last executing test programs:

13m49.670571645s ago: executing program 4 (id=224):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
poll(&(0x7f0000000180)=[{r0}], 0x1, 0x1ff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, 0x0, 0x24000840)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = epoll_create1(0x0)
epoll_pwait2(r4, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0)
r5 = socket(0x1e, 0x805, 0x0)
connect$tipc(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000480)={'erspan0\x00', <r7=>0x0, 0x7, 0x10, 0x7, 0xd1, {{0x1f, 0x4, 0x1, 0x11, 0x7c, 0x66, 0x0, 0x11, 0x29, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0xb, 0x2d, [@local, @dev={0xac, 0x14, 0x14, 0xb}]}, @generic={0x7, 0x10, "cd9c74e033694b5ecd225d501562"}, @timestamp={0x44, 0x2c, 0x25, 0x0, 0x2, [0x0, 0x660, 0x1000, 0x80000001, 0x4, 0x1000, 0x941, 0x2, 0x2c000000, 0x8000]}, @end, @timestamp_prespec={0x44, 0x1c, 0x3e, 0x3, 0x5, [{@remote}, {@local, 0x38000}, {@remote, 0x7}]}, @end]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r3, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x86, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x2, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'erspan0\x00', <r9=>0x0, 0x7800, 0x8000, 0x4, 0x8, {{0x12, 0x4, 0x0, 0x22, 0x48, 0x68, 0x0, 0xf, 0x4, 0x0, @loopback, @empty, {[@rr={0x7, 0x7, 0xe8, [@local]}, @timestamp_prespec={0x44, 0x24, 0x28, 0x3, 0x9, [{@local, 0x7}, {@private=0xa010102, 0xfff}, {@local, 0x7}, {@broadcast, 0xfffffeff}]}, @rr={0x7, 0x3, 0xae}, @generic={0x88, 0x6, "df57cd19"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'gretap0\x00', &(0x7f0000000a00)={'tunl0\x00', <r10=>0x0, 0x7, 0x8, 0x529a, 0x1, {{0xf, 0x4, 0x2, 0x2b, 0x3c, 0x65, 0x0, 0xd, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x8, 0x8, 0x0, 0x1, [0x5]}, @noop, @generic={0x7, 0x9, "1ced3dd7e1b874"}, @end, @generic={0x82, 0xe, "0627a12327dd0868c777ff61"}, @lsrr={0x83, 0x7, 0xad, [@broadcast]}]}}}}})
r11 = socket(0xa, 0x3, 0x3a)
connect$unix(r11, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xf9}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000d80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x258, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'eth0\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/midiC#D#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7402}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x44, 0x4, "992a6116b13b315c989f1221b572d45d9ea263a2af3ad463a570659f9d533bd358447c68f23f3d490f37447b5f18cc7f9c99faf1104d1dbd515bc850a5b64d8a"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x78, 0x5, "e88f6994e6769d3d71fa60c6e1600865a3f2de73668840ed39cee3aead9fffc38d47992294c011dbee7bca6f5cedab926d5b3b879ac635171c4083f6e0678b618bf6cbfd4cee4a0079dca7a7d5219f5de2cfa052a0094abba473b008d5c1394776d494fa54a0e94b4fb8fa32a51ffb122ce1b2bf"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'exthdr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'exthdr\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x20000014})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000090900010073797a30000000000900030073797a3000000000000000000917050000000000000000000500000800000740000000000300000ad179d5271d4314c83f7d77042bcf"], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

13m48.766191592s ago: executing program 4 (id=229):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
write$dsp(r0, &(0x7f0000000040)='F', 0x1)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10004)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dvb_dvr(0x0, 0x0, 0x100)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000000000000000000aa080001"], 0x34}}, 0x2004c000)
mprotect(&(0x7f00007b2000/0x2000)=nil, 0x2000, 0x1)
setrlimit(0x8, &(0x7f0000000080))
r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')

13m45.913554793s ago: executing program 4 (id=241):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x90, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

13m45.586612192s ago: executing program 4 (id=244):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x1c552, &(0x7f0000000b40)=ANY=[], 0x4, 0x1202, &(0x7f0000001280)="$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")
openat(0xffffffffffffff9c, 0x0, 0x52142, 0x10)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000300))
syz_mount_image$fuse(0x0, 0x0, 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x8a, 0x20000}, 0x20)

13m43.910753573s ago: executing program 4 (id=248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4004)
sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
epoll_create1(0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0)
close(r2)

13m38.632224411s ago: executing program 4 (id=265):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
write(r0, &(0x7f0000000100)="d3f76ed5711d1a", 0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0)

13m38.022193841s ago: executing program 32 (id=265):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
write(r0, &(0x7f0000000100)="d3f76ed5711d1a", 0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0)

2m3.438004733s ago: executing program 3 (id=2514):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0x8)

2m3.147157625s ago: executing program 3 (id=2516):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r3}, 0x38)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r4}, 0x38)

2m1.984238936s ago: executing program 3 (id=2520):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 's}z', 0x20, 0xfcd}, 0x2f, 0xfffffffffffffffa)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mremap(&(0x7f00008a4000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000276000/0x1000)=nil)
openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
syz_open_dev$usbfs(0x0, 0x201, 0x440)
mkdir(&(0x7f0000000180)='./file0\x00', 0x30)
socket(0x10, 0xa, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x5, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x202, 0x80000006, 0x8}, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x9, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x8000, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x6, 0x6, 0x9, 0x4, 0x6, 0xa2d8, 0x9, 0x1000, 0x8, 0x471, 0xffffff7f, 0x383, 0x8001, 0x4]})
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)

1m59.979460031s ago: executing program 3 (id=2531):
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r1, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)

1m58.831610012s ago: executing program 3 (id=2537):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0x8)

1m58.560107119s ago: executing program 3 (id=2539):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x70, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
socket$phonet_pipe(0x23, 0x5, 0x2)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x178, r7, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x178}, 0x1, 0x0, 0x0, 0x8001}, 0x20000880)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084)
syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5)

1m41.97513196s ago: executing program 33 (id=2539):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x70, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
socket$phonet_pipe(0x23, 0x5, 0x2)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x178, r7, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x178}, 0x1, 0x0, 0x0, 0x8001}, 0x20000880)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084)
syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5)

1m9.968610399s ago: executing program 0 (id=2706):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='SYNTH \'Mic\'\t '], 0x86)
dup3(0xffffffffffffffff, r0, 0x0)

1m9.780184578s ago: executing program 0 (id=2707):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x497c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdff8, 0x2, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50)

1m8.569184728s ago: executing program 0 (id=2708):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 's}z', 0x20, 0xfcd}, 0x2f, 0xfffffffffffffffa)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f00008a4000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000276000/0x1000)=nil)
openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
syz_open_dev$usbfs(0x0, 0x201, 0x440)
mkdir(&(0x7f0000000180)='./file0\x00', 0x30)
socket(0x10, 0xa, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x5, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x202, 0x80000006, 0x8}, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x9, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x8000, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x6, 0x6, 0x9, 0x4, 0x6, 0xa2d8, 0x9, 0x1000, 0x8, 0x471, 0xffffff7f, 0x383, 0x8001, 0x4]})
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)

1m7.440771309s ago: executing program 0 (id=2710):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)

1m6.928373927s ago: executing program 0 (id=2711):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, &(0x7f0000000500)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xca, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1m5.096400731s ago: executing program 0 (id=2720):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r1 = signalfd4(r0, &(0x7f0000000140)={[0x7ff]}, 0x8, 0x80000)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0x9, 0x3, 0x4, 0x100000, 0x4, {0x0, 0xea60}, {0x3, 0x8, 0x81, 0x4, 0x5, 0x66, "c2383605"}, 0x1, 0x4, {&(0x7f0000000680)=[{0x9, 0x1, {r1}, 0x7}, {0x3, 0x81, {}, 0x2}]}, 0x7f})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3})

1m5.065783472s ago: executing program 34 (id=2720):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r1 = signalfd4(r0, &(0x7f0000000140)={[0x7ff]}, 0x8, 0x80000)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0x9, 0x3, 0x4, 0x100000, 0x4, {0x0, 0xea60}, {0x3, 0x8, 0x81, 0x4, 0x5, 0x66, "c2383605"}, 0x1, 0x4, {&(0x7f0000000680)=[{0x9, 0x1, {r1}, 0x7}, {0x3, 0x81, {}, 0x2}]}, 0x7f})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3})

5.291429212s ago: executing program 1 (id=2932):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
exit(0x0)

5.112785023s ago: executing program 5 (id=2934):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000000c0)='\f', 0x1, 0x10, &(0x7f0000000000)={0xa, 0x4e21, 0x55b7, @private1, 0x100}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x82, &(0x7f0000000080)="1a4f30d089f5bd", 0x7)

4.741824826s ago: executing program 5 (id=2935):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={0x0})
ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4})

4.400756902s ago: executing program 5 (id=2938):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)

4.170529316s ago: executing program 1 (id=2939):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000440)=0x200016)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\a\x00'/12, @ANYRES64=0x77359400, @ANYRES64=0x0], 0x48}}, 0x0)

3.735931287s ago: executing program 2 (id=2940):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0xb0, 0xffffffffffffffc1)

2.802680485s ago: executing program 5 (id=2941):
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
socket(0x40000000015, 0x5, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000001)

2.741873142s ago: executing program 2 (id=2942):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)="11106e", 0x3)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.684158852s ago: executing program 1 (id=2943):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x497c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x2000000}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdff8, 0x2, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

2.312301788s ago: executing program 2 (id=2944):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000000c0)='\f', 0x1, 0x10, &(0x7f0000000000)={0xa, 0x4e21, 0x55b7, @private1, 0x100}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x82, &(0x7f0000000080)="1a4f30d089f5bd", 0x7)

1.664981603s ago: executing program 1 (id=2945):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
openat(0xffffffffffffff9c, 0x0, 0x103a00, 0x32)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="682ed500000000a1783569ae0000000000000000", 0xfffffdd2}, {&(0x7f00000001c0)="29235f8b92d8a00700000000000000442aba329c9f1dc1d202c0c12aefdeed8e463a935ef4418b81b79ec3019db723e26db60936b09359c37bbb7c353cf6f339e32000"/76, 0x4c}], 0x2, 0x0, 0x0, 0x40011}, 0x20040000)

396.48518ms ago: executing program 1 (id=2946):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={0x0})
ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4})

352.79188ms ago: executing program 5 (id=2947):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='SYNTH \''], 0x86)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0)
dup3(r1, r0, 0x0)

252.921938ms ago: executing program 2 (id=2948):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

235.602586ms ago: executing program 1 (id=2949):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)

116.796813ms ago: executing program 2 (id=2950):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r0, 0xb0, 0xffffffffffffffc1)

33.301554ms ago: executing program 5 (id=2951):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000440)=0x200016)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000180), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\a\x00'/12, @ANYRES64=0x77359400, @ANYRES64=0x0], 0x48}}, 0x0)

0s ago: executing program 2 (id=2952):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)="11106e", 0x3)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

