last executing test programs:

3m54.849333348s ago: executing program 4 (id=906):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0xa}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981)
r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x400000b, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df1172e9008", "23639aabe426e78edc0000008000000000fb80c92dc817d44dcdec00"})
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)

3m47.772144653s ago: executing program 4 (id=934):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x70})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m47.687319373s ago: executing program 1 (id=935):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x70})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m47.573028434s ago: executing program 4 (id=936):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xd, 0x10, 0x8, 0x0, 0x10, 0x400, 0x10, 0x2, 0x10, 0xc, 0xe, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0)

3m47.020627385s ago: executing program 1 (id=940):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3], 0x0, 0x1000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m46.654334786s ago: executing program 1 (id=943):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x100800, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
keyctl$session_to_parent(0x12)
pipe(0x0)
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffe]}, 0x0, 0x8)
r3 = gettid()
timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r3}, &(0x7f00000000c0))
timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
rt_sigtimedwait(&(0x7f0000000100)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42902)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
write$sndseq(r4, &(0x7f0000000000), 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x381480)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, &(0x7f0000000080)={0x0, 0x9, '\x00', [@pad1, @generic={0x0, 0x45, "3d03e1f771a66caf0f6fd147d909f471d5f66f2dfed60badd753ba82e470a6b92ec7ab5c3f7b93486b48443997cf03977c897526ea9b01ce4433b976a1959c9b066e02cdea"}]}, 0x58)
r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9})
dup2(r7, r5)

3m45.056328209s ago: executing program 1 (id=945):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

3m44.72932017s ago: executing program 1 (id=949):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x70})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m44.217749401s ago: executing program 1 (id=954):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x2301508, 0x0, 0x401, 0x100, 0x8}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x3, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x0, 0xffffffffffffffff, r3, 0x0, 0x10000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

