last executing test programs:

8m36.871582919s ago: executing program 2 (id=3):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='-', 0x1)

8m36.726493312s ago: executing program 2 (id=6):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000900)='./bus\x00', 0x21081e, &(0x7f0000000940)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000980)="$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")
open(&(0x7f0000000e80)='./bus\x00', 0x14927e, 0x9)
r0 = open(&(0x7f0000000ec0)='./file2\x00', 0x181042, 0x124)
write$P9_RREADDIR(r0, &(0x7f0000000f00)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000f40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000f80)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000fc0)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})
rename(&(0x7f0000000780)='./file2\x00', &(0x7f00000007c0)='./file1\x00')
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

8m33.379440224s ago: executing program 2 (id=12):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$vim2m(0x0, 0x5, 0x2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x24008000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/214, 0x100000, 0x1000, 0x9}, 0x20)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840)

8m29.79362629s ago: executing program 2 (id=18):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/185, &(0x7f0000000440)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000540)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000580)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=""/4092, 0x8000000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002d80)=0x1)

8m29.295831172s ago: executing program 32 (id=18):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/185, &(0x7f0000000440)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000540)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000580)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=""/4092, 0x8000000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002d80)=0x1)

36.155188587s ago: executing program 0 (id=1247):
unshare(0x38000900)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x200000c0, 0xffffffff, 0xfffffffc}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001a000100ef627000000000000220"], 0x2c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8)
r1 = getpid()
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000780), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000800)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendto$inet(r4, &(0x7f0000000880), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000900)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r4, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f00000005c0)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

35.024809005s ago: executing program 0 (id=1250):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet(0x2, 0x3, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1000040, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0xee00, @ANYRES64, @ANYRESOCT, @ANYRES16, @ANYBLOB="2efa45d07f38b38f65c3302f160096b93e33bc2a39e75ce2bf5e7ceeda077daed08c407db98b8f9363b0808034743b787774eea61eecd30de8ebd8e6b9fbec2cd2d3771434ab686ac196100673d68102a8f2df971bfd99da8b44007a2b1d022dd8d381aff46d72eb53d169ec810ac95ba6cada7eff252fa4be6d3cbd2a0c9ee16a7d4c5af1940e8b5b207d1f227e8ef61021c7380344d113614afdf3657ab8284ccca68a2ac11d056ad98b63d8df8880253e38f31908cfe4809f8bf65e5623ff8f3f6202d2369daa1c9bbfdfd212ae354f39c2423a2c0865f74a4ce086da4d9918f2e185"], 0x1, 0x206, &(0x7f0000000480)="$eJzs3cFqE0EYAOA/MW0S8dCbIAgrHvRU1CeoSAUxIFRyUPAg2JM5pZfUS/oYgk/ge/kA0lMuMhJ3k03SsNZCNrV83yX/zj+TmdllN7nkT4rcj7tfo9NpRPMgDmLSiL1oxsxZAAA3ySSl+Jlys7YP37a7JgBgs9Z9/q/4VfOSAIANe/vu/evnvd7hUZZ1Is7PRv1RP3/N8y9f9Q6fZH/slaPOR6P+rXn+abb63WGa34nbRf5ZPj6bp3cjor8bjx/m+WnuxZtetjy+HZ82vHcAAAAAAAAAAAAAAAAAAAAAANiW+5HNrK3vs7+/mu8W+fxooT7QSv2eVtxrFYdleaA0rmNTAAAAAAAAAAAAAAAAAAAA8J85Of3y+eNgcDwsg3ZELLa01vRZDXaLtzseNoqoovN1Cpoxb+kWK7/U8H/qvBw0ilO02Q1211/cywTRui5X56pBVsNc3crTm9I0WH8XzMpiVN5N1bM/Orrq4icppcH3B8OT00iVnctnRLuWJxEAAAAAAAAAAAAAAAAAALDwq+8LOmXYrHVRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCz8v//p8HFlspgHBF34q+dZ3PtRGdp7jTewoYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4kX4HAAD//yhHHc4=")
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)

33.604912869s ago: executing program 0 (id=1252):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
kexec_load(0x3, 0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0)

32.052048216s ago: executing program 0 (id=1253):
syz_mount_image$ocfs2(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x8c0, &(0x7f0000000580)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000001e80)="$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")
creat(&(0x7f0000006300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
open(&(0x7f0000006440)='./bus\x00', 0x400141042, 0x22)
mount(&(0x7f0000006480)=@loop={'/dev/loop', 0x0}, &(0x7f00000064c0)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000006500)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
mkdirat(0xffffffffffffff9c, &(0x7f0000007100)='./file7\x00', 0x1ac)

29.551254327s ago: executing program 0 (id=1261):
unshare(0x22020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2000800, &(0x7f0000000380)={[{@logbsize={'logbsize', 0x3d, [0x38, 0x67]}}, {@quota}, {@noalign}, {@uquota}]}, 0x1, 0x965c, &(0x7f00000010c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f000000a780)='./file1\x00', 0x143042, 0x58)
copy_file_range(r0, 0x0, r0, &(0x7f000000a7c0)=0xf000, 0x863, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000000440)="$eJzs3UFsHNd9B+D/G+2KSxmtmDhRndQuNm2RyorlypJiKlbhrGqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESAng8XMvqVWNGnToihR0vfZ0m939r2Z9+atZ2hBb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/+/K5E8+l+90KAOBeujD21RMn3f8B4JFyyf//AwAAAAAAAAAAAADAfpeiiMcjxdyFtTRRve9qnO/Ub9wcHxndutpgqmoeqMqXvxrPnTx1+ovPD5/p5fnOzIfUv9s+G6+OXTrXfGn2+tz81MLC1GRzfKZzZXZyasd72G39zY5VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dOxWkUZ/+dodN6RruxkeB6OI45Hime/9LLUjoojdn4vGvR37zQarThyrOjE+Mlp1ZLrTnlksP7zYOxFFRLOvUqt3jrYei6jV72kftteKWCqbXzb4WNm9sbn2fPvy9FTzYnt+sbPYmZ25mLqtLfvTjCLOpIjliFgd+ODu6lFELVJ85/BauhwRB3rn4QvVxODt21HsYR93oGxnsx6xXDwAY7aPDUQRr0SKn799NK7k60x1rfl8xCtl/jDizTJfjEjlF+N0xLtbfI94MNWiiL8ox//sWpqsrge968r5rzW/MnN1tq9s77ryMe8PH7hS3Kf7w+CmvDf2+bWpEUW0qyv+WrrzH3YAAAAAAAAAAAAAAAAAuNsGo4jPRIqX/+2PqnnFUc1LP3x2+PeGfql/zvgTH7GfsuyzEbFU7GxO7sE8MfBiupjSfZ5L/ChrRBF/nOf/fet+NwYAAAAAAAAAAAAAAAAAAOCRVsRPI8UL7xxNy9G/pnhn5lrzUvvydHdV2N7av70109fX19ebqZutnBM5l3Iu51zJudrNat5/Vb/I9XNO5FzKuZxzJedqzjiQ6+ds5ZzIuZRzOedKztWcUcv1c7ZyTuRcyrmccyXnas7YJ2v3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TIoo4v1I8e1vrKVIEdGKmIhurgzc79YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMT3I0Xz91sb22oRkap/u46Wv52O1sEyPxmt4TJfjNa5nO0qa61v3Yf2szv1VMRPIsVA462NAc/jX+++2/gaxJvfvPXus7VuHuh9OPTewGNHDp8dHv21J7Z7nbZqwLHznZkbN5vjI6OjY32ba/non+zbNpSPW9ydrhMRC6+/8Vp7enpq/s5flF+BbT5aX1//0/Iouz3EPnmRatv29JF8UQ7tPmjGHnawtqPC9X3Q1D0ZXB525f3/3Ujx2+/8R++GX93/axslNu7w8Ys/uXX/f2HzjnZ4/69trpfv/+U9fav7/+N9217IP43UaxGNxetz9SMRjYXX3zjeud6+NnVtaub0iRNfGh7+0qkT9YMRjaud6am+V7s/VwAAAAAAAAAAAAAAAAD3VCriy5Gi/ZO11IyIm9V8raGzw08ff+pAHKjmW902b/vVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu30cI1qutf4yOiedOYjDe5x+wcbL83OvT7fufYHi1t+fqhx7vLC4nz7ytYfx2AUEa3+LceqBo+PjFaNnu60Z6qqF7ecTP/x1VMR/xkprpxups/lbXn+/+YZ/rfN/1/avKM9mv//ib5t5TFTKuIXkeK3/vKJ+FzVzkPxgXOWy/1tpDh25slcLg6W5Xpt6D5XoDszsCz7v5HiH99/cqm/bG8+5OO3yj634xP7gCjH/3Ck+P6ffzd+PW+7/fkPW4//oc072qPx/1TftkO3Pa9g110nj//xSPHi42/Fb+RtH/b8j96zN47mwhvP59ij8f9037ahfNzfvDtdBwAAAAAAAAAAeKDVUxF/Fyl+NFpLz+dtO/n7f5Obd7RHf//rV/q2Td6d9Yo+8sWuTyoAAAAA7BP1VMRPI8W1xbc25lDfPv+7b/7n79ya/zmSNn1a/TnfL1fPDbibf/7Xbygfd2L33QYAAAAAAAAAAAAAAAAAAIB9JaUins/rqU9U8/knt11PfSVSvPzfz+Ry6UhZrrcO/FD1e+PC7Mzxc9PTs1fai+3L01PNsbn2lamy7qcixdrfPJnrFtX66r315rtrvDdqEVGtxT4fKUb/vle2uxZ7b23y7nrg3bXYy7KfiBT/9Q+3l+2tY/3pW2VPlmX/OlJ8/Z+2LnvkVtlTZdnvRooff73ZK3uoLNt7Pmr3maSNP4yIZ6/MFnswKgAAAAAAAAAAAAAAAAAAADxq6qmIP4sU/3N9eWMuf17/v973tvLmN/vW+9/kZrXO/1C1/v92r+9k/f/quQJL2x0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTimKeCNSzF1YSysD5fuuxvnOzI2b4yOjW1cbTFXNA1X58lfjuZOnTn/x+eEzvfzw+nfbZ+LVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu14D9vXb9xRi45VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dKyvTK1+R0feUtpm+8Eo4q8ixTPf+1n60UBEER96LnbkI747e22w6sSxqhPjI6NVR6Y77ZnF8sOLvRNRRDT7KrV65+gejMWutCIGyuaXDT5Wdm9srj3fvjw91bzYnl/sLHZmZy6mbmvL/jSjiDMpYjkiVgc+uLt6FPFapPjO4bX0zwMRB3rn4QsXxr564uT27Sj2sI87ULazWY9YLh6AMdvHBqKIH0SKn799NP5lIKIW3V/x+YhXyvxhxJvRHe9UfjFOR7y7xfeIB1Mtivi/cvzPrqW3B8rrQe+6cv5rza/MXJ3tK9u7ruyr+8MP/v3j1hi8G4fd5Mvb/pCwz69NjSjix9UVfy39q/+uAQAAAAAAAAAAAAAAAPaRIn41UrzwztFUzQ/emFPcmbnWvNS+PN2d1teb+9ebM72+vr7eTN1s5ZzIuZRzOedKztWcUeT6OVtlNtbXJ/L7pZzLOVdyruaMA7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mjH0ydw8AAAAAAAAAAAAAAAAAAHi4FNU/Kb79jbW0PtBdX3oiurliPdCH3v8HAAD//z/B9Iw=")
r1 = openat(0xffffffffffffff9c, &(0x7f000000b240)='./file1\x00', 0x143041, 0x0)
pwritev2(r1, &(0x7f000000b280)=[{&(0x7f000000b2c0)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

26.12018995s ago: executing program 0 (id=1267):
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
socket$igmp6(0xa, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000380), &(0x7f0000000480)=r1}, 0x20)
r2 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x3, 0x2, 0x8, 0x0, 0x26, 0x7, 0xd7, 0x8, 0x4, [0x400000, 0xc, 0x2, 0x800, 0x3, 0x6, 0x5, 0x3]}})
mount$9p_unix(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=unix,', {[{@noextend}]}})
fsopen(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x3a}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
setns(0xc9, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x34, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x34}}, 0x0)
syz_mount_image$squashfs(&(0x7f0000000880), &(0x7f00000008c0)='./file2\x00', 0x1000b, &(0x7f0000000900)=ANY=[@ANYRES32=0x0], 0x21, 0x1da, &(0x7f0000000a00)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

25.468152606s ago: executing program 33 (id=1267):
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
socket$igmp6(0xa, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000380), &(0x7f0000000480)=r1}, 0x20)
r2 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x3, 0x2, 0x8, 0x0, 0x26, 0x7, 0xd7, 0x8, 0x4, [0x400000, 0xc, 0x2, 0x800, 0x3, 0x6, 0x5, 0x3]}})
mount$9p_unix(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={'trans=unix,', {[{@noextend}]}})
fsopen(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x3a}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
setns(0xc9, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x34, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x34}}, 0x0)
syz_mount_image$squashfs(&(0x7f0000000880), &(0x7f00000008c0)='./file2\x00', 0x1000b, &(0x7f0000000900)=ANY=[@ANYRES32=0x0], 0x21, 0x1da, &(0x7f0000000a00)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

9.706556396s ago: executing program 4 (id=1312):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

6.374061856s ago: executing program 5 (id=1270):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0xb, 0x2)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000240)=0x560)
ioctl$USBDEVFS_RESET(r0, 0x5514)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040881)
ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x161c03)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000680)={0x0, 0x0, 0x0, 'queue1\x00'})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x34}}, 0x804)

5.163649886s ago: executing program 5 (id=1320):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi2\x00', 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000840)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000880)=""/61, 0x58000})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='net/vlan/vlan0\x00')
r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111}}, 0x20)
exit(0x5)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]})
ppoll(&(0x7f00000003c0)=[{r0, 0x80}], 0x1, &(0x7f0000000400), 0x0, 0x0)

5.082162657s ago: executing program 4 (id=1322):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af010203010902240001000010000904"], 0x0)

5.032895538s ago: executing program 3 (id=1323):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="81bccb", 0x3}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000740)={0xa, @pix_mp={0x3, 0x4, 0x32315241, 0x6, 0x9, [{0x101, 0x4}, {0x4, 0xd7b}, {0x2, 0x5}, {0x9, 0x200}, {0x4, 0x6}, {0x9, 0x3}, {0xa0a8, 0x40}, {0x83, 0xb7d3}], 0x0, 0xd9, 0x4, 0x1, 0x1}})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40)

4.739637625s ago: executing program 3 (id=1324):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c90010000c000500174208"], 0x15)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r5, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000af40000bfa3000000000000b704000000000000850000003f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.644023252s ago: executing program 1 (id=1325):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x40104d04, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
pwrite64(0xffffffffffffffff, &(0x7f0000000600)="1bd6", 0x2, 0x8)

3.625946962s ago: executing program 5 (id=1326):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000280)=[{0x3, 0xd611, 0x95, &(0x7f00000002c0)="75bd733862ce052511c59b49072256720abd1814738bd46962e0133f4a6aca72363e86a604ed6df1ed40d414313d2f37be59b3f7e738e2e44a42a3d18c97d4cc401929382e66d6999d7067183cad8b7e743c5481d5ed2c4c5db8605722027193048d67d33c2276af3f5d0a72f1367fba948c446ce0cb621b79349e63e6fffa95d072454f9964921c426b4e8d86655adb724a9ef784"}], 0x1})

3.578204614s ago: executing program 1 (id=1327):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0806011886dd06000009bbbbbbbb09bb0180c200000e"], 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280fa00090000000000a84896426b0297b1e91c90a4c047fb35897173d71ed8059c0a8b23456f2cb5ca"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0)
r3 = socket$inet6_sctp(0xa, 0x94008d1befcee113, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100))
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x4e23, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e1f, 0x4, @loopback}}}, 0x108)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0)
mkdir(0x0, 0xa5)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000))
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r4, &(0x7f00000024c0)=[{{&(0x7f0000000500)=@generic={0x23, "41ef70a6493f96548c6772e991d2e709da2174d41450df614c7b98d688e661a1b29a8c059b706bc70885b2ff0f4ead40bdbeb46337ca989e950ae12331f19267f8f0ea634b47a8030073e1ec94e2410ce8287e5487e11994c1fa84627b0281e74be1465e31017d6986fb97fcaeda121d2d887c410e05f321a441404adf67"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="102788a807ad28d8ec7a40e42a53ebff62a7cebf53fcaebc6c24d10b80846a7102f14cabd9c713036e115a23d1653ac43dc90af4b713546f290b80aa22d9e3", 0x3f}], 0x1, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x13e0}}], 0x4000323, 0xc881)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000)

