loop3): rebuilding free space tree
[  408.895858][ T7375] BTRFS info (device loop3): disabling free space tree
[  408.999632][ T7375] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  409.187159][ T7412] loop0: detected capacity change from 0 to 32768
[  409.204116][ T7412] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.789 (7412)
[  409.244341][ T7375] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  409.333591][ T7092] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  409.549563][ T4270] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  410.804035][ T7424] loop1: detected capacity change from 0 to 16
[  410.839094][ T7424] erofs: (device loop1): mounted with root inode @ nid 36.
[  410.854123][ T7421] loop2: detected capacity change from 0 to 4096
[  410.932026][ T7421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  410.983360][ T7424] syz.1.795: attempt to access beyond end of device
[  410.983360][ T7424] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  411.303880][ T7424] syz.1.795: attempt to access beyond end of device
[  411.303880][ T7424] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  411.788771][   T26] audit: type=1800 audit(1771648202.249:18): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.795" name="file1" dev="loop1" ino=86 res=0 errno=0
[  411.934440][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  412.174895][ T7440] 8021q: VLANs not supported on wg2
[  414.234112][ T7453] loop2: detected capacity change from 0 to 32768
[  414.269843][ T7453] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.802 (7453)
[  414.295778][ T7453] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  414.306044][ T7453] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  414.314961][ T7453] BTRFS info (device loop2): enabling disk space caching
[  414.322025][ T7453] BTRFS info (device loop2): force clearing of disk cache
[  414.330043][ T7453] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  414.339553][ T7453] BTRFS info (device loop2): use zstd compression, level 3
[  414.346832][ T7453] BTRFS info (device loop2): disk space caching is enabled
[  414.648342][ T7453] BTRFS info (device loop2): enabling ssd optimizations
[  414.656500][ T7453] BTRFS info (device loop2): rebuilding free space tree
[  414.670375][ T7453] BTRFS info (device loop2): disabling free space tree
[  414.677584][ T7453] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  414.687493][ T7453] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  414.941044][   T26] audit: type=1804 audit(1771648205.399:19): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.802" name="/newroot/165/file1/bus" dev="loop2" ino=263 res=1 errno=0
[  415.673847][ T4271] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  415.693754][ T7481] ptrace attach of "./syz-executor exec"[4283] was attempted by "./syz-executor exec"[7481]
[  416.336881][ T7493] loop3: detected capacity change from 0 to 64
[  416.387184][ T7493] hfs: unable to locate alternate MDB
[  416.392621][ T7493] hfs: continuing without an alternate MDB
[  416.905154][ T7499] 8021q: VLANs not supported on wg2
[  419.888513][ T7516] loop2: detected capacity change from 0 to 32768
[  420.110089][ T7516] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.816 (7516)
[  420.138668][ T7516] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  420.149178][ T7516] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  420.157918][ T7516] BTRFS info (device loop2): enabling disk space caching
[  420.165016][ T7516] BTRFS info (device loop2): force clearing of disk cache
[  420.172632][ T7516] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  420.182069][ T7516] BTRFS info (device loop2): use zstd compression, level 3
[  420.189306][ T7516] BTRFS info (device loop2): disk space caching is enabled
[  420.850656][ T7516] BTRFS info (device loop2): enabling ssd optimizations
[  420.860552][ T7516] BTRFS info (device loop2): rebuilding free space tree
[  420.928274][ T7516] BTRFS info (device loop2): disabling free space tree
[  420.935413][ T7516] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  420.945289][ T7516] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  421.153758][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'.
[  421.467519][   T26] audit: type=1804 audit(1771648211.859:20): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.816" name="/newroot/167/file1/bus" dev="loop2" ino=263 res=1 errno=0
[  421.757247][ T4271] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  421.968152][ T7545] loop4: detected capacity change from 0 to 32768
[  421.975864][ T7545] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.820 (7545)
[  423.333716][ T7563] 8021q: VLANs not supported on wg2
[  424.204026][ T7565] ptrace attach of "./syz-executor exec"[4272] was attempted by "./syz-executor exec"[7565]
[  424.483119][ T7572] loop4: detected capacity change from 0 to 64
[  424.543667][ T7572] hfs: unable to locate alternate MDB
[  424.557580][ T7572] hfs: continuing without an alternate MDB
[  425.607797][ T7579] loop2: detected capacity change from 0 to 16
[  425.656622][ T7579] erofs: (device loop2): mounted with root inode @ nid 36.