3m44.069415802s ago: executing program 32 (id=954):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x2301508, 0x0, 0x401, 0x100, 0x8}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000061c0)="c0f61a5fb77193bea0c6599de09cf570067192ff7d5bf191681878eb121895cd4c4052feb0a5196b61ab6e28d35aec54bb2aee6802a27f50c4e8f36a2b1bb12d93dbcd320ed338fd1a8ed43a2dcb2bf11c773ae982800321c7dcd67fa8930472eee2990090cc2a92f3373d898573a2cd1712c18ea624e82422c96f0d8895bfc4541911ff3662cd28fd55d795d1a5f31c92defbed88d48db688f899fe88997b057ce3e898eaf9eb2e76a59c1d2c10610768b3296595221c2b063ca2aa664fa0a5456c4e2bcddc7f856e2e29ce1b8852997a4d24f918408bfa9969074de495dd4cc9591e48287d78a2b3e0de09b48eb5b6bf78c6afd134b09770c164000d1f300c92877afe8be5d381c38da3b5fb9bd540c2f43c7dd2ec8dcff2af3517ba839c827866d10608964445bdead091df1264f5591e91d2f31b2015dff1b3b7ff0a5dc8b15748278849ddf4389ca7112ec1ca45957e2809b3d763e336f7051ac4e832ec61d1b95b9266565293806933dd8e3b65eaa1b4fe7946056703426674379ccec7abff1c459b91248f3a1d9e8103ae395aa86dd4235a5c16d9bd12dcb1ea9565a7c3d58d247a51db6d9077ecf47152d0733d79a5c449480c40b1cf8e115df4de3404b73ad06ac4c0d03f3b51d1b89b05ded082a5db1f5fbd8d351015b93862b2cc0995fb318609237e404e8d78d8982af761c27ad1fbc8f4693194c5e6b99edcb7a6e9dd261a386d8ed4420a7c12cbdcc86ab19f4e7a6c0c9b80fa3f0549ae57b38a93f669a87584b81e56211b34263db87c2d244e422878aa93e2c24260c71d06f75da33079b48b7072859669c128ba03d1487336a4a04167f2a3fa928d002c8b3cafdedf7a479604aa8f94e6b7ba58395df3d136b783f7be6b0b6b7b4b735c88a53da064a493b16713726b39ce23f08af19a671fe81be1e9772d87ca9cb5dccc35759fe3f7935a3167924d0a7d1586821ffebe0fa57e72a24967f7958875c4bf56d779369074db0077ee58138400c2f646c645e0f453e9e39aaf48da67775f59f8e282db3dec88bbe20ca6e65e2c7e44ab0583840513bfab76d94d1512549ea6db4a5a64cbe6f76b0ecdb2f1f71aa6446bcf4f7249366474cb77ed70ccb2702134b9dc6c2bfaf27ac9a9c85b8d9c48d100ae8c0eaa34701d2125a405b1117307119b754ccbbbcb2c8b71eb76d1157ddc7fbe0c75652a4cfc31d785a489f2344d8b4c47ff1b772104f49658f62d6241ef7f782db0cc071788b3dfa74e69533cd0a02ffadacdfbc8b5a83b9d4b8db068b5a7370f947fc4a99158c6296a442beba2e23ac1ef68c50f19851f3fb68b67fb714a5e7e53bb5a7690286cac12f2b002e854d8595075fbd00622b29bd423c3dbaf600ad6f37c96dcde43de6290b053c76df5620ce17118e2230039304c88a0d207c7cd05dd3854c545cdbebe907cc4d3411a382afed5e080502363cebe68e2c8dc1f800ea4add827a83a9cdf0fe6d54eabfca5a0ba370a06a4af1c49a60cd19141a4d994fbcce888278ade6300bd40685267fcdf1317cdb3b06cae9e7d9edb08d5c98b6d7115c025fcc05058a515adcc23c65ce526aed3b8203f3c54986f65ba9ffe2a9bc26b2813a1fe339ba2a58515cb8375e2d62550bf35dfd4fbdb75a70bb9fdc47d3d0346a65b986b7efd12aab760124b6888480b341b16ef2fea93fe2fbdeb55706690aa2c02bd80b1ccb7b8f23720283df89b515e2020bc5364cc4aea5fdc250f10d46db93c128e2de7477f4c80ec016f7a872efdef50ae1730b3a1deb8085d82f4fd53015a518803cd02646c087d67b0fd7092852dd81ac93ca60346f23fd847cf7c4883cab81af956342da21fb399b69e1988d89f9693b0630fa8cc95714285940d20eda153f8f7b01e6b2b892327b5d1e754a36a3430c5c22c3b841357eb80e526d7792a8ab9c4b1d23d82e31f23ef38580c2b33ca72424fbfbbf237f315cf2e5d134783982cad204be087ef58da96c6bc5da2dc4bc78f293eed56157a10848c0a956de15b83daacede9ae1c54