3.166007714s ago: executing program 3 (id=1328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="50000000020601080000000000000000020000000500010007000000050005000200000005000400000000000900020073797a300000000015000300686173683a69702c706f72742c6e6574"], 0x50}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000000b0601020000000000000000020000000900020073797a300000000005000100070000002c0007800c00018008000140ffffffff0c00148008000140ffffffff06000440500000000500070006"], 0x54}}, 0x0)

3.164968784s ago: executing program 1 (id=1329):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0))
r1 = syz_open_pts(r0, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xf)
ioctl$TCSBRK(r1, 0x400455c8, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xc0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x2)

3.070273166s ago: executing program 3 (id=1330):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
bind$netlink(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x2d)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140))
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r5, 0x5606, 0x9)
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000))
r6 = openat(0xffffffffffffffff, &(0x7f0000000440)='./proc\x00', 0x101042, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r6, 0x8000000)
munmap$IORING_OFF_SQ_RING(r7, 0x1)

2.642690836s ago: executing program 4 (id=1331):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0xb, 0x2)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000240)=0x560)
ioctl$USBDEVFS_RESET(r0, 0x5514)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4040881)
ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x161c03)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000680)={0x0, 0x0, 0x0, 'queue1\x00'})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x34}}, 0x804)

1.545211163s ago: executing program 5 (id=1332):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

1.537367913s ago: executing program 4 (id=1333):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000800)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020)

1.535690683s ago: executing program 3 (id=1334):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi2\x00', 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000840)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000880)=""/61, 0x58000})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='net/vlan/vlan0\x00')
r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111}}, 0x20)
exit(0x5)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]})
ppoll(&(0x7f00000003c0)=[{r0, 0x80}], 0x1, &(0x7f0000000400), 0x0, 0x0)

468.052379ms ago: executing program 1 (id=1335):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x40104d04, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
pwrite64(0xffffffffffffffff, &(0x7f0000000600)="1bd6", 0x2, 0x8)

467.686419ms ago: executing program 4 (id=1336):
syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0)

330.701462ms ago: executing program 4 (id=1337):
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0)
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x1c802, &(0x7f00000000c0)=ANY=[], 0x1, 0x5f52, &(0x7f0000000880)="$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")
creat(0x0, 0x0)
mkdir(&(0x7f0000006840)='./sys_mount\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCSETS(r0, 0x40384708, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c9"], 0x7)

306.464243ms ago: executing program 1 (id=1338):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x22, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0806011886dd06000009bbbbbbbb09bb0180c200000e"], 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280fa00090000000000a84896426b0297b1e91c90a4c047fb35897173d71ed8059c0a8b23456f2cb5ca"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0)
r3 = socket$inet6_sctp(0xa, 0x94008d1befcee113, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100))
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000600)={0x0, {{0xa, 0x4e23, 0x2, @remote, 0x7ff}}, {{0xa, 0x4e1f, 0x4, @loopback}}}, 0x108)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffea7)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0)
mkdir(0x0, 0xa5)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000))
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r4, &(0x7f00000024c0)=[{{&(0x7f0000000500)=@generic={0x23, "41ef70a6493f96548c6772e991d2e709da2174d41450df614c7b98d688e661a1b29a8c059b706bc70885b2ff0f4ead40bdbeb46337ca989e950ae12331f19267f8f0ea634b47a8030073e1ec94e2410ce8287e5487e11994c1fa84627b0281e74be1465e31017d6986fb97fcaeda121d2d887c410e05f321a441404adf67"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="102788a807ad28d8ec7a40e42a53ebff62a7cebf53fcaebc6c24d10b80846a7102f14cabd9c713036e115a23d1653ac43dc90af4b713546f290b80aa22d9e3", 0x3f}], 0x1, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x13e0}}], 0x4000323, 0xc881)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000)

47.713589ms ago: executing program 1 (id=1339):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000004c0), 0x318, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x810)
syz_emit_ethernet(0x3a, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x2000010, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200)

0s ago: executing program 3 (id=1340):
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102)
writev(r0, &(0x7f0000000380)=[{&(0x7f0000002240)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r1, &(0x7f0000002280)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000022c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000002300), 0xffffff6a)
recvmmsg(r1, &(0x7f0000002340), 0x3fffffffffffce3, 0x700000000000000, 0x0)
socketpair(0x1, 0x5, 0x739b, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002380)={0x6, 'ip6gretap0\x00', {0x1ff}, 0x7})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000023c0)='loginuid\x00')
getrandom(&(0x7f0000002400)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x28}], 0x1}, 0x4000800)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

kernel console output (not intermixed with test programs):