[  425.681554][ T7579] syz.2.829: attempt to access beyond end of device
[  425.681554][ T7579] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  425.715918][ T7579] syz.2.829: attempt to access beyond end of device
[  425.715918][ T7579] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  425.761598][   T26] audit: type=1800 audit(1771648216.219:21): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.829" name="file1" dev="loop2" ino=86 res=0 errno=0
[  426.476123][ T7587] loop3: detected capacity change from 0 to 32768
[  426.504096][ T7587] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.831 (7587)
[  426.519370][ T7587] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  426.529643][ T7587] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  426.538424][ T7587] BTRFS info (device loop3): enabling disk space caching
[  426.545525][ T7587] BTRFS info (device loop3): force clearing of disk cache
[  426.552683][ T7587] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  426.562195][ T7587] BTRFS info (device loop3): use zstd compression, level 3
[  426.569664][ T7587] BTRFS info (device loop3): disk space caching is enabled
[  426.777330][ T7598] loop2: detected capacity change from 0 to 1024
[  426.999290][ T7587] BTRFS info (device loop3): enabling ssd optimizations
[  427.007968][ T7587] BTRFS info (device loop3): rebuilding free space tree
[  427.024715][ T7587] BTRFS info (device loop3): disabling free space tree
[  427.032367][ T7587] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  427.042279][ T7587] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  427.107482][ T4457] hfsplus: b-tree write err: -5, ino 4
[  427.370587][   T26] audit: type=1804 audit(1771648217.829:22): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.831" name="/newroot/163/file1/bus" dev="loop3" ino=263 res=1 errno=0
[  427.679737][ T4270] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  429.632152][ T7631] 8021q: VLANs not supported on wg2
[  430.025604][ T7633] loop2: detected capacity change from 0 to 32768
[  430.048848][ T7633] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.839 (7633)
[  430.067206][ T7633] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  430.077525][ T7633] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  430.086346][ T7633] BTRFS info (device loop2): enabling disk space caching
[  430.093392][ T7633] BTRFS info (device loop2): force clearing of disk cache
[  430.101011][ T7633] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  430.110439][ T7633] BTRFS info (device loop2): use zstd compression, level 3
[  430.117766][ T7633] BTRFS info (device loop2): disk space caching is enabled
[  430.245811][ T7633] BTRFS info (device loop2): enabling ssd optimizations
[  430.255535][ T7633] BTRFS info (device loop2): rebuilding free space tree
[  430.278078][ T7633] BTRFS info (device loop2): disabling free space tree
[  430.285190][ T7633] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  430.294915][ T7633] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  430.466180][   T26] audit: type=1804 audit(1771648220.919:23): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.839" name="/newroot/173/file1/bus" dev="loop2" ino=263 res=1 errno=0
[  430.655098][ T4271] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  430.933606][ T7092] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop2 scanned by udevd (7092)
[  432.272419][ T7666] ptrace attach of "./syz-executor exec"[4273] was attempted by "./syz-executor exec"[7666]
[  432.781619][ T7669] loop1: detected capacity change from 0 to 32768
[  432.794019][ T7669] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12
[  433.010844][ T7672] loop4: detected capacity change from 0 to 64
[  433.123591][ T7672] hfs: unable to locate alternate MDB
[  433.149492][ T7672] hfs: continuing without an alternate MDB
[  433.430398][ T7675] loop3: detected capacity change from 0 to 32768
[  433.447894][ T7675] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  433.745646][ T4388] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  434.021759][ T7683] loop1: detected capacity change from 0 to 2048
[  434.034717][ T4479] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  434.240515][ T7683] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  434.322142][ T7689] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  435.230856][ T7698] overlayfs: failed to resolve './file0': -2
[  436.089894][ T7701] loop1: detected capacity change from 0 to 2048
[  436.175827][ T7701] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003]
[  436.187976][ T7701] System zones: 0-7
[  436.218859][ T7701] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  436.251512][ T7701] EXT4-fs error (device loop1): ext4_ext_precache:627: inode #2: comm syz.1.853: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  436.339061][ T7709] loop2: detected capacity change from 0 to 1024
[  436.377935][ T7701] EXT4-fs (loop1): Remounting filesystem read-only
[  436.494098][ T4283] EXT4-fs (loop1): unmounting filesystem.
[  436.519889][ T4976] hfsplus: b-tree write err: -5, ino 4
[  437.066831][ T7718] 8021q: VLANs not supported on wg2
[  437.351012][ T7723] loop4: detected capacity change from 0 to 64
[  437.406874][ T7723] hfs: unable to locate alternate MDB
[  437.443059][ T7723] hfs: continuing without an alternate MDB
[  437.765910][ T7726] ptrace attach of "./syz-executor exec"[4283] was attempted by "./syz-executor exec"[7726]
[  438.472485][ T7716] loop0: detected capacity change from 0 to 32768
[  438.852355][ T7716] JBD2: Ignoring recovery information on journal
[  439.516816][ T7716] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  439.937701][ T4272] ocfs2: Unmounting device (7,0) on (node local)
[  440.007038][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  440.013628][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  440.391850][ T4274] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  440.613551][ T7742] overlayfs: failed to resolve './file0': -2
[  441.511691][ T7744] loop2: detected capacity change from 0 to 32768
[  441.594025][ T7744] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  441.604307][ T7744] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  441.613057][ T7744] BTRFS info (device loop2): enabling disk space caching