731149f9ce7231cd84e14f128f87361e1fc0cdb2940766f39c93b9ddc74bba0a32548cddb1ae20981576de2ef8a772b04ed90900b2da11ffc70bbdb7091b8b8ed600dc0c9d236277afd9bb97b035f3b8fc95ef3f30c056b67a195c5c9f44c0f2ca4debba0d6d8779903e8e34fdd6b766fbba6b57e722ad9a852dbbeca8eb9acb9929bdcb4d4fa57d54ef1c1a0fdc032a898d3334f5671c7df82361b7d616c1f87e23f7adf043edda83458051f073f2562904ed25ad9a7129f3c14286007c9e4c81ea56c6a7289d8e58782d949a19a2642dc89d107fb465d0a98128250e66eedd93cf063963b7f7a0e1d3b9f1dd212cc9edd662af45852dbbaec84c69a640be115a239b5abd46d990fa007988f6be78a8c1e426091ecb33822529f7fddfb34d9304466ea06bb546a34735021e98674ae4a5f5c0b4f153ad5434b81c6343c42ae79224fe5abfe8b9e6fba38164c3c318500c130323b2f9bbcdf6aceb664e10483e2084defa744cd745e565ac5a8b5c30166330dd95e70f2a072a5cf5462635f7e0a4f455bcb607426aede9fa06d708c7c0daaafe2b84896134ab3b379c6690c9049903156232e5b7ca9529d602968f1e1f7a73214aaf4a9575dd5147e5bef8f05907267580abdb728cf32f6845cdf3bc779451669e4972e0b787afac5a36bacc3c1bcce125e91e4bf9810d91d1f1a3d8316328dd2626040af09892f1241c6645537ebfbeb752afba5e8171f487edba97aa92404973d4e8d09254abd2b70bdadd9b98fa3c33355295a5c474e9b2f017a6636233a382e8ef4e73506880e2a588bf257b6bb11e57cd9e75e45ef609ba583f3a6b1f2f94c7a0443dc0a8906a13e0188b61550cd296e4c63faf45bf7aed852f68ffed377302da3f73d89e4274a64667636bf00e8e4408a8407e098aeeed98e545b9aef40896c8070a76aaa0042162979ec0b7b69b4ee701100d66d3e7d25a48c59989424522889b32e4f18676475782e86d652d2eb836c326b46b8544bb755eeb14727e5ca25875f7b9ae1c113068be55a1521cb4edefef34a7a4cabc3639e456c94f01d78c059c441ce2c468e7b39b56555ad5cd6a14df8e3518e4e1970fbd6f586ce46c51c4d9ad20c3f7f5048c071994e807f19b7176290a82406dd0ad3f0b64350bbce79b223f27ed99f819def43a33696c0739e09030460a5a5d04d251adfbde1af7a485894d3d30c79d49796a9a5e077aeddba1303f3e3a3187298c88da70885e2a9dc966eb69a6439e2d3b1934ae6e8ea328497d87a9dbbddbdbf12b0c582ca4ffe1f25cdcf89a6ccdb31880776ab808b4f050ae02adf70f64c73ab2a3b1c4da69950ab4f7bcf9cc22f81b99694a7783b792facd8197904c12d3776de5184afa143ee23eee82aab2ac79b25503e0692f3463e5c363e0b4b5f31af82898009f7da13d4f249a70de40314c003e7e59dfb233bc44d0316df3e45af806d216ca76a58417ff8abcdf7cfea2da8868c496cdec8f47c451ccdc8908c5e8c1039b6bfa8751637c29fdd9b7dc76279dea5ad7455af4db3394a34cb9be8b9bf1105862108f920c44d029c3372e77c44a25d06cba956da65ee40abe32b8b557e123fddaa87b4ed5ab3485eb11f13c61072720d4adbb937c336f2b60525933b6d49e7c6751f0769377bdcef02abe63639b17a6780a4afccc8067403aeea42726f253ec97994dcf55358e6faa3e622344dfc613f8be96714d5c49633d7b74b9a72883985782ea8691d26da620d905f3583adbd9d527d93f1ce623bcf70d98a0455ff80fb1d472c6fc6bf0390e81b8d755b196e94fb73bcc883f5f310043c5138c95c5d7079c24d5bc5876b422f46a2bb17aee407bf7a55dbbdb253e2865c1b91839737c37142a8fe8bdbc0a7bf89a392da717a5ed87af754052b1d0a1a37313b00cf3b4aad91ce7fa7777b1851121a63e374865b238ddf9a7ebd20641a719c68682b97e3c5126e732800c04cdb627bd415efbb7e5e19917bf4bd53f072b7ec2eaa0128b56e069a32e9f729718fa4a7212ab0fd1e5d3582a5723a704d84a88c235b44812849301ee8155cea471028beea1918cb1f4118728718674cca9dcc58bafcdb9379c57e9333ab348b30a801aa2f5c05c3107e52613cf0f591781ddb5e1e4844633057a26bb3179c31b5664db4bb8c6d762c7b9886317ab6e9e301de67f12085547ad2a20d1d63d361c2bcd66be2e25fe104f8b53b7cf89d90d456f063da31f60078b760ce340f9c9a8e8da113b6c6e3c53e666488d75ab209dbe31ecb531553f17446a29edc465ed22aee2d4c013ee8a4d935c0cd92bcba9e5a56a6c19ac114d12db58bcf5f931a7b282404af34fee464f4c28e16dab834de98dd57b107e45fa66b26c32fd94e848aef6e4a2a65fd4fbead1b1d445d6c343bf50d785e664220371e27566646e284c6a3b07c14c0c5b84b5cd1a01a84d655f8dd72ab8e3d0c48e67596f605cd4a50b5fde9b182792d7ee8ee457eb6666aadea80563b4d176933cc482f75cb98a8dde4a414041187cfb2abe3e5077f23c98bafd0afb8b023e0cb26efc1488dd98a51a19dc93412b5fd91c4e06439b6d2d20a174989f860de6b1be55923a11e5893d30fae74a625f777ef9362e64b529c964b5c0b5817a579a647ded28582c45f965e52e1f76084267c73f8fce8037b22c2496ee6674f56056d9c691eab831c831a27fccd90f961e949a51c90a80b677d11e70d01744f9632cc26b7e6476b8c92a688ec8e1280ea8b795eae7ee61e2735045b9ea516af752b35388a6c3ed98cfbc4e74c8d0717dc31eac87b6a9c06f0d4f412e8e1155ce48cec6d9c106f3013329596a2d43ffe7f942cb7b7449f38620a8a9e5138b5d5d03c8a563446e4dfb1905d841f7a350d6c67d85652297db21b3dd3291b795c90276ccc50eaf513f3ff9480b3d2c0096e92c93cbbea680833cfa630d72c4f5a21ef0f81910b8a5ef77d62175d3abf5b3417cce43e3c53bb84ee1f5e354b2d79c2b46e3bdb2ffb15420e7a28c800c2591cd331d71c645a6b1bc43f06703164c05f61b4abc0fecbaee510def6340c2bbcc32248655e9161c3e6f01520bb0c53be04c3a3ef4a2dc401663f6719ac758aa297f65d1681652e4ad042d754b054df9cede3ffef7ad2f52184ea6d93d6867cc262b0a413da11c02d0c7c49a663319333d8b29d56cbf630e66b6683ff7f3b1ce5c481d37151626eae761adb77642f802bf0f663f3c322ee17cf01a09f058dbf82d04bdd7c48f34f54392d1dd489891ce28373ae980f74897fe3f90db2a9ccdbe56160fd2517adbc953e88c5fa8981456b87ab9f122321816e0df119f6f6c505f0dcab1c8e6a7f4109055dd80001dd90ea984b80f0b0766bd9772d96ed42d95f219b4a8420d7cf04f28475d7f5d8a8a07b0930c40d0dfc2592f8f54e90a80e0a98d3055f4660b1530565c7f2d91d7d96142da19d644aa7c512e24f83e8305970f9d3fc3b9382ad141f63f2d5b265b7cda258119ca4f553fab11f2fd925a7a24c4021045073d867bb089ca7bcb702bcedbc28781e408cf8bd43498f8661a320d28c95c1fc42635c9e4c4de8787afc70bf5c8bf75e0a2937a9ca2b08c15453f24211168c7fb2a24218fc3f04160c2daaa46ef7fb710606a53228e134f20511169034cec55e77037a108060b8fd10ab9ae228d9ee4d5ab1380cfcb8611e6c9d5dc143db2bc856d967b0b9d0187ba8483f7adbd1092562b2b16420baa5ab6c1f7c02ae56f013e752d9f41df4b4f0b008bc25ff58f816e50bdce308e219068bc898a21f1dd26d7fe7760459629f3615bcf7582c87d296f041fb005a72c7ef4013ccd8ca3bea85db90ae6349f101adb9235dd343be423816b37db2661dde2b9db33800da7599e8a9194fcf06755e2659670c62aba1d5a01172a416a0296bade0b32e69b0ee60dd6cd1eecca4335eb0416df6ded75049a14660276df47bb4f224e087235742e90ddf6f57827a0cf26d71b9338f2ff5166bea85a7639de6ac97ec829a7d071fac1f4b27c6c23e952adb5536b45a68e75c1c1a6d44508be6f4b87c5bb880a6baad5faecd1fd6730783d8729c2d89b23a3f2f9b79b78f7fcb70a7812607b25b17ae857e65f205ad5dd87a34e52c6e9611f588236