z-executor[5596] dev=loop2 state=2
[  665.950571][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  666.000579][ T5844] usb 2-1: USB disconnect, device number 33
[  666.309054][T11758] binder: BINDER_SET_CONTEXT_MGR already set
[  666.309070][T11758] binder: 11748:11758 ioctl 4018620d 200000000040 returned -16
[  667.798900][ T5597] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  669.058492][ T5791] hid_parser_main: 5 callbacks suppressed
[  669.058516][ T5791] hid-generic 00A0:0004:0003.001E: unknown main item tag 0x0
[  669.058546][ T5791] hid-generic 00A0:0004:0003.001E: unknown main item tag 0x0
[  669.058573][ T5791] hid-generic 00A0:0004:0003.001E: unknown main item tag 0x0
[  669.058599][ T5791] hid-generic 00A0:0004:0003.001E: unknown main item tag 0x0
[  669.058624][ T5791] hid-generic 00A0:0004:0003.001E: unknown main item tag 0x0
[  669.058649][ T5791] hid-generic 00A0:0004:0003.001E: unknown main item tag 0x0
[  669.058675][ T5791] hid-generic 00A0:0004:0003.001E: unknown main item tag 0x0
[  669.058700][ T5791] hid-generic 00A0:0004:0003.001E: unknown main item tag 0x0
[  669.058726][ T5791] hid-generic 00A0:0004:0003.001E: unknown main item tag 0x0
[  669.058751][ T5791] hid-generic 00A0:0004:0003.001E: unknown main item tag 0x0
[  669.468209][ T5791] hid-generic 00A0:0004:0003.001E: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  669.771987][ T5597] Flush: task=syz-executor[5597] dev=loop0 state=2
[  669.789010][T11777] fido_id[11777]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  669.866365][T11781] loop3: detected capacity change from 0 to 64
[  669.879768][ T5597] Teardown: task=syz-executor[5597] dev=loop0 state=2
[  672.160846][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  672.249656][ T5791] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  672.373745][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  672.492374][ T5791] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  672.492425][ T5791] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  672.492450][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.497701][ T5791] usb 3-1: config 0 descriptor??
[  672.510700][ T5791] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  673.521647][T11808] binder: BINDER_SET_CONTEXT_MGR already set
[  673.521662][T11808] binder: 11801:11808 ioctl 4018620d 200000000040 returned -16
[  674.306938][    T9] hid_parser_main: 5 callbacks suppressed
[  674.306971][    T9] hid-generic 00A0:0004:0003.001F: unknown main item tag 0x0
[  674.307003][    T9] hid-generic 00A0:0004:0003.001F: unknown main item tag 0x0
[  674.307034][    T9] hid-generic 00A0:0004:0003.001F: unknown main item tag 0x0
[  674.307059][    T9] hid-generic 00A0:0004:0003.001F: unknown main item tag 0x0
[  674.307084][    T9] hid-generic 00A0:0004:0003.001F: unknown main item tag 0x0
[  674.307110][    T9] hid-generic 00A0:0004:0003.001F: unknown main item tag 0x0
[  674.307135][    T9] hid-generic 00A0:0004:0003.001F: unknown main item tag 0x0
[  674.307160][    T9] hid-generic 00A0:0004:0003.001F: unknown main item tag 0x0
[  674.307199][    T9] hid-generic 00A0:0004:0003.001F: unknown main item tag 0x0
[  674.307224][    T9] hid-generic 00A0:0004:0003.001F: unknown main item tag 0x0
[  674.657387][    T9] hid-generic 00A0:0004:0003.001F: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  674.798135][T11826] fido_id[11826]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  675.874155][ T5844] usb 3-1: USB disconnect, device number 22
[  675.946563][T11836] loop3: detected capacity change from 0 to 64
[  677.353913][ T5939] Flush: task=udevd[5939] dev=loop3 state=2
[  677.459957][ T5939] Teardown: task=udevd[5939] dev=loop3 state=2
[  679.260659][ T5772] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  679.412563][ T5772] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  679.412614][ T5772] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  679.412638][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.429625][ T5720] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  679.485662][ T5772] usb 2-1: config 0 descriptor??
[  679.509755][ T5844] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  679.513109][ T5772] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  679.638003][ T5720] usb 1-1: Using ep0 maxpacket: 32
[  680.262307][ T5844] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  680.262336][ T5844] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  680.262349][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.282861][ T5720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  680.282934][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  680.289335][ T5720] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  680.289363][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  680.289381][ T5720] usb 1-1: Product: syz
[  680.289395][ T5720] usb 1-1: Manufacturer: syz
[  680.289409][ T5720] usb 1-1: SerialNumber: syz
[  680.313669][ T5844] usb 6-1: config 0 descriptor??
[  680.357513][ T5720] usb 1-1: config 0 descriptor??
[  680.387339][ T5720] hub 1-1:0.0: bad descriptor, ignoring hub
[  680.387375][ T5720] hub 1-1:0.0: probe with driver hub failed with error -5
[  680.391527][ T5844] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  680.509788][T11881] loop3: detected capacity change from 0 to 64
[  680.592733][T11882] loop2: detected capacity change from 0 to 4096
[  680.698876][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  680.737894][T11882] ntfs3(loop2): Failed to load $Extend (-22).
[  680.737919][T11882] ntfs3(loop2): Failed to initialize $Extend.
[  680.740878][ T5844] usb 1-1: USB disconnect, device number 29
[  680.791821][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  681.911145][   T37] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  681.985205][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  682.059726][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  682.082089][   T37] usb 1-1: Using ep0 maxpacket: 32
[  682.087480][   T37] usb 1-1: device descriptor read/all, error -71
[  682.144172][ T9936] usb 2-1: USB disconnect, device number 34
[  682.204489][T11903] binder: BINDER_SET_CONTEXT_MGR already set
[  682.204504][T11903] binder: 11900:11903 ioctl 4018620d 200000000040 returned -16
[  683.241995][ T5791] usb 6-1: USB disconnect, device number 15
[  683.569888][T11920] loop1: detected capacity change from 0 to 64
[  684.657718][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  684.730065][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  685.888093][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  685.888181][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  686.813858][ T5720] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  687.571576][T11956] loop3: detected capacity change from 0 to 64
[  687.585265][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  687.585312][ T5720] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  687.585335][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.592024][ T5720] usb 3-1: config 0 descriptor??
[  687.609433][ T5720] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  688.804497][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  688.869922][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  688.992720][T11976] loop1: detected capacity change from 0 to 64
[  689.333962][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  689.439879][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  690.008784][   T37] usb 3-1: USB disconnect, device number 23
[  690.526399][T11994] binder: BINDER_SET_CONTEXT_MGR already set
[  690.526414][T11994] binder: 11989:11994 ioctl 4018620d 200000000040 returned -16
[  691.121216][T12006] loop1: detected capacity change from 0 to 64
[  692.351196][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  692.678033][   T32] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  692.911061][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  693.489747][   T32] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  693.489799][   T32] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  693.489821][   T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.548314][   T32] usb 1-1: config 0 descriptor??
[  693.575337][   T32] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  695.643290][   T37] usb 1-1: USB disconnect, device number 32
[  696.883600][T12051] kernel profiling enabled (shift: 9)
[  698.271496][T12059] loop0: detected capacity change from 0 to 64
[  699.542322][ T5597] Flush: task=syz-executor[5597] dev=loop0 state=2
[  699.577176][T12081] loop2: detected capacity change from 0 to 64
[  699.610803][ T5597] Teardown: task=syz-executor[5597] dev=loop0 state=2
[  699.737910][T12082] binder: BINDER_SET_CONTEXT_MGR already set
[  699.737925][T12082] binder: 12075:12082 ioctl 4018620d 200000000040 returned -16
[  700.924526][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  700.929671][   T32] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  701.000273][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  701.093749][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  701.093797][   T32] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  701.093822][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.133401][   T32] usb 4-1: config 0 descriptor??
[  701.153154][   T32] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  702.941864][T12120] loop5: detected capacity change from 0 to 64
[  703.124022][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  703.189898][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  703.593155][    T9] usb 4-1: USB disconnect, device number 38
[  703.767595][T12131] loop3: detected capacity change from 0 to 64
[  704.013518][T12130] loop0: detected capacity change from 0 to 32768
[  704.107859][T12130] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  704.209218][T12130] XFS (loop0): Ending clean mount
[  704.234093][T12130] XFS (loop0): Quotacheck needed: Please wait.
[  704.351489][ T6035] Flush: task=udevd[6035] dev=loop3 state=2
[  704.510066][ T6035] Teardown: task=udevd[6035] dev=loop3 state=2
[  705.815948][T12130] XFS (loop0): Quotacheck: Done.
[  706.047530][T12165] binder: BINDER_SET_CONTEXT_MGR already set
[  706.047545][T12165] binder: 12154:12165 ioctl 4018620d 200000000040 returned -16
[  706.654917][ T5597] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  707.110317][ T5597] Flush: task=syz-executor[5597] dev=loop0 state=2
[  707.240581][ T5597] Teardown: task=syz-executor[5597] dev=loop0 state=2
[  707.471654][ T5713] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  708.524669][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  708.524715][ T5713] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  708.524750][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.536436][ T5713] usb 6-1: config 0 descriptor??
[  708.632924][ T5713] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  712.322686][ T5713] usb 6-1: USB disconnect, device number 16
[  713.822099][T12245] binder: BINDER_SET_CONTEXT_MGR already set
[  713.822115][T12245] binder: 12233:12245 ioctl 4018620d 200000000040 returned -16
[  715.081471][ T5720] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  715.237560][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  715.237605][ T5720] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  715.237630][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.285861][ T5720] usb 4-1: config 0 descriptor??
[  715.332367][ T5720] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  715.718676][T12267] loop0: detected capacity change from 0 to 32768
[  715.761802][T12267] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  715.819208][T12267] XFS (loop0): Ending clean mount
[  715.845683][T12267] XFS (loop0): Quotacheck needed: Please wait.
[  716.804217][T12267] XFS (loop0): Quotacheck: Done.
[  717.747360][ T5597] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  717.824737][T12302] loop2: detected capacity change from 0 to 64
[  717.919864][    T9] usb 4-1: USB disconnect, device number 39
[  718.323933][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  718.398833][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  718.438258][ T5597] Flush: task=syz-executor[5597] dev=loop0 state=2
[  718.641820][ T5597] Teardown: task=syz-executor[5597] dev=loop0 state=2
[  721.195216][T12320] loop2: detected capacity change from 0 to 256
[  721.242368][T12320] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  721.297428][T12320] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[  721.774771][T12324] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff)
[  722.474669][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  722.611348][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  723.102966][ T5713] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  723.418478][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.418513][ T5713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  723.418550][ T5713] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  723.418573][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.549868][ T5713] usb 6-1: config 0 descriptor??
[  724.037175][T12343] loop3: detected capacity change from 0 to 32768
[  724.094015][T12343] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  724.138521][T12343] XFS (loop3): Ending clean mount
[  724.158818][T12343] XFS (loop3): Quotacheck needed: Please wait.
[  724.274169][    C0] raw-gadget.0 gadget.5: ignoring, device is not running
[  724.274319][ T5713] usbhid 6-1:0.0: can't add hid device: -32
[  724.274417][ T5713] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[  724.312818][ T5713] usb 6-1: USB disconnect, device number 17
[  725.622167][T12343] XFS (loop3): Quotacheck: Done.
[  726.603215][T12380] loop2: detected capacity change from 0 to 4096
[  726.903758][ T5600] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  727.027419][T12380] ntfs3(loop2): Failed to load $Extend (-22).
[  727.027453][T12380] ntfs3(loop2): Failed to initialize $Extend.
[  727.120333][ T9936] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  727.395039][ T9936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  727.395058][ T9936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  727.395079][ T9936] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  727.395091][ T9936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.457360][ T9936] usb 1-1: config 0 descriptor??
[  727.773931][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  727.833566][T12387] loop1: detected capacity change from 0 to 24
[  727.846865][T12387] romfs: read error for inode 0x8000
[  727.900607][ T9936] usbhid 1-1:0.0: can't add hid device: -71
[  727.900725][ T9936] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  727.904424][ T9936] usb 1-1: USB disconnect, device number 33
[  728.050570][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  728.065454][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  728.190550][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  728.303622][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  728.389074][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  730.768482][    T9] hid_parser_main: 5 callbacks suppressed
[  730.768554][    T9] hid-generic 00A0:0004:0003.0020: unknown main item tag 0x0
[  730.768585][    T9] hid-generic 00A0:0004:0003.0020: unknown main item tag 0x0
[  730.768683][    T9] hid-generic 00A0:0004:0003.0020: unknown main item tag 0x0
[  730.768751][    T9] hid-generic 00A0:0004:0003.0020: unknown main item tag 0x0
[  730.846790][    T9] hid-generic 00A0:0004:0003.0020: unknown main item tag 0x0
[  730.847915][    T9] hid-generic 00A0:0004:0003.0020: unknown main item tag 0x0
[  730.848113][    T9] hid-generic 00A0:0004:0003.0020: unknown main item tag 0x0
[  730.848220][    T9] hid-generic 00A0:0004:0003.0020: unknown main item tag 0x0
[  730.887285][    T9] hid-generic 00A0:0004:0003.0020: unknown main item tag 0x0
[  730.887326][    T9] hid-generic 00A0:0004:0003.0020: unknown main item tag 0x0
[  731.334390][    T9] hid-generic 00A0:0004:0003.0020: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  732.324766][T12428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  732.471498][T12428] IPv6: NLM_F_CREATE should be set when creating new route
[  733.528526][T12445] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  733.579614][T12445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  733.581950][T12445] vhci_hcd vhci_hcd.0: Device attached
[  733.631231][ T5720] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  733.685714][T12446] vhci_hcd: connection closed
[  733.687549][ T1468] vhci_hcd vhci_hcd.5: stop threads
[  733.687574][ T1468] vhci_hcd vhci_hcd.5: release socket
[  733.687611][ T1468] vhci_hcd vhci_hcd.5: disconnect device
[  733.893456][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  733.893504][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  733.893529][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  733.893560][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  733.893601][ T5720] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  733.893624][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.934390][ T5720] usb 1-1: config 0 descriptor??
[  734.869385][ T5720] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  735.863767][ T5713] hid_parser_main: 5 callbacks suppressed
[  735.863784][ T5713] hid-generic 00A0:0004:0003.0022: unknown main item tag 0x0