d to register connection device
[  437.622256][ T9696] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  437.945925][ T5789] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  438.691528][ T9708] loop4: detected capacity change from 0 to 4096
[  438.805018][   T27] audit: type=1800 audit(1792538116.136:73): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.899" name="attr_allow_any_host" dev="configfs" ino=22869 res=0 errno=0
[  438.818223][ T9710] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  438.871641][ T9708] ntfs3: loop4: ino=19, mi_enum_attr
[  438.878015][ T9708] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  438.898629][   T27] audit: type=1800 audit(1792538116.146:74): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.899" name="addr_trtype" dev="configfs" ino=22870 res=0 errno=0
[  439.006174][ T5841] nvmet: creating nvm controller 12 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  439.087338][ T9710] nvme nvme11: creating 2 I/O queues.
[  439.215031][ T9710] nvme nvme11: new ctrl: "testsubsys"
[  439.243819][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805c7c8800: rx timeout, send abort
[  439.252379][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c7c8800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  439.287156][ T9706] loop3: detected capacity change from 0 to 32768
[  439.303586][ T9706] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.897 (9706)
[  439.357916][ T9706] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  439.382335][ T9706] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  439.515460][ T9706] BTRFS info (device loop3): using free space tree
[  439.627475][ T5789] Bluetooth: hci1: command 0x0406 tx timeout
[  439.706357][ T9706] BTRFS info (device loop3): enabling ssd optimizations
[  439.739354][ T9706] BTRFS info (device loop3): auto enabling async discard
[  439.943088][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'.
[  440.192086][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  440.198751][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  440.551162][ T5773] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  440.993459][ T5789] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  441.086505][ T9759] loop3: detected capacity change from 0 to 4096
[  441.102981][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  441.113725][ T5789] CPU: 0 PID: 5789 Comm: kworker/u5:8 Not tainted syzkaller #0
[  441.121336][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  441.131440][ T5789] Workqueue: hci0 hci_rx_work
[  441.136199][ T5789] Call Trace:
[  441.139519][ T5789]  <TASK>
[  441.142500][ T5789]  dump_stack_lvl+0x18c/0x250
[  441.147240][ T5789]  ? show_regs_print_info+0x20/0x20
[  441.152506][ T5789]  ? load_image+0x420/0x420
[  441.157095][ T5789]  sysfs_create_dir_ns+0x26e/0x2a0
[  441.162266][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  441.167356][ T5789]  ? sysfs_warn_dup+0xa0/0xa0
[  441.172092][ T5789]  ? do_raw_spin_unlock+0x121/0x230
[  441.177364][ T5789]  kobject_add_internal+0x617/0xc90
[  441.182626][ T5789]  kobject_add+0x164/0x240
[  441.187121][ T5789]  ? kobject_init+0x1d0/0x1d0
[  441.191900][ T5789]  ? get_device_parent+0x366/0x390
[  441.197086][ T5789]  device_add+0x3fa/0xc40
[  441.201497][ T5789]  hci_conn_add_sysfs+0xd5/0x1e0
[  441.206501][ T5789]  le_conn_complete_evt+0xe9a/0x1480
[  441.211886][ T5789]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  441.218198][ T5789]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  441.224022][ T5789]  ? mutex_unlock+0x10/0x10
[  441.228628][ T5789]  ? skb_pull_data+0xf0/0x1f0
[  441.233401][ T5789]  hci_le_enh_conn_complete_evt+0x189/0x460
[  441.239374][ T5789]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  441.245877][ T5789]  ? hci_remote_host_features_evt+0x150/0x150
[  441.252068][ T5789]  hci_event_packet+0x7b4/0x1280
[  441.257059][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  441.262139][ T5789]  ? lock_chain_count+0x20/0x20
[  441.267031][ T5789]  ? bis_list+0x290/0x290
[  441.271419][ T5789]  ? kcov_remote_start+0x513/0x810
[  441.276567][ T5789]  ? lockdep_hardirqs_on+0x98/0x150
[  441.281808][ T5789]  ? hci_send_to_monitor+0xd7/0x4f0
[  441.287049][ T5789]  hci_rx_work+0x43a/0xd60
[  441.291526][ T5789]  ? process_scheduled_works+0x975/0x1600
[  441.297291][ T5789]  process_scheduled_works+0xa60/0x1600
[  441.302910][ T5789]  ? worker_attach_to_pool+0x370/0x370
[  441.308432][ T5789]  ? assign_work+0x3cc/0x5d0
[  441.313075][ T5789]  worker_thread+0xa5e/0xfe0
[  441.317731][ T5789]  ? _raw_spin_unlock+0x40/0x40
[  441.322626][ T5789]  ? __kthread_parkme+0x71/0x1c0
[  441.327619][ T5789]  kthread+0x2fa/0x390
[  441.331722][ T5789]  ? pr_cont_work+0x550/0x550
[  441.336432][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  441.341058][ T5789]  ret_from_fork+0x48/0x80
[  441.345516][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  441.350133][ T5789]  ret_from_fork_asm+0x11/0x20
[  441.354942][ T5789]  </TASK>
[  441.362049][ T5789] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  441.376049][ T5789] Bluetooth: hci0: failed to register connection device
[  441.393954][ T9767] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  441.415252][ T9759] ntfs3: loop3: ino=19, mi_enum_attr
[  441.421398][ T9759] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  441.841513][ T9774] loop4: detected capacity change from 0 to 164
[  442.319315][ T9785] loop3: detected capacity change from 0 to 8
[  442.329744][ T9782] loop4: detected capacity change from 0 to 4096
[  442.420216][ T9782] ntfs3: loop4: ino=19, mi_enum_attr
[  442.448945][ T9782] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  442.955086][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805e7a8400: rx timeout, send abort
[  442.963771][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e7a8400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  443.307255][ T5785] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  443.320532][ T9790] loop3: detected capacity change from 0 to 32768
[  443.335389][ T9790] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.912 (9790)
[  443.370054][ T9790] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  443.388796][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  443.408675][ T9790] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  443.419092][ T9790] BTRFS info (device loop3): using free space tree
[  443.452326][ T9813] loop0: detected capacity change from 0 to 164
[  443.498232][ T9790] BTRFS info (device loop3): enabling ssd optimizations
[  443.534678][ T9790] BTRFS info (device loop3): auto enabling async discard
[  443.678814][ T5773] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  443.869960][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'.
[  444.804515][ T9836] loop4: detected capacity change from 0 to 8
[  445.444478][ T9834] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  445.451229][ T9834] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  445.468401][ T9834] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  445.477230][ T9834] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  445.486464][ T9834] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  445.492645][ T9834] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  445.500407][ T9834] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  445.508621][ T9834] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  445.516200][ T9834] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  445.522640][ T9834] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  445.528827][ T9834] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  445.535928][ T9834] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  445.542777][ T9834] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  445.549057][ T9834] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  445.555326][ T9834] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  445.561715][ T9834] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  445.568007][ T9834] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  445.574332][ T9834] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  445.580357][ T9834] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  445.588454][ T9834] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  445.594999][ T9834] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  445.818493][ T9851] loop0: detected capacity change from 0 to 164
[  445.848633][ T9849] loop3: detected capacity change from 0 to 4096
[  445.945215][ T9849] ntfs3: loop3: ino=19, mi_enum_attr
[  445.968216][ T9849] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  446.129938][ T5785] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  446.446059][ T9853] loop1: detected capacity change from 0 to 32768
[  446.455151][ T9853] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.928 (9853)
[  446.472280][ T9853] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  446.478362][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805b7a4800: rx timeout, send abort
[  446.491336][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b7a4800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  446.519766][ T9853] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  446.540551][ T9853] BTRFS info (device loop1): using free space tree
[  446.712703][ T9853] BTRFS info (device loop1): enabling ssd optimizations
[  446.727564][ T9853] BTRFS info (device loop1): auto enabling async discard
[  446.748666][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  446.882400][ T5772] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  447.547266][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  447.553600][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  447.627185][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  448.127103][ T9890] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  448.133231][ T9890] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  448.139360][ T9890] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  448.145371][ T9890] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  448.719221][ T5841] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  448.967998][ T9912] loop4: detected capacity change from 0 to 32768
[  449.010744][ T9912] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  449.097394][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  449.135858][ T9912] XFS (loop4): Ending clean mount
[  449.152462][ T9912] XFS (loop4): Quotacheck needed: Please wait.
[  449.161222][ T5841] usb 1-1: Using ep0 maxpacket: 32
[  449.176160][ T5841] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  449.188423][ T5841] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  449.204657][ T5841] usb 1-1: config 0 interface 0 has no altsetting 0
[  449.239514][ T5841] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  449.257897][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.268333][ T9912] XFS (loop4): Quotacheck: Done.
[  449.281373][ T5841] usb 1-1: Product: syz
[  449.288285][ T5841] usb 1-1: Manufacturer: syz
[  449.301548][ T5841] usb 1-1: SerialNumber: syz
[  449.330123][ T5841] usb 1-1: config 0 descriptor??
[  449.557162][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  449.709638][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f7b3800: rx timeout, send abort
[  449.727151][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f7b3800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  449.733337][ T5841] gs_usb 1-1:0.0: Couldn't send data format (err=-71)
[  449.849935][ T5841] gs_usb: probe of 1-1:0.0 failed with error -71
[  449.927458][ T5841] usb 1-1: USB disconnect, device number 23
[  450.187631][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  450.187681][ T5789] Bluetooth: hci1: command 0x0406 tx timeout
[  450.200085][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  450.210091][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'.
[  450.281577][ T9933] netlink: 220 bytes leftover after parsing attributes in process `syz.1.944'.
[  450.987160][ T9931] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  451.004530][ T5973] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  451.105756][ T9934] loop3: detected capacity change from 0 to 256
[  451.587771][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'.
[  451.629527][ T5086] Bluetooth: hci0: command 0x0406 tx timeout
[  452.272274][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  452.278915][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  452.285026][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  452.577625][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'.
[  453.279638][ T9952] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  453.285833][ T9952] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  453.291937][ T9952] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  453.298814][ T9952] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  453.526156][ T9962] loop4: detected capacity change from 0 to 4096
[  453.643254][ T9962] ntfs3: loop4: ino=19, mi_enum_attr
[  453.686990][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'.
[  453.712148][ T9962] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  453.744365][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805d3fa800: rx timeout, send abort
[  453.753218][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d3fa800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  453.769329][ T9966] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  453.876498][ T9975] netlink: 220 bytes leftover after parsing attributes in process `syz.3.956'.
[  454.518328][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  454.627107][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  455.217548][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'.
[  455.394476][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  455.394476][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  455.406901][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  457.321620][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'.
[  457.467439][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  457.473594][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  457.603021][ T9989] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  457.609367][ T9989] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  457.616929][ T9989] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  457.622945][ T9989] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  457.638655][ T9989] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  457.693189][T10007] loop3: detected capacity change from 0 to 8
[  457.875624][T10011] loop4: detected capacity change from 0 to 4096
[  457.911124][T10013] loop0: detected capacity change from 0 to 256
[  457.951049][T10011] ntfs3: loop4: ino=19, mi_enum_attr
[  457.956433][T10011] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  458.615261][ T5086] Bluetooth: hci0: command 0x0406 tx timeout
[  459.049277][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806c7fe800: rx timeout, send abort
[  459.057755][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806c7fe800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  459.707162][ T5086] Bluetooth: hci2: command 0x0406 tx timeout
[  459.707179][ T5789] Bluetooth: hci1: command 0x0406 tx timeout
[  459.707238][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  460.659601][T10036] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  460.683551][T10036] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  460.721366][T10036] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  460.786916][T10036] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  460.807975][T10036] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  461.036701][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'.
[  461.768590][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'.
[  462.027261][ T5789] Bluetooth: hci0: command 0x0406 tx timeout
[  462.641146][T10060] loop0: detected capacity change from 0 to 256
[  462.738441][T10056] loop3: detected capacity change from 0 to 4096
[  462.747228][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  462.753411][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  462.827839][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  462.871488][T10056] ntfs3: loop3: ino=19, mi_enum_attr
[  462.899569][T10056] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  464.088395][T10071] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  464.112632][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802da5a800: rx timeout, send abort
[  464.121560][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802da5a800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  464.704199][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'.
[  464.792775][T10083] netlink: 220 bytes leftover after parsing attributes in process `syz.4.986'.
[  465.131349][T10082] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  465.164670][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  465.355275][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'.
[  465.572774][T10085] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  466.050754][T10085] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  466.078548][T10085] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  466.088566][T10085] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  466.094649][T10085] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  466.442791][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'.
[  466.518121][T10101] loop0: detected capacity change from 0 to 4096
[  466.772026][T10101] ntfs3: loop0: ino=19, mi_enum_attr
[  466.818888][T10101] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  467.627147][ T5789] Bluetooth: hci0: command 0x0406 tx timeout
[  467.737128][   T28] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  467.745007][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  467.975369][T10114] loop0: detected capacity change from 0 to 164
[  467.987313][   T28] usb 4-1: device descriptor read/64, error -32
[  468.091530][T10116] loop4: detected capacity change from 0 to 4096
[  468.107230][ T5789] Bluetooth: hci1: command 0x0406 tx timeout
[  468.187427][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  468.187436][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  468.238863][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'.
[  468.404572][T10122] netlink: 220 bytes leftover after parsing attributes in process `syz.0.996'.
[  468.553649][T10116] ntfs3: loop4: ino=19, mi_enum_attr
[  468.622012][T10116] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  468.656722][   T28] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  469.663832][   T27] audit: type=1800 audit(1792538146.996:75): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.998" name="attr_allow_any_host" dev="configfs" ino=24652 res=0 errno=0
[  469.688657][T10127] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  469.717106][   T28] usb 4-1: device descriptor read/64, error -71
[  469.747807][   T27] audit: type=1800 audit(1792538147.026:76): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.998" name="addr_trtype" dev="configfs" ino=24653 res=0 errno=0
[  469.840459][   T28] usb usb4-port1: attempt power cycle
[  469.851371][ T5778] nvmet: creating nvm controller 13 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  469.868464][T10127] nvme nvme12: creating 2 I/O queues.
[  469.876411][T10127] nvme nvme12: new ctrl: "testsubsys"
[  470.307155][ T5789] Bluetooth: hci1: command 0x0406 tx timeout
[  470.313352][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  470.797413][T10136] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  470.827721][T10136] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  470.840656][T10136] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  470.846692][T10136] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  471.023615][T10144] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  471.466927][T10159] loop1: detected capacity change from 0 to 4096
[  471.562740][T10159] ntfs3: loop1: ino=19, mi_enum_attr
[  471.593323][T10159] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  471.620114][T10164] loop4: detected capacity change from 0 to 8
[  472.527292][T10169] loop4: detected capacity change from 0 to 4096