[  441.620164][ T7744] BTRFS info (device loop2): force clearing of disk cache
[  441.627381][ T7744] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  441.636817][ T7744] BTRFS info (device loop2): use zstd compression, level 3
[  441.644139][ T7744] BTRFS info (device loop2): disk space caching is enabled
[  441.744996][ T7748] loop0: detected capacity change from 0 to 2048
[  441.892675][ T7748] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003]
[  441.921213][ T7748] System zones: 0-7
[  441.947858][ T7748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  442.163799][ T7744] BTRFS info (device loop2): enabling ssd optimizations
[  442.171721][ T7744] BTRFS info (device loop2): rebuilding free space tree
[  442.185048][ T7744] BTRFS info (device loop2): disabling free space tree
[  442.192072][ T7744] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  442.201976][ T7744] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  442.370315][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  442.383352][   T26] audit: type=1804 audit(1771648232.839:24): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.866" name="/newroot/178/file1/bus" dev="loop2" ino=263 res=1 errno=0
[  442.541442][ T7778] loop3: detected capacity change from 0 to 64
[  442.597370][ T7778] hfs: unable to locate alternate MDB
[  442.604587][ T4271] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  442.623620][ T7778] hfs: continuing without an alternate MDB
[  442.690505][ T7780] loop0: detected capacity change from 0 to 1024
[  443.824134][   T11] hfsplus: b-tree write err: -5, ino 4
[  444.248958][ T7791] ptrace attach of "./syz-executor exec"[4270] was attempted by "./syz-executor exec"[7791]
[  444.994456][ T4479] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop2 scanned by udevd (4479)
[  445.612751][ T7800] overlayfs: failed to resolve './file0': -2
[  446.704797][ T7809] 8021q: VLANs not supported on wg2
[  446.862823][ T7814] ptrace attach of "./syz-executor exec"[4270] was attempted by "./syz-executor exec"[7814]
[  448.701322][ T7823] loop4: detected capacity change from 0 to 32768
[  448.733783][ T7823] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  448.986798][ T7825] loop2: detected capacity change from 0 to 64
[  449.018251][ T7825] hfs: unable to locate alternate MDB
[  449.057590][ T7825] hfs: continuing without an alternate MDB
[  449.091914][ T4479] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  449.134505][ T7828] loop0: detected capacity change from 0 to 1024
[  450.263197][ T7836] loop2: detected capacity change from 0 to 64
[  450.357109][ T7838] ptrace attach of "./syz-executor exec"[4270] was attempted by ""[7838]
[  450.679823][ T7836] hfs: unable to locate alternate MDB
[  451.066996][    T9] hfsplus: b-tree write err: -5, ino 4
[  451.117866][ T7836] hfs: continuing without an alternate MDB
[  451.896767][ T7846] overlayfs: failed to resolve './file0': -2
[  452.894953][ T7840] loop4: detected capacity change from 0 to 16
[  453.092490][ T7840] erofs: (device loop4): mounted with root inode @ nid 36.
[  453.363880][ T6085] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  453.603705][ T6085] usb 1-1: device descriptor read/64, error -71
[  453.862948][ T7840] syz.4.884: attempt to access beyond end of device
[  453.862948][ T7840] loop4: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  453.903673][ T6085] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  453.992353][ T7840] syz.4.884: attempt to access beyond end of device
[  453.992353][ T7840] loop4: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  454.073795][ T6085] usb 1-1: device descriptor read/64, error -71
[  454.139669][ T7866] trusted_key: encrypted_key: insufficient parameters specified
[  454.194537][ T6085] usb usb1-port1: attempt power cycle
[  454.200394][   T26] audit: type=1800 audit(1771648244.649:25): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.884" name="file1" dev="loop4" ino=86 res=0 errno=0
[  454.623548][ T6085] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  454.666717][ T6085] usb 1-1: device descriptor read/8, error -71
[  454.943593][ T6085] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  455.016414][ T6085] usb 1-1: device descriptor read/8, error -71
[  455.144135][ T6085] usb usb1-port1: unable to enumerate USB device
[  455.833545][ T6085] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  455.991040][ T7881] 8021q: VLANs not supported on wg2
[  456.046343][ T6085] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  456.254269][ T7879] ptrace attach of "./syz-executor exec"[4283] was attempted by "./syz-executor exec"[7879]
[  456.296251][ T6085] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  456.359079][ T6085] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  456.403745][ T6085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.413793][ T6085] usb 1-1: Product: syz
[  456.422042][ T6085] usb 1-1: Manufacturer: syz
[  456.432165][ T6085] usb 1-1: SerialNumber: syz
[  456.460121][ T6085] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  456.506126][ T6085] cdc_ncm 1-1:1.0: bind() failure
[  456.535054][ T6085] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  456.541901][ T6085] cdc_ncm 1-1:1.1: bind() failure
[  456.654442][ T7885] loop4: detected capacity change from 0 to 64
[  456.712376][ T6085] usb 1-1: USB disconnect, device number 12
[  456.949144][ T7887] loop3: detected capacity change from 0 to 32768
[  456.972480][ T7887] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.898 (7887)
[  457.056802][ T7885] hfs: unable to locate alternate MDB
[  457.062240][ T7885] hfs: continuing without an alternate MDB
[  457.089367][ T7887] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  457.099621][ T7887] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  457.108335][ T7887] BTRFS info (device loop3): using free space tree
[  457.151493][ T7890] loop2: detected capacity change from 0 to 64
[  457.308433][ T7890] hfs: unable to locate alternate MDB
[  457.317663][ T7890] hfs: continuing without an alternate MDB
[  459.402272][ T7919] loop2: detected capacity change from 0 to 16
[  459.417873][ T7919] erofs: (device loop2): mounted with root inode @ nid 36.