[  735.863806][ T5713] hid-generic 00A0:0004:0003.0022: unknown main item tag 0x0
[  735.863821][ T5713] hid-generic 00A0:0004:0003.0022: unknown main item tag 0x0
[  735.863835][ T5713] hid-generic 00A0:0004:0003.0022: unknown main item tag 0x0
[  735.863850][ T5713] hid-generic 00A0:0004:0003.0022: unknown main item tag 0x0
[  735.863864][ T5713] hid-generic 00A0:0004:0003.0022: unknown main item tag 0x0
[  735.863879][ T5713] hid-generic 00A0:0004:0003.0022: unknown main item tag 0x0
[  735.863893][ T5713] hid-generic 00A0:0004:0003.0022: unknown main item tag 0x0
[  735.863908][ T5713] hid-generic 00A0:0004:0003.0022: unknown main item tag 0x0
[  735.863922][ T5713] hid-generic 00A0:0004:0003.0022: unknown main item tag 0x0
[  735.871254][ T5713] hid-generic 00A0:0004:0003.0022: hidraw1: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  737.141025][ T5713] usb 1-1: reset high-speed USB device number 34 using dummy_hcd
[  737.424906][T12483] fido_id[12483]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  738.355869][   T11] usb 1-1: USB disconnect, device number 34
[  738.452769][T12502] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  738.452786][T12502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  738.454243][T12502] vhci_hcd vhci_hcd.0: Device attached
[  738.686691][T12503] vhci_hcd: connection closed
[  738.690585][  T818] vhci_hcd vhci_hcd.0: stop threads
[  738.690609][  T818] vhci_hcd vhci_hcd.0: release socket
[  738.690684][  T818] vhci_hcd vhci_hcd.0: disconnect device
[  738.728706][ T5713] usb 33-1: new low-speed USB device number 3 using vhci_hcd
[  738.761027][T12508] loop1: detected capacity change from 0 to 256
[  738.786844][ T5713] usb 33-1: enqueue for inactive port 0
[  738.855352][T12508] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  738.873079][ T5713] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  738.902496][ T4912] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  738.902525][ T4912] CPU: 1 UID: 0 PID: 4912 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  738.902539][ T4912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  738.902547][ T4912] Workqueue: hci4 hci_rx_work
[  738.902572][ T4912] Call Trace:
[  738.902577][ T4912]  <TASK>
[  738.902583][ T4912]  dump_stack_lvl+0xe8/0x150
[  738.902603][ T4912]  sysfs_create_dir_ns+0x271/0x2a0
[  738.902623][ T4912]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  738.902672][ T4912]  ? rt_spin_unlock+0x163/0x200
[  738.902686][ T4912]  kobject_add_internal+0x62c/0xce0
[  738.902707][ T4912]  kobject_add+0x163/0x240
[  738.902722][ T4912]  ? rt_spin_unlock+0x157/0x200
[  738.902735][ T4912]  ? __pfx_kobject_add+0x10/0x10
[  738.902755][ T4912]  ? get_device_parent+0x370/0x3a0
[  738.902772][ T4912]  device_add+0x3fa/0xb80
[  738.902787][ T4912]  hci_conn_add_sysfs+0xd5/0x210
[  738.902802][ T4912]  le_conn_complete_evt+0xfef/0x1580
[  738.902826][ T4912]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  738.902845][ T4912]  ? lockdep_hardirqs_on+0x7a/0x110
[  738.902858][ T4912]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  738.902871][ T4912]  ? rt_mutex_slowunlock+0x219/0x460
[  738.902882][ T4912]  ? skb_pull_data+0xf0/0x200
[  738.902900][ T4912]  hci_le_conn_complete_evt+0x187/0x470
[  738.902920][ T4912]  hci_event_packet+0x67a/0xf10
[  738.902936][ T4912]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  738.902951][ T4912]  ? __pfx_hci_event_packet+0x10/0x10
[  738.902964][ T4912]  ? rt_spin_unlock+0x157/0x200
[  738.902979][ T4912]  ? hci_send_to_monitor+0xe2/0x590
[  738.902991][ T4912]  hci_rx_work+0x3ee/0x1020
[  738.903011][ T4912]  ? process_one_work+0x7fd/0x1480
[  738.903026][ T4912]  process_one_work+0xaaf/0x1480
[  738.903058][ T4912]  ? __pfx_process_one_work+0x10/0x10
[  738.903076][ T4912]  ? do_raw_spin_lock+0x12b/0x2f0
[  738.903098][ T4912]  ? assign_work+0x3cf/0x5d0
[  738.903115][ T4912]  worker_thread+0xb05/0x10d0
[  738.903135][ T4912]  ? __kthread_parkme+0x71/0x1f0
[  738.903157][ T4912]  kthread+0x388/0x470
[  738.903167][ T4912]  ? __pfx_worker_thread+0x10/0x10
[  738.903180][ T4912]  ? __pfx_kthread+0x10/0x10
[  738.903191][ T4912]  ret_from_fork+0x514/0xb70
[  738.903204][ T4912]  ? __pfx_ret_from_fork+0x10/0x10
[  738.903215][ T4912]  ? __switch_to+0xc89/0x1420
[  738.903231][ T4912]  ? __pfx_kthread+0x10/0x10
[  738.903242][ T4912]  ret_from_fork_asm+0x1a/0x30
[  738.903262][ T4912]  </TASK>
[  738.904491][ T4912] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  738.904520][ T4912] Bluetooth: hci4: failed to register connection device
[  740.555363][   T32] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  740.651158][ T5713] hid-generic 00A0:0004:0003.0023: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  740.750409][   T32] usb 4-1: Using ep0 maxpacket: 32
[  740.753995][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  740.754018][   T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  740.756835][T12528] fido_id[12528]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  740.801873][   T32] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  740.801903][   T32] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  740.801924][   T32] usb 4-1: Product: syz
[  740.801939][   T32] usb 4-1: Manufacturer: syz
[  740.801953][   T32] usb 4-1: SerialNumber: syz
[  740.848078][   T32] usb 4-1: config 0 descriptor??
[  740.911623][   T32] hub 4-1:0.0: bad descriptor, ignoring hub
[  740.911661][   T32] hub 4-1:0.0: probe with driver hub failed with error -5
[  741.041076][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  741.212208][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  742.493747][ T5713] usb 4-1: USB disconnect, device number 40
[  742.796487][T12550] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  742.796514][T12550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  742.798845][T12550] vhci_hcd vhci_hcd.0: Device attached
[  742.870163][T12553] vhci_hcd: connection closed
[  742.942355][   T56] vhci_hcd vhci_hcd.5: stop threads
[  742.942384][   T56] vhci_hcd vhci_hcd.5: release socket
[  742.942619][   T56] vhci_hcd vhci_hcd.5: disconnect device
[  742.970914][ T5713] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  743.174665][T12555] loop2: detected capacity change from 0 to 32768
[  743.182993][   T32] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  743.236300][T12555] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  743.289932][T12555] XFS (loop2): Ending clean mount
[  743.311054][T12555] XFS (loop2): Quotacheck needed: Please wait.
[  744.264577][    T9] hid_parser_main: 20 callbacks suppressed
[  744.264600][    T9] hid-generic 00A0:0004:0003.0024: unknown main item tag 0x0
[  744.264624][    T9] hid-generic 00A0:0004:0003.0024: unknown main item tag 0x0
[  744.264646][    T9] hid-generic 00A0:0004:0003.0024: unknown main item tag 0x0
[  744.264678][    T9] hid-generic 00A0:0004:0003.0024: unknown main item tag 0x0
[  744.264698][    T9] hid-generic 00A0:0004:0003.0024: unknown main item tag 0x0
[  744.264719][    T9] hid-generic 00A0:0004:0003.0024: unknown main item tag 0x0
[  744.264742][    T9] hid-generic 00A0:0004:0003.0024: unknown main item tag 0x0
[  744.264764][    T9] hid-generic 00A0:0004:0003.0024: unknown main item tag 0x0
[  744.264787][    T9] hid-generic 00A0:0004:0003.0024: unknown main item tag 0x0
[  744.264808][    T9] hid-generic 00A0:0004:0003.0024: unknown main item tag 0x0
[  744.420028][T12555] XFS (loop2): Quotacheck: Done.
[  744.607735][    T9] hid-generic 00A0:0004:0003.0024: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  745.209453][ T5596] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  745.307917][T12584] loop0: detected capacity change from 0 to 256
[  745.319701][ T5602] Bluetooth: hci4: command 0x0406 tx timeout
[  746.354411][T12580] fido_id[12580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  746.386217][T12588] loop3: detected capacity change from 0 to 164
[  746.417950][T12588] iso9660: Bad value for 'block'
[  746.418883][T12584] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  746.476816][ T5792] Flush: task=udevd[5792] dev=loop3 state=2
[  746.751736][ T5792] Teardown: task=udevd[5792] dev=loop3 state=2
[  747.318674][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  747.318768][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  747.415533][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  747.522373][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  748.076323][T12611] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  748.076350][T12611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  748.078590][T12611] vhci_hcd vhci_hcd.0: Device attached
[  748.375861][T12617] vhci_hcd: connection closed
[  748.403865][  T178] vhci_hcd vhci_hcd.5: stop threads
[  748.403936][  T178] vhci_hcd vhci_hcd.5: release socket
[  748.851126][    T9] usb 43-1: new low-speed USB device number 3 using vhci_hcd
[  749.235320][  T178] vhci_hcd vhci_hcd.5: disconnect device
[  749.412242][T12625] loop2: detected capacity change from 0 to 64
[  749.947768][   T11] hid_parser_main: 5 callbacks suppressed
[  749.947819][   T11] hid-generic 00A0:0004:0003.0025: unknown main item tag 0x0
[  749.947883][   T11] hid-generic 00A0:0004:0003.0025: unknown main item tag 0x0
[  749.947941][   T11] hid-generic 00A0:0004:0003.0025: unknown main item tag 0x0
[  749.947967][   T11] hid-generic 00A0:0004:0003.0025: unknown main item tag 0x0
[  749.947991][   T11] hid-generic 00A0:0004:0003.0025: unknown main item tag 0x0
[  749.948077][   T11] hid-generic 00A0:0004:0003.0025: unknown main item tag 0x0
[  749.948145][   T11] hid-generic 00A0:0004:0003.0025: unknown main item tag 0x0
[  749.948245][   T11] hid-generic 00A0:0004:0003.0025: unknown main item tag 0x0
[  749.948307][   T11] hid-generic 00A0:0004:0003.0025: unknown main item tag 0x0
[  749.948392][   T11] hid-generic 00A0:0004:0003.0025: unknown main item tag 0x0
[  750.303746][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  750.307419][   T11] hid-generic 00A0:0004:0003.0025: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  750.338848][T12626] loop3: detected capacity change from 0 to 4096
[  750.434957][ T5597] Flush: task=syz-executor[5597] dev=loop0 state=2
[  750.630992][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  750.668197][T12626] ntfs3(loop3): Failed to load $Extend (-22).
[  750.668223][T12626] ntfs3(loop3): Failed to initialize $Extend.
[  750.687295][ T5597] Teardown: task=syz-executor[5597] dev=loop0 state=2
[  752.993432][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  753.071598][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  753.095275][T12660] loop5: detected capacity change from 0 to 256
[  753.115944][T12660] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  753.199006][T12664] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  753.199033][T12664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  753.199130][T12664] vhci_hcd vhci_hcd.0: Device attached
[  753.408111][T12665] vhci_hcd: connection closed
[  753.415438][  T179] vhci_hcd vhci_hcd.1: stop threads
[  753.415465][  T179] vhci_hcd vhci_hcd.1: release socket
[  753.415505][  T179] vhci_hcd vhci_hcd.1: disconnect device
[  754.493432][   T11] hid-generic 00A0:0004:0003.0026: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  754.544752][    T9] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  754.578490][T12685] fido_id[12685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  755.296636][T12692] loop1: detected capacity change from 0 to 128
[  755.297896][T12692] msdos: Bad value for 'dmask'
[  755.298401][T12692] Flush: task=syz.1.1963[12692] dev=loop1 state=2
[  755.399832][T12692] Teardown: task=syz.1.1963[12692] dev=loop1 state=2
[  755.403400][T12697] loop2: detected capacity change from 0 to 4096
[  756.257159][T12697] ntfs3(loop2): Failed to load $Extend (-22).
[  756.257184][T12697] ntfs3(loop2): Failed to initialize $Extend.
[  756.433756][T12709] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  756.433783][T12709] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  756.453314][T12709] vhci_hcd vhci_hcd.0: Device attached
[  756.577427][T12710] vhci_hcd: connection closed
[  756.583937][   T56] vhci_hcd vhci_hcd.0: stop threads
[  756.583965][   T56] vhci_hcd vhci_hcd.0: release socket
[  756.584002][   T56] vhci_hcd vhci_hcd.0: disconnect device
[  756.618047][ T5720] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  756.688909][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  756.737130][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  756.771946][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  756.771980][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  756.772018][ T5720] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  756.772042][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.819306][ T5720] usb 2-1: config 0 descriptor??
[  756.824707][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  756.842473][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  757.850919][ T5791] hid_parser_main: 20 callbacks suppressed
[  757.850944][ T5791] hid-generic 00A0:0004:0003.0027: unknown main item tag 0x0
[  757.851047][ T5791] hid-generic 00A0:0004:0003.0027: unknown main item tag 0x0
[  757.851075][ T5791] hid-generic 00A0:0004:0003.0027: unknown main item tag 0x0
[  757.851133][ T5791] hid-generic 00A0:0004:0003.0027: unknown main item tag 0x0
[  757.851209][ T5791] hid-generic 00A0:0004:0003.0027: unknown main item tag 0x0
[  757.851271][ T5791] hid-generic 00A0:0004:0003.0027: unknown main item tag 0x0
[  757.851341][ T5791] hid-generic 00A0:0004:0003.0027: unknown main item tag 0x0
[  757.851423][ T5791] hid-generic 00A0:0004:0003.0027: unknown main item tag 0x0
[  757.874299][ T5791] hid-generic 00A0:0004:0003.0027: unknown main item tag 0x0
[  757.874338][ T5791] hid-generic 00A0:0004:0003.0027: unknown main item tag 0x0
[  757.978601][ T5791] hid-generic 00A0:0004:0003.0027: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  758.384434][ T5720] usbhid 2-1:0.0: can't add hid device: -71
[  758.384511][ T5720] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  758.436693][ T5720] usb 2-1: USB disconnect, device number 35
[  758.544753][T12727] fido_id[12727]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  758.587449][T12734] loop2: detected capacity change from 0 to 128
[  758.623878][T12734] FAT-fs (loop2): bogus number of FAT structure
[  758.623892][T12734] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  758.623900][T12734] FAT-fs (loop2): Can't find a valid FAT filesystem
[  758.647875][ T5794] Flush: task=udevd[5794] dev=loop2 state=2
[  758.792250][ T5794] Teardown: task=udevd[5794] dev=loop2 state=2
[  759.322736][T12741] loop1: detected capacity change from 0 to 512
[  759.371273][T12741] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  759.371287][T12741] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  759.821137][T12741] EXT4-fs (loop1): 1 truncate cleaned up
[  759.853847][T12741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  761.570909][T12768] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  761.570936][T12768] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  761.574809][T12768] vhci_hcd vhci_hcd.0: Device attached
[  761.617335][T12769] vhci_hcd: connection closed
[  761.649204][  T178] vhci_hcd vhci_hcd.3: stop threads
[  761.649230][  T178] vhci_hcd vhci_hcd.3: release socket
[  761.649267][  T178] vhci_hcd vhci_hcd.3: disconnect device
[  762.670841][T12778] loop3: detected capacity change from 0 to 4096
[  762.673567][ T5598] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.745695][T12786] IPv6: addrconf: prefix option has invalid lifetime
[  762.771711][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  762.790323][ T5720] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  762.872450][   T11] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  762.890830][T12778] ntfs3(loop3): Failed to load $Extend (-22).
[  762.890855][T12778] ntfs3(loop3): Failed to initialize $Extend.
[  762.921217][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  762.952219][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  762.952266][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  762.952305][ T5720] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  762.952329][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.004941][ T5720] usb 3-1: config 0 descriptor??
[  763.030111][   T11] usb 6-1: Using ep0 maxpacket: 32
[  763.032742][   T11] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  763.046723][   T11] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  763.046750][   T11] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  763.046771][   T11] usb 6-1: Product: syz
[  763.046784][   T11] usb 6-1: Manufacturer: syz
[  763.046798][   T11] usb 6-1: SerialNumber: syz
[  763.070185][   T11] usb 6-1: config 0 descriptor??
[  763.071173][T12784] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  763.087868][   T11] hub 6-1:0.0: bad descriptor, ignoring hub
[  763.087905][   T11] hub 6-1:0.0: probe with driver hub failed with error -5
[  763.151431][T12788] loop1: detected capacity change from 0 to 64
[  763.456257][   T11] usb 6-1: USB disconnect, device number 18
[  763.524135][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  763.530198][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  763.630204][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  763.630627][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  763.631543][ T5720] usbhid 3-1:0.0: can't add hid device: -71