[  472.567468][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'.
[  472.667999][T10175] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1006'.
[  472.747185][ T5789] Bluetooth: hci0: command 0x0406 tx timeout
[  472.907399][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  472.913620][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  472.920030][ T5789] Bluetooth: hci1: command 0x0406 tx timeout
[  473.066943][T10169] ntfs3: loop4: ino=19, mi_enum_attr
[  473.157482][T10169] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  473.437541][T10178] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  473.861004][   T27] audit: type=1800 audit(1792538150.766:77): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1008" name="attr_allow_any_host" dev="configfs" ino=24570 res=0 errno=0
[  473.890407][   T27] audit: type=1800 audit(1792538150.766:78): pid=10178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1008" name="addr_trtype" dev="configfs" ino=24571 res=0 errno=0
[  474.155228][ T5778] nvmet: creating nvm controller 14 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  474.192868][T10178] nvme nvme13: creating 2 I/O queues.
[  474.238791][T10178] nvme nvme13: new ctrl: "testsubsys"
[  475.317490][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  475.550438][T10195] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  475.580379][T10195] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  475.612992][T10195] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  475.637389][T10195] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  475.678856][T10195] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  475.961582][T10210] loop1: detected capacity change from 0 to 32768
[  476.041044][T10210] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  476.101160][T10209] loop4: detected capacity change from 0 to 8
[  476.181747][T10210] XFS (loop1): Ending clean mount
[  476.190962][T10210] XFS (loop1): Quotacheck needed: Please wait.
[  476.593636][T10210] XFS (loop1): Quotacheck: Done.
[  476.775770][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  476.808387][T10226] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1016'.
[  477.332313][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  477.500467][   T27] audit: type=1800 audit(1792538154.836:79): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1019" name="attr_allow_any_host" dev="configfs" ino=25663 res=0 errno=0
[  477.522482][T10239] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  477.554069][   T27] audit: type=1800 audit(1792538154.836:80): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1019" name="addr_trtype" dev="configfs" ino=25664 res=0 errno=0
[  477.637496][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  477.937231][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  477.943503][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  478.026868][ T5778] nvmet: creating nvm controller 15 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  478.081309][T10239] nvme nvme14: creating 2 I/O queues.
[  478.089737][T10239] nvme nvme14: new ctrl: "testsubsys"
[  478.735518][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1024'.
[  479.951680][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  480.379686][T10278] tipc: Started in network mode
[  480.384726][T10278] tipc: Node identity b636c5fed56a, cluster identity 4711
[  480.401904][T10278] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.417735][T10277] tipc: Disabling bearer <eth:syzkaller0>
[  480.977433][T10293] loop3: detected capacity change from 0 to 32768
[  481.062599][T10293] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  481.138537][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'.
[  481.313255][T10314] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1028'.
[  481.610876][T10293] XFS (loop3): Ending clean mount
[  481.623723][T10293] XFS (loop3): Quotacheck needed: Please wait.
[  481.971003][T10293] XFS (loop3): Quotacheck: Done.
[  482.027586][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  482.665005][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  482.793035][    T8] nvmet: creating nvm controller 16 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  482.835493][T10321] nvme nvme15: creating 2 I/O queues.
[  482.867579][T10321] nvme nvme15: new ctrl: "testsubsys"
[  483.308079][T10337] syzkaller0: entered promiscuous mode
[  483.317876][T10337] syzkaller0: entered allmulticast mode
[  483.515561][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  483.526271][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:6 Not tainted syzkaller #0
[  483.533888][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  483.543998][ T5785] Workqueue: hci3 hci_rx_work
[  483.548756][ T5785] Call Trace:
[  483.552089][ T5785]  <TASK>
[  483.555084][ T5785]  dump_stack_lvl+0x18c/0x250
[  483.559827][ T5785]  ? show_regs_print_info+0x20/0x20
[  483.565103][ T5785]  ? load_image+0x420/0x420
[  483.569688][ T5785]  sysfs_create_dir_ns+0x26e/0x2a0
[  483.574889][ T5785]  ? __lock_acquire+0x7eb0/0x7eb0
[  483.579972][ T5785]  ? sysfs_warn_dup+0xa0/0xa0
[  483.584741][ T5785]  ? do_raw_spin_unlock+0x121/0x230
[  483.590003][ T5785]  kobject_add_internal+0x617/0xc90
[  483.595294][ T5785]  kobject_add+0x164/0x240
[  483.599765][ T5785]  ? kobject_init+0x1d0/0x1d0
[  483.604484][ T5785]  ? get_device_parent+0x366/0x390
[  483.609640][ T5785]  device_add+0x3fa/0xc40
[  483.614006][ T5785]  hci_conn_add_sysfs+0xd5/0x1e0
[  483.618988][ T5785]  le_conn_complete_evt+0xe9a/0x1480
[  483.624343][ T5785]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  483.630659][ T5785]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  483.636334][ T5785]  ? mutex_unlock+0x10/0x10
[  483.640860][ T5785]  ? skb_pull_data+0xf0/0x1f0
[  483.645577][ T5785]  hci_le_enh_conn_complete_evt+0x189/0x460
[  483.651521][ T5785]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  483.657981][ T5785]  ? hci_remote_host_features_evt+0x150/0x150
[  483.664082][ T5785]  hci_event_packet+0x7b4/0x1280
[  483.669052][ T5785]  ? __lock_acquire+0x7eb0/0x7eb0
[  483.674117][ T5785]  ? lock_chain_count+0x20/0x20
[  483.679006][ T5785]  ? bis_list+0x290/0x290
[  483.683374][ T5785]  ? kcov_remote_start+0x513/0x810
[  483.688550][ T5785]  ? lockdep_hardirqs_on+0x98/0x150
[  483.693789][ T5785]  ? hci_send_to_monitor+0xd7/0x4f0
[  483.699021][ T5785]  hci_rx_work+0x43a/0xd60
[  483.703519][ T5785]  ? process_scheduled_works+0x975/0x1600
[  483.709281][ T5785]  process_scheduled_works+0xa60/0x1600
[  483.714901][ T5785]  ? worker_attach_to_pool+0x370/0x370
[  483.720405][ T5785]  ? assign_work+0x3cc/0x5d0
[  483.725030][ T5785]  worker_thread+0xa5e/0xfe0
[  483.729686][ T5785]  kthread+0x2fa/0x390
[  483.733776][ T5785]  ? pr_cont_work+0x550/0x550
[  483.738485][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  483.743107][ T5785]  ret_from_fork+0x48/0x80
[  483.747560][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  483.752187][ T5785]  ret_from_fork_asm+0x11/0x20
[  483.757001][ T5785]  </TASK>
[  483.767575][ T5785] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  483.781582][ T5785] Bluetooth: hci3: failed to register connection device
[  483.967727][T10344] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  484.730705][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1037'.
[  485.891520][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  486.330777][T10364] loop4: detected capacity change from 0 to 32768
[  486.430770][T10364] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  486.551166][T10364] XFS (loop4): Ending clean mount
[  486.562741][T10364] XFS (loop4): Quotacheck needed: Please wait.
[  486.795894][T10364] XFS (loop4): Quotacheck: Done.
[  487.540254][ T5973] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  488.011116][T10381] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1042'.
[  489.656909][   T27] audit: type=1800 audit(1792538166.986:81): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1044" name="attr_allow_any_host" dev="configfs" ino=25972 res=0 errno=0
[  489.675264][T10392] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  489.678957][   T27] audit: type=1800 audit(1792538167.006:82): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1044" name="addr_trtype" dev="configfs" ino=25973 res=0 errno=0
[  489.785050][ T5868] nvmet: creating nvm controller 17 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  489.808219][T10392] nvme nvme16: creating 2 I/O queues.
[  489.883204][T10392] nvme nvme16: new ctrl: "testsubsys"
[  490.155345][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1039'.
[  490.165451][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'.
[  490.186386][T10380] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  490.728854][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  490.750690][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:6 Not tainted syzkaller #0
[  490.758325][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  490.768424][ T5785] Workqueue: hci3 hci_rx_work
[  490.773172][ T5785] Call Trace:
[  490.776530][ T5785]  <TASK>
[  490.779515][ T5785]  dump_stack_lvl+0x18c/0x250
[  490.784251][ T5785]  ? show_regs_print_info+0x20/0x20
[  490.789500][ T5785]  ? load_image+0x420/0x420
[  490.794070][ T5785]  sysfs_create_dir_ns+0x26e/0x2a0
[  490.799244][ T5785]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  490.804930][ T5785]  ? sysfs_warn_dup+0xa0/0xa0
[  490.809668][ T5785]  kobject_add_internal+0x617/0xc90
[  490.814931][ T5785]  kobject_add+0x164/0x240
[  490.819458][ T5785]  ? preempt_schedule_thunk+0x1a/0x30
[  490.824935][ T5785]  ? kobject_init+0x1d0/0x1d0
[  490.829675][ T5785]  ? get_device_parent+0x366/0x390
[  490.834875][ T5785]  device_add+0x3fa/0xc40
[  490.839254][ T5785]  hci_conn_add_sysfs+0xd5/0x1e0
[  490.844247][ T5785]  le_conn_complete_evt+0xe9a/0x1480
[  490.849608][ T5785]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  490.855947][ T5785]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  490.861656][ T5785]  ? mutex_unlock+0x10/0x10
[  490.866212][ T5785]  ? skb_pull_data+0xf0/0x1f0
[  490.870956][ T5785]  hci_le_enh_conn_complete_evt+0x189/0x460
[  490.876917][ T5785]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  490.883421][ T5785]  ? hci_remote_host_features_evt+0x150/0x150
[  490.889541][ T5785]  hci_event_packet+0x7b4/0x1280
[  490.894543][ T5785]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  490.900210][ T5785]  ? bis_list+0x290/0x290
[  490.904572][ T5785]  ? kcov_remote_start+0x1b7/0x810
[  490.909741][ T5785]  ? hci_send_to_monitor+0xd7/0x4f0
[  490.914968][ T5785]  hci_rx_work+0x43a/0xd60
[  490.919426][ T5785]  ? process_scheduled_works+0x975/0x1600
[  490.925186][ T5785]  process_scheduled_works+0xa60/0x1600
[  490.930819][ T5785]  ? worker_attach_to_pool+0x370/0x370
[  490.936319][ T5785]  ? assign_work+0x3cc/0x5d0
[  490.940957][ T5785]  worker_thread+0xa5e/0xfe0
[  490.945609][ T5785]  kthread+0x2fa/0x390
[  490.949709][ T5785]  ? pr_cont_work+0x550/0x550
[  490.954421][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  490.959075][ T5785]  ret_from_fork+0x48/0x80
[  490.963529][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  490.968166][ T5785]  ret_from_fork_asm+0x11/0x20
[  490.972993][ T5785]  </TASK>
[  491.037000][ T5785] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  491.058614][ T5785] Bluetooth: hci3: failed to register connection device
[  491.474288][T10414] loop4: detected capacity change from 0 to 8
[  492.780192][T10426] mmap: syz.1.1050 (10426) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  493.171426][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  495.377144][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  496.053859][T10437] loop0: detected capacity change from 0 to 4096
[  496.162805][T10437] ntfs3: loop0: ino=19, mi_enum_attr
[  496.172612][T10437] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  497.032964][   T27] audit: type=1800 audit(1792538174.276:83): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1053" name="file1" dev="loop0" ino=30 res=0 errno=0
[  497.166282][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'.
[  497.737330][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  498.104829][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'.
[  498.147192][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  498.178940][T10463] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1055'.
[  498.910439][T10461] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  499.042865][T10458] loop1: detected capacity change from 0 to 4096
[  499.192485][T10458] ntfs3: loop1: ino=19, mi_enum_attr
[  499.347696][T10458] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  500.808147][T10479] loop0: detected capacity change from 0 to 8
[  501.657166][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  501.663555][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  503.088477][T10501] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  503.110759][T10501] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  503.157240][T10501] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  503.163445][T10501] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  503.203681][T10501] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  503.217560][T10501] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  503.237394][T10501] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  503.290510][T10507] loop4: detected capacity change from 0 to 256
[  504.450749][T10513] loop4: detected capacity change from 0 to 4096
[  504.577058][T10513] ntfs3: loop4: ino=19, mi_enum_attr
[  504.582454][T10513] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  504.589642][ T5086] Bluetooth: hci0: command 0x0406 tx timeout
[  505.257528][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  505.263869][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  505.865741][ T5086] Bluetooth: hci2: command 0x0406 tx timeout
[  506.137070][T10531] loop1: detected capacity change from 0 to 8
[  506.367153][ T5778] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  507.305597][ T5778] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  507.319145][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  507.350978][ T5778] usb 4-1: config 0 interface 0 has no altsetting 0
[  507.381719][ T5778] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  507.401518][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  507.423756][ T5778] usb 4-1: Product: syz
[  507.434523][ T5778] usb 4-1: Manufacturer: syz
[  507.452126][ T5778] usb 4-1: SerialNumber: syz
[  507.479888][ T5778] usb 4-1: config 0 descriptor??
[  507.554500][ T5778] snd-usb-audio: probe of 4-1:0.0 failed with error -22
[  507.719094][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  507.758945][ T5778] usb 4-1: USB disconnect, device number 37
[  507.932363][T10542] loop0: detected capacity change from 0 to 4096
[  508.000752][T10542] ntfs3: loop0: ino=19, mi_enum_attr
[  508.044440][T10542] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  508.061454][T10539] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  508.083694][T10539] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  508.118706][T10539] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  508.139181][T10539] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  508.157766][T10539] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  508.627551][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1079'.
[  509.387243][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  509.825501][T10555] loop3: detected capacity change from 0 to 4096
[  509.890732][T10555] ntfs3: loop3: ino=19, mi_enum_attr
[  509.903519][T10555] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  509.913742][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'.
[  510.187386][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  510.193567][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  510.199744][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  512.018324][ T5789] Bluetooth: hci0: command 0x0406 tx timeout
[  512.267278][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  513.031082][T10588] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  513.070763][T10588] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  513.085293][T10588] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  513.091722][T10588] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  513.105172][T10588] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  513.263644][T10597] loop1: detected capacity change from 0 to 4096
[  513.385484][T10597] ntfs3: loop1: ino=19, mi_enum_attr
[  513.407147][T10597] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  513.586736][T10600] loop4: detected capacity change from 0 to 32768
[  513.766184][T10600] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  513.802718][T10600] XFS (loop4): Ending clean mount
[  514.236604][T10600] XFS (loop4): Quotacheck needed: Please wait.
[  514.248054][   T27] audit: type=1800 audit(1792538191.566:84): pid=10614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1090" name="file1" dev="loop1" ino=30 res=0 errno=0
[  514.436196][T10600] XFS (loop4): Quotacheck: Done.
[  514.439465][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  514.579503][T10618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1094'.
[  515.167130][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  515.173287][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  515.183288][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  515.316306][T10620] loop0: detected capacity change from 0 to 164
[  515.356783][ T5973] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  515.685637][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'.
[  518.275430][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  519.174064][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'.
[  519.905929][T10647] loop1: detected capacity change from 0 to 4096
[  520.002389][T10647] ntfs3: loop1: ino=19, mi_enum_attr
[  520.008034][T10647] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  520.516039][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  521.082835][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'.
[  521.173497][T10670] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1108'.
[  521.277118][ T5841] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  521.970185][T10655] loop0: detected capacity change from 0 to 32768
[  522.021514][   T27] audit: type=1800 audit(1792538199.356:85): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1109" name="attr_allow_any_host" dev="configfs" ino=27834 res=0 errno=0
[  522.033845][T10673] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  522.059487][   T27] audit: type=1800 audit(1792538199.356:86): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1109" name="addr_trtype" dev="configfs" ino=27835 res=0 errno=0
[  522.082097][ T5841] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping
[  522.094999][T10655] JBD2: Ignoring recovery information on journal
[  522.104354][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0
[  522.156967][ T5841] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  522.166690][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  522.181038][T10655] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  522.231048][ T5841] usb 2-1: Product: syz
[  522.240940][ T5778] nvmet: creating nvm controller 18 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  522.266460][ T5841] usb 2-1: Manufacturer: syz
[  522.271412][ T5841] usb 2-1: SerialNumber: syz
[  522.279082][T10673] nvme nvme17: creating 2 I/O queues.
[  522.299145][ T5841] usb 2-1: config 0 descriptor??
[  522.330563][T10673] nvme nvme17: new ctrl: "testsubsys"
[  522.334630][   T27] audit: type=1804 audit(1792538199.666:87): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1105" name="/newroot/298/bus/file1" dev="loop0" ino=17058 res=1 errno=0
[  522.416791][ T5841] snd-usb-audio: probe of 2-1:0.0 failed with error -22
[  522.509032][ T7529] udevd[7529]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  522.528085][ T5780] ocfs2: Unmounting device (7,0) on (node local)
[  522.548694][ T5778] usb 2-1: USB disconnect, device number 24
[  526.145917][T10693] loop4: detected capacity change from 0 to 256