[  459.571288][ T7887] BTRFS info (device loop3): enabling ssd optimizations
[  459.687927][ T7925] overlayfs: failed to resolve './file0': -2
[  460.785760][ T7919] syz.2.902: attempt to access beyond end of device
[  460.785760][ T7919] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  460.800456][ T7919] syz.2.902: attempt to access beyond end of device
[  460.800456][ T7919] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  460.823686][   T26] audit: type=1800 audit(1771648251.289:26): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.902" name="file1" dev="loop2" ino=86 res=0 errno=0
[  460.963940][ T4270] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  460.983555][ T4727] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  461.259471][ T4727] usb 1-1: device descriptor read/64, error -71
[  461.553585][ T4727] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  461.833594][ T4727] usb 1-1: device descriptor read/64, error -71
[  461.955903][ T4727] usb usb1-port1: attempt power cycle
[  462.346474][ T7945] loop1: detected capacity change from 0 to 64
[  462.363659][ T4727] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  462.406251][ T7945] hfs: unable to locate alternate MDB
[  462.411693][ T7945] hfs: continuing without an alternate MDB
[  462.426067][ T4727] usb 1-1: device descriptor read/8, error -71
[  463.542092][ T7954] loop1: detected capacity change from 0 to 64
[  463.591523][ T7954] hfs: unable to locate alternate MDB
[  463.623364][ T7954] hfs: continuing without an alternate MDB
[  466.318373][ T7970] overlayfs: failed to resolve './file1': -2
[  467.175627][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'.
[  467.571528][ T7977] loop1: detected capacity change from 0 to 16
[  467.638438][ T7977] erofs: (device loop1): mounted with root inode @ nid 36.
[  467.732775][ T7977] syz.1.918: attempt to access beyond end of device
[  467.732775][ T7977] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  467.848987][ T7977] syz.1.918: attempt to access beyond end of device
[  467.848987][ T7977] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  468.617666][   T26] audit: type=1800 audit(1771648259.069:27): pid=7977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.918" name="file1" dev="loop1" ino=86 res=0 errno=0
[  469.478434][ T7992] loop0: detected capacity change from 0 to 64
[  469.505397][ T7991] loop1: detected capacity change from 0 to 64
[  469.540213][ T7991] hfs: unable to locate alternate MDB
[  469.557905][ T7991] hfs: continuing without an alternate MDB
[  469.566467][ T7992] hfs: unable to locate alternate MDB
[  469.578634][ T7992] hfs: continuing without an alternate MDB
[  469.663535][  T952] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  470.510424][ T7995] loop4: detected capacity change from 0 to 128
[  470.643854][ T7995] FAT-fs (loop4): bogus number of reserved sectors
[  470.673634][  T952] usb 4-1: device descriptor read/64, error -71
[  470.730421][ T7995] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  470.838553][ T7995] FAT-fs (loop4): Can't find a valid FAT filesystem
[  471.168401][ T8009] overlayfs: failed to resolve './file1': -2
[  471.553608][  T952] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  472.033699][  T952] usb 4-1: device descriptor read/64, error -71
[  472.153663][ T4274] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3
[  472.213132][  T952] usb usb4-port1: attempt power cycle
[  473.191554][ T8026] loop0: detected capacity change from 0 to 16
[  473.220179][ T8031] loop4: detected capacity change from 0 to 16
[  473.233720][ T8017] 8021q: VLANs not supported on wg2
[  473.246931][ T8026] erofs: (device loop0): mounted with root inode @ nid 36.
[  473.275320][ T8031] erofs: (device loop4): mounted with root inode @ nid 36.
[  473.313412][ T8031] syz.4.933: attempt to access beyond end of device
[  473.313412][ T8031] loop4: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  473.385109][ T8031] syz.4.933: attempt to access beyond end of device
[  473.385109][ T8031] loop4: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  473.469320][   T26] audit: type=1800 audit(1771648263.929:28): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.933" name="file1" dev="loop4" ino=86 res=0 errno=0
[  473.525890][ T4286] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  473.648259][ T8026] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096]
[  475.239121][ T8039] loop4: detected capacity change from 0 to 64
[  475.263009][ T8039] hfs: unable to locate alternate MDB
[  475.269085][ T8039] hfs: continuing without an alternate MDB
[  475.392008][ T8041] loop3: detected capacity change from 0 to 64
[  475.492290][ T8041] hfs: unable to locate alternate MDB
[  475.536266][ T8041] hfs: continuing without an alternate MDB
[  477.926941][ T8063] loop4: detected capacity change from 0 to 128
[  478.192876][ T8063] FAT-fs (loop4): bogus number of reserved sectors
[  478.423552][ T8063] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  478.478103][ T8063] FAT-fs (loop4): Can't find a valid FAT filesystem
[  478.706479][ T4286] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3
[  478.783403][ T8067] loop3: detected capacity change from 0 to 2048
[  478.854454][ T8054] loop2: detected capacity change from 0 to 32768
[  478.867846][ T8067] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003]
[  479.073998][ T8067] System zones: 0-7
[  479.206137][ T8067] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  479.321753][ T8054] XFS (loop2): Mounting V5 Filesystem
[  479.739168][ T8054] XFS (loop2): AIL initialisation failed: error -12
[  479.928091][ T8054] XFS (loop2): log mount failed
[  480.287017][ T4270] EXT4-fs (loop3): unmounting filesystem.