[  763.631735][ T5720] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  763.672792][ T5720] usb 3-1: USB disconnect, device number 24
[  767.579209][T12824] loop1: detected capacity change from 0 to 4096
[  767.600296][ T5844] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  767.703908][T12824] ntfs3(loop1): Failed to load $Extend (-22).
[  767.703926][T12824] ntfs3(loop1): Failed to initialize $Extend.
[  767.764597][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  767.764631][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  767.764658][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  767.764679][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  767.764722][ T5844] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  767.764744][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.852716][T12826] loop0: detected capacity change from 0 to 64
[  767.876929][ T5844] usb 4-1: config 0 descriptor??
[  768.200548][ T5597] Flush: task=syz-executor[5597] dev=loop0 state=2
[  768.315059][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  768.320258][ T5597] Teardown: task=syz-executor[5597] dev=loop0 state=2
[  768.370018][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  768.450513][ T5844] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  768.644029][T12510] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  768.644047][T12510] CPU: 1 UID: 0 PID: 12510 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  768.644060][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  768.644068][T12510] Workqueue: hci1 hci_rx_work
[  768.644087][T12510] Call Trace:
[  768.644092][T12510]  <TASK>
[  768.644097][T12510]  dump_stack_lvl+0xe8/0x150
[  768.644116][T12510]  sysfs_create_dir_ns+0x271/0x2a0
[  768.644145][T12510]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  768.644165][T12510]  ? rt_spin_unlock+0x163/0x200
[  768.644179][T12510]  kobject_add_internal+0x62c/0xce0
[  768.644200][T12510]  kobject_add+0x163/0x240
[  768.644213][T12510]  ? rt_spin_unlock+0x157/0x200
[  768.644227][T12510]  ? __pfx_kobject_add+0x10/0x10
[  768.644245][T12510]  ? get_device_parent+0x370/0x3a0
[  768.644263][T12510]  device_add+0x3fa/0xb80
[  768.644279][T12510]  hci_conn_add_sysfs+0xd5/0x210
[  768.644293][T12510]  le_conn_complete_evt+0xfef/0x1580
[  768.644315][T12510]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  768.644331][T12510]  ? lockdep_hardirqs_on+0x7a/0x110
[  768.644345][T12510]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  768.644358][T12510]  ? rt_mutex_slowunlock+0x219/0x460
[  768.644369][T12510]  ? skb_pull_data+0xf0/0x200
[  768.644387][T12510]  hci_le_conn_complete_evt+0x187/0x470
[  768.644406][T12510]  hci_event_packet+0x67a/0xf10
[  768.644423][T12510]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  768.644438][T12510]  ? __pfx_hci_event_packet+0x10/0x10
[  768.644450][T12510]  ? rt_spin_unlock+0x157/0x200
[  768.644466][T12510]  ? hci_send_to_monitor+0xe2/0x590
[  768.644478][T12510]  hci_rx_work+0x3ee/0x1020
[  768.644495][T12510]  ? process_one_work+0x7fd/0x1480
[  768.644509][T12510]  process_one_work+0xaaf/0x1480
[  768.644534][T12510]  ? __pfx_process_one_work+0x10/0x10
[  768.644545][T12510]  ? do_raw_spin_lock+0x12b/0x2f0
[  768.644560][T12510]  ? assign_work+0x3cf/0x5d0
[  768.644576][T12510]  worker_thread+0xb05/0x10d0
[  768.644595][T12510]  ? __kthread_parkme+0x71/0x1f0
[  768.644616][T12510]  kthread+0x388/0x470
[  768.644627][T12510]  ? __pfx_worker_thread+0x10/0x10
[  768.644639][T12510]  ? __pfx_kthread+0x10/0x10
[  768.644650][T12510]  ret_from_fork+0x514/0xb70
[  768.644663][T12510]  ? __pfx_ret_from_fork+0x10/0x10
[  768.644673][T12510]  ? __switch_to+0xc89/0x1420
[  768.644689][T12510]  ? __pfx_kthread+0x10/0x10
[  768.644700][T12510]  ret_from_fork_asm+0x1a/0x30
[  768.644720][T12510]  </TASK>
[  768.644737][T12510] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  768.644761][T12510] Bluetooth: hci1: failed to register connection device
[  768.939665][ T5844] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  769.093441][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  769.093474][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  769.093511][ T5844] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  769.093534][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.147918][ T5844] usb 2-1: config 0 descriptor??
[  769.266470][   T37] usb 4-1: USB disconnect, device number 42
[  769.309868][   T32] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  769.469297][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  769.469330][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  769.494328][   T32] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  769.494346][   T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.543711][   T32] usb 6-1: config 0 descriptor??
[  769.821068][ T5844] usbhid 2-1:0.0: can't add hid device: -71
[  769.821243][ T5844] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  769.870368][ T5844] usb 2-1: USB disconnect, device number 36
[  770.209077][   T32] usbhid 6-1:0.0: can't add hid device: -71
[  770.209199][   T32] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  770.244445][   T32] usb 6-1: USB disconnect, device number 19
[  771.193289][T12857] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.198150][T12857] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.199386][T12857] bridge0: entered allmulticast mode
[  771.265926][T12861] bridge_slave_1: left allmulticast mode
[  771.315076][T12861] bridge_slave_1: left promiscuous mode
[  771.325524][T12861] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.492183][T12863] loop1: detected capacity change from 0 to 32768
[  771.527039][T12863] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  771.587247][T12863] XFS (loop1): Ending clean mount
[  771.604955][T12863] XFS (loop1): Quotacheck needed: Please wait.
[  771.650493][T12871] loop2: detected capacity change from 0 to 4096
[  771.726272][T12861] bridge_slave_0: left allmulticast mode
[  771.726307][T12861] bridge_slave_0: left promiscuous mode
[  771.726567][T12861] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.901100][T12871] ntfs3(loop2): Failed to load $Extend (-22).
[  771.901125][T12871] ntfs3(loop2): Failed to initialize $Extend.
[  772.277003][T12863] XFS (loop1): Quotacheck: Done.
[  772.656467][ T5598] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  772.657864][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  772.743267][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  772.948166][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  773.039947][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  774.310050][T12894] loop3: detected capacity change from 0 to 64
[  774.350097][   T32] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  774.399676][   T37] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  774.451014][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  774.503761][   T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  774.503793][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  774.503819][   T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  774.503842][   T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  774.503882][   T32] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  774.503905][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.533793][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  774.574275][T12899] loop5: detected capacity change from 0 to 256
[  774.593886][   T32] usb 2-1: config 0 descriptor??
[  774.595197][   T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  774.595233][   T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  774.595268][   T37] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  774.595343][   T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.652179][   T37] usb 3-1: config 0 descriptor??
[  774.685800][T12901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2024'.
[  774.707968][T12899] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  774.759731][T12510] Bluetooth: hci1: command 0x0406 tx timeout
[  774.979865][ T5791] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  775.111096][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  775.131979][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  775.132103][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  775.132153][ T5791] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  775.132177][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.179790][ T5791] usb 1-1: config 0 descriptor??
[  775.259779][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  775.269817][   T32] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  775.596355][T12907] loop5: detected capacity change from 0 to 24
[  775.724910][T12907] romfs: read error for inode 0x8000
[  776.410262][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  776.500190][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  776.569468][ T5791] usbhid 1-1:0.0: can't add hid device: -71
[  776.569970][ T5791] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  776.591173][   T37] usbhid 3-1:0.0: can't add hid device: -71
[  776.591291][   T37] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  776.613912][ T5791] usb 1-1: USB disconnect, device number 35
[  776.625585][   T37] usb 3-1: USB disconnect, device number 25
[  776.697037][T12916] loop3: detected capacity change from 0 to 4096
[  776.793100][T12916] ntfs3(loop3): Failed to load $Extend (-22).
[  776.793127][T12916] ntfs3(loop3): Failed to initialize $Extend.
[  776.966302][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  777.060377][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  778.044488][ T5713] usb 2-1: USB disconnect, device number 37
[  778.181527][T12938] loop0: detected capacity change from 0 to 64
[  778.859797][ T5597] Flush: task=syz-executor[5597] dev=loop0 state=2
[  779.955978][T12948] loop5: detected capacity change from 0 to 32768
[  779.967073][T12946] loop1: detected capacity change from 0 to 24
[  780.133362][ T5597] Teardown: task=syz-executor[5597] dev=loop0 state=2
[  780.351575][T12946] romfs: read error for inode 0x8000
[  780.568255][T12948] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  780.648548][T12948] XFS (loop5): Ending clean mount
[  780.658732][T12948] XFS (loop5): Quotacheck needed: Please wait.
[  780.694213][T12956] loop0: detected capacity change from 0 to 256
[  780.806791][T12956] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  780.840962][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  781.506245][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  782.089379][ T6035] Flush: task=udevd[6035] dev=loop0 state=2
[  782.096348][T12948] XFS (loop5): Quotacheck: Done.
[  782.334901][ T5713] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  782.513457][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  782.513492][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  782.513530][ T5713] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  782.513553][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.586223][ T6035] Teardown: task=udevd[6035] dev=loop0 state=2
[  782.609048][T12975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2047'.
[  782.609396][ T8257] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  782.624953][ T5713] usb 1-1: config 0 descriptor??
[  782.636032][T12975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2047'.
[  782.688077][T12976] loop2: detected capacity change from 0 to 64
[  782.764612][T12980] loop3: detected capacity change from 0 to 512
[  782.864196][T12980] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  783.129082][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  783.207304][T12980] EXT4-fs (loop3): 1 truncate cleaned up
[  783.277551][T12980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  783.283901][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  783.330530][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  783.341914][ T5713] usbhid 1-1:0.0: can't add hid device: -71
[  783.342027][ T5713] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  783.347357][ T5713] usb 1-1: USB disconnect, device number 36
[  783.430921][ T5600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  783.431093][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  783.612514][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  783.841306][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  784.232279][ T5713] hid_parser_main: 5 callbacks suppressed
[  784.232293][ T5713] hid-generic 00A0:0004:0003.002A: unknown main item tag 0x0
[  784.232311][ T5713] hid-generic 00A0:0004:0003.002A: unknown main item tag 0x0
[  784.232325][ T5713] hid-generic 00A0:0004:0003.002A: unknown main item tag 0x0
[  784.232340][ T5713] hid-generic 00A0:0004:0003.002A: unknown main item tag 0x0
[  784.232354][ T5713] hid-generic 00A0:0004:0003.002A: unknown main item tag 0x0
[  784.232369][ T5713] hid-generic 00A0:0004:0003.002A: unknown main item tag 0x0
[  784.232383][ T5713] hid-generic 00A0:0004:0003.002A: unknown main item tag 0x0
[  784.232398][ T5713] hid-generic 00A0:0004:0003.002A: unknown main item tag 0x0
[  784.232412][ T5713] hid-generic 00A0:0004:0003.002A: unknown main item tag 0x0
[  784.232427][ T5713] hid-generic 00A0:0004:0003.002A: unknown main item tag 0x0
[  784.324516][ T5713] hid-generic 00A0:0004:0003.002A: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  785.502669][T13006] loop1: detected capacity change from 0 to 32768
[  785.623345][T12994] fido_id[12994]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  785.662255][T13006] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  786.649698][T13006] XFS (loop1): Ending clean mount
[  786.658394][T13006] XFS (loop1): Quotacheck needed: Please wait.
[  787.036205][T13027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2062'.
[  787.093386][T13027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2062'.
[  787.272867][T13028] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2061'.
[  787.376770][T13031] loop3: detected capacity change from 0 to 64
[  787.614547][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  787.675002][T13038] loop5: detected capacity change from 0 to 512
[  787.712530][T13038] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  787.776056][T13038] EXT4-fs (loop5): 1 truncate cleaned up
[  787.814361][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  787.855431][T13006] XFS (loop1): Quotacheck: Done.
[  787.906704][T13038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  788.096419][ T5598] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  788.373709][   T32] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  788.745638][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  788.745672][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  788.745752][   T32] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  788.745819][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.862727][ T8257] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  788.952588][   T32] usb 4-1: config 0 descriptor??
[  788.965263][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  789.101760][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  789.187722][ T5844] hid-generic 00A0:0004:0003.002B: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  790.335250][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  790.342919][   T32] usbhid 4-1:0.0: can't add hid device: -32
[  790.343047][   T32] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  790.451126][   T32] usb 4-1: USB disconnect, device number 43
[  791.430861][T13057] fido_id[13057]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  791.566342][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  791.761052][T13074] loop3: detected capacity change from 0 to 64
[  791.781434][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  792.217606][T13081] loop5: detected capacity change from 0 to 32768
[  792.318762][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  792.338981][T13081] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  793.207469][ T5602] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  793.207496][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  793.207521][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  793.207535][ T5602] Workqueue: hci0 hci_rx_work
[  793.207566][ T5602] Call Trace:
[  793.207574][ T5602]  <TASK>
[  793.207584][ T5602]  dump_stack_lvl+0xe8/0x150
[  793.207620][ T5602]  sysfs_create_dir_ns+0x271/0x2a0
[  793.207658][ T5602]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  793.207696][ T5602]  ? rt_spin_unlock+0x163/0x200
[  793.207720][ T5602]  kobject_add_internal+0x62c/0xce0
[  793.207757][ T5602]  kobject_add+0x163/0x240
[  793.207785][ T5602]  ? rt_spin_unlock+0x157/0x200
[  793.207811][ T5602]  ? __pfx_kobject_add+0x10/0x10
[  793.207848][ T5602]  ? get_device_parent+0x370/0x3a0
[  793.207882][ T5602]  device_add+0x3fa/0xb80
[  793.207913][ T5602]  hci_conn_add_sysfs+0xd5/0x210
[  793.207941][ T5602]  le_conn_complete_evt+0xfef/0x1580
[  793.207983][ T5602]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  793.208015][ T5602]  ? lockdep_hardirqs_on+0x7a/0x110
[  793.208040][ T5602]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  793.208066][ T5602]  ? rt_mutex_slowunlock+0x219/0x460
[  793.208087][ T5602]  ? skb_pull_data+0xf0/0x200
[  793.208122][ T5602]  hci_le_conn_complete_evt+0x187/0x470
[  793.208163][ T5602]  hci_event_packet+0x67a/0xf10
[  793.208198][ T5602]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  793.208234][ T5602]  ? __pfx_hci_event_packet+0x10/0x10
[  793.208259][ T5602]  ? rt_spin_unlock+0x157/0x200
[  793.208289][ T5602]  ? hci_send_to_monitor+0xe2/0x590
[  793.208312][ T5602]  hci_rx_work+0x3ee/0x1020
[  793.208345][ T5602]  ? process_one_work+0x7fd/0x1480
[  793.208374][ T5602]  process_one_work+0xaaf/0x1480
[  793.208399][ T5602]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  793.208440][ T5602]  ? __pfx_process_one_work+0x10/0x10
[  793.208464][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  793.208491][ T5602]  ? assign_work+0x3cf/0x5d0
[  793.208523][ T5602]  worker_thread+0xb05/0x10d0
[  793.208575][ T5602]  kthread+0x388/0x470
[  793.208595][ T5602]  ? __pfx_worker_thread+0x10/0x10
[  793.208621][ T5602]  ? __pfx_kthread+0x10/0x10
[  793.208642][ T5602]  ret_from_fork+0x514/0xb70
[  793.208666][ T5602]  ? __pfx_ret_from_fork+0x10/0x10
[  793.208687][ T5602]  ? __switch_to+0xc89/0x1420
[  793.208716][ T5602]  ? __pfx_kthread+0x10/0x10
[  793.208737][ T5602]  ret_from_fork_asm+0x1a/0x30
[  793.208778][ T5602]  </TASK>
[  793.208910][ T5602] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  793.208951][ T5602] Bluetooth: hci0: failed to register connection device
[  793.400692][T13081] XFS (loop5): Ending clean mount
[  793.410267][T13081] XFS (loop5): Quotacheck needed: Please wait.
[  793.626885][T13081] XFS (loop5): Quotacheck: Done.
[  793.641689][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  793.822638][ T8257] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  794.769640][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  794.881581][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  795.939637][   T32] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  796.092402][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  796.092437][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  796.092484][   T32] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  796.092507][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.792368][   T32] usb 4-1: config 0 descriptor??
[  796.914310][T13133] loop2: detected capacity change from 0 to 4096
[  796.941489][ T9936] hid_parser_main: 20 callbacks suppressed
[  796.941560][ T9936] hid-generic 00A0:0004:0003.002C: unknown main item tag 0x0
[  796.941588][ T9936] hid-generic 00A0:0004:0003.002C: unknown main item tag 0x0
[  796.941612][ T9936] hid-generic 00A0:0004:0003.002C: unknown main item tag 0x0
[  796.941636][ T9936] hid-generic 00A0:0004:0003.002C: unknown main item tag 0x0
[  796.941660][ T9936] hid-generic 00A0:0004:0003.002C: unknown main item tag 0x0
[  796.941742][ T9936] hid-generic 00A0:0004:0003.002C: unknown main item tag 0x0
[  796.941766][ T9936] hid-generic 00A0:0004:0003.002C: unknown main item tag 0x0
[  796.941788][ T9936] hid-generic 00A0:0004:0003.002C: unknown main item tag 0x0
[  796.941811][ T9936] hid-generic 00A0:0004:0003.002C: unknown main item tag 0x0
[  796.941892][ T9936] hid-generic 00A0:0004:0003.002C: unknown main item tag 0x0
[  797.185963][ T9936] hid-generic 00A0:0004:0003.002C: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  798.091535][   T32] playstation 0003:054C:0DF2.002D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  798.273239][   T32] playstation 0003:054C:0DF2.002D: Failed to retrieve feature with reportID 9: -32
[  798.273277][   T32] playstation 0003:054C:0DF2.002D: Failed to retrieve DualSense pairing info: -32
[  798.273326][   T32] playstation 0003:054C:0DF2.002D: Failed to get MAC address from DualSense
[  798.273346][   T32] playstation 0003:054C:0DF2.002D: Failed to create dualsense.
[  798.366786][   T32] playstation 0003:054C:0DF2.002D: probe with driver playstation failed with error -32
[  798.422783][T13133] ntfs3(loop2): Failed to load $Extend (-22).
[  798.422809][T13133] ntfs3(loop2): Failed to initialize $Extend.
[  798.512985][T13139] fido_id[13139]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  798.619853][T13140] loop1: detected capacity change from 0 to 32768
[  798.708770][T13140] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  798.773955][T13140] XFS (loop1): Ending clean mount
[  798.775880][T13154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  798.775896][T13154] IPv6: NLM_F_CREATE should be set when creating new route
[  798.823865][T13140] XFS (loop1): Quotacheck needed: Please wait.
[  799.067247][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  799.525019][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  800.183695][    T9] usb 4-1: USB disconnect, device number 44
[  800.466378][T13140] XFS (loop1): Quotacheck: Done.
[  800.494835][T13172] loop3: detected capacity change from 0 to 512
[  800.905143][ T5598] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  801.021456][T13183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  802.113226][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  803.078205][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  803.162116][   T32] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  803.162478][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  803.221876][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  803.343354][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  803.343388][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  803.343426][   T32] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  803.343450][   T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.393951][   T32] usb 6-1: config 0 descriptor??
[  803.439859][T13202] loop3: detected capacity change from 0 to 4096
[  803.850909][   T32] hid_parser_main: 10 callbacks suppressed
[  803.850935][   T32] playstation 0003:054C:0DF2.002E: unknown main item tag 0x0
[  803.850966][   T32] playstation 0003:054C:0DF2.002E: unknown main item tag 0x0
[  803.850992][   T32] playstation 0003:054C:0DF2.002E: unknown main item tag 0x0
[  803.851017][   T32] playstation 0003:054C:0DF2.002E: unknown main item tag 0x0
[  803.851042][   T32] playstation 0003:054C:0DF2.002E: unknown main item tag 0x0
[  803.912200][   T32] playstation 0003:054C:0DF2.002E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0
[  804.041136][   T32] playstation 0003:054C:0DF2.002E: Failed to retrieve feature with reportID 9: -32
[  804.041164][   T32] playstation 0003:054C:0DF2.002E: Failed to retrieve DualSense pairing info: -32
[  804.041214][   T32] playstation 0003:054C:0DF2.002E: Failed to get MAC address from DualSense
[  804.041230][   T32] playstation 0003:054C:0DF2.002E: Failed to create dualsense.
[  804.044689][   T32] playstation 0003:054C:0DF2.002E: probe with driver playstation failed with error -32
[  804.245437][ T9936] hid-generic 00A0:0004:0003.002F: unknown main item tag 0x0
[  804.245471][ T9936] hid-generic 00A0:0004:0003.002F: unknown main item tag 0x0
[  804.245497][ T9936] hid-generic 00A0:0004:0003.002F: unknown main item tag 0x0
[  804.245530][ T9936] hid-generic 00A0:0004:0003.002F: unknown main item tag 0x0
[  804.245554][ T9936] hid-generic 00A0:0004:0003.002F: unknown main item tag 0x0
[  804.309451][ T9936] hid-generic 00A0:0004:0003.002F: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  804.730158][T13202] ntfs3(loop3): Failed to load $Extend (-22).
[  804.730185][T13202] ntfs3(loop3): Failed to initialize $Extend.
[  804.903620][   T45] ntfs3(loop3): ino=5, mi_enum_attr
[  804.945985][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  805.197226][ T5713] usb 6-1: USB disconnect, device number 20
[  806.044121][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  808.559070][   T11] hid-generic 00A0:0004:0003.0030: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  808.925828][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  808.932461][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  809.225425][T13258] fido_id[13258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  809.518923][T13264] loop2: detected capacity change from 0 to 4096
[  810.327375][T13264] ntfs3(loop2): Failed to load $Extend (-22).
[  810.327403][T13264] ntfs3(loop2): Failed to initialize $Extend.
[  810.622312][   T12] ntfs3(loop2): ino=5, mi_enum_attr
[  810.659682][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  810.671958][   T11] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  811.680817][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  811.684367][   T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  811.684397][   T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  811.684429][   T11] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  811.684447][   T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.760930][   T11] usb 2-1: config 0 descriptor??
[  812.289050][   T11] hid_parser_main: 25 callbacks suppressed
[  812.289073][   T11] playstation 0003:054C:0DF2.0031: unknown main item tag 0x0
[  812.289108][   T11] playstation 0003:054C:0DF2.0031: unknown main item tag 0x0
[  812.289135][   T11] playstation 0003:054C:0DF2.0031: unknown main item tag 0x0
[  812.289169][   T11] playstation 0003:054C:0DF2.0031: unknown main item tag 0x0
[  812.289196][   T11] playstation 0003:054C:0DF2.0031: unknown main item tag 0x0
[  813.226774][   T11] playstation 0003:054C:0DF2.0031: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[  813.372304][   T11] playstation 0003:054C:0DF2.0031: Failed to retrieve feature with reportID 9: -32
[  813.372332][   T11] playstation 0003:054C:0DF2.0031: Failed to retrieve DualSense pairing info: -32
[  813.372386][   T11] playstation 0003:054C:0DF2.0031: Failed to get MAC address from DualSense
[  813.372402][   T11] playstation 0003:054C:0DF2.0031: Failed to create dualsense.
[  813.375898][   T11] playstation 0003:054C:0DF2.0031: probe with driver playstation failed with error -32
[  814.646650][   T11] hid-generic 00A0:0004:0003.0032: unknown main item tag 0x0
[  814.646691][   T11] hid-generic 00A0:0004:0003.0032: unknown main item tag 0x0
[  814.646717][   T11] hid-generic 00A0:0004:0003.0032: unknown main item tag 0x0
[  814.646741][   T11] hid-generic 00A0:0004:0003.0032: unknown main item tag 0x0
[  814.646766][   T11] hid-generic 00A0:0004:0003.0032: unknown main item tag 0x0
[  814.675954][   T11] hid-generic 00A0:0004:0003.0032: hidraw1: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  814.719055][   T11] usb 2-1: USB disconnect, device number 38
[  816.089843][T13321] fuse: Bad value for 'fd'
[  816.093484][T13319] loop2: detected capacity change from 0 to 256
[  816.146410][T13317] loop1: detected capacity change from 0 to 4096
[  816.158596][T13319] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  816.228144][T13319] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[  816.449767][T13317] ntfs3(loop1): Failed to load $Extend (-22).
[  816.449794][T13317] ntfs3(loop1): Failed to initialize $Extend.
[  816.782967][ T6035] Flush: task=udevd[6035] dev=loop1 state=2
[  816.859787][ T6035] Teardown: task=udevd[6035] dev=loop1 state=2
[  817.382236][T13332] loop3: detected capacity change from 0 to 32768
[  817.422692][T13340] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff)
[  817.446147][T12510] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  817.446172][T12510] CPU: 1 UID: 0 PID: 12510 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  817.446197][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  817.446209][T12510] Workqueue: hci3 hci_rx_work
[  817.446240][T12510] Call Trace:
[  817.446248][T12510]  <TASK>
[  817.446255][T12510]  dump_stack_lvl+0xe8/0x150
[  817.446289][T12510]  sysfs_create_dir_ns+0x271/0x2a0
[  817.446330][T12510]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  817.446367][T12510]  ? rt_spin_unlock+0x163/0x200
[  817.446392][T12510]  kobject_add_internal+0x62c/0xce0
[  817.446432][T12510]  kobject_add+0x163/0x240
[  817.446460][T12510]  ? rt_spin_unlock+0x157/0x200
[  817.446484][T12510]  ? __pfx_kobject_add+0x10/0x10
[  817.446518][T12510]  ? get_device_parent+0x370/0x3a0
[  817.446551][T12510]  device_add+0x3fa/0xb80
[  817.446582][T12510]  hci_conn_add_sysfs+0xd5/0x210
[  817.446613][T12510]  le_conn_complete_evt+0xfef/0x1580
[  817.446655][T12510]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  817.446685][T12510]  ? lockdep_hardirqs_on+0x7a/0x110
[  817.446707][T12510]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  817.446731][T12510]  ? rt_mutex_slowunlock+0x219/0x460
[  817.446751][T12510]  ? skb_pull_data+0xf0/0x200
[  817.446785][T12510]  hci_le_conn_complete_evt+0x187/0x470
[  817.446823][T12510]  hci_event_packet+0x67a/0xf10
[  817.446856][T12510]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  817.446883][T12510]  ? __pfx_hci_event_packet+0x10/0x10
[  817.446909][T12510]  ? rt_spin_unlock+0x157/0x200
[  817.446936][T12510]  ? hci_send_to_monitor+0xe2/0x590
[  817.446959][T12510]  hci_rx_work+0x3ee/0x1020
[  817.446991][T12510]  ? process_one_work+0x7fd/0x1480
[  817.447019][T12510]  process_one_work+0xaaf/0x1480
[  817.447066][T12510]  ? __pfx_process_one_work+0x10/0x10
[  817.447088][T12510]  ? do_raw_spin_lock+0x12b/0x2f0
[  817.447113][T12510]  ? assign_work+0x3cf/0x5d0
[  817.447152][T12510]  worker_thread+0xb05/0x10d0
[  817.447187][T12510]  ? __kthread_parkme+0x71/0x1f0
[  817.447223][T12510]  kthread+0x388/0x470
[  817.447242][T12510]  ? __pfx_worker_thread+0x10/0x10
[  817.447267][T12510]  ? __pfx_kthread+0x10/0x10
[  817.447288][T12510]  ret_from_fork+0x514/0xb70
[  817.447309][T12510]  ? __pfx_ret_from_fork+0x10/0x10
[  817.447330][T12510]  ? __switch_to+0xc89/0x1420
[  817.447361][T12510]  ? __pfx_kthread+0x10/0x10
[  817.447382][T12510]  ret_from_fork_asm+0x1a/0x30
[  817.447418][T12510]  </TASK>
[  817.447527][T12510] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  817.447565][T12510] Bluetooth: hci3: failed to register connection device
[  818.321329][T13332] ERROR: (device loop3): diAllocAG: numfree > numinos
[  818.321329][T13332] 
[  818.353632][T13332] ERROR: (device loop3): remounting filesystem as read-only
[  818.353712][T13332] ialloc: diAlloc returned -5!
[  820.626891][T13361] fuse: Bad value for 'fd'
[  820.781358][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  820.870239][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  821.287449][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  821.558172][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  821.713373][T13373] loop1: detected capacity change from 0 to 4096
[  822.067912][   T11] hid_parser_main: 10 callbacks suppressed
[  822.067936][   T11] hid-generic 00A0:0004:0003.0033: unknown main item tag 0x0
[  822.068004][   T11] hid-generic 00A0:0004:0003.0033: unknown main item tag 0x0
[  822.068071][   T11] hid-generic 00A0:0004:0003.0033: unknown main item tag 0x0
[  822.068169][   T11] hid-generic 00A0:0004:0003.0033: unknown main item tag 0x0
[  822.068195][   T11] hid-generic 00A0:0004:0003.0033: unknown main item tag 0x0
[  822.068293][   T11] hid-generic 00A0:0004:0003.0033: unknown main item tag 0x0
[  822.068366][   T11] hid-generic 00A0:0004:0003.0033: unknown main item tag 0x0
[  822.068463][   T11] hid-generic 00A0:0004:0003.0033: unknown main item tag 0x0
[  822.068584][   T11] hid-generic 00A0:0004:0003.0033: unknown main item tag 0x0
[  822.068694][   T11] hid-generic 00A0:0004:0003.0033: unknown main item tag 0x0
[  822.220090][   T11] hid-generic 00A0:0004:0003.0033: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  822.358664][T13373] ntfs3(loop1): Failed to load $Extend (-22).
[  822.358691][T13373] ntfs3(loop1): Failed to initialize $Extend.
[  822.402247][T13388] fido_id[13388]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  822.555797][ T5602] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  822.853471][ T6035] Flush: task=udevd[6035] dev=loop1 state=2
[  822.930156][ T6035] Teardown: task=udevd[6035] dev=loop1 state=2
[  823.293780][T13413] loop2: detected capacity change from 0 to 256
[  823.422658][T13413] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  823.527817][T13413] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[  823.879643][T12510] Bluetooth: hci3: command 0x0406 tx timeout
[  824.550551][   T11] hid-generic 00A0:0004:0003.0034: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  825.559307][T13429] fido_id[13429]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  825.655858][T13433] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff)
[  826.031318][T13440] loop0: detected capacity change from 0 to 4096
[  826.377145][T13440] ntfs3(loop0): Failed to load $Extend (-22).
[  826.377173][T13440] ntfs3(loop0): Failed to initialize $Extend.
[  826.645404][ T6035] Flush: task=udevd[6035] dev=loop0 state=2
[  826.721811][ T6035] Teardown: task=udevd[6035] dev=loop0 state=2
[  826.804153][T13393] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  826.839405][T13445] loop1: detected capacity change from 0 to 64
[  827.135312][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  827.230052][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  827.369657][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  827.503417][T13459] loop1: detected capacity change from 0 to 24
[  828.032292][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  828.045553][    T9] hid_parser_main: 20 callbacks suppressed
[  828.045594][    T9] hid-generic 00A0:0004:0003.0035: unknown main item tag 0x0
[  828.045656][    T9] hid-generic 00A0:0004:0003.0035: unknown main item tag 0x0