[  527.221951][   T27] audit: type=1800 audit(1792538204.506:88): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1118" name="idVendor" dev="configfs" ino=27231 res=0 errno=0
[  527.280539][   T27] audit: type=1800 audit(1792538204.506:89): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1118" name="idProduct" dev="configfs" ino=27232 res=0 errno=0
[  527.361250][   T27] audit: type=1800 audit(1792538204.506:90): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1118" name="serialnumber" dev="configfs" ino=27233 res=0 errno=0
[  527.441984][   T27] audit: type=1800 audit(1792538204.516:91): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1118" name="report_desc" dev="configfs" ino=27234 res=0 errno=0
[  527.707664][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  527.777185][ T5873] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  528.847086][ T5873] usb 5-1: Using ep0 maxpacket: 16
[  530.046360][T10722] loop3: detected capacity change from 0 to 32768
[  530.130619][T10722] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  530.627325][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -71
[  530.635104][ T5873] usb 5-1: can't read configurations, error -71
[  530.857309][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  530.866709][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:6 Not tainted syzkaller #0
[  530.869420][T10722] XFS (loop3): Ending clean mount
[  530.874288][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  530.889511][ T5785] Workqueue: hci0 hci_rx_work
[  530.894244][ T5785] Call Trace:
[  530.897566][ T5785]  <TASK>
[  530.900526][ T5785]  dump_stack_lvl+0x18c/0x250
[  530.905250][ T5785]  ? show_regs_print_info+0x20/0x20
[  530.910482][ T5785]  ? load_image+0x420/0x420
[  530.915041][ T5785]  sysfs_create_dir_ns+0x26e/0x2a0
[  530.920194][ T5785]  ? __lock_acquire+0x7eb0/0x7eb0
[  530.925267][ T5785]  ? sysfs_warn_dup+0xa0/0xa0
[  530.929978][ T5785]  ? do_raw_spin_unlock+0x121/0x230
[  530.935213][ T5785]  kobject_add_internal+0x617/0xc90
[  530.940496][ T5785]  kobject_add+0x164/0x240
[  530.944962][ T5785]  ? kobject_init+0x1d0/0x1d0
[  530.949680][ T5785]  ? get_device_parent+0x366/0x390
[  530.955113][ T5785]  device_add+0x3fa/0xc40
[  530.959495][ T5785]  hci_conn_add_sysfs+0xd5/0x1e0
[  530.964479][ T5785]  le_conn_complete_evt+0xe9a/0x1480
[  530.969821][ T5785]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  530.976126][ T5785]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  530.981909][ T5785]  ? mutex_unlock+0x10/0x10
[  530.986534][ T5785]  ? skb_pull_data+0xf0/0x1f0
[  530.991266][ T5785]  hci_le_enh_conn_complete_evt+0x189/0x460
[  530.997224][ T5785]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  531.003699][ T5785]  ? hci_remote_host_features_evt+0x150/0x150
[  531.009800][ T5785]  hci_event_packet+0x7b4/0x1280
[  531.014793][ T5785]  ? __lock_acquire+0x7eb0/0x7eb0
[  531.019861][ T5785]  ? lock_chain_count+0x20/0x20
[  531.024750][ T5785]  ? bis_list+0x290/0x290
[  531.029131][ T5785]  ? kcov_remote_start+0x513/0x810
[  531.034308][ T5785]  ? lockdep_hardirqs_on+0x98/0x150
[  531.039559][ T5785]  ? hci_send_to_monitor+0xd7/0x4f0
[  531.044804][ T5785]  hci_rx_work+0x43a/0xd60
[  531.049277][ T5785]  ? process_scheduled_works+0x975/0x1600
[  531.055038][ T5785]  process_scheduled_works+0xa60/0x1600
[  531.060741][ T5785]  ? worker_attach_to_pool+0x370/0x370
[  531.066249][ T5785]  ? assign_work+0x3cc/0x5d0
[  531.070886][ T5785]  worker_thread+0xa5e/0xfe0
[  531.075557][ T5785]  kthread+0x2fa/0x390
[  531.079683][ T5785]  ? pr_cont_work+0x550/0x550
[  531.084397][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  531.089017][ T5785]  ret_from_fork+0x48/0x80
[  531.093488][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  531.098110][ T5785]  ret_from_fork_asm+0x11/0x20
[  531.102923][ T5785]  </TASK>
[  531.313557][ T5785] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  531.353069][ T5785] Bluetooth: hci0: failed to register connection device
[  531.465170][T10722] XFS (loop3): Quotacheck needed: Please wait.
[  531.694694][   T27] audit: type=1800 audit(1792538209.026:92): pid=10742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1128" name="idVendor" dev="configfs" ino=27981 res=0 errno=0
[  531.716462][T10722] XFS (loop3): Quotacheck: Done.
[  531.946577][   T27] audit: type=1800 audit(1792538209.046:93): pid=10742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1128" name="idProduct" dev="configfs" ino=27982 res=0 errno=0
[  531.967656][   T27] audit: type=1800 audit(1792538209.046:94): pid=10742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1128" name="serialnumber" dev="configfs" ino=27983 res=0 errno=0
[  532.240592][   T27] audit: type=1800 audit(1792538209.056:95): pid=10742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1128" name="report_desc" dev="configfs" ino=27984 res=0 errno=0
[  532.710854][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  533.467123][ T5789] Bluetooth: hci0: command 0x0406 tx timeout
[  533.772560][   T27] audit: type=1800 audit(1792538211.086:96): pid=10765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1134" name="no_out_endpoint" dev="configfs" ino=27366 res=0 errno=0
[  534.058263][T10767] loop4: detected capacity change from 0 to 4096
[  534.552318][T10763] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  534.610831][T10768] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  534.622408][   T27] audit: type=1800 audit(1792538211.856:97): pid=10763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1135" name="attr_allow_any_host" dev="configfs" ino=27372 res=0 errno=0
[  534.854691][   T27] audit: type=1800 audit(1792538211.876:98): pid=10763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1135" name="addr_trtype" dev="configfs" ino=27373 res=0 errno=0
[  534.970948][ T5841] nvmet: creating nvm controller 19 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  535.046072][T10763] nvme nvme18: creating 2 I/O queues.
[  535.105141][T10763] nvme nvme18: new ctrl: "testsubsys"
[  535.148621][T10772] loop3: detected capacity change from 0 to 8
[  535.442675][T10778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1139'.
[  535.458500][   T27] audit: type=1800 audit(1792538212.796:99): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="idVendor" dev="configfs" ino=27409 res=0 errno=0
[  535.479029][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  535.497994][T10774] loop1: detected capacity change from 0 to 4096
[  535.677672][T10774] NILFS (loop1): invalid segment: Checksum error in segment payload
[  535.705271][   T27] audit: type=1800 audit(1792538212.816:100): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="idProduct" dev="configfs" ino=27410 res=0 errno=0
[  535.736414][T10756] loop0: detected capacity change from 0 to 32768
[  535.743065][T10774] NILFS (loop1): trying rollback from an earlier position
[  535.757370][   T27] audit: type=1800 audit(1792538212.936:101): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="serialnumber" dev="configfs" ino=27411 res=0 errno=0
[  535.871423][   T27] audit: type=1800 audit(1792538212.946:102): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="report_desc" dev="configfs" ino=27412 res=0 errno=0
[  536.032532][T10774] NILFS (loop1): recovery complete
[  536.159518][T10784] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  536.359227][T10756] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  536.428328][T10756] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR
[  536.438844][T10756] XFS (loop0): log mount failed
[  536.672276][T10789] loop3: detected capacity change from 0 to 164
[  536.852237][T10791] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  536.982389][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  536.992041][ T5789] CPU: 1 PID: 5789 Comm: kworker/u5:8 Not tainted syzkaller #0
[  536.999640][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  537.009735][ T5789] Workqueue: hci3 hci_rx_work
[  537.014500][ T5789] Call Trace:
[  537.017819][ T5789]  <TASK>
[  537.020810][ T5789]  dump_stack_lvl+0x18c/0x250
[  537.025548][ T5789]  ? show_regs_print_info+0x20/0x20
[  537.030797][ T5789]  ? load_image+0x420/0x420
[  537.035362][ T5789]  sysfs_create_dir_ns+0x26e/0x2a0
[  537.040526][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  537.045613][ T5789]  ? sysfs_warn_dup+0xa0/0xa0
[  537.050351][ T5789]  ? do_raw_spin_unlock+0x121/0x230
[  537.055640][ T5789]  kobject_add_internal+0x617/0xc90
[  537.060911][ T5789]  kobject_add+0x164/0x240
[  537.065595][ T5789]  ? kobject_init+0x1d0/0x1d0
[  537.070368][ T5789]  ? get_device_parent+0x366/0x390
[  537.075539][ T5789]  device_add+0x3fa/0xc40
[  537.079915][ T5789]  hci_conn_add_sysfs+0xd5/0x1e0
[  537.085132][ T5789]  le_conn_complete_evt+0xe9a/0x1480
[  537.090464][ T5789]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  537.096744][ T5789]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  537.102415][ T5789]  ? mutex_unlock+0x10/0x10
[  537.106953][ T5789]  ? skb_pull_data+0xf0/0x1f0
[  537.111675][ T5789]  hci_le_enh_conn_complete_evt+0x189/0x460
[  537.117608][ T5789]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  537.124055][ T5789]  ? hci_remote_host_features_evt+0x150/0x150
[  537.130264][ T5789]  hci_event_packet+0x7b4/0x1280
[  537.135233][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  537.140290][ T5789]  ? lock_chain_count+0x20/0x20
[  537.145183][ T5789]  ? bis_list+0x290/0x290
[  537.149636][ T5789]  ? kcov_remote_start+0x513/0x810
[  537.154795][ T5789]  ? lockdep_hardirqs_on+0x98/0x150
[  537.160040][ T5789]  ? hci_send_to_monitor+0xd7/0x4f0
[  537.165268][ T5789]  hci_rx_work+0x43a/0xd60
[  537.169825][ T5789]  ? process_scheduled_works+0x975/0x1600
[  537.175606][ T5789]  process_scheduled_works+0xa60/0x1600
[  537.181231][ T5789]  ? worker_attach_to_pool+0x370/0x370
[  537.186735][ T5789]  ? assign_work+0x3cc/0x5d0
[  537.191403][ T5789]  worker_thread+0xa5e/0xfe0
[  537.196049][ T5789]  ? _raw_spin_unlock+0x40/0x40
[  537.200944][ T5789]  ? __kthread_parkme+0x71/0x1c0
[  537.205919][ T5789]  kthread+0x2fa/0x390
[  537.210041][ T5789]  ? pr_cont_work+0x550/0x550
[  537.214750][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  537.219366][ T5789]  ret_from_fork+0x48/0x80
[  537.223832][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  537.228461][ T5789]  ret_from_fork_asm+0x11/0x20
[  537.233293][ T5789]  </TASK>
[  537.238577][ T5789] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  537.252589][ T5789] Bluetooth: hci3: failed to register connection device
[  537.473569][   T27] audit: type=1800 audit(1792538214.806:103): pid=10807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1145" name="attr_allow_any_host" dev="configfs" ino=27510 res=0 errno=0
[  537.497685][T10807] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  537.511848][   T27] audit: type=1800 audit(1792538214.826:104): pid=10807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1145" name="addr_trtype" dev="configfs" ino=27511 res=0 errno=0
[  537.610338][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'.
[  538.330891][ T5873] nvmet: creating nvm controller 20 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  538.347728][T10807] nvme nvme19: creating 2 I/O queues.
[  538.373783][T10807] nvme nvme19: new ctrl: "testsubsys"
[  538.480470][T10816] loop4: detected capacity change from 0 to 8
[  538.545377][   T27] audit: type=1800 audit(1792538215.876:105): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1150" name="idVendor" dev="configfs" ino=27551 res=0 errno=0
[  538.589303][T10819] Config c/1 of g1 needs at least one function.
[  538.600037][   T27] audit: type=1800 audit(1792538215.886:106): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1150" name="idProduct" dev="configfs" ino=27552 res=0 errno=0
[  538.618585][T10819] udc dummy_udc.0: failed to start g1: -22
[  538.627407][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1149'.
[  538.636335][T10819] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  538.638597][T10819] UDC core: g1: couldn't find an available UDC or it's busy
[  538.676583][   T27] audit: type=1800 audit(1792538215.886:107): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1150" name="serialnumber" dev="configfs" ino=27553 res=0 errno=0
[  538.757258][   T27] audit: type=1800 audit(1792538215.896:108): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1150" name="report_desc" dev="configfs" ino=27554 res=0 errno=0
[  538.898885][   T27] audit: type=1800 audit(1792538215.916:109): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1150" name="UDC" dev="configfs" ino=27555 res=0 errno=0
[  538.999683][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1152'.
[  539.232119][T10830] veth0_to_bond: entered promiscuous mode
[  539.232146][T10830] veth0_to_bond: entered allmulticast mode
[  539.307410][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  539.493700][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'.
[  540.554845][T10851] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1156'.
[  541.140087][   T27] audit: type=1800 audit(1792538218.466:110): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1157" name="attr_allow_any_host" dev="configfs" ino=28139 res=0 errno=0
[  541.278554][T10855] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  541.350065][   T27] audit: type=1800 audit(1792538218.586:111): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1157" name="addr_trtype" dev="configfs" ino=28140 res=0 errno=0
[  541.442626][   T28] nvmet: creating nvm controller 21 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  541.459574][T10855] nvme nvme20: creating 2 I/O queues.
[  541.474768][T10855] nvme nvme20: new ctrl: "testsubsys"
[  542.258039][T10878] loop1: detected capacity change from 0 to 32768
[  542.346399][T10878] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  542.491333][T10878] XFS (loop1): Ending clean mount
[  542.516317][T10878] XFS (loop1): Quotacheck needed: Please wait.
[  543.213566][T10878] XFS (loop1): Quotacheck: Done.
[  543.597808][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  545.271210][    C1] nvme nvme7: long keepalive RTT (1390 ms)
[  545.277696][    C1] nvme nvme16: long keepalive RTT (1400 ms)
[  545.283651][    C1] nvme nvme12: long keepalive RTT (1400 ms)
[  545.426018][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  545.597284][T10908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1164'.
[  546.284247][T10925] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  546.284862][   T27] audit: type=1800 audit(1792538223.616:112): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1167" name="attr_allow_any_host" dev="configfs" ino=28281 res=0 errno=0
[  546.408197][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'.
[  546.656939][   T27] audit: type=1800 audit(1792538223.616:113): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1167" name="addr_trtype" dev="configfs" ino=28282 res=0 errno=0
[  547.110990][ T5778] nvmet: creating nvm controller 22 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  547.188626][T10925] nvme nvme21: creating 2 I/O queues.
[  547.212300][T10925] nvme nvme21: new ctrl: "testsubsys"
[  547.457987][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  547.467713][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:6 Not tainted syzkaller #0
[  547.475313][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  547.485431][ T5785] Workqueue: hci2 hci_rx_work
[  547.490194][ T5785] Call Trace:
[  547.493518][ T5785]  <TASK>
[  547.496479][ T5785]  dump_stack_lvl+0x18c/0x250
[  547.501194][ T5785]  ? show_regs_print_info+0x20/0x20
[  547.506427][ T5785]  ? load_image+0x420/0x420
[  547.510985][ T5785]  sysfs_create_dir_ns+0x26e/0x2a0
[  547.516133][ T5785]  ? __lock_acquire+0x7eb0/0x7eb0
[  547.521203][ T5785]  ? sysfs_warn_dup+0xa0/0xa0
[  547.525908][ T5785]  ? do_raw_spin_unlock+0x121/0x230
[  547.531151][ T5785]  kobject_add_internal+0x617/0xc90
[  547.536388][ T5785]  kobject_add+0x164/0x240
[  547.540838][ T5785]  ? kobject_init+0x1d0/0x1d0
[  547.545550][ T5785]  ? get_device_parent+0x366/0x390
[  547.550697][ T5785]  device_add+0x3fa/0xc40
[  547.555071][ T5785]  hci_conn_add_sysfs+0xd5/0x1e0
[  547.560125][ T5785]  le_conn_complete_evt+0xe9a/0x1480
[  547.565546][ T5785]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  547.571825][ T5785]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  547.577501][ T5785]  ? mutex_unlock+0x10/0x10
[  547.582042][ T5785]  ? skb_pull_data+0xf0/0x1f0
[  547.586801][ T5785]  hci_le_enh_conn_complete_evt+0x189/0x460
[  547.592753][ T5785]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  547.599222][ T5785]  ? hci_remote_host_features_evt+0x150/0x150
[  547.605335][ T5785]  hci_event_packet+0x7b4/0x1280
[  547.610307][ T5785]  ? __lock_acquire+0x7eb0/0x7eb0
[  547.615367][ T5785]  ? lock_chain_count+0x20/0x20
[  547.620248][ T5785]  ? bis_list+0x290/0x290
[  547.624605][ T5785]  ? kcov_remote_start+0x513/0x810
[  547.629867][ T5785]  ? lockdep_hardirqs_on+0x98/0x150
[  547.635097][ T5785]  ? hci_send_to_monitor+0xd7/0x4f0
[  547.640323][ T5785]  hci_rx_work+0x43a/0xd60
[  547.644805][ T5785]  ? process_scheduled_works+0x975/0x1600
[  547.650568][ T5785]  process_scheduled_works+0xa60/0x1600
[  547.656173][ T5785]  ? worker_attach_to_pool+0x370/0x370
[  547.661671][ T5785]  ? assign_work+0x3cc/0x5d0
[  547.666298][ T5785]  worker_thread+0xa5e/0xfe0
[  547.670947][ T5785]  kthread+0x2fa/0x390
[  547.675052][ T5785]  ? pr_cont_work+0x550/0x550
[  547.679776][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  547.684482][ T5785]  ret_from_fork+0x48/0x80
[  547.688927][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  547.693549][ T5785]  ret_from_fork_asm+0x11/0x20
[  547.698364][ T5785]  </TASK>
[  547.807571][ T5785] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  547.824356][ T5785] Bluetooth: hci2: failed to register connection device
[  547.878115][T10952] loop1: detected capacity change from 0 to 8
[  548.038813][T10947] loop0: detected capacity change from 0 to 32768
[  548.101533][T10947] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  548.233240][T10947] XFS (loop0): Ending clean mount
[  548.241956][T10947] XFS (loop0): Quotacheck needed: Please wait.
[  548.316571][T10947] XFS (loop0): Quotacheck: Done.
[  548.517374][ T5841] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  548.727512][ T5841] usb 4-1: device descriptor read/64, error -71
[  549.403789][ T5780] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  549.719471][T10982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1176'.
[  549.867299][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  549.934807][ T5841] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  550.035261][T10986] loop1: detected capacity change from 0 to 4096
[  550.083329][T10986] NILFS (loop1): invalid segment: Checksum error in segment payload
[  550.131679][T10986] NILFS (loop1): trying rollback from an earlier position
[  550.139015][ T5841] usb 4-1: device descriptor read/64, error -71
[  550.256599][T10986] NILFS (loop1): recovery complete
[  550.269382][ T5841] usb usb4-port1: attempt power cycle
[  550.278549][T10990] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  550.727335][ T5841] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  550.771459][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'.
[  550.841767][ T5841] usb 4-1: device descriptor read/8, error -71
[  550.974972][   T27] audit: type=1800 audit(1792538228.296:114): pid=11001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1180" name="attr_allow_any_host" dev="configfs" ino=28906 res=0 errno=0
[  551.043177][T11001] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  551.217292][ T5841] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  551.251216][   T27] audit: type=1800 audit(1792538228.356:115): pid=11001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1180" name="addr_trtype" dev="configfs" ino=28907 res=0 errno=0
[  551.432018][ T5841] usb 4-1: device descriptor read/8, error -71
[  551.500697][ T5778] nvmet: creating nvm controller 23 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:57216630-948b-47ba-b5e6-756d5fc63688.
[  551.525719][T11001] nvme nvme22: creating 2 I/O queues.
[  551.577422][ T5841] usb usb4-port1: unable to enumerate USB device
[  551.597216][T11001] nvme nvme22: new ctrl: "testsubsys"
[  552.788317][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  552.797973][ T5789] CPU: 1 PID: 5789 Comm: kworker/u5:8 Not tainted syzkaller #0