[  480.314765][ T8092] loop4: detected capacity change from 0 to 64
[  480.322662][ T8092] hfs: unable to locate alternate MDB
[  480.333832][ T8092] hfs: continuing without an alternate MDB
[  483.061319][ T8116] loop2: detected capacity change from 0 to 64
[  483.094678][ T8116] hfs: unable to locate alternate MDB
[  483.102543][ T8116] hfs: continuing without an alternate MDB
[  483.114507][ T8115] device syzkaller0 entered promiscuous mode
[  485.472349][ T8127] loop1: detected capacity change from 0 to 128
[  485.563736][ T8127] FAT-fs (loop1): bogus number of reserved sectors
[  485.587888][ T8127] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  485.624826][ T8129] loop2: detected capacity change from 0 to 2048
[  485.636917][ T8127] FAT-fs (loop1): Can't find a valid FAT filesystem
[  485.690707][ T8129] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003]
[  485.721249][ T8129] System zones: 0-7
[  485.756979][ T4274] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  485.867622][ T8129] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  486.357362][ T8142] loop1: detected capacity change from 0 to 64
[  486.381721][ T8142] hfs: unable to locate alternate MDB
[  486.725408][ T8142] hfs: continuing without an alternate MDB
[  486.915269][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  488.033214][ T8153] loop4: detected capacity change from 0 to 64
[  488.065643][ T8153] hfs: unable to locate alternate MDB
[  488.071425][ T8153] hfs: continuing without an alternate MDB
[  489.753024][ T8178] loop2: detected capacity change from 0 to 128
[  489.955175][ T8178] FAT-fs (loop2): bogus number of reserved sectors
[  490.026357][ T8178] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  490.078710][ T8178] FAT-fs (loop2): Can't find a valid FAT filesystem
[  490.174295][ T4286] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3
[  490.871679][ T8186] loop2: detected capacity change from 0 to 2048
[  490.978926][ T8186] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003]
[  490.991692][ T8186] System zones: 0-7
[  491.005094][ T8190] 8021q: VLANs not supported on wg2
[  491.023100][ T8186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  491.186451][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  492.503636][ T8201] loop2: detected capacity change from 0 to 64
[  492.566313][ T8201] hfs: unable to locate alternate MDB
[  492.580136][ T8201] hfs: continuing without an alternate MDB
[  494.767879][ T8218] loop4: detected capacity change from 0 to 64
[  494.919690][ T8218] hfs: unable to locate alternate MDB
[  494.948651][ T8218] hfs: continuing without an alternate MDB
[  495.229011][ T8224] loop1: detected capacity change from 0 to 128
[  495.701937][ T8224] FAT-fs (loop1): bogus number of reserved sectors
[  495.724517][ T8224] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  495.736588][ T8224] FAT-fs (loop1): Can't find a valid FAT filesystem
[  495.869360][ T4286] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  496.667072][ T8233] loop4: detected capacity change from 0 to 2048
[  496.889323][ T8233] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c128, mo2=0003]
[  496.914134][ T8233] System zones: 0-7
[  496.970758][ T8233] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  497.240085][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  497.317788][ T8245] loop3: detected capacity change from 0 to 64
[  497.389054][ T8245] hfs: unable to locate alternate MDB
[  497.419523][ T8245] hfs: continuing without an alternate MDB
[  498.802835][ T8265] 8021q: VLANs not supported on wg2
[  498.896548][ T8266] loop3: detected capacity change from 0 to 164
[  500.762832][ T8275] loop3: detected capacity change from 0 to 64
[  500.795453][ T8275] hfs: unable to locate alternate MDB
[  500.800989][ T8275] hfs: continuing without an alternate MDB
[  501.776878][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  501.791289][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  502.361792][ T8279] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  505.687307][ T8322] loop3: detected capacity change from 0 to 64
[  505.726622][ T8323] loop1: detected capacity change from 0 to 64
[  505.807979][ T8323] hfs: unable to locate alternate MDB
[  505.842232][ T8323] hfs: continuing without an alternate MDB
[  509.458010][ T8354] loop1: detected capacity change from 0 to 256
[  509.853919][ T8354] FAT-fs (loop1): Directory bread(block 1285) failed
[  510.640313][ T8369] loop3: detected capacity change from 0 to 64
[  510.699524][ T8369] hfs: unable to locate alternate MDB
[  510.705447][ T8369] hfs: continuing without an alternate MDB
[  512.308097][ T8383] loop3: detected capacity change from 0 to 65536
[  512.397437][ T8383] XFS (loop3): Mounting V5 Filesystem
[  513.523074][ T8383] XFS (loop3): Ending clean mount
[  513.870610][ T4270] XFS (loop3): Unmounting Filesystem
[  515.722772][ T8423] loop1: detected capacity change from 0 to 64
[  515.747537][ T8421] loop3: detected capacity change from 0 to 764
[  515.804919][ T8423] hfs: unable to locate alternate MDB
[  515.819795][ T8423] hfs: continuing without an alternate MDB
[  517.249102][ T8439] loop2: detected capacity change from 0 to 64
[  517.451108][ T8439] hfs: unable to locate alternate MDB
[  517.473687][ T8439] hfs: continuing without an alternate MDB
[  518.335261][ T8447] loop4: detected capacity change from 0 to 64
[  518.511127][ T8450] loop3: detected capacity change from 0 to 1024
[  518.519620][ T8450] EXT4-fs: inline encryption not supported
[  518.531232][ T8450] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  519.173039][ T8450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  519.359166][ T8446] syz.4.1044: attempt to access beyond end of device
[  519.359166][ T8446] loop4: rw=0, sector=2590, nr_sectors = 2 limit=64
[  519.373318][ T8446] Buffer I/O error on dev loop4, logical block 1295, async page read
[  519.396186][ T8446] syz.4.1044: attempt to access beyond end of device
[  519.396186][ T8446] loop4: rw=0, sector=2590, nr_sectors = 2 limit=64
[  519.409464][ T8446] Buffer I/O error on dev loop4, logical block 1295, async page read
[  519.418301][   T26] audit: type=1800 audit(1771648309.879:29): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1044" name="file2" dev="loop4" ino=6 res=0 errno=0
[  520.183484][   T26] audit: type=1800 audit(1771648310.549:30): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1046" name="file1" dev="loop3" ino=15 res=0 errno=0
[  520.465845][ T8468] loop1: detected capacity change from 0 to 64
[  520.556686][ T8468] hfs: unable to locate alternate MDB
[  520.562128][ T8468] hfs: continuing without an alternate MDB
[  521.248290][ T6089] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  521.391538][ T4270] EXT4-fs (loop3): unmounting filesystem.