[  828.076652][T13459] romfs: read error for inode 0x8000
[  828.121565][    T9] hid-generic 00A0:0004:0003.0035: unknown main item tag 0x0
[  828.121744][    T9] hid-generic 00A0:0004:0003.0035: unknown main item tag 0x0
[  828.121858][    T9] hid-generic 00A0:0004:0003.0035: unknown main item tag 0x0
[  828.121885][    T9] hid-generic 00A0:0004:0003.0035: unknown main item tag 0x0
[  828.121954][    T9] hid-generic 00A0:0004:0003.0035: unknown main item tag 0x0
[  828.121980][    T9] hid-generic 00A0:0004:0003.0035: unknown main item tag 0x0
[  828.122046][    T9] hid-generic 00A0:0004:0003.0035: unknown main item tag 0x0
[  828.122112][    T9] hid-generic 00A0:0004:0003.0035: unknown main item tag 0x0
[  828.276080][    T9] hid-generic 00A0:0004:0003.0035: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  828.624549][T13468] fido_id[13468]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  828.817767][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  829.354285][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  829.547496][T13483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2196'.
[  829.553183][T13483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2196'.
[  830.531111][T13487] loop3: detected capacity change from 0 to 64
[  830.630283][T13393] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  830.630308][T13393] CPU: 1 UID: 0 PID: 13393 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  830.630333][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  830.630345][T13393] Workqueue: hci2 hci_rx_work
[  830.630374][T13393] Call Trace:
[  830.630382][T13393]  <TASK>
[  830.630390][T13393]  dump_stack_lvl+0xe8/0x150
[  830.630422][T13393]  sysfs_create_dir_ns+0x271/0x2a0
[  830.630460][T13393]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  830.630497][T13393]  ? rt_spin_unlock+0x163/0x200
[  830.630520][T13393]  kobject_add_internal+0x62c/0xce0
[  830.630555][T13393]  kobject_add+0x163/0x240
[  830.630581][T13393]  ? rt_spin_unlock+0x157/0x200
[  830.630604][T13393]  ? __pfx_kobject_add+0x10/0x10
[  830.630637][T13393]  ? get_device_parent+0x370/0x3a0
[  830.630669][T13393]  device_add+0x3fa/0xb80
[  830.630700][T13393]  hci_conn_add_sysfs+0xd5/0x210
[  830.630726][T13393]  le_conn_complete_evt+0xfef/0x1580
[  830.630762][T13393]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  830.630791][T13393]  ? lockdep_hardirqs_on+0x7a/0x110
[  830.630815][T13393]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  830.630848][T13393]  ? rt_mutex_slowunlock+0x219/0x460
[  830.630870][T13393]  ? skb_pull_data+0xf0/0x200
[  830.630906][T13393]  hci_le_conn_complete_evt+0x187/0x470
[  830.630943][T13393]  hci_event_packet+0x67a/0xf10
[  830.630975][T13393]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  830.631002][T13393]  ? __pfx_hci_event_packet+0x10/0x10
[  830.631027][T13393]  ? rt_spin_unlock+0x157/0x200
[  830.631056][T13393]  ? hci_send_to_monitor+0xe2/0x590
[  830.631080][T13393]  hci_rx_work+0x3ee/0x1020
[  830.631114][T13393]  ? process_one_work+0x7fd/0x1480
[  830.631141][T13393]  process_one_work+0xaaf/0x1480
[  830.631188][T13393]  ? __pfx_process_one_work+0x10/0x10
[  830.631210][T13393]  ? do_raw_spin_lock+0x12b/0x2f0
[  830.631237][T13393]  ? assign_work+0x3cf/0x5d0
[  830.631268][T13393]  worker_thread+0xb05/0x10d0
[  830.631305][T13393]  ? __kthread_parkme+0x71/0x1f0
[  830.631342][T13393]  kthread+0x388/0x470
[  830.631362][T13393]  ? __pfx_worker_thread+0x10/0x10
[  830.631387][T13393]  ? __pfx_kthread+0x10/0x10
[  830.631408][T13393]  ret_from_fork+0x514/0xb70
[  830.631434][T13393]  ? __pfx_ret_from_fork+0x10/0x10
[  830.631453][T13393]  ? __switch_to+0xc89/0x1420
[  830.631482][T13393]  ? __pfx_kthread+0x10/0x10
[  830.631500][T13393]  ret_from_fork_asm+0x1a/0x30
[  830.631533][T13393]  </TASK>
[  830.631563][T13393] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  830.631606][T13393] Bluetooth: hci2: failed to register connection device
[  831.031160][T13501] loop2: detected capacity change from 0 to 256
[  831.049265][ T5600] Flush: task=syz-executor[5600] dev=loop3 state=2
[  831.075982][T13501] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  831.105383][T13501] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[  831.120404][ T5600] Teardown: task=syz-executor[5600] dev=loop3 state=2
[  831.969248][   T11] hid-generic 00A0:0004:0003.0036: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  832.243480][T13511] fido_id[13511]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  832.445365][T13516] loop1: detected capacity change from 0 to 64
[  833.701486][T13525] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff)
[  833.811031][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  833.900552][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  834.644000][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2217'.
[  834.644022][T13544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2217'.
[  835.468998][   T11] hid_parser_main: 20 callbacks suppressed
[  835.469022][   T11] hid-generic 00A0:0004:0003.0037: unknown main item tag 0x0
[  835.489386][   T11] hid-generic 00A0:0004:0003.0037: unknown main item tag 0x0
[  835.498037][   T11] hid-generic 00A0:0004:0003.0037: unknown main item tag 0x0
[  835.498073][   T11] hid-generic 00A0:0004:0003.0037: unknown main item tag 0x0
[  835.498184][   T11] hid-generic 00A0:0004:0003.0037: unknown main item tag 0x0
[  835.498297][   T11] hid-generic 00A0:0004:0003.0037: unknown main item tag 0x0
[  835.498967][   T11] hid-generic 00A0:0004:0003.0037: unknown main item tag 0x0
[  835.498998][   T11] hid-generic 00A0:0004:0003.0037: unknown main item tag 0x0
[  835.499020][   T11] hid-generic 00A0:0004:0003.0037: unknown main item tag 0x0
[  835.499041][   T11] hid-generic 00A0:0004:0003.0037: unknown main item tag 0x0
[  835.743773][   T11] hid-generic 00A0:0004:0003.0037: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  835.910478][T13550] fido_id[13550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  836.108056][ T5596] Flush: task=syz-executor[5596] dev=loop2 state=2
[  836.582605][ T5596] Teardown: task=syz-executor[5596] dev=loop2 state=2
[  836.682087][T13561] loop1: detected capacity change from 0 to 24
[  836.818052][T13561] romfs: read error for inode 0x8000
[  837.255906][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  837.340091][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  837.442249][T13393] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  837.937078][   T11] hid-generic 00A0:0004:0003.0038: hidraw0: <UNKNOWN> HID v0.09 Device [syz0] on syz0
[  838.445482][T13589] fido_id[13589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  838.784277][T13601] loop0: detected capacity change from 0 to 24
[  838.863352][T13601] romfs: read error for inode 0x8000
[  839.664433][ T5597] Flush: task=syz-executor[5597] dev=loop0 state=2
[  839.753542][ T5597] Teardown: task=syz-executor[5597] dev=loop0 state=2
[  839.888210][T12510] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  840.828981][T13647] loop5: detected capacity change from 0 to 24
[  840.833517][T13647] romfs: read error for inode 0x8000
[  841.663844][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  841.874548][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  842.347011][T13662] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.347262][T13662] bridge0: port 1(bridge_slave_0) entered disabled state
[  842.464603][T13662] bridge0: entered allmulticast mode
[  842.849172][T13664] bridge_slave_1: left allmulticast mode
[  842.849221][T13664] bridge_slave_1: left promiscuous mode
[  842.906083][T13664] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.163855][T13664] bridge_slave_0: left allmulticast mode
[  843.163885][T13664] bridge_slave_0: left promiscuous mode
[  843.164122][T13664] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.664344][T13690] ALSA: mixer_oss: invalid OSS volume ''
[  846.388786][T13715] fuse: Bad value for 'fd'
[  846.735247][T13719] loop1: detected capacity change from 0 to 32768
[  846.923388][T13719] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  846.973780][T13719] XFS (loop1): Ending clean mount
[  846.976678][T13719] XFS (loop1): Quotacheck needed: Please wait.
[  848.223304][T13733] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  848.994748][T13719] XFS (loop1): Quotacheck: Done.
[  850.012037][ T5598] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  850.215767][T13755] fuse: Bad value for 'fd'
[  850.838600][T13759] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  850.838870][T13759] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  851.181644][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  851.359762][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  853.569624][    T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  853.719750][    T9] usb 6-1: Using ep0 maxpacket: 32
[  854.216723][    T9] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  854.216761][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.216844][    T9] usb 6-1: Product: syz
[  854.216893][    T9] usb 6-1: Manufacturer: syz
[  854.216958][    T9] usb 6-1: SerialNumber: syz
[  854.956568][    T9] usb 6-1: config 0 descriptor??
[  855.035289][    T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  855.035826][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  855.035846][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  855.035976][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  855.035990][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  855.111673][T13791] fuse: Bad value for 'fd'
[  855.376996][T13797] fuse: Bad value for 'fd'
[  855.723931][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  855.726546][    T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  855.726781][    T9] usb 6-1: media controller created
[  856.686513][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  856.737844][    T9] usb 6-1: selecting invalid altsetting 3
[  856.737865][    T9] ttusb2: set interface to alts=3 failed
[  856.897017][    T9] DVB: Unable to find symbol tda10086_attach()
[  856.897033][    T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  856.901402][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  856.901421][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  856.901539][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  856.901552][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  856.901613][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  856.923731][    T9] usb 6-1: USB disconnect, device number 21
[  858.198025][T13832] overlayfs: upper fs does not support file handles, falling back to index=off.
[  858.399679][T13508] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  859.441979][T13508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.442012][T13508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  859.442049][T13508] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  859.442072][T13508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.452502][T13508] usb 1-1: config 0 descriptor??
[  859.457890][    T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  859.966385][T13508] hid_parser_main: 20 callbacks suppressed
[  859.966411][T13508] playstation 0003:054C:0DF2.0039: unknown main item tag 0x0
[  859.966442][T13508] playstation 0003:054C:0DF2.0039: unknown main item tag 0x0
[  859.966480][T13508] playstation 0003:054C:0DF2.0039: unknown main item tag 0x0
[  859.966506][T13508] playstation 0003:054C:0DF2.0039: unknown main item tag 0x0
[  859.966533][T13508] playstation 0003:054C:0DF2.0039: unknown main item tag 0x0
[  860.015915][ T5844] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  860.041808][T13508] playstation 0003:054C:0DF2.0039: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  860.162671][T13833] playstation 0003:054C:0DF2.0039: pid 13833 passed too short report
[  860.163924][T13508] playstation 0003:054C:0DF2.0039: Failed to retrieve feature with reportID 9: -32
[  860.163939][T13508] playstation 0003:054C:0DF2.0039: Failed to retrieve DualSense pairing info: -32
[  860.163978][T13508] playstation 0003:054C:0DF2.0039: Failed to get MAC address from DualSense
[  860.163987][T13508] playstation 0003:054C:0DF2.0039: Failed to create dualsense.
[  860.174522][T13508] playstation 0003:054C:0DF2.0039: probe with driver playstation failed with error -32
[  860.252603][ T5844] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  860.252632][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.252651][ T5844] usb 2-1: Product: syz
[  860.252665][ T5844] usb 2-1: Manufacturer: syz
[  860.252679][ T5844] usb 2-1: SerialNumber: syz
[  860.295410][ T5844] usb 2-1: config 0 descriptor??
[  860.333241][ T5844] usb 2-1: selecting invalid altsetting 1
[  860.333254][ T5844] technisat-usb2: could not set alternate setting to 0
[  860.523229][ T5844] technisat-usb2: firmware version: 0.0
[  860.523274][ T5844] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  861.915384][   T32] usb 1-1: USB disconnect, device number 37
[  861.980951][ T5844] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  862.154282][ T5844] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19)
[  862.202649][ T5844] usb 2-1: USB disconnect, device number 39
[  864.440701][T13912] bridge0: entered allmulticast mode
[  864.581327][    T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  864.752269][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  864.752381][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  864.752420][    T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  864.752444][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.762133][    T9] usb 2-1: config 0 descriptor??
[  865.196961][    T9] playstation 0003:054C:0DF2.003A: unknown main item tag 0x0
[  865.197000][    T9] playstation 0003:054C:0DF2.003A: unknown main item tag 0x0
[  865.197026][    T9] playstation 0003:054C:0DF2.003A: unknown main item tag 0x0
[  865.197053][    T9] playstation 0003:054C:0DF2.003A: unknown main item tag 0x0
[  865.197078][    T9] playstation 0003:054C:0DF2.003A: unknown main item tag 0x0
[  865.244132][    T9] playstation 0003:054C:0DF2.003A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[  866.301828][    T9] playstation 0003:054C:0DF2.003A: Failed to retrieve feature with reportID 9: -32
[  866.301856][    T9] playstation 0003:054C:0DF2.003A: Failed to retrieve DualSense pairing info: -32
[  866.301906][    T9] playstation 0003:054C:0DF2.003A: Failed to get MAC address from DualSense
[  866.301922][    T9] playstation 0003:054C:0DF2.003A: Failed to create dualsense.
[  866.376236][    T9] playstation 0003:054C:0DF2.003A: probe with driver playstation failed with error -32
[  867.475140][    T9] usb 2-1: USB disconnect, device number 40
[  869.044840][T13970] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 (while UP)
[  869.920010][T13978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2362'.
[  870.126953][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  870.127054][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  871.739660][    T9] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  871.837062][T14016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2373'.
[  871.896435][    T9] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  871.896465][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.896485][    T9] usb 2-1: Product: syz
[  871.896499][    T9] usb 2-1: Manufacturer: syz
[  871.896513][    T9] usb 2-1: SerialNumber: syz
[  871.949118][    T9] usb 2-1: config 0 descriptor??
[  871.961671][    T9] usb 2-1: selecting invalid altsetting 1
[  871.961692][    T9] technisat-usb2: could not set alternate setting to 0
[  872.161625][    T9] technisat-usb2: firmware version: 0.0
[  872.162875][    T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  873.500237][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  873.545331][    T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19)
[  873.734592][    T9] usb 2-1: USB disconnect, device number 41
[  873.800676][T14052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2388'.
[  877.137394][T14086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2399'.
[  879.302584][T14094] loop3: detected capacity change from 0 to 32768
[  879.425379][T14094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2403 (14094)
[  880.432366][T14094] BTRFS error (device loop3): open_ctree failed: -12
[  881.743878][T14130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2412'.
[  883.418195][ T6035] Flush: task=udevd[6035] dev=loop3 state=2
[  883.522194][ T6035] Teardown: task=udevd[6035] dev=loop3 state=2
[  886.979646][T13508] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  887.226729][T13508] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  887.226761][T13508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.226782][T13508] usb 2-1: Product: syz
[  887.226796][T13508] usb 2-1: Manufacturer: syz
[  887.226811][T13508] usb 2-1: SerialNumber: syz
[  887.278572][T13508] usb 2-1: config 0 descriptor??
[  887.288735][T13508] usb 2-1: selecting invalid altsetting 1
[  887.288748][T13508] technisat-usb2: could not set alternate setting to 0
[  888.300088][T13508] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware
[  888.302865][T13508] usb 2-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2
[  888.302933][T13508] usb 2-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw
[  903.106463][   T32] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  903.361229][   T32] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  903.361260][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.361277][   T32] usb 4-1: Product: syz
[  903.361291][   T32] usb 4-1: Manufacturer: syz
[  903.361306][   T32] usb 4-1: SerialNumber: syz
[  903.418787][   T32] usb 4-1: config 0 descriptor??
[  903.429851][   T32] usb 4-1: selecting invalid altsetting 1
[  903.429882][   T32] technisat-usb2: could not set alternate setting to 0
[  903.725195][   T32] technisat-usb2: firmware version: 0.0
[  903.725441][   T32] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  904.407087][   T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  904.437305][   T32] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19)
[  904.452712][   T32] usb 4-1: USB disconnect, device number 45
[  905.826957][T14438] loop5: detected capacity change from 0 to 32768
[  905.945497][T14438] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  906.015585][T14438] XFS (loop5): Ending clean mount
[  906.041041][T14438] XFS (loop5): Quotacheck needed: Please wait.
[  907.279814][T14438] XFS (loop5): Quotacheck: Done.
[  908.743947][ T8257] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  910.097506][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  910.501064][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  912.648165][T13393] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  913.477679][T14537] loop0: detected capacity change from 0 to 512
[  913.488152][T14537] EXT4-fs: Ignoring removed bh option
[  913.488185][T14537] EXT4-fs: Ignoring removed mblk_io_submit option
[  913.498747][T14537] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  913.602912][T14537] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  913.603313][T14537] EXT4-fs (loop0): orphan cleanup on readonly fs
[  913.701911][T14537] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4
[  913.701966][T14537] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[  913.845300][T14537] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2535: Failed to acquire dquot type 1
[  913.845541][T14537] loop0: lost filesystem error report for type 5 error -5
[  913.861113][    C0] EXT4-fs (loop0): last error at time 1783073696: ext4_acquire_dquot:7041
[  913.995573][T14537] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2535: Invalid block bitmap block 0 in block_group 0
[  913.995608][T14537] loop0: lost filesystem error report for type 5 error -117
[  914.903836][T14537] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2535: Invalid block bitmap block 0 in block_group 0
[  914.903876][T14537] loop0: lost filesystem error report for type 5 error -117
[  914.935516][T14537] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2535: Invalid block bitmap block 0 in block_group 0
[  914.935556][T14537] loop0: lost filesystem error report for type 5 error -117
[  914.969206][T14537] Quota error (device loop0): write_blk: dquota write failed
[  914.969330][T14537] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  914.969371][T14537] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2535: Failed to acquire dquot type 1
[  914.969393][T14537] loop0: lost filesystem error report for type 5 error -28
[  914.976915][T14537] Quota error (device loop0): write_blk: dquota write failed
[  914.977068][T14537] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  914.977117][T14537] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2535: Failed to acquire dquot type 1
[  914.977139][T14537] loop0: lost filesystem error report for type 5 error -28
[  915.219922][T14537] EXT4-fs (loop0): 1 orphan inode deleted
[  915.257514][T14537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  916.597054][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  917.463887][T13393] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  917.607221][ T5597] Flush: task=syz-executor[5597] dev=loop0 state=2
[  917.689698][ T5597] Teardown: task=syz-executor[5597] dev=loop0 state=2
[  918.760767][    T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  918.942619][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  918.959123][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  919.256283][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  919.256328][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  919.375593][    T9] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  919.375638][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.375690][    T9] usb 1-1: Product: syz
[  919.375704][    T9] usb 1-1: Manufacturer: syz
[  919.375719][    T9] usb 1-1: SerialNumber: syz
[  919.701483][    T9] usb 1-1: config 0 descriptor??
[  919.705458][T14604] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  920.733252][    T9] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  921.090072][    T9] usb 1-1: USB disconnect, device number 38
[  923.328183][T12510] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  931.573390][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  931.573478][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  933.072189][T14765] loop5: detected capacity change from 0 to 32768
[  933.129665][T14765] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  934.149999][T14765] XFS (loop5): Ending clean mount
[  934.167305][T14765] XFS (loop5): Quotacheck needed: Please wait.
[  936.116429][T14765] XFS (loop5): Quotacheck: Done.
[  936.476266][ T8257] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  937.491577][T13393] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  937.635418][T13393] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  937.648099][T13393] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  937.678348][T13393] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  937.679119][T13393] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  937.924482][T13393] Bluetooth: hci1: unexpected event for opcode 0x000c
[  938.635697][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  939.459889][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  939.809364][T13393] Bluetooth: hci5: command tx timeout
[  941.586817][T14855] loop1: detected capacity change from 0 to 32768
[  941.666831][T14862] overlayfs: failed to clone upperpath
[  941.704289][T14855] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  941.705589][T14862] overlayfs: failed to clone upperpath
[  941.849280][T14855] XFS (loop1): Ending clean mount
[  941.858962][T14855] XFS (loop1): Quotacheck needed: Please wait.
[  941.915803][T13393] Bluetooth: hci5: command tx timeout
[  943.117792][T13393] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  943.316776][T14855] XFS (loop1): Quotacheck: Done.
[  943.959760][T12510] Bluetooth: hci5: command tx timeout
[  944.397073][ T5598] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  945.479020][ T5722] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  945.646599][ T5722] usb 1-1: unable to get BOS descriptor or descriptor too short
[  945.650558][ T5722] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  945.650702][ T5722] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  945.650776][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  945.665182][ T5722] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  945.665247][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.665302][ T5722] usb 1-1: Product: syz
[  945.665352][ T5722] usb 1-1: Manufacturer: syz
[  945.665367][ T5722] usb 1-1: SerialNumber: syz
[  946.005382][ T5722] usb 1-1: config 0 descriptor??
[  946.042920][T12510] Bluetooth: hci5: command tx timeout
[  946.213851][T14930] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  946.624225][ T5722] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  947.867884][ T5772] usb 1-1: USB disconnect, device number 39
[  948.171850][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  948.268361][T12510] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  948.422615][ T5800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  948.462621][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  950.286482][T13393] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  953.045010][T13508] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  953.063633][T13508] usb 2-1: USB disconnect, device number 42
[  953.588535][ T5800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  954.219129][T12510] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  954.465946][T12510] Bluetooth: hci0: unexpected event for opcode 0x000c
[  954.583556][T15012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2661'.
[  955.961528][ T5800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.129857][T12510] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  958.865745][T13393] Bluetooth: hci0: unexpected event for opcode 0x000c
[  959.259898][T15052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2673'.
[  959.356671][ T5800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  959.596023][T13393] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  959.659644][ T5772] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  959.685276][T15068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2680'.
[  959.688453][T15068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2680'.
[  959.777222][T15073] fuse: Bad value for 'fd'
[  959.835019][ T5772] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  959.835051][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.835073][ T5772] usb 1-1: Product: syz
[  959.835088][ T5772] usb 1-1: Manufacturer: syz
[  959.835102][ T5772] usb 1-1: SerialNumber: syz
[  960.073698][ T5772] usb 1-1: config 0 descriptor??
[  960.241632][ T5772] usb 1-1: selecting invalid altsetting 1
[  960.241655][ T5772] technisat-usb2: could not set alternate setting to 0
[  960.378912][ T5772] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware
[  960.391813][ T5772] usb 1-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2
[  960.391840][ T5772] usb 1-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw
[  960.536390][T14736] bridge0: port 1(bridge_slave_0) entered blocking state
[  960.536851][T14736] bridge0: port 1(bridge_slave_0) entered disabled state
[  960.537106][T14736] bridge_slave_0: entered allmulticast mode
[  960.562608][T14736] bridge_slave_0: entered promiscuous mode
[  960.566415][T14736] bridge0: port 2(bridge_slave_1) entered blocking state
[  960.566651][T14736] bridge0: port 2(bridge_slave_1) entered disabled state
[  960.566863][T14736] bridge_slave_1: entered allmulticast mode
[  960.602910][T14736] bridge_slave_1: entered promiscuous mode
[  960.834300][T14736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  960.864498][T14736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  960.885060][T12510] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  960.994620][T15103] fuse: Bad value for 'fd'
[  961.097550][T14736] team0: Port device team_slave_0 added
[  961.128184][T14736] team0: Port device team_slave_1 added
[  961.842224][T14736] batman_adv: batadv0: Adding interface: batadv_slave_0
[  961.842241][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  961.842265][T14736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  961.943377][T13393] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  962.013273][T15131] fuse: Bad value for 'fd'
[  962.102354][T14736] batman_adv: batadv0: Adding interface: batadv_slave_1
[  962.102370][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  962.102396][T14736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  962.250350][ T5791] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  962.639208][ T5791] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  962.639239][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.639257][ T5791] usb 2-1: Product: syz
[  962.639270][ T5791] usb 2-1: Manufacturer: syz
[  962.639284][ T5791] usb 2-1: SerialNumber: syz
[  962.658196][ T5791] usb 2-1: config 0 descriptor??
[  963.501116][ T5791] usb 2-1: selecting invalid altsetting 1
[  963.501138][ T5791] technisat-usb2: could not set alternate setting to 0
[  963.509681][ T5791] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware
[  964.695399][T15165] loop0: detected capacity change from 0 to 64
[  965.113205][ T5597] do_umount: task=syz-executor[5597] propagate_mount_busy()!=0
[  965.113608][ T5597] do_umount: task=syz-executor[5597] propagate_mount_busy()!=0
[  965.389910][ T5597] BFS-fs: bfs_iget(): Bad inode number loop0:0000fe02
[  965.448312][ T5597] BFS-fs: bfs_iget(): Bad inode number loop0:0000fe02
[  965.496301][T12510] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  965.935197][ T5800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  966.016013][ T5800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  966.051607][ T5800] bond0 (unregistering): Released all slaves
[  966.060106][ T5800] bond1 (unregistering): Released all slaves
[  966.079891][   T32] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  966.081327][ T5800] bond2 (unregistering): Released all slaves
[  966.115652][ T5800] bond3 (unregistering): Released all slaves
[  966.132392][ T5800] bond4 (unregistering): Released all slaves
[  966.152104][ T5800] bond5 (unregistering): Released all slaves
[  966.275746][   T32] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  966.275778][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.275798][   T32] usb 6-1: Product: syz
[  966.275813][   T32] usb 6-1: Manufacturer: syz
[  966.275827][   T32] usb 6-1: SerialNumber: syz
[  966.279370][   T32] usb 6-1: config 0 descriptor??
[  966.344410][   T32] usb 6-1: selecting invalid altsetting 1
[  966.344431][   T32] technisat-usb2: could not set alternate setting to 0
[  966.549434][   T32] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware
[  966.912223][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5
[  967.186168][T14736] hsr_slave_0: entered promiscuous mode
[  967.187344][T14736] hsr_slave_1: entered promiscuous mode
[  967.188238][T14736] debugfs: 'hsr0' already exists in 'hsr'
[  967.188262][T14736] Cannot create hsr debugfs directory
[  967.492336][T12510] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  967.540397][T12510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  967.542059][T12510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  967.558528][T12510] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  967.561033][T12510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  967.777031][T12510] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  969.649578][T13393] Bluetooth: hci1: command tx timeout
[  971.179708][ T5800] hsr_slave_0: left promiscuous mode
[  971.210072][ T5800] hsr_slave_1: left promiscuous mode
[  971.211123][ T5800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  971.211146][ T5800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  971.242143][T15240] loop5: detected capacity change from 0 to 64
[  971.257779][ T5800] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  971.257806][ T5800] batman_adv: batadv0: Removing interface: batadv_slave_1
[  971.561521][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  971.678719][ T5800] veth1_macvtap: left promiscuous mode
[  971.729728][T13393] Bluetooth: hci1: command tx timeout
[  971.744850][ T5800] veth0_macvtap: left promiscuous mode
[  971.745178][ T5800] veth1_vlan: left promiscuous mode
[  971.745381][ T5800] veth0_vlan: left promiscuous mode
[  971.792422][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  972.010898][T13393] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  973.041914][T15267] fuse: Bad value for 'fd'
[  973.839600][T12510] Bluetooth: hci1: command tx timeout
[  974.440723][ T5800] team0 (unregistering): Port device team_slave_1 removed
[  974.480577][ T5800] team0 (unregistering): Port device team_slave_0 removed
[  974.670088][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6
[  975.311805][T12510] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  975.905822][T12510] Bluetooth: hci1: command tx timeout
[  976.696622][T15296] fuse: Bad value for 'fd'
[  979.453957][T12510] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  980.173397][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7
[  980.397880][T14736] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  980.451083][T15343] fuse: Bad value for 'fd'
[  980.562322][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2756'.
[  981.297132][T14736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  981.298170][T14736] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  981.540493][T14736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  981.681641][T14736] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  981.834130][T14736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  981.836803][T14736] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  981.934516][T14736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  982.874326][T15195] bridge0: port 1(bridge_slave_0) entered blocking state
[  982.875082][T15195] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.875595][T15195] bridge_slave_0: entered allmulticast mode
[  982.911234][T15195] bridge_slave_0: entered promiscuous mode
[  982.964604][T15195] bridge0: port 2(bridge_slave_1) entered blocking state
[  982.965094][T15195] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.965372][T15195] bridge_slave_1: entered allmulticast mode
[  982.991305][T15195] bridge_slave_1: entered promiscuous mode