[  552.805594][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  552.815794][ T5789] Workqueue: hci2 hci_rx_work
[  552.820556][ T5789] Call Trace:
[  552.823906][ T5789]  <TASK>
[  552.826883][ T5789]  dump_stack_lvl+0x18c/0x250
[  552.831634][ T5789]  ? show_regs_print_info+0x20/0x20
[  552.836891][ T5789]  ? load_image+0x420/0x420
[  552.841476][ T5789]  sysfs_create_dir_ns+0x26e/0x2a0
[  552.846648][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  552.851738][ T5789]  ? sysfs_warn_dup+0xa0/0xa0
[  552.856479][ T5789]  ? do_raw_spin_unlock+0x121/0x230
[  552.861746][ T5789]  kobject_add_internal+0x617/0xc90
[  552.867013][ T5789]  kobject_add+0x164/0x240
[  552.871515][ T5789]  ? kobject_init+0x1d0/0x1d0
[  552.876260][ T5789]  ? get_device_parent+0x366/0x390
[  552.881435][ T5789]  device_add+0x3fa/0xc40
[  552.885832][ T5789]  hci_conn_add_sysfs+0xd5/0x1e0
[  552.890841][ T5789]  le_conn_complete_evt+0xe9a/0x1480
[  552.896211][ T5789]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  552.902526][ T5789]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  552.908227][ T5789]  ? mutex_unlock+0x10/0x10
[  552.912805][ T5789]  ? skb_pull_data+0xf0/0x1f0
[  552.917541][ T5789]  hci_le_enh_conn_complete_evt+0x189/0x460
[  552.923513][ T5789]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  552.930006][ T5789]  ? hci_remote_host_features_evt+0x150/0x150
[  552.936229][ T5789]  hci_event_packet+0x7b4/0x1280
[  552.941258][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  552.946340][ T5789]  ? lock_chain_count+0x20/0x20
[  552.951246][ T5789]  ? bis_list+0x290/0x290
[  552.955628][ T5789]  ? kcov_remote_start+0x513/0x810
[  552.960797][ T5789]  ? lockdep_hardirqs_on+0x98/0x150
[  552.962636][T11020] loop0: detected capacity change from 0 to 8
[  552.966029][ T5789]  ? hci_send_to_monitor+0xd7/0x4f0
[  552.977357][ T5789]  hci_rx_work+0x43a/0xd60
[  552.981847][ T5789]  ? process_scheduled_works+0x975/0x1600
[  552.987631][ T5789]  process_scheduled_works+0xa60/0x1600
[  552.993278][ T5789]  ? worker_attach_to_pool+0x370/0x370
[  552.998810][ T5789]  ? assign_work+0x3cc/0x5d0
[  553.003475][ T5789]  worker_thread+0xa5e/0xfe0
[  553.008142][ T5789]  ? _raw_spin_unlock+0x40/0x40
[  553.013049][ T5789]  ? __kthread_parkme+0x71/0x1c0
[  553.018139][ T5789]  kthread+0x2fa/0x390
[  553.022282][ T5789]  ? pr_cont_work+0x550/0x550
[  553.027007][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  553.031646][ T5789]  ret_from_fork+0x48/0x80
[  553.036116][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  553.040851][ T5789]  ret_from_fork_asm+0x11/0x20
[  553.045693][ T5789]  </TASK>
[  553.054177][ T5789] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  553.068259][ T5789] Bluetooth: hci2: failed to register connection device
[  553.313548][T11026] loop3: detected capacity change from 0 to 32768
[  555.070281][   T27] audit: type=1800 audit(1792538232.356:116): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1186" name="idVendor" dev="configfs" ino=28423 res=0 errno=0
[  555.091892][   T27] audit: type=1800 audit(1792538232.376:117): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1186" name="idProduct" dev="configfs" ino=28424 res=0 errno=0
[  555.113104][   T27] audit: type=1800 audit(1792538232.386:118): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1186" name="serialnumber" dev="configfs" ino=28425 res=0 errno=0
[  555.147163][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  555.265247][T11033] Config c/1 of g1 needs at least one function.
[  555.272608][   T27] audit: type=1800 audit(1792538232.596:119): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1186" name="report_desc" dev="configfs" ino=28961 res=0 errno=0
[  555.288169][T11033] udc dummy_udc.0: failed to start g1: -22
[  555.334740][   T27] audit: type=1800 audit(1792538232.596:120): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1186" name="UDC" dev="configfs" ino=28962 res=0 errno=0
[  555.355098][T11033] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  555.365403][T11039] loop4: detected capacity change from 0 to 164
[  555.380187][T11033] UDC core: g1: couldn't find an available UDC or it's busy
[  555.439851][T11039] Unable to read rock-ridge attributes
[  555.967350][   T28] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  556.147362][   T28] usb 5-1: device descriptor read/64, error -71
[  556.357464][  T174] usb 2-1: new low-speed USB device number 25 using dummy_hcd
[  556.439737][   T28] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  556.549859][  T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  556.570950][  T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  556.586907][  T174] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  556.607155][   T28] usb 5-1: device descriptor read/64, error -71
[  556.627919][  T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.636339][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'.
[  556.663518][  T174] usb 2-1: config 0 descriptor??
[  556.750118][T11070] loop0: detected capacity change from 0 to 8
[  556.768307][   T28] usb usb5-port1: attempt power cycle
[  557.044576][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'.
[  557.092544][T11074] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1195'.
[  557.118921][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1196'.
[  557.156761][  T174] aquacomputer_d5next 0003:0C70:F0B6.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0
[  557.207117][   T28] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  557.267523][   T28] usb 5-1: device descriptor read/8, error -71
[  557.455929][  T174] usb 2-1: USB disconnect, device number 25
[  557.537410][   T28] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  557.608355][   T28] usb 5-1: device descriptor read/8, error -71
[  557.727375][   T28] usb usb5-port1: unable to enumerate USB device
[  558.317097][   T28] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  558.497080][   T28] usb 4-1: Using ep0 maxpacket: 32
[  558.524089][   T28] usb 4-1: unable to read config index 0 descriptor/start: -61
[  558.531987][   T28] usb 4-1: can't read configurations, error -61
[  558.687187][   T28] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  558.839105][T11097] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1201' resets device
[  558.887371][   T28] usb 4-1: Using ep0 maxpacket: 32
[  559.161692][   T28] usb 4-1: unable to read config index 0 descriptor/start: -61
[  559.290169][   T28] usb 4-1: can't read configurations, error -61
[  559.436131][   T28] usb usb4-port1: attempt power cycle
[  559.933265][T11105] loop4: detected capacity change from 0 to 8
[  560.019256][T11106] loop0: detected capacity change from 0 to 256
[  560.197737][   T28] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  560.451184][   T28] usb 4-1: Using ep0 maxpacket: 32
[  560.592980][   T28] usb 4-1: unable to read config index 0 descriptor/start: -61
[  560.740850][   T28] usb 4-1: can't read configurations, error -61
[  560.977169][   T28] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  561.060519][   T28] usb 4-1: device descriptor read/8, error -71
[  561.188489][   T28] usb usb4-port1: unable to enumerate USB device
[  561.220446][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'.
[  561.299436][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1207'.
[  561.329873][T11112] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1206'.
[  562.715459][   T27] audit: type=1800 audit(1792538240.046:121): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1212" name="idVendor" dev="configfs" ino=29143 res=0 errno=0
[  562.743085][   T27] audit: type=1800 audit(1792538240.046:122): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1212" name="idProduct" dev="configfs" ino=29144 res=0 errno=0
[  562.765174][   T27] audit: type=1800 audit(1792538240.056:123): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1212" name="serialnumber" dev="configfs" ino=29145 res=0 errno=0
[  562.786343][   T27] audit: type=1800 audit(1792538240.056:124): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1212" name="report_desc" dev="configfs" ino=29146 res=0 errno=0
[  562.808964][   T27] audit: type=1800 audit(1792538240.066:125): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1212" name="UDC" dev="configfs" ino=29147 res=0 errno=0
[  562.829590][T11127] UDC core: g1: couldn't find an available UDC or it's busy
[  563.055574][  T174] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  563.072639][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  563.079256][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  563.167811][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'.
[  563.357185][  T174] usb 1-1: device descriptor read/64, error -71
[  563.687144][  T174] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  563.877221][  T174] usb 1-1: device descriptor read/64, error -71
[  564.037294][  T174] usb usb1-port1: attempt power cycle
[  564.271766][T11137] loop4: detected capacity change from 0 to 32768
[  564.298413][T11137] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  564.477165][  T174] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  564.537796][  T174] usb 1-1: device descriptor read/8, error -71
[  564.579582][ T5790] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  564.709216][T11146] loop4: detected capacity change from 0 to 8
[  564.817322][  T174] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  564.975967][  T174] usb 1-1: device descriptor read/8, error -71
[  565.099169][  T174] usb usb1-port1: unable to enumerate USB device
[  565.117436][T11150] overlayfs: missing 'lowerdir'
[  565.127180][ T5836] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  565.424897][T11153] loop0: detected capacity change from 0 to 32768
[  565.457135][ T5836] usb 2-1: Using ep0 maxpacket: 32
[  565.476174][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -61
[  566.328082][ T5836] usb 2-1: can't read configurations, error -61
[  566.477630][ T5836] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  566.601630][T11163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1222'.
[  566.837104][ T5836] usb 2-1: Using ep0 maxpacket: 32
[  566.846817][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -61
[  566.857729][ T5836] usb 2-1: can't read configurations, error -61
[  567.150517][ T5836] usb usb2-port1: attempt power cycle
[  567.577123][ T5836] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  567.625814][ T5836] usb 2-1: Using ep0 maxpacket: 32
[  567.641515][   T27] audit: type=1800 audit(1792538244.976:126): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1224" name="no_out_endpoint" dev="configfs" ino=29312 res=0 errno=0
[  567.674573][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -61
[  567.707349][ T5836] usb 2-1: can't read configurations, error -61
[  567.885628][ T5836] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  568.039126][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  568.048909][ T5789] CPU: 1 PID: 5789 Comm: kworker/u5:8 Not tainted syzkaller #0
[  568.056505][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  568.066604][ T5789] Workqueue: hci0 hci_rx_work
[  568.071387][ T5789] Call Trace:
[  568.074714][ T5789]  <TASK>
[  568.077684][ T5789]  dump_stack_lvl+0x18c/0x250
[  568.082417][ T5789]  ? show_regs_print_info+0x20/0x20
[  568.087672][ T5789]  ? load_image+0x420/0x420
[  568.092252][ T5789]  sysfs_create_dir_ns+0x26e/0x2a0
[  568.097412][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  568.102489][ T5789]  ? sysfs_warn_dup+0xa0/0xa0
[  568.107202][ T5789]  ? do_raw_spin_unlock+0x121/0x230
[  568.112438][ T5789]  kobject_add_internal+0x617/0xc90
[  568.117680][ T5789]  kobject_add+0x164/0x240
[  568.122136][ T5789]  ? kobject_init+0x1d0/0x1d0
[  568.126868][ T5789]  ? get_device_parent+0x366/0x390
[  568.132020][ T5789]  device_add+0x3fa/0xc40
[  568.136391][ T5789]  hci_conn_add_sysfs+0xd5/0x1e0
[  568.141366][ T5789]  le_conn_complete_evt+0xe9a/0x1480
[  568.146729][ T5789]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  568.153048][ T5789]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  568.158734][ T5789]  ? mutex_unlock+0x10/0x10
[  568.163273][ T5789]  ? skb_pull_data+0xf0/0x1f0
[  568.167990][ T5789]  hci_le_enh_conn_complete_evt+0x189/0x460
[  568.173947][ T5789]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  568.180400][ T5789]  ? hci_remote_host_features_evt+0x150/0x150
[  568.186488][ T5789]  hci_event_packet+0x7b4/0x1280
[  568.191458][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  568.196512][ T5789]  ? lock_chain_count+0x20/0x20
[  568.201482][ T5789]  ? bis_list+0x290/0x290
[  568.205853][ T5789]  ? kcov_remote_start+0x513/0x810
[  568.211000][ T5789]  ? lockdep_hardirqs_on+0x98/0x150
[  568.216236][ T5789]  ? hci_send_to_monitor+0xd7/0x4f0
[  568.221510][ T5789]  hci_rx_work+0x43a/0xd60
[  568.226433][ T5789]  ? process_scheduled_works+0x975/0x1600
[  568.232289][ T5789]  process_scheduled_works+0xa60/0x1600
[  568.237906][ T5789]  ? worker_attach_to_pool+0x370/0x370
[  568.243417][ T5789]  ? assign_work+0x3cc/0x5d0
[  568.248065][ T5789]  worker_thread+0xa5e/0xfe0
[  568.252706][ T5789]  ? _raw_spin_unlock+0x40/0x40
[  568.257607][ T5789]  ? __kthread_parkme+0x71/0x1c0
[  568.262591][ T5789]  kthread+0x2fa/0x390
[  568.266688][ T5789]  ? pr_cont_work+0x550/0x550
[  568.271412][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  568.276031][ T5789]  ret_from_fork+0x48/0x80
[  568.280508][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  568.285125][ T5789]  ret_from_fork_asm+0x11/0x20
[  568.289935][ T5789]  </TASK>
[  568.295500][ T5789] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  568.303709][ T5836] usb 2-1: device not accepting address 29, error -71
[  568.309499][ T5789] Bluetooth: hci0: failed to register connection device
[  568.379225][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'.
[  568.391532][ T5836] usb usb2-port1: unable to enumerate USB device
[  568.687175][  T174] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  568.723006][T11185] loop0: detected capacity change from 0 to 8
[  568.881898][  T174] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  568.893236][  T174] usb 4-1: config 0 interface 0 has no altsetting 0
[  568.909258][  T174] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  568.926044][  T174] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  568.946332][  T174] usb 4-1: Product: syz
[  568.953342][  T174] usb 4-1: Manufacturer: syz
[  568.962174][  T174] usb 4-1: SerialNumber: syz
[  568.973042][  T174] usb 4-1: config 0 descriptor??
[  568.990895][  T174] usb 4-1: selecting invalid altsetting 0
[  569.229584][   T28] usb 4-1: USB disconnect, device number 46
[  569.971410][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880320b3400: rx timeout, send abort
[  569.987092][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880320b3400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  570.054455][T11193] loop1: detected capacity change from 0 to 32768
[  570.278516][T11193] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  570.347299][ T5789] Bluetooth: hci0: command 0x0406 tx timeout
[  570.407421][T11193] XFS (loop1): Ending clean mount
[  570.423831][T11193] XFS (loop1): Quotacheck needed: Please wait.
[  570.521529][T11193] XFS (loop1): Quotacheck: Done.
[  570.772392][T11210] loop0: detected capacity change from 0 to 4096
[  571.039109][T11210] NILFS (loop0): invalid segment: Checksum error in segment payload
[  571.098116][T11210] NILFS (loop0): trying rollback from an earlier position
[  571.203688][T11210] NILFS (loop0): recovery complete
[  571.266916][T11220] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  571.373039][T11210] NILFS (loop0): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  571.425290][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  571.690425][    T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  571.898842][    T8] usb 5-1: Using ep0 maxpacket: 32
[  571.920003][    T8] usb 5-1: unable to read config index 0 descriptor/start: -61
[  571.940267][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'.
[  571.994961][    T8] usb 5-1: can't read configurations, error -61
[  572.187187][    T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  574.648204][    T8] usb 5-1: Using ep0 maxpacket: 32
[  574.654439][    T8] usb 5-1: device descriptor read/all, error -71
[  574.661190][    T8] usb usb5-port1: attempt power cycle
[  574.717734][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  574.727440][ T5789] CPU: 1 PID: 5789 Comm: kworker/u5:8 Not tainted syzkaller #0
[  574.735042][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  574.745146][ T5789] Workqueue: hci2 hci_rx_work
[  574.749892][ T5789] Call Trace:
[  574.753181][ T5789]  <TASK>
[  574.756119][ T5789]  dump_stack_lvl+0x18c/0x250
[  574.760818][ T5789]  ? show_regs_print_info+0x20/0x20
[  574.766027][ T5789]  ? load_image+0x420/0x420
[  574.770555][ T5789]  sysfs_create_dir_ns+0x26e/0x2a0
[  574.775673][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  574.780730][ T5789]  ? sysfs_warn_dup+0xa0/0xa0
[  574.785416][ T5789]  ? do_raw_spin_unlock+0x121/0x230
[  574.790625][ T5789]  kobject_add_internal+0x617/0xc90
[  574.795833][ T5789]  kobject_add+0x164/0x240
[  574.800267][ T5789]  ? kobject_init+0x1d0/0x1d0
[  574.804958][ T5789]  ? get_device_parent+0x366/0x390
[  574.810085][ T5789]  device_add+0x3fa/0xc40
[  574.814435][ T5789]  hci_conn_add_sysfs+0xd5/0x1e0
[  574.819389][ T5789]  le_conn_complete_evt+0xe9a/0x1480
[  574.824719][ T5789]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  574.830998][ T5789]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  574.836648][ T5789]  ? mutex_unlock+0x10/0x10
[  574.841158][ T5789]  ? skb_pull_data+0xf0/0x1f0
[  574.845879][ T5789]  hci_le_enh_conn_complete_evt+0x189/0x460
[  574.851796][ T5789]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  574.858237][ T5789]  ? hci_remote_host_features_evt+0x150/0x150
[  574.864317][ T5789]  hci_event_packet+0x7b4/0x1280
[  574.869271][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  574.874309][ T5789]  ? lock_chain_count+0x20/0x20
[  574.879168][ T5789]  ? bis_list+0x290/0x290
[  574.883511][ T5789]  ? kcov_remote_start+0x513/0x810
[  574.888650][ T5789]  ? lockdep_hardirqs_on+0x98/0x150
[  574.893866][ T5789]  ? hci_send_to_monitor+0xd7/0x4f0
[  574.899077][ T5789]  hci_rx_work+0x43a/0xd60
[  574.903517][ T5789]  ? process_scheduled_works+0x975/0x1600
[  574.909250][ T5789]  process_scheduled_works+0xa60/0x1600
[  574.914830][ T5789]  ? worker_attach_to_pool+0x370/0x370
[  574.920311][ T5789]  ? assign_work+0x3cc/0x5d0
[  574.924924][ T5789]  worker_thread+0xa5e/0xfe0
[  574.929534][ T5789]  ? _raw_spin_unlock+0x40/0x40
[  574.934398][ T5789]  ? __kthread_parkme+0x71/0x1c0
[  574.939354][ T5789]  kthread+0x2fa/0x390
[  574.943434][ T5789]  ? pr_cont_work+0x550/0x550
[  574.948146][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  574.952785][ T5789]  ret_from_fork+0x48/0x80
[  574.957229][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  574.961868][ T5789]  ret_from_fork_asm+0x11/0x20
[  574.966695][ T5789]  </TASK>
[  575.001166][ T5789] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  575.015894][ T5789] Bluetooth: hci2: failed to register connection device
[  575.027443][T11250] loop0: detected capacity change from 0 to 256
[  577.067125][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  578.157651][   T28] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  578.281822][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1247'.
[  578.539497][   T28] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  578.551230][   T28] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  578.565406][   T28] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  578.597299][    T8] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  578.897189][    T8] usb 4-1: Using ep0 maxpacket: 32
[  578.915446][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  578.962638][    T8] usb 4-1: config 0 has no interfaces?
[  578.981243][   T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  578.990054][   T28] usb 2-1: SerialNumber: syz
[  579.003869][    T8] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  579.005438][   T28] usb 2-1: bad CDC descriptors