[  521.497967][ T6089] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[  521.513563][ T6089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.546036][ T6089] usb 3-1: Product: syz
[  521.550273][ T6089] usb 3-1: Manufacturer: syz
[  521.563693][ T6089] usb 3-1: SerialNumber: syz
[  521.598706][ T6089] usb 3-1: config 0 descriptor??
[  521.655455][ T6089] comedi comedi5: This driver needs USB 2.0 to operate. Aborting...
[  521.689570][ T6089] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  521.839461][ T6089] usb 3-1: USB disconnect, device number 7
[  522.550887][ T8491] ptrace attach of "./syz-executor exec"[4270] was attempted by "./syz-executor exec"[8491]
[  524.949589][ T8507] loop3: detected capacity change from 0 to 64
[  525.046783][ T8509] loop2: detected capacity change from 0 to 1024
[  525.067882][ T8507] hfs: unable to locate alternate MDB
[  525.073321][ T8507] hfs: continuing without an alternate MDB
[  525.107580][ T8509] EXT4-fs: inline encryption not supported
[  525.195227][ T8509] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  525.617553][ T8509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  526.128826][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  527.434026][ T8540] ptrace attach of "./syz-executor exec"[4272] was attempted by "./syz-executor exec"[8540]
[  528.331966][ T8546] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  528.543198][ T8546] overlayfs: failed to look up (tracing) for ino (-66)
[  530.093713][ T6089] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  530.831419][ T6089] usb 3-1: device descriptor read/64, error -71
[  531.183648][ T6089] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  531.363947][ T6089] usb 3-1: device descriptor read/64, error -71
[  531.760822][ T6089] usb usb3-port1: attempt power cycle
[  532.081740][ T8586] ptrace attach of "./syz-executor exec"[4270] was attempted by "./syz-executor exec"[8586]
[  532.193564][ T6089] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  532.265168][ T6089] usb 3-1: device descriptor read/8, error -71
[  532.554163][ T6089] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  532.611375][ T6089] usb 3-1: device descriptor read/8, error -71
[  532.915798][ T6089] usb usb3-port1: unable to enumerate USB device
[  533.353246][ T8602] loop4: detected capacity change from 0 to 64
[  533.389439][ T8602] hfs: unable to locate alternate MDB
[  533.403561][ T8602] hfs: continuing without an alternate MDB
[  536.281454][ T8627] loop2: detected capacity change from 0 to 512
[  536.288952][ T8627] EXT4-fs: Ignoring removed mblk_io_submit option
[  536.311124][ T8627] EXT4-fs: journaled quota format not specified
[  537.051754][ T8633] loop2: detected capacity change from 0 to 65536
[  537.155445][ T8633] XFS (loop2): Mounting V5 Filesystem
[  537.206958][ T8633] XFS (loop2): Ending clean mount
[  537.357941][ T4271] XFS (loop2): Unmounting Filesystem
[  540.434843][ T8670] loop4: detected capacity change from 0 to 512
[  540.441749][ T8670] EXT4-fs: Ignoring removed mblk_io_submit option
[  540.448858][ T8670] EXT4-fs: journaled quota format not specified
[  540.600626][ T4479] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  540.643831][ T4648] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  541.012404][ T8676] loop1: detected capacity change from 0 to 65536
[  541.056834][ T8679] loop0: detected capacity change from 0 to 64
[  541.121172][ T8679] hfs: unable to locate alternate MDB
[  541.169013][ T8676] XFS (loop1): Mounting V5 Filesystem
[  541.189843][ T8679] hfs: continuing without an alternate MDB
[  541.205579][ T4648] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  541.221533][ T4648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  541.232675][ T4648] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.242550][ T4648] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  541.259371][ T4648] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  541.268600][ T4648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.292123][ T4648] usb 3-1: config 0 descriptor??