bdc59d816f277aa8cd4a19750461d3e82c8621181b803900d1df439babcf4909168d4125a7c962ceac2f834d79460f17f92f415a85ad7e12da4b76105bceb4641fc87da7797fee092828f6e9e42631fd5c87046ebe5c4044663a31a1b39a6f6a53ee2b7fbc3eede57619535b1011c10d2d5a97c781c44bb6e493287528bc5281496f1aee3c746e09aeef0b2d38bdd33e37446c1f7516767ecbe298b78ef8e03336a08a1a9e62805140573b034459a445240aff04593539aa97056957f3dec9c43e50a1bce1b9c8e860940e03ae39e8f76fb80ae746f7fa4ed0b050c9e08a788e666e9f18bc8e83c64ee3ea04eb9f1c1dd92b3be73d18cc53bca76ba4688b48c13982ae6d25fdd9b5b85612d5b706c9b9d7c6cca91141313356f0d7b859da0de669fb52a829014a0fdde51df658303ce085222a42ad624ee6c659ec94e0d0713b2d3c3becb53c6f76d30530e6129943e20361a7c9f7847f79cb871d866b5277eecc8c1626fe2719c9cf872c0fc78a98e6ca998555721e9abd5bf9e2d1848016e0bd3202c44575c688837136e71e85765d677e0f2b081707a4e7e22bef50b9280a1a5ea549022ef2a9fed989f156198975302608dffd03f8f1186a12585d4670ce868f0c96be37416b9132144f65c9abe8b00894d7a7e6d0a8554e09139ec2a0eb6d4f00c637684602c106257f5abe816e068e0f6f3e94a916ff41e23b6baa4876931209a6b0bce1f6fa8d1965665d3dc42e5c6b011bdb5144fa5fe4879779ac9dffe0843cf49806ecbb615b818e54c6dfe4d12ccae5b12b0ce87909c1e852e8d7587d1ee24c2575af61eb0b667c37b6d15b88121974598ac23cbc66503f95cf01a7a1e217f0712c4cc4e5fc22e83e3aa375eda531a73828eba91223d7de1194af730bbf2c1ed5ec47ecdf465b1794971010ff8c8771c488a1d3f98292b5d2ea9625e52589aaf7212fcdddcc0f1681b785911fcc64a6427358e4307a3d8bc583dd635ba5c41eeae96e0b6bc5236a1f539d291e568d5a0aee25ffbaa73d0cb84bf558cbf6d04b16ef7e97617b42d07100d82fda6f75dcade611e459bdb4773bf2b70e90a8add2bfe6ea6d3a4427940fef6c81931762dbea6678fc63e50c4430227b15cf184dbae4c3b2d8096292c17f701c560ac7cb33efe7d79d0c2a3c0c06e22d4e84e9e959697879f0d27df460046fc20394655cfa19793256cd9074f1c5f8ef530af537164e0e43184f921d56094fa7c7744af35821a5833c9b9d56fcf525a39fc795cf33f14705d0c7087c081bf11ad29e4d6c8f6cbbb3a0d873262b89cfc54d4cec42c3e13a5ba604df942bf8b4eef7cdae1c0e2970edb7ea6437618e6f8312a745ca8bbf0c42df103f42c824ab4e77e8b118e2b9a84568ed3d4aa3800011d02be29c032192719635a1c6c28315b27368f6ffe852bbd661c351cbfbf97b1b36d52371a4ce57e5eb6e4b13cd01b022de1770a5b1cab0fe548092a16e04de76fb8d29d69a1c55f8aa11b34bd6f018d283a9a7c0338b8c1900e21c0054616ade6b56d0fe3379f1a8dec38b85fa8e74e9bb5df4287d037f77bad30de89ea87b03d40c3a1618db1073c07032f6d22f8a264cbf0c1113689308a2fcd7299603a64f884cb03f8c5f0e61e4981d2baac3d50975cb917b815efe2f7eda88f1cef1f34997f0819a92051c1d9eac3ef05de25a2b4d5f65619b4ea377180c541f2afbfa5c8fdae59f8e3a7635d2b30c4c759c32e570b8d9ec03b4aab65503e81e545dd41f593615cfedcf009424ae4854de3a9111115cb254608bc2666b18c85698ac193a9799f1a1f6098288b42dd2684db37e0d3b023ac9b417263b1566acd6d951df147e83db8e909b39bb6a1aa3fcc1c1a20795521b84e0884254b2524ebf0321e5709e7a79f2d62309247b7b24ec71553a9ab9daccacac1a8bd6019b7703c0ed468379640ac6e764ededb2fefaa2f88e15fc97ec6f16007f540cd7a57c7726f4aa9ff6640cc7f5d71a6c12048f98a9071ffd594f17e42e7336ab6d0fd429328df1238e5eb4ebe4f9d8ef01fbcfe8f53eb3f6defd4c7cb40b3772