[  983.533069][T13393] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  983.627469][ T5800] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  984.638858][ T5258] 8021q: adding VLAN 0 to HW filter on device eth8
[  984.788084][T15195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  984.861228][T15195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  984.865094][T15430] loop5: detected capacity change from 0 to 164
[  985.035932][ T8257] Flush: task=syz-executor[8257] dev=loop5 state=2
[  985.134474][ T8257] Teardown: task=syz-executor[8257] dev=loop5 state=2
[  985.228918][T15440] fuse: Bad value for 'fd'
[  985.426645][T12510] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  985.549367][ T5800] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.623192][T15195] team0: Port device team_slave_0 added
[  985.657159][T15195] team0: Port device team_slave_1 added
[  986.084523][T15195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  986.084949][T15195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  986.084977][T15195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  986.215362][T15195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  986.215379][T15195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  986.215406][T15195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  986.437646][T15460] fuse: Bad value for 'fd'
[  986.658387][ T5800] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  986.668059][T12510] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  990.869219][T12510] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  991.036703][T13393] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  991.047416][T13393] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  991.106721][T13393] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  991.162027][T13393] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  991.163806][T13393] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  991.557426][ T5800] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  992.818444][T15195] hsr_slave_0: entered promiscuous mode
[  992.876750][T15195] hsr_slave_1: entered promiscuous mode
[  992.890029][T15195] debugfs: 'hsr0' already exists in 'hsr'
[  992.890055][T15195] Cannot create hsr debugfs directory
[  993.002829][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  993.002924][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  993.399910][T13393] Bluetooth: hci4: command tx timeout
[  994.403070][T13393] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  994.495424][T15547] fuse: fd is not a fuse device
[  995.479775][T12510] Bluetooth: hci4: command tx timeout
[  995.591177][T15558] loop1: detected capacity change from 0 to 32768
[  995.817937][T15558] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  995.847762][T15558] XFS (loop1): Ending clean mount
[  995.886776][T15558] XFS (loop1): Quotacheck needed: Please wait.
[  995.989606][T12510] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  997.027988][T15558] XFS (loop1): Quotacheck: Done.
[  997.675679][T13393] Bluetooth: hci4: command tx timeout
[  998.208811][ T5598] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  998.632397][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[  998.749666][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[  998.957097][T13393] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  999.099545][ T5800] bond0 (unregistering): Released all slaves
[  999.354210][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9
[  999.741552][T12510] Bluetooth: hci4: command tx timeout
[ 1001.208782][T12510] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[ 1001.353610][T15195] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1001.400430][T15195] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1001.452300][T15195] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1001.543818][T15195] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1001.816516][T15195] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1001.906129][T15195] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1001.935123][T15195] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1001.975748][T15195] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1002.028993][T13393] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[ 1002.120515][ T5800] hsr_slave_0: left promiscuous mode
[ 1002.160052][ T5800] hsr_slave_1: left promiscuous mode
[ 1002.384889][ T5800] veth1_macvtap: left promiscuous mode
[ 1002.384988][ T5800] veth0_macvtap: left promiscuous mode
[ 1002.404044][ T5800] veth1_vlan: left promiscuous mode
[ 1002.404251][ T5800] veth0_vlan: left promiscuous mode
[ 1005.038348][T15727] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2859'.
[ 1005.092923][T15729] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2859'.
[ 1005.974603][T15734] ALSA: mixer_oss: invalid OSS volume ''
[ 1009.120966][T15502] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1009.122181][T15502] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1009.122426][T15502] bridge_slave_0: entered allmulticast mode
[ 1009.128262][T15502] bridge_slave_0: entered promiscuous mode
[ 1009.240592][T15502] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.240906][T15502] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.241171][T15502] bridge_slave_1: entered allmulticast mode
[ 1009.261296][T15502] bridge_slave_1: entered promiscuous mode
[ 1010.917048][T15502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1010.957200][T15502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1011.650894][T15502] team0: Port device team_slave_0 added
[ 1011.956389][T15502] team0: Port device team_slave_1 added
[ 1013.634014][T15502] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1013.634062][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1013.634122][T15502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1014.267632][T15502] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1014.267649][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1014.268079][T15502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1015.454450][T15502] hsr_slave_0: entered promiscuous mode
[ 1015.456458][T15502] hsr_slave_1: entered promiscuous mode
[ 1015.458233][T15502] debugfs: 'hsr0' already exists in 'hsr'
[ 1015.458255][T15502] Cannot create hsr debugfs directory
[ 1016.417788][T15850] loop1: detected capacity change from 0 to 64
[ 1017.009356][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[ 1017.100640][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[ 1020.352535][T15195] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1020.503128][T12510] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[ 1021.748848][T15925] loop1: detected capacity change from 0 to 128
[ 1022.017065][ T5598] Flush: task=syz-executor[5598] dev=loop1 state=2
[ 1022.128280][ T5598] Teardown: task=syz-executor[5598] dev=loop1 state=2
[ 1023.604244][T13393] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[ 1023.634100][T15195] 8021q: adding VLAN 0 to HW filter on device team0
[ 1023.718941][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1023.719423][ T1426] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1024.340483][   T32] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1024.340508][ T5791] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1024.373989][ T5772] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1024.378872][ T5791] usb 2-1: USB disconnect, device number 43
[ 1024.485303][   T32] usb 6-1: USB disconnect, device number 22
[ 1024.972821][ T5772] usb 1-1: USB disconnect, device number 40
[ 1025.515899][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1025.635220][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1025.635426][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1026.393159][T12510] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[ 1027.613038][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1027.795916][T13393] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1027.946511][T13393] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1027.990707][T13393] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1027.997854][T13393] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1027.998875][T13393] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1029.370586][ T5800] bridge_slave_1: left allmulticast mode
[ 1029.370619][ T5800] bridge_slave_1: left promiscuous mode
[ 1029.469929][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1030.179198][T13393] Bluetooth: hci5: command tx timeout
[ 1031.654021][ T5800] bridge_slave_0: left allmulticast mode
[ 1031.654055][ T5800] bridge_slave_0: left promiscuous mode
[ 1031.654353][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.913090][T16082] loop1: detected capacity change from 0 to 64
[ 1032.342396][T13393] Bluetooth: hci5: command tx timeout
[ 1032.400575][T16082] ------------[ cut here ]------------
[ 1032.400590][T16082] !buffer_uptodate(bh)
[ 1032.400606][T16082] WARNING: fs/buffer.c:1093 at mark_buffer_dirty+0x299/0x410, CPU#1: syz.1.2949/16082
[ 1032.400654][T16082] Modules linked in:
[ 1032.400681][T16082] CPU: 1 UID: 0 PID: 16082 Comm: syz.1.2949 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1032.400708][T16082] Tainted: [L]=SOFTLOCKUP
[ 1032.400716][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1032.400731][T16082] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 1032.400759][T16082] Code: 4c 89 f7 e8 89 66 dd ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 5b fb ff e8 5f 82 71 ff eb 8c e8 58 82 71 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 4a 82 71 ff 90 0f 0b 90 e9 cf fd ff ff
[ 1032.400776][T16082] RSP: 0018:ffffc90004317828 EFLAGS: 00010283
[ 1032.400794][T16082] RAX: ffffffff82539688 RBX: ffff8880608c67e0 RCX: 0000000000080000
[ 1032.400810][T16082] RDX: ffffc9000d811000 RSI: 0000000000001897 RDI: 0000000000001898
[ 1032.400824][T16082] RBP: 0000000000000201 R08: 0000000000000000 R09: 0000000000000000
[ 1032.400836][T16082] R10: dffffc0000000000 R11: ffffed100c118cfd R12: 000000000000000f
[ 1032.400852][T16082] R13: ffff8880608c67e0 R14: ffff88804e36db40 R15: dffffc0000000000
[ 1032.400868][T16082] FS:  00007ff917ad66c0(0000) GS:ffff888125d4a000(0000) knlGS:0000000000000000
[ 1032.400886][T16082] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1032.400901][T16082] CR2: 000000110c359772 CR3: 0000000033b6a000 CR4: 00000000003526f0
[ 1032.400919][T16082] Call Trace:
[ 1032.400928][T16082]  <TASK>
[ 1032.400940][T16082]  bfs_get_block+0x5d2/0xb60
[ 1032.401008][T16082]  __block_write_begin_int+0x6c2/0x1900
[ 1032.401067][T16082]  ? __pfx_bfs_get_block+0x10/0x10
[ 1032.401101][T16082]  ? __pfx___block_write_begin_int+0x10/0x10
[ 1032.401136][T16082]  ? __filemap_get_folio_mpol+0x710/0xf50
[ 1032.401174][T16082]  ? __pfx_bfs_get_block+0x10/0x10
[ 1032.401203][T16082]  block_write_begin+0x8d/0x120
[ 1032.401232][T16082]  ? bfs_write_begin+0x1e/0xd0
[ 1032.401264][T16082]  bfs_write_begin+0x35/0xd0
[ 1032.401297][T16082]  generic_perform_write+0x2ad/0x8b0
[ 1032.401336][T16082]  ? __pfx_generic_perform_write+0x10/0x10
[ 1032.401361][T16082]  ? file_update_time_flags+0x21f/0x4b0
[ 1032.401392][T16082]  ? __generic_file_write_iter+0xfc/0x240
[ 1032.401413][T16082]  ? generic_file_write_iter+0x9b/0x330
[ 1032.401441][T16082]  generic_file_write_iter+0xaf/0x330
[ 1032.401469][T16082]  vfs_write+0x61e/0xbb0
[ 1032.401523][T16082]  ? __pfx_vfs_write+0x10/0x10
[ 1032.401548][T16082]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1032.401576][T16082]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1032.401605][T16082]  ? mutex_lock_nested+0x152/0x1d0
[ 1032.401636][T16082]  ? fdget_pos+0x252/0x320
[ 1032.401667][T16082]  ksys_write+0x156/0x270
[ 1032.401694][T16082]  ? __pfx_ksys_write+0x10/0x10
[ 1032.401727][T16082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1032.401749][T16082]  do_syscall_64+0x174/0x580
[ 1032.401772][T16082]  ? trace_irq_disable+0x3b/0x140
[ 1032.401796][T16082]  ? clear_bhb_loop+0x40/0x90
[ 1032.401822][T16082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1032.401843][T16082] RIP: 0033:0x7ff91987de59
[ 1032.401870][T16082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1032.401889][T16082] RSP: 002b:00007ff917ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1032.401910][T16082] RAX: ffffffffffffffda RBX: 00007ff919b05fa0 RCX: 00007ff91987de59
[ 1032.401925][T16082] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007
[ 1032.401939][T16082] RBP: 00007ff919913e6f R08: 0000000000000000 R09: 0000000000000000
[ 1032.401953][T16082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1032.401967][T16082] R13: 00007ff919b06038 R14: 00007ff919b05fa0 R15: 00007ffe88b70c98
[ 1032.402002][T16082]  </TASK>
[ 1032.402019][T16082] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1032.402047][T16082] CPU: 1 UID: 0 PID: 16082 Comm: syz.1.2949 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1032.402076][T16082] Tainted: [L]=SOFTLOCKUP
[ 1032.402084][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1032.402096][T16082] Call Trace:
[ 1032.402104][T16082]  <TASK>
[ 1032.402113][T16082]  vpanic+0x56c/0xa60
[ 1032.402146][T16082]  ? __pfx__printk+0x10/0x10
[ 1032.402172][T16082]  ? __pfx_vpanic+0x10/0x10
[ 1032.402190][T16082]  ? is_bpf_text_address+0x292/0x2b0
[ 1032.402219][T16082]  ? is_bpf_text_address+0x26/0x2b0
[ 1032.402256][T16082]  panic+0xc5/0xd0
[ 1032.402275][T16082]  ? __pfx_panic+0x10/0x10
[ 1032.402314][T16082]  __warn+0x315/0x4c0
[ 1032.402333][T16082]  ? mark_buffer_dirty+0x299/0x410
[ 1032.402363][T16082]  ? mark_buffer_dirty+0x299/0x410
[ 1032.402395][T16082]  __report_bug+0x331/0x530
[ 1032.402423][T16082]  ? filemap_get_entry+0xcd/0x3f0
[ 1032.402456][T16082]  ? mark_buffer_dirty+0x299/0x410
[ 1032.402489][T16082]  ? __pfx___report_bug+0x10/0x10
[ 1032.402513][T16082]  ? folio_mark_accessed+0x425/0x8b0
[ 1032.402538][T16082]  ? __pfx_folio_mark_accessed+0x10/0x10
[ 1032.402564][T16082]  ? rt_mutex_slowunlock+0x4ee/0xa20
[ 1032.402593][T16082]  ? mark_buffer_dirty+0x299/0x410
[ 1032.402620][T16082]  report_bug+0x16a/0x220
[ 1032.402646][T16082]  ? mark_buffer_dirty+0x299/0x410
[ 1032.402671][T16082]  ? mark_buffer_dirty+0x29b/0x410
[ 1032.402697][T16082]  handle_bug+0x9c/0x200
[ 1032.402726][T16082]  exc_invalid_op+0x1a/0x50
[ 1032.402755][T16082]  asm_exc_invalid_op+0x1a/0x20
[ 1032.402775][T16082] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 1032.402803][T16082] Code: 4c 89 f7 e8 89 66 dd ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 5b fb ff e8 5f 82 71 ff eb 8c e8 58 82 71 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 4a 82 71 ff 90 0f 0b 90 e9 cf fd ff ff
[ 1032.402821][T16082] RSP: 0018:ffffc90004317828 EFLAGS: 00010283
[ 1032.402838][T16082] RAX: ffffffff82539688 RBX: ffff8880608c67e0 RCX: 0000000000080000
[ 1032.402854][T16082] RDX: ffffc9000d811000 RSI: 0000000000001897 RDI: 0000000000001898
[ 1032.402867][T16082] RBP: 0000000000000201 R08: 0000000000000000 R09: 0000000000000000
[ 1032.402880][T16082] R10: dffffc0000000000 R11: ffffed100c118cfd R12: 000000000000000f
[ 1032.402895][T16082] R13: ffff8880608c67e0 R14: ffff88804e36db40 R15: dffffc0000000000
[ 1032.402919][T16082]  ? mark_buffer_dirty+0x298/0x410
[ 1032.402954][T16082]  ? mark_buffer_dirty+0x298/0x410
[ 1032.402983][T16082]  bfs_get_block+0x5d2/0xb60
[ 1032.403031][T16082]  __block_write_begin_int+0x6c2/0x1900
[ 1032.403086][T16082]  ? __pfx_bfs_get_block+0x10/0x10
[ 1032.403119][T16082]  ? __pfx___block_write_begin_int+0x10/0x10
[ 1032.403152][T16082]  ? __filemap_get_folio_mpol+0x710/0xf50
[ 1032.403190][T16082]  ? __pfx_bfs_get_block+0x10/0x10
[ 1032.403218][T16082]  block_write_begin+0x8d/0x120
[ 1032.403247][T16082]  ? bfs_write_begin+0x1e/0xd0
[ 1032.403279][T16082]  bfs_write_begin+0x35/0xd0
[ 1032.403313][T16082]  generic_perform_write+0x2ad/0x8b0
[ 1032.403349][T16082]  ? __pfx_generic_perform_write+0x10/0x10
[ 1032.403375][T16082]  ? file_update_time_flags+0x21f/0x4b0
[ 1032.403405][T16082]  ? __generic_file_write_iter+0xfc/0x240
[ 1032.403426][T16082]  ? generic_file_write_iter+0x9b/0x330
[ 1032.403454][T16082]  generic_file_write_iter+0xaf/0x330
[ 1032.403481][T16082]  vfs_write+0x61e/0xbb0
[ 1032.403514][T16082]  ? __pfx_vfs_write+0x10/0x10
[ 1032.403541][T16082]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1032.403567][T16082]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1032.403594][T16082]  ? mutex_lock_nested+0x152/0x1d0
[ 1032.403625][T16082]  ? fdget_pos+0x252/0x320
[ 1032.403655][T16082]  ksys_write+0x156/0x270
[ 1032.403682][T16082]  ? __pfx_ksys_write+0x10/0x10
[ 1032.403716][T16082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1032.403738][T16082]  do_syscall_64+0x174/0x580
[ 1032.403764][T16082]  ? trace_irq_disable+0x3b/0x140
[ 1032.403788][T16082]  ? clear_bhb_loop+0x40/0x90
[ 1032.403813][T16082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1032.403833][T16082] RIP: 0033:0x7ff91987de59
[ 1032.403851][T16082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1032.403869][T16082] RSP: 002b:00007ff917ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1032.403888][T16082] RAX: ffffffffffffffda RBX: 00007ff919b05fa0 RCX: 00007ff91987de59
[ 1032.403904][T16082] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007
[ 1032.403917][T16082] RBP: 00007ff919913e6f R08: 0000000000000000 R09: 0000000000000000
[ 1032.403930][T16082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1032.403943][T16082] R13: 00007ff919b06038 R14: 00007ff919b05fa0 R15: 00007ffe88b70c98
[ 1032.403979][T16082]  </TASK>
[ 1032.404248][T16082] Kernel Offset: disabled