[  541.399085][ T8676] XFS (loop1): Ending clean mount
[  541.489452][ T4283] XFS (loop1): Unmounting Filesystem
[  541.718643][ T4648] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0
[  541.748837][ T4648] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0
[  541.781242][ T4648] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0
[  541.802977][ T4648] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0
[  541.824896][ T4648] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0
[  541.865410][ T4648] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0
[  541.881631][ T4648] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised
[  541.889914][ T4648] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN
[  541.901675][ T4648] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af]
[  541.910117][ T4648] CPU: 0 PID: 4648 Comm: kworker/0:8 Not tainted syzkaller #0
[  541.917613][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  541.927876][ T4648] Workqueue: usb_hub_wq hub_event
[  541.932952][ T4648] RIP: 0010:u2fzero_rng_read+0x295/0x740
[  541.938626][ T4648] Code: 80 3c 28 00 49 89 c5 74 08 4c 89 ff e8 c4 3c 1a fa bb a8 00 00 00 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 1d 3d 1a fa 48 8d 44 24 60 48 89 03
[  541.958273][ T4648] RSP: 0018:ffffc9000527e7e0 EFLAGS: 00010202
[  541.964386][ T4648] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000
[  541.972393][ T4648] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888027d12f69
[  541.980396][ T4648] RBP: ffffc9000527e970 R08: 0000000000000000 R09: ffff888027d12f2e
[  541.988401][ T4648] R10: dffffc0000000000 R11: ffffed1004fa25ed R12: 1ffff92000a4fd04
[  541.996401][ T4648] R13: 1ffff1100eec1c06 R14: 1ffff1100eec1c7c R15: ffff88807760e030
[  542.004494][ T4648] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  542.013544][ T4648] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  542.020164][ T4648] CR2: 00007fe8ae14da08 CR3: 000000005b025000 CR4: 00000000003506f0
[  542.028172][ T4648] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  542.036182][ T4648] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  542.044205][ T4648] Call Trace:
[  542.047510][ T4648]  <TASK>
[  542.050560][ T4648]  ? u2fzero_brightness_set+0x2c0/0x2c0
[  542.056153][ T4648]  ? mutex_lock_nested+0x10/0x10
[  542.061149][ T4648]  ? u2fzero_brightness_set+0x2c0/0x2c0
[  542.066729][ T4648]  add_early_randomness+0x7a/0x150
[  542.071899][ T4648]  hwrng_register+0x398/0x440
[  542.076634][ T4648]  devm_hwrng_register+0x43/0xb0
[  542.081713][ T4648]  u2fzero_probe+0x355/0x470
[  542.086346][ T4648]  ? hid_map_usage_clear+0x1d0/0x1d0
[  542.091653][ T4648]  hid_device_probe+0x25c/0x350
[  542.096514][ T4648]  ? hid_uevent+0x340/0x340
[  542.101033][ T4648]  really_probe+0x2aa/0xc70
[  542.105545][ T4648]  ? pm_runtime_barrier+0x147/0x1c0
[  542.110752][ T4648]  __driver_probe_device+0x18c/0x330
[  542.116055][ T4648]  driver_probe_device+0x4f/0x420
[  542.121121][ T4648]  __device_attach_driver+0x2c6/0x510
[  542.126528][ T4648]  ? coredump_store+0x90/0x90
[  542.131216][ T4648]  bus_for_each_drv+0x184/0x210
[  542.136094][ T4648]  ? coredump_store+0x90/0x90
[  542.140780][ T4648]  ? subsys_find_device_by_id+0x360/0x360
[  542.146502][ T4648]  __device_attach+0x2a8/0x480
[  542.151275][ T4648]  ? device_attach+0x20/0x20
[  542.155911][ T4648]  ? kobject_uevent_env+0x35f/0x8a0
[  542.161209][ T4648]  bus_probe_device+0xbc/0x1e0
[  542.165977][ T4648]  ? device_add+0x97c/0xfb0
[  542.170488][ T4648]  device_add+0xa00/0xfb0
[  542.174832][ T4648]  hid_add_device+0x389/0x530
[  542.179523][ T4648]  usbhid_probe+0xc09/0xfe0
[  542.184045][ T4648]  usb_probe_interface+0x5c5/0xb20
[  542.189157][ T4648]  ? usb_register_driver+0x3d0/0x3d0
[  542.194450][ T4648]  really_probe+0x2aa/0xc70
[  542.198994][ T4648]  ? pm_runtime_barrier+0x147/0x1c0
[  542.204209][ T4648]  __driver_probe_device+0x18c/0x330
[  542.209503][ T4648]  driver_probe_device+0x4f/0x420
[  542.214545][ T4648]  __device_attach_driver+0x2c6/0x510
[  542.219929][ T4648]  ? coredump_store+0x90/0x90
[  542.224619][ T4648]  bus_for_each_drv+0x184/0x210