ea2f2130b655d2ad3643977cafa991bbc6aa2aaa2879a3c2d1dace3ec034beb3d06f0a09429b3fd1ac06870dde4ab97b7d5d7ff1394577a6bea7a3a53ca883a16c98d574ddad00de5dfe9f75369be7686a4badf44f4d9b110846b6ffca67f63973186433f6bc3691b580cdc689c159064c55a974fb849f56fd2f9cbe4738e0a1a8a764467dc1d3723278ee1ea573fad98a5318104218d359d89579614592fa6ae7cc4720e6ed71706fdc4c707b03ff77454daf4505700f249aea0abc909763416d44a069a6d605118ac0c20a325577fe1d8af053673fc72e489d24405281f01b4e2e05e4fa14e68a53294e4b5d201c146ff994cfb7a776ad80828732ee647092c20fe46d917142880318136557c47ff7e31d26f35f407c1e6d4254aae442b233b89dd4c0adcfc92b0f821a5a9dce95a24bed9bb5cd17a5b59d3e82086cdd7a3755064e4de22d8f0f973f4235aa58c6214dab89325638d94d3dc25f3ac4d912ff74be6ad8ef49aa2becede5453a409cc8ed8065dacf28a1a7498f6dd07a3478af093574fdd2d0a4f98d12fe898e47cd0550f1fc42810ed2e4cfe5cc4faa67d965f252aab1bd5c536bf2c936706bc71aae98b93494d364faac72a9a60188a23f15ddf1238896e4848d9c76789b57ca53cd5b1041612a49de9a64a545a39375aa2a516c4af4744daf65a9c28ffb635ba56b96731b763934afa0651fd6fb65e9f71eb0e6fd54bcfd2bf0118b486e97db512290bdb1dcfca76ed974722e13e5acd0569d5f944de70adf728379094981ffaec43848367ec8cdcc227b266649ced47a03b22016ce42be3a33135229670244cc7b3325ee448c95236d0de4bbf641e1cbb0516edb3f8829e60f91d43f0fe45595d8a99e699252930c7b05ba2ba679f8f46c38f789a7750ffa4eaed19c4c1a33aff60c8926ae42497662a130b83b3211e9399e2565d9f082ec30e26e5b02ea91cf43b0a046f9fe596e5bb2a9c800d761008dc7fced2a510af6b02d3f702fc3e1a98c6a87661f0d353b81bc4435c0d4376cfc74c057bf23febb101252c4eb168d4e347e697c8d0c48a687fb2224d58e5dc68c38de930164aba51e7cb19051fe64603c6b602c02c5cc22c6da1c47d906fa1cbf67312658b201b8f89a377d61695daaeee18eb2fb8caf38280fa8b95cca721afdf33d2c3092af57204bca72c46aeae9e9fc46f0ce76b96bbbb59a8517cb72d68f8b189280b6ce1e2686204913bac1d9aecd77623b7f05475352e57f245197894d767e5f17611bbf1bfe2015c9750e9b3f5ad4ad57be1ac4988c30d90829946b05fc5bd709dbd2590da2e3666294f83336e52758bc12c9d02af342a91fdcfc9144021a783643a9845a4898ee03417329ee0e2dd7bd53f3b23f3f9a10ea643b91b3c2df8438efb22fc894bbcdc408a13dbded7002d9cef6e38bf6dfa16f52f0f24087281a3ae95fb4995131938f9ca80c5f466c7367665e5717c823b318f43e7a3e2e8fe9c2e74959ca3d53b79fa45ac778d0a99351a1919b1c9ddfda10d61487fc5a2b8227493b14e2ea9fa41db870deb1700eb46665424fbc3f21c5d7ad61089ad0f99aadcca2a97d46fd091cf21d95674c3cf48f2724a89299b5342ebf8b18770e61c449455f77cacc5b2e0123005cc296acfc28e42e3d3b426469e39def114d6071a3f015f94dd8eab597dc4cf6109f2aeba0639ffe3f66f15ddaa74460a884a5c067e1e6f8d961ff32518e7571d53ae36badcaca50258a15743e67fb35e062e697d44ccd4e416010dbe62a1d13319d3ce88dc7826514d0f84cf7ffd5f1dbdbe3534af35bba26c5f951e18b012234a3e1cd22199358ba66421a326af09d36d45c3497c4725c0e8557395376fa9dcbe4c595aef7f822cb160e72138cd610563c382769b64f5da2ae6f62cbf09d24490565d7b88f6fefc30f050e74327b7efc168f040f18110a61cc6ecf73c43c0e9e73fafcfc6079ee68839a8ed710160fdcfd987394a790e01c42c916169e8c6a7af905c15d51f87e88877386b8f8743efe4fffc2dc8fd73b4e8905b428d4cd87d90e93513f19a981