[  579.034103][   T28] usb-storage 2-1:1.0: USB Mass Storage device detected
[  579.034529][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.070313][   T28] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  579.072055][    T8] usb 4-1: Product: syz
[  579.094130][    T8] usb 4-1: Manufacturer: syz
[  579.099607][   T28] scsi host1: usb-storage 2-1:1.0
[  580.091811][    T8] usb 4-1: SerialNumber: syz
[  580.131091][    T8] usb 4-1: config 0 descriptor??
[  580.152892][T11301] loop0: detected capacity change from 0 to 256
[  580.924429][   T28] usb 2-1: USB disconnect, device number 30
[  580.991494][ T5836] usb 4-1: USB disconnect, device number 47
[  581.243886][ T5873] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  582.325279][ T5873] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  582.357060][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.365356][ T5873] usb 5-1: Product: syz
[  582.375470][ T5873] usb 5-1: Manufacturer: syz
[  582.385816][ T5873] usb 5-1: SerialNumber: syz
[  582.479958][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  582.489812][ T5789] CPU: 0 PID: 5789 Comm: kworker/u5:8 Not tainted syzkaller #0
[  582.497409][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  582.507502][ T5789] Workqueue: hci0 hci_rx_work
[  582.512234][ T5789] Call Trace:
[  582.515554][ T5789]  <TASK>
[  582.518567][ T5789]  dump_stack_lvl+0x18c/0x250
[  582.523290][ T5789]  ? show_regs_print_info+0x20/0x20
[  582.528530][ T5789]  ? load_image+0x420/0x420
[  582.533185][ T5789]  sysfs_create_dir_ns+0x26e/0x2a0
[  582.538338][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  582.543409][ T5789]  ? sysfs_warn_dup+0xa0/0xa0
[  582.548140][ T5789]  ? do_raw_spin_unlock+0x121/0x230
[  582.553406][ T5789]  kobject_add_internal+0x617/0xc90
[  582.558662][ T5789]  kobject_add+0x164/0x240
[  582.563130][ T5789]  ? kobject_init+0x1d0/0x1d0
[  582.567852][ T5789]  ? get_device_parent+0x366/0x390
[  582.573015][ T5789]  device_add+0x3fa/0xc40
[  582.577405][ T5789]  hci_conn_add_sysfs+0xd5/0x1e0
[  582.582392][ T5789]  le_conn_complete_evt+0xe9a/0x1480
[  582.587735][ T5789]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  582.594026][ T5789]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  582.599713][ T5789]  ? mutex_unlock+0x10/0x10
[  582.604284][ T5789]  ? skb_pull_data+0xf0/0x1f0
[  582.609020][ T5789]  hci_le_enh_conn_complete_evt+0x189/0x460
[  582.614959][ T5789]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  582.621419][ T5789]  ? hci_remote_host_features_evt+0x150/0x150
[  582.627532][ T5789]  hci_event_packet+0x7b4/0x1280
[  582.632517][ T5789]  ? __lock_acquire+0x7eb0/0x7eb0
[  582.637588][ T5789]  ? lock_chain_count+0x20/0x20
[  582.642586][ T5789]  ? bis_list+0x290/0x290
[  582.647004][ T5789]  ? kcov_remote_start+0x513/0x810
[  582.652170][ T5789]  ? lockdep_hardirqs_on+0x98/0x150
[  582.657452][ T5789]  ? hci_send_to_monitor+0xd7/0x4f0
[  582.662697][ T5789]  hci_rx_work+0x43a/0xd60
[  582.667170][ T5789]  ? process_scheduled_works+0x975/0x1600
[  582.672945][ T5789]  process_scheduled_works+0xa60/0x1600
[  582.678650][ T5789]  ? worker_attach_to_pool+0x370/0x370
[  582.684162][ T5789]  ? assign_work+0x3cc/0x5d0
[  582.688814][ T5789]  worker_thread+0xa5e/0xfe0
[  582.693453][ T5789]  ? _raw_spin_unlock+0x40/0x40
[  582.698434][ T5789]  ? __kthread_parkme+0x71/0x1c0
[  582.703419][ T5789]  kthread+0x2fa/0x390
[  582.707529][ T5789]  ? pr_cont_work+0x550/0x550
[  582.712243][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  582.716869][ T5789]  ret_from_fork+0x48/0x80
[  582.721366][ T5789]  ? kthread_blkcg+0xd0/0xd0
[  582.726089][ T5789]  ret_from_fork_asm+0x11/0x20
[  582.730914][ T5789]  </TASK>
[  582.735507][ T5789] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  582.750257][ T5789] Bluetooth: hci0: failed to register connection device
[  582.992159][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  583.660149][T11311] loop0: detected capacity change from 0 to 32768
[  583.680689][T11311] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  583.692640][T11311] JBD2: Ignoring recovery information on journal
[  583.748288][T11311] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  583.775360][   T27] audit: type=1800 audit(1792538261.106:127): pid=11323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1256" name="idVendor" dev="configfs" ino=29950 res=0 errno=0
[  583.846548][   T27] audit: type=1800 audit(1792538261.116:128): pid=11323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1256" name="idProduct" dev="configfs" ino=29951 res=0 errno=0
[  583.886182][   T27] audit: type=1800 audit(1792538261.116:129): pid=11323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1256" name="serialnumber" dev="configfs" ino=29952 res=0 errno=0
[  583.907590][   T27] audit: type=1800 audit(1792538261.116:130): pid=11323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1256" name="report_desc" dev="configfs" ino=29953 res=0 errno=0
[  583.968900][   T27] audit: type=1800 audit(1792538261.126:131): pid=11323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1256" name="UDC" dev="configfs" ino=29954 res=0 errno=0
[  584.033666][T11325] loop3: detected capacity change from 0 to 8
[  584.108157][T11311] loop0: detected capacity change from 32768 to 64
[  584.151605][T11326] (syz.0.1253,11326,1):ocfs2_do_extend_dir:3153 ERROR: status = -12
[  584.197592][T11326] (syz.0.1253,11326,1):ocfs2_fill_new_dir_el:2258 ERROR: status = -12
[  584.234464][T11326] (syz.0.1253,11326,1):ocfs2_mknod:394 ERROR: status = -12
[  584.295714][T11321] jbd2/loop0-75: attempt to access beyond end of device
[  584.295714][T11321] loop0: rw=38913, sector=642, nr_sectors = 1 limit=64
[  584.311118][T11311] syz.0.1253 (11311) used greatest stack depth: 18264 bytes left
[  584.324308][T11321] jbd2/loop0-75: attempt to access beyond end of device
[  584.324308][T11321] loop0: rw=38913, sector=643, nr_sectors = 1 limit=64
[  584.344300][T11321] jbd2/loop0-75: attempt to access beyond end of device
[  584.344300][T11321] loop0: rw=38913, sector=644, nr_sectors = 1 limit=64
[  584.365299][T11321] jbd2/loop0-75: attempt to access beyond end of device
[  584.365299][T11321] loop0: rw=38913, sector=645, nr_sectors = 1 limit=64
[  584.383212][T11321] jbd2/loop0-75: attempt to access beyond end of device
[  584.383212][T11321] loop0: rw=38913, sector=646, nr_sectors = 1 limit=64
[  584.399339][T11321] jbd2/loop0-75: attempt to access beyond end of device
[  584.399339][T11321] loop0: rw=38913, sector=647, nr_sectors = 1 limit=64
[  584.415250][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[  584.432526][T11321] jbd2/loop0-75: attempt to access beyond end of device
[  584.432526][T11321] loop0: rw=38913, sector=648, nr_sectors = 1 limit=64
[  584.448820][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71
[  584.460459][T11321] jbd2/loop0-75: attempt to access beyond end of device
[  584.460459][T11321] loop0: rw=38913, sector=649, nr_sectors = 1 limit=64
[  584.475719][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71
[  584.489627][T11321] jbd2/loop0-75: attempt to access beyond end of device
[  584.489627][T11321] loop0: rw=38913, sector=650, nr_sectors = 1 limit=64
[  584.504429][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71
[  584.516465][T11321] jbd2/loop0-75: attempt to access beyond end of device
[  584.516465][T11321] loop0: rw=38913, sector=651, nr_sectors = 1 limit=64
[  584.531530][T11321] Aborting journal on device loop0-75.
[  584.538180][T11326] (syz.0.1253,11326,1):__ocfs2_journal_access:731 ERROR: Error -30 getting 1 access to buffer!
[  584.539457][ T5836] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  584.557584][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71
[  584.567519][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71
[  584.582672][T11321] Buffer I/O error on dev loop0, logical block 640, lost sync page write
[  584.589480][T11326] (syz.0.1253,11326,1):ocfs2_truncate_log_append:5887 ERROR: status = -30
[  584.602926][T11321] JBD2: I/O error when updating journal superblock for loop0-75.
[  584.615532][T11326] (syz.0.1253,11326,0):ocfs2_remove_btree_range:5792 ERROR: status = -30
[  584.624862][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71
[  584.639193][T11326] (syz.0.1253,11326,0):ocfs2_commit_trans:404 ERROR: status = -5
[  584.647905][T11326] (syz.0.1253,11326,0):ocfs2_commit_truncate:7357 ERROR: status = -30
[  584.657193][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71
[  584.660046][T11326] (syz.0.1253,11326,0):ocfs2_truncate_for_delete:658 ERROR: status = -30
[  584.679425][T11326] (syz.0.1253,11326,0):ocfs2_wipe_inode:825 ERROR: status = -30
[  584.681930][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71
[  584.691420][T11326] (syz.0.1253,11326,0):ocfs2_delete_inode:1115 ERROR: status = -30
[  584.710669][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  584.722527][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  584.734616][T11326] (syz.0.1253,11326,0):ocfs2_mknod:504 ERROR: status = -12
[  584.744514][T11326] (syz.0.1253,11326,0):ocfs2_mkdir:661 ERROR: status = -12
[  584.756092][ T5873] lan78xx: probe of 5-1:1.0 failed with error -71
[  584.802856][ T5873] usb 5-1: USB disconnect, device number 33
[  584.810461][ T5836] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  584.826764][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0
[  584.829971][ T5780] (syz-executor,5780,1):ocfs2_read_locked_inode:554 ERROR: status = -5
[  584.834357][ T5789] Bluetooth: hci0: command 0x0406 tx timeout
[  584.859312][ T5780] (syz-executor,5780,1):ocfs2_read_locked_inode:554 ERROR: status = -5
[  584.876073][ T5836] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  584.891187][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  584.900124][ T5836] usb 2-1: Product: syz
[  584.904363][ T5836] usb 2-1: Manufacturer: syz
[  584.909852][ T5836] usb 2-1: SerialNumber: syz
[  584.917935][ T5836] usb 2-1: config 0 descriptor??
[  584.930666][ T5836] usb 2-1: selecting invalid altsetting 0
[  585.335023][ T5881] usb 2-1: USB disconnect, device number 31
[  586.274413][ T4240] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.430234][ T4240] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.585523][ T4240] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.727376][ T5881] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  586.937278][ T5881] usb 2-1: Using ep0 maxpacket: 32
[  586.964645][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  586.981231][ T4240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.013463][ T5881] usb 2-1: config 0 has no interfaces?
[  587.065983][ T5881] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  587.104566][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.165631][ T5881] usb 2-1: Product: syz
[  587.197807][ T5881] usb 2-1: Manufacturer: syz
[  587.215055][ T5881] usb 2-1: SerialNumber: syz
[  587.255952][ T5881] usb 2-1: config 0 descriptor??
[  587.524677][ T5780] (syz-executor,5780,0):ocfs2_start_trans:379 ERROR: status = -30
[  587.533162][ T5780] OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal
[  587.566751][ T5780] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  587.596721][ T5780] OCFS2: File system is now read-only.
[  587.615971][ T5780] (syz-executor,5780,0):ocfs2_shutdown_local_alloc:418 ERROR: status = -30
[  587.625619][ T4240] tipc: Left network mode
[  587.637454][ T5780] Buffer I/O error on dev loop0, logical block 17024, lost sync page write
[  587.684779][ T5780] (syz-executor,5780,0):ocfs2_write_block:78 ERROR: status = -5
[  587.721869][ T5780] (syz-executor,5780,0):ocfs2_update_disk_slot:199 ERROR: status = -5
[  587.741979][ T5881] usb 2-1: USB disconnect, device number 32
[  587.755446][ T5780] (syz-executor,5780,0):ocfs2_put_slot:517 ERROR: status = -5
[  587.778198][ T5780] (syz-executor,5780,0):ocfs2_journal_shutdown:1108 ERROR: status = -5
[  587.841664][ T5780] ocfs2: Unmounting device (7,0) on (node local)
[  587.864939][   T27] audit: type=1800 audit(1792538265.186:132): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1266" name="idVendor" dev="configfs" ino=30917 res=0 errno=0
[  587.880664][T11352] Config c/1 of g1 needs at least one function.
[  587.942182][   T27] audit: type=1800 audit(1792538265.186:133): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1266" name="idProduct" dev="configfs" ino=30918 res=0 errno=0
[  587.954359][T11352] udc dummy_udc.0: failed to start g1: -22
[  588.010591][   T27] audit: type=1800 audit(1792538265.186:134): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1266" name="serialnumber" dev="configfs" ino=30919 res=0 errno=0
[  588.027105][T11352] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  588.061526][   T27] audit: type=1800 audit(1792538265.196:135): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1266" name="report_desc" dev="configfs" ino=30920 res=0 errno=0
[  588.083996][ T4240] bond1: (slave ip6gretap1): Removing an active aggregator
[  588.106820][   T27] audit: type=1800 audit(1792538265.196:136): pid=11352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1266" name="UDC" dev="configfs" ino=30921 res=0 errno=0
[  588.118549][ T4240] bond1: (slave ip6gretap1): Releasing backup interface
[  588.131068][T11352] UDC core: g1: couldn't find an available UDC or it's busy
[  588.203110][ T4240] ip6gretap1 (unregistering): left allmulticast mode
[  588.982416][T11370] loop1: detected capacity change from 0 to 256
[  589.018856][T11370] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  589.886122][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  589.913498][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  589.930952][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  589.940078][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  589.950816][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  589.961288][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  590.017072][  T174] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  590.209539][  T174] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  590.237059][  T174] usb 5-1: config 0 interface 0 has no altsetting 0
[  590.259956][  T174] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  590.285633][  T174] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  590.304969][  T174] usb 5-1: Product: syz
[  590.314770][  T174] usb 5-1: Manufacturer: syz
[  590.322329][T11385] rxe_eth0 speed is unknown, defaulting to 1000
[  590.325118][  T174] usb 5-1: SerialNumber: syz
[  590.373106][  T174] usb 5-1: config 0 descriptor??
[  590.628573][  T174] usb 5-1: selecting invalid altsetting 0
[  590.917212][ T5778] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  590.958143][ T5881] usb 5-1: USB disconnect, device number 34
[  591.128484][ T5778] usb 2-1: Using ep0 maxpacket: 32
[  591.153027][ T5778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  591.178736][ T5778] usb 2-1: config 0 has no interfaces?
[  591.205653][ T5778] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  591.228668][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.255628][ T5778] usb 2-1: Product: syz
[  591.266130][ T5778] usb 2-1: Manufacturer: syz
[  591.291509][ T5778] usb 2-1: SerialNumber: syz
[  591.365959][ T5778] usb 2-1: config 0 descriptor??
[  591.440219][   T27] audit: type=1800 audit(1792538268.776:137): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1278" name="idVendor" dev="configfs" ino=30273 res=0 errno=0
[  591.467325][T11411] Config c/1 of g1 needs at least one function.
[  591.473739][T11411] udc dummy_udc.0: failed to start g1: -22
[  591.480333][T11411] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  591.490968][T11411] UDC core: g1: couldn't find an available UDC or it's busy
[  591.498689][   T27] audit: type=1800 audit(1792538268.796:138): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1278" name="idProduct" dev="configfs" ino=30274 res=0 errno=0
[  591.552715][   T27] audit: type=1800 audit(1792538268.796:139): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1278" name="serialnumber" dev="configfs" ino=30275 res=0 errno=0
[  591.631448][   T27] audit: type=1800 audit(1792538268.796:140): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1278" name="report_desc" dev="configfs" ino=30276 res=0 errno=0
[  591.707113][   T27] audit: type=1800 audit(1792538268.796:141): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1278" name="UDC" dev="configfs" ino=30277 res=0 errno=0
[  591.773805][ T4240] hsr_slave_0: left promiscuous mode
[  591.785846][ T4240] hsr_slave_1: left promiscuous mode
[  591.803052][ T5881] usb 2-1: USB disconnect, device number 33
[  591.810814][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  591.823455][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0
[  591.835659][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  591.849723][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1
[  591.879019][ T4240] bridge_slave_1: left allmulticast mode
[  591.884755][ T4240] bridge_slave_1: left promiscuous mode
[  592.004419][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.027809][ T5785] Bluetooth: hci3: command tx timeout
[  592.216241][ T4240] bridge_slave_0: left allmulticast mode
[  592.237032][ T4240] bridge_slave_0: left promiscuous mode
[  592.257276][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.350676][ T4240] veth1_macvtap: left promiscuous mode
[  592.360536][ T4240] veth0_macvtap: left promiscuous mode
[  592.366272][ T4240] veth1_vlan: left promiscuous mode
[  592.373377][ T4240] veth0_vlan: left promiscuous mode
[  592.658196][ T4240] bond11 (unregistering): Released all slaves
[  592.698544][ T4240] bond10 (unregistering): Released all slaves
[  592.741423][ T4240] bond9 (unregistering): Released all slaves
[  592.802355][ T4240] bond8 (unregistering): Released all slaves
[  592.840475][ T4240] bond7 (unregistering): Released all slaves
[  592.863283][ T4240] bond6 (unregistering): Released all slaves
[  592.903262][ T4240] bond5 (unregistering): Released all slaves
[  592.935863][ T4240] bond4 (unregistering): Released all slaves
[  592.958836][ T4240] bond3 (unregistering): Released all slaves
[  592.986174][ T4240] bond2 (unregistering): Released all slaves
[  593.025351][ T4240] bond0 (unregistering): Released all slaves
[  593.481357][ T4240] bond1 (unregistering): Released all slaves
[  593.661357][T11437] rnbd_client L602: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0)
[  593.818740][ T3509] rtrs_client L1788: <s0>: Resolving route failed, err: -19
[  594.006583][T11437] rtrs_client L2626: <s0>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  594.109496][ T5785] Bluetooth: hci3: command tx timeout
[  594.286194][  T174] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  594.489359][  T174] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  594.499650][  T174] usb 2-1: config 0 interface 0 has no altsetting 0
[  594.509569][  T174] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  594.519124][  T174] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  594.539233][  T174] usb 2-1: Product: syz
[  594.545375][  T174] usb 2-1: Manufacturer: syz
[  594.554844][  T174] usb 2-1: SerialNumber: syz
[  594.570806][  T174] usb 2-1: config 0 descriptor??
[  594.588824][  T174] usb 2-1: selecting invalid altsetting 0
[  594.627070][ T5836] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  594.831992][   T28] usb 2-1: USB disconnect, device number 34
[  594.848443][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  594.866844][ T5836] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  594.876810][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.894041][ T5836] usb 4-1: Product: syz
[  594.905944][ T5836] usb 4-1: Manufacturer: syz
[  594.923828][ T5836] usb 4-1: SerialNumber: syz
[  594.958495][ T5836] usb 4-1: config 0 descriptor??
[  594.996832][ T4240] team0 (unregistering): Port device team_slave_1 removed
[  595.073116][ T4240] team0 (unregistering): Port device team_slave_0 removed
[  595.185369][ T5836] cdc_subset: probe of 4-1:0.0 failed with error -22
[  595.422660][  T174] usb 4-1: USB disconnect, device number 48
[  596.159470][   T27] audit: type=1800 audit(1792538273.496:142): pid=11450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1292" name="no_out_endpoint" dev="configfs" ino=30352 res=0 errno=0
[  596.189779][ T5785] Bluetooth: hci3: command tx timeout