[  542.229484][ T4648]  ? coredump_store+0x90/0x90
[  542.234170][ T4648]  ? subsys_find_device_by_id+0x360/0x360
[  542.239899][ T4648]  __device_attach+0x2a8/0x480
[  542.244675][ T4648]  ? device_attach+0x20/0x20
[  542.249275][ T4648]  ? kobject_uevent_env+0x35f/0x8a0
[  542.254475][ T4648]  bus_probe_device+0xbc/0x1e0
[  542.259244][ T4648]  ? device_add+0x97c/0xfb0
[  542.263807][ T4648]  device_add+0xa00/0xfb0
[  542.268173][ T4648]  usb_set_configuration+0x1991/0x1fd0
[  542.273653][ T4648]  usb_generic_driver_probe+0x89/0x150
[  542.279114][ T4648]  usb_probe_device+0x139/0x270
[  542.283970][ T4648]  ? usb_register_device_driver+0x230/0x230
[  542.289890][ T4648]  really_probe+0x2aa/0xc70
[  542.294410][ T4648]  ? pm_runtime_barrier+0x147/0x1c0
[  542.299635][ T4648]  __driver_probe_device+0x18c/0x330
[  542.304944][ T4648]  driver_probe_device+0x4f/0x420
[  542.309999][ T4648]  __device_attach_driver+0x2c6/0x510
[  542.315390][ T4648]  ? coredump_store+0x90/0x90
[  542.320071][ T4648]  bus_for_each_drv+0x184/0x210
[  542.324925][ T4648]  ? coredump_store+0x90/0x90
[  542.329698][ T4648]  ? subsys_find_device_by_id+0x360/0x360
[  542.335520][ T4648]  __device_attach+0x2a8/0x480
[  542.340320][ T4648]  ? device_attach+0x20/0x20
[  542.344937][ T4648]  ? __kmem_cache_free+0xb6/0x1f0
[  542.349991][ T4648]  ? kobject_uevent_env+0x35f/0x8a0
[  542.355222][ T4648]  bus_probe_device+0xbc/0x1e0
[  542.360029][ T4648]  ? device_add+0x97c/0xfb0
[  542.364583][ T4648]  device_add+0xa00/0xfb0
[  542.368991][ T4648]  usb_new_device+0xd66/0x1650
[  542.373814][ T4648]  ? lock_chain_count+0x20/0x20
[  542.378724][ T4648]  ? usb_disconnect+0x8a0/0x8a0
[  542.383646][ T4648]  ? _raw_spin_unlock_irq+0x1f/0x40
[  542.388878][ T4648]  ? lockdep_hardirqs_on+0x94/0x140
[  542.394098][ T4648]  hub_event+0x2dcf/0x5560
[  542.398588][ T4648]  ? hub_post_resume+0x120/0x120
[  542.403575][ T4648]  ? read_lock_is_recursive+0x10/0x10
[  542.409035][ T4648]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  542.414955][ T4648]  ? _raw_spin_unlock+0x40/0x40
[  542.419837][ T4648]  ? _raw_spin_unlock_irq+0x1f/0x40
[  542.425067][ T4648]  ? process_one_work+0x7b0/0x1160
[  542.430220][ T4648]  process_one_work+0x8a2/0x1160
[  542.435206][ T4648]  ? worker_detach_from_pool+0x240/0x240
[  542.440892][ T4648]  ? _raw_spin_lock_irq+0xb7/0xf0
[  542.445942][ T4648]  ? _raw_spin_lock_irqsave+0x100/0x100
[  542.451525][ T4648]  ? kthread_data+0x4b/0xc0
[  542.456097][ T4648]  worker_thread+0xaa2/0x1270
[  542.460829][ T4648]  ? __kthread_parkme+0x162/0x1c0
[  542.465912][ T4648]  kthread+0x29d/0x330
[  542.470011][ T4648]  ? worker_clr_flags+0x1a0/0x1a0
[  542.475079][ T4648]  ? kthread_blkcg+0xd0/0xd0
[  542.479700][ T4648]  ret_from_fork+0x1f/0x30
[  542.484182][ T4648]  </TASK>
[  542.487215][ T4648] Modules linked in:
[  542.527548][ T4648] ---[ end trace 0000000000000000 ]---
[  542.533252][ T4648] RIP: 0010:u2fzero_rng_read+0x295/0x740
[  542.545309][ T4648] Code: 80 3c 28 00 49 89 c5 74 08 4c 89 ff e8 c4 3c 1a fa bb a8 00 00 00 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 1d 3d 1a fa 48 8d 44 24 60 48 89 03
[  542.567829][ T4648] RSP: 0018:ffffc9000527e7e0 EFLAGS: 00010202
[  542.574085][ T4648] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000
[  542.582178][ T4648] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888027d12f69
[  542.592120][ T4648] RBP: ffffc9000527e970 R08: 0000000000000000 R09: ffff888027d12f2e
[  542.600294][ T4648] R10: dffffc0000000000 R11: ffffed1004fa25ed R12: 1ffff92000a4fd04
[  542.610257][ T4648] R13: 1ffff1100eec1c06 R14: 1ffff1100eec1c7c R15: ffff88807760e030
[  543.019741][ T4648] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  543.029117][ T4648] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  543.035934][ T4648] CR2: 00007fe8ad5e6158 CR3: 000000005bb85000 CR4: 00000000003506f0
[  543.044932][ T4648] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  543.057778][ T4648] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  543.071406][ T4648] Kernel panic - not syncing: Fatal exception
[  543.078075][ T4648] Kernel Offset: disabled
[  543.082410][ T4648] Rebooting in 86400 seconds..