[  597.227220][  T174] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  597.398805][T11465] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  597.437174][  T174] usb 5-1: Using ep0 maxpacket: 32
[  597.515972][  T174] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  597.562937][  T174] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  597.623535][  T174] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  597.635598][T11385] chnl_net:caif_netlink_parms(): no params data found
[  597.659283][  T174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.691103][  T174] usb 5-1: Product: syz
[  597.712053][  T174] usb 5-1: Manufacturer: syz
[  597.726801][  T174] usb 5-1: SerialNumber: syz
[  597.761517][  T174] usb 5-1: config 0 descriptor??
[  598.041791][T11385] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.074258][T11469] loop1: detected capacity change from 0 to 32768
[  598.079374][T11385] bridge0: port 1(bridge_slave_0) entered disabled state
[  598.131280][T11385] bridge_slave_0: entered allmulticast mode
[  598.161617][T11385] bridge_slave_0: entered promiscuous mode
[  598.169702][T11469] JBD2: Ignoring recovery information on journal
[  598.258705][T11385] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.265930][T11385] bridge0: port 2(bridge_slave_1) entered disabled state
[  598.275773][ T5785] Bluetooth: hci3: command tx timeout
[  598.284343][T11469] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  598.317367][T11385] bridge_slave_1: entered allmulticast mode
[  598.339520][  T174] usb 5-1: USB disconnect, device number 35
[  598.357675][T11385] bridge_slave_1: entered promiscuous mode
[  598.541860][T11385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  598.585611][T11385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  598.663182][ T5772] ocfs2: Unmounting device (7,1) on (node local)
[  598.705267][T11385] team0: Port device team_slave_0 added
[  598.716193][T11385] team0: Port device team_slave_1 added
[  598.806093][T11385] batman_adv: batadv0: Adding interface: batadv_slave_0
[  598.817206][T11385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  598.887053][T11385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  598.920059][T11385] batman_adv: batadv0: Adding interface: batadv_slave_1
[  598.937739][T11385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  598.997077][T11385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  599.106688][T11498] jffs2: notice: (11498) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  599.153995][T11385] hsr_slave_0: entered promiscuous mode
[  599.161340][T11385] hsr_slave_1: entered promiscuous mode
[  599.280883][T11498] loop4: detected capacity change from 0 to 164
[  599.467229][  T174] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  599.667299][  T174] usb 2-1: Using ep0 maxpacket: 16
[  599.737933][  T174] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  599.777186][  T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.823963][  T174] usb 2-1: Product: syz
[  599.840025][  T174] usb 2-1: Manufacturer: syz
[  599.844787][  T174] usb 2-1: SerialNumber: syz
[  599.966518][T11385] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  600.027107][T11385] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  600.049737][T11385] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  600.085327][T11385] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  600.177944][  T174] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  600.248528][  T174] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  600.427159][T11385] 8021q: adding VLAN 0 to HW filter on device bond0
[  600.540644][ T5789] Bluetooth: hci1: command 0x0406 tx timeout
[  601.127077][  T174] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  601.134667][T11385] 8021q: adding VLAN 0 to HW filter on device team0
[  601.138015][  T174] usb 2-1: media controller created
[  601.169813][  T174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  601.217192][  T174] zl10353_read_register: readreg error (reg=127, ret==-71)
[  601.241128][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.248366][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.268897][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.276097][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.334910][T11523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1305'.
[  601.390594][  T174] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  601.436521][  T174] usb 2-1: USB disconnect, device number 35
[  602.806770][T11543] net_ratelimit: 1 callbacks suppressed
[  602.806886][T11543] ip_tables: iptables: counters copy to user failed while replacing table
[  603.546096][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1310'.
[  604.543296][T11550] veth0_to_bond: entered promiscuous mode
[  604.549186][T11550] veth0_to_bond: entered allmulticast mode
[  604.577397][T11553] netlink: 'syz.4.1309': attribute type 12 has an invalid length.
[  604.727162][T11385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.989124][ T5841] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  605.304797][ T5841] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  605.434493][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.552119][ T5841] usb 5-1: Product: syz
[  605.642606][ T5841] usb 5-1: Manufacturer: syz
[  605.807255][ T5841] usb 5-1: SerialNumber: syz
[  606.074763][T11580] loop1: detected capacity change from 0 to 64
[  606.195675][T11385] veth0_vlan: entered promiscuous mode
[  606.213522][T11580] Unable to read inode block
[  606.236231][T11385] veth1_vlan: entered promiscuous mode
[  606.247907][T11580] MINIX-fs: get root inode failed
[  606.305370][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  606.337965][ T7529] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  606.396291][T11385] veth0_macvtap: entered promiscuous mode
[  606.442392][T11385] veth1_macvtap: entered promiscuous mode
[  606.535436][T11385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.594265][T11385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.642374][T11385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.664539][   T27] audit: type=1800 audit(1792538283.966:143): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1316" name="no_out_endpoint" dev="configfs" ino=32984 res=0 errno=0
[  606.709989][T11385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.719958][T11385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  606.730471][T11385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.742508][T11385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  606.782763][T11385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  606.796177][T11385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  606.814253][T11385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  606.869628][T11591] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11591]
[  606.908451][T11385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.068685][T11385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  607.097316][T11385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  607.132771][T11385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.181661][T11385] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.213673][T11385] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.237142][T11385] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.256175][T11385] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  607.718370][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  607.726260][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.780093][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  607.808632][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.828059][ T5881] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  607.854325][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  607.879331][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1319'.
[  607.894405][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71
[  607.917626][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71
[  607.946586][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71
[  607.977552][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71
[  608.003957][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71
[  608.026420][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71
[  608.039275][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71
[  608.052058][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71
[  608.067096][ T5881] usb 2-1: Using ep0 maxpacket: 32
[  608.077565][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71
[  608.091748][ T5881] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  608.100445][ T5881] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  608.112476][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  608.122753][ T5881] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  608.135719][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  608.136307][T11612] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1270' resets device
[  608.146033][ T5881] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  608.174833][ T5841] lan78xx: probe of 5-1:1.0 failed with error -71
[  608.199340][ T5841] usb 5-1: USB disconnect, device number 36
[  608.205581][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0
[  608.232410][ T5881] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  608.255796][ T5881] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  608.353981][ T5881] usb 2-1: Product: syz
[  608.447634][ T5881] usb 2-1: Manufacturer: syz
[  608.545193][ T5881] usb 2-1: SerialNumber: syz
[  608.999733][ T5881] usb 2-1: config 0 descriptor??
[  609.054636][ T5881] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  609.115626][ T5881] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  609.390608][ T9152] usb 2-1: USB disconnect, device number 36
[  609.391235][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  609.405739][T11600] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  609.443129][T11623] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  609.468634][ T9152] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  609.860773][ T5836] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  610.037468][ T5789] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  610.749397][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  610.769639][ T5836] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  610.792727][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.811587][ T5836] usb 5-1: Product: syz
[  610.827208][ T5836] usb 5-1: Manufacturer: syz
[  610.831869][ T5836] usb 5-1: SerialNumber: syz
[  610.855078][ T5836] usb 5-1: config 0 descriptor??
[  610.892656][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'.
[  610.943531][T11655] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1327'.
[  611.141861][ T5836] cdc_subset: probe of 5-1:0.0 failed with error -71
[  611.188499][ T5836] usb 5-1: USB disconnect, device number 37
[  611.208276][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  611.392803][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1330'.
[  611.408297][    T9] usb 6-1: Using ep0 maxpacket: 16
[  611.420977][    T9] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  611.443049][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.475227][    T9] usb 6-1: Product: syz
[  611.481656][    T9] usb 6-1: Manufacturer: syz
[  611.486357][    T9] usb 6-1: SerialNumber: syz
[  611.742084][    T9] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  611.778988][    T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  611.794996][    T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  611.804170][    T9] usb 6-1: media controller created
[  611.835379][T11681] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1331' resets device
[  611.837599][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  611.876168][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[  612.810193][    T9] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5
[  612.842585][    T9] usb 6-1: USB disconnect, device number 2
[  613.297241][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  613.387099][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  613.388046][ T5785] Bluetooth: hci4: command 0x1003 tx timeout
[  613.648486][    T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  613.764837][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.837782][    T9] usb 6-1: Product: syz
[  613.842000][    T9] usb 6-1: Manufacturer: syz
[  613.877251][    T9] usb 6-1: SerialNumber: syz
[  614.144650][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'.
[  614.192165][T11713] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1338'.
[  614.308803][    T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  615.583448][T11723] ------------[ cut here ]------------
[  615.589714][T11723] failed to allocate ring buffer on CPU 0
[  615.627506][    T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  615.764970][T11723] WARNING: CPU: 1 PID: 11723 at kernel/trace/ring_buffer.c:5860 trace_rb_cpu_prepare+0x2fa/0x330
[  615.777729][T11723] Modules linked in:
[  615.781681][T11723] CPU: 1 PID: 11723 Comm: syz.1.1339 Not tainted syzkaller #0
[  615.789351][T11723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  615.799603][T11723] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330
[  615.806369][T11723] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 00 fd ff 48 c7 c7 c0 f3 ce 8a 89 de e8 c6 be c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 18 00 fd ff e9 32 ff ff ff e8 0e 00
[  615.826340][T11723] RSP: 0018:ffffc90003857ab8 EFLAGS: 00010246
[  615.832621][T11723] RAX: 809a68dbaff66200 RBX: 0000000000000000 RCX: 0000000000080000
[  615.840805][T11723] RDX: ffffc9000e12d000 RSI: 000000000005d9b3 RDI: 000000000005d9b4
[  615.848895][T11723] RBP: 0000000000000000 R08: ffff8880b8d28c53 R09: 1ffff110171a518a
[  615.856911][T11723] R10: dffffc0000000000 R11: ffffed10171a518b R12: 0000000000000000
[  615.865053][T11723] R13: ffff888046387f80 R14: ffff888030073c10 R15: ffff888030073cb0
[  615.873493][T11723] FS:  00007efeec3f66c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  615.882553][T11723] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  615.889245][T11723] CR2: 0000200000775000 CR3: 000000005f96c000 CR4: 00000000003506e0
[  615.897350][T11723] Call Trace:
[  615.900683][T11723]  <TASK>
[  615.903665][T11723]  ? rb_get_reader_page+0xd90/0xd90
[  615.909737][T11723]  cpuhp_invoke_callback+0x481/0x7e0
[  615.915109][T11723]  ? __cpuhp_state_add_instance_cpuslocked+0x124/0x570
[  615.922156][T11723]  ? rb_get_reader_page+0xd90/0xd90
[  615.927468][T11723]  ? mutex_lock_nested+0x20/0x20
[  615.932461][T11723]  ? preempt_schedule_common+0x82/0xc0
[  615.938048][T11723]  cpuhp_issue_call+0x3ed/0x740
[  615.942976][T11723]  __cpuhp_state_add_instance_cpuslocked+0x22a/0x570
[  615.949979][T11723]  ? cpus_read_lock+0x140/0x150
[  615.954896][T11723]  __cpuhp_state_add_instance+0x25/0x40
[  615.960540][T11723]  __ring_buffer_alloc+0x30e/0x550
[  615.965721][T11723]  allocate_trace_buffers+0x70/0x290
[  615.971139][T11723]  ? __raw_spin_lock_init+0x45/0x100
[  615.976518][T11723]  trace_array_create_systems+0x311/0xc70
[  615.982382][T11723]  instance_mkdir+0xd1/0x130
[  615.987063][T11723]  tracefs_syscall_mkdir+0x128/0x1a0
[  615.992466][T11723]  vfs_mkdir+0x2a5/0x470
[  615.996795][T11723]  do_mkdirat+0x1dc/0x450
[  616.001225][T11723]  ? vfs_mkdir+0x470/0x470
[  616.005707][T11723]  __x64_sys_mkdirat+0x89/0xa0
[  616.011250][T11723]  do_syscall_64+0x55/0xb0
[  616.015733][T11723]  ? clear_bhb_loop+0x40/0x90
[  616.020698][T11723]  ? clear_bhb_loop+0x40/0x90
[  616.025435][T11723]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  616.031717][T11723] RIP: 0033:0x7efeee19f559
[  616.036238][T11723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.055952][T11723] RSP: 002b:00007efeec3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  616.064487][T11723] RAX: ffffffffffffffda RBX: 00007efeee426090 RCX: 00007efeee19f559
[  616.072610][T11723] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[  616.080689][T11723] RBP: 00007efeee236b20 R08: 0000000000000000 R09: 0000000000000000
[  616.088750][T11723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  616.096854][T11723] R13: 00007efeee426128 R14: 00007efeee426090 R15: 00007ffd340f40a8
[  616.104935][T11723]  </TASK>
[  616.108352][T11723] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  616.115668][T11723] CPU: 1 PID: 11723 Comm: syz.1.1339 Not tainted syzkaller #0
[  616.123163][T11723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  616.133256][T11723] Call Trace:
[  616.136584][T11723]  <TASK>
[  616.139574][T11723]  dump_stack_lvl+0x18c/0x250
[  616.144304][T11723]  ? show_regs_print_info+0x20/0x20
[  616.149545][T11723]  ? load_image+0x420/0x420
[  616.154114][T11723]  panic+0x2ca/0x720
[  616.158083][T11723]  ? bpf_jit_dump+0xd0/0xd0
[  616.162655][T11723]  __warn+0x2e0/0x470
[  616.166682][T11723]  ? trace_rb_cpu_prepare+0x2fa/0x330
[  616.172120][T11723]  ? trace_rb_cpu_prepare+0x2fa/0x330
[  616.177537][T11723]  report_bug+0x2be/0x4f0
[  616.182000][T11723]  ? trace_rb_cpu_prepare+0x2fa/0x330
[  616.187417][T11723]  ? trace_rb_cpu_prepare+0x2fa/0x330
[  616.192841][T11723]  ? trace_rb_cpu_prepare+0x2fc/0x330
[  616.198267][T11723]  handle_bug+0xcf/0x120
[  616.202553][T11723]  exc_invalid_op+0x1a/0x50
[  616.207114][T11723]  asm_exc_invalid_op+0x1a/0x20
[  616.212014][T11723] RIP: 0010:trace_rb_cpu_prepare+0x2fa/0x330
[  616.218062][T11723] Code: 00 f0 48 0f ab 2b 31 c0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 00 fd ff 48 c7 c7 c0 f3 ce 8a 89 de e8 c6 be c6 ff <0f> 0b b8 f4 ff ff ff eb d5 e8 18 00 fd ff e9 32 ff ff ff e8 0e 00
[  616.237713][T11723] RSP: 0018:ffffc90003857ab8 EFLAGS: 00010246
[  616.243825][T11723] RAX: 809a68dbaff66200 RBX: 0000000000000000 RCX: 0000000000080000
[  616.251923][T11723] RDX: ffffc9000e12d000 RSI: 000000000005d9b3 RDI: 000000000005d9b4
[  616.259929][T11723] RBP: 0000000000000000 R08: ffff8880b8d28c53 R09: 1ffff110171a518a
[  616.267938][T11723] R10: dffffc0000000000 R11: ffffed10171a518b R12: 0000000000000000
[  616.275955][T11723] R13: ffff888046387f80 R14: ffff888030073c10 R15: ffff888030073cb0
[  616.283992][T11723]  ? trace_rb_cpu_prepare+0x2fa/0x330
[  616.289456][T11723]  ? rb_get_reader_page+0xd90/0xd90
[  616.294743][T11723]  cpuhp_invoke_callback+0x481/0x7e0
[  616.300171][T11723]  ? __cpuhp_state_add_instance_cpuslocked+0x124/0x570
[  616.307078][T11723]  ? rb_get_reader_page+0xd90/0xd90
[  616.312328][T11723]  ? mutex_lock_nested+0x20/0x20
[  616.317315][T11723]  ? preempt_schedule_common+0x82/0xc0
[  616.322830][T11723]  cpuhp_issue_call+0x3ed/0x740
[  616.327752][T11723]  __cpuhp_state_add_instance_cpuslocked+0x22a/0x570
[  616.334485][T11723]  ? cpus_read_lock+0x140/0x150
[  616.339409][T11723]  __cpuhp_state_add_instance+0x25/0x40
[  616.345049][T11723]  __ring_buffer_alloc+0x30e/0x550
[  616.350211][T11723]  allocate_trace_buffers+0x70/0x290
[  616.355533][T11723]  ? __raw_spin_lock_init+0x45/0x100
[  616.360867][T11723]  trace_array_create_systems+0x311/0xc70
[  616.366663][T11723]  instance_mkdir+0xd1/0x130
[  616.371313][T11723]  tracefs_syscall_mkdir+0x128/0x1a0
[  616.376660][T11723]  vfs_mkdir+0x2a5/0x470
[  616.380947][T11723]  do_mkdirat+0x1dc/0x450
[  616.385319][T11723]  ? vfs_mkdir+0x470/0x470
[  616.389792][T11723]  __x64_sys_mkdirat+0x89/0xa0
[  616.394612][T11723]  do_syscall_64+0x55/0xb0
[  616.399077][T11723]  ? clear_bhb_loop+0x40/0x90
[  616.403793][T11723]  ? clear_bhb_loop+0x40/0x90
[  616.408518][T11723]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  616.414471][T11723] RIP: 0033:0x7efeee19f559
[  616.418930][T11723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.438584][T11723] RSP: 002b:00007efeec3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  616.447047][T11723] RAX: ffffffffffffffda RBX: 00007efeee426090 RCX: 00007efeee19f559
[  616.455059][T11723] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[  616.463075][T11723] RBP: 00007efeee236b20 R08: 0000000000000000 R09: 0000000000000000
[  616.471088][T11723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  616.479271][T11723] R13: 00007efeee426128 R14: 00007efeee426090 R15: 00007ffd340f40a8
[  616.487304][T11723]  </TASK>
[  616.490499][T11723] Kernel Offset: disabled
[  616.495095][T11723] Rebooting in 86400 seconds..