b5037370cd634f23859cb7bd6b5632bd25c6873b7195691e0f76fb07fce6e72d4b2b467e57a325febf4bb842820fe6896b23aa2a3eb37697753a3693ee936692e6cd91eae410bf89192df913f2689adc73b7b35eaf8bf80928c0023b105cbd2be51a08a371be88926636bd590466c218b203fe311d73dd1a8b440133f1ebb8249b4e1f6723b7b18b508dc34acd9da927ea60d2dc361c2d14cd43ad3b0137ac32e8988d11d11de19065d02e8012a2ee24891541989d11da87de4383036b757769222af022e86803b64ccd03e4bfe3a9d3b8a5d6522d7b6ade88aca72bc436382cfcba22a426ecb21366d42588e9a68c0d61722617a4706852ef6e5eb42842d127f88dabcb8cd635d621a9082efe0cbb52fffb017c8cbf80e48ad1d8ac4c927bda50be7bbb6a302081951dd7c05142465ef8188774807ba482c155f7b56b663d24c4ad88140ddba388e4d6abda83048db46ad18328c63006d02844189a769167d94265148e06f3eca08dcd81691df655968de44c5931e62f5dcc4aa16b24ceb6e7a2c8783d9918a9be7c72dcd57fbf39f985ac29069241cbe3298d7651124f03bef8e2adcadb0c0e08efb096f72e5df2d3f8e2ea6f9cd2401533469e5099a6faa98acc2f73028eae115b3a771bc7ddd186ee7a634398e206ce9b1262b1dbb80575eac718eade048bc01ac1d410e21393dada6c1ced94c411fc19ccacdd175996501d66819b491fef65697f736ecc3a4c32f3675d1f90c8e4d44a1ba6048e77fa24d6998ad88da3cf5de223446d53dd72981c19d5915af69b9a7b9bdf35114ac1cee66b9f3f6df4b9a2d2c017d44443a28badca61b1e8db627d967827ebf32c8642b7de41508c15538b6cdf0284f1a94e8d9fcaa086236f11fb1689d57d500423a0c1d362a4fd57e5efa8858c237a0b58210b4df2b6f10fb01ff8b305cb69e65120c716970e1752cae51022a068b9ac2b7775ac415c56d31536c9f1eca654ec89d7ed00855b2d2564a74bf1a0a3b75cbeadad89fd4ce7e0a83a565c6d69077f026dd40ee186fb496d575c5f5d2f4f84e0efd6bca34f070b185903c7fcd6478f467b73687dee0b765477cc474cbe7f067d1f655efe1fac24a6cda9ed82dee343a36f5ce3894587937f31a14dff66e8384bb3c9adebb753f782570a894e09a38c096f523fbdfb7e0c09026fa023c8dc9e5822410d8343afd647a91130744017166a9b195996ee871eb284279fa725f7af7f853eb85bce100cfade5d458c4e166c839e4c1a86", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x3, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x0, 0xffffffffffffffff, r3, 0x0, 0x10000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

3m42.888369004s ago: executing program 2 (id=960):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
open$dir(&(0x7f0000000440)='./file0\x00', 0x240, 0x5)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket(0x10, 0x3, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/103, 0x67}, {&(0x7f0000000740)=""/179, 0xb3}], 0x3)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8880b860f000)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r6}, &(0x7f00000005c0), &(0x7f0000000040)='%+9llu \x00'}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0)
pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3)

3m42.509941785s ago: executing program 4 (id=964):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

3m42.355709066s ago: executing program 4 (id=966):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x70})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m41.366796868s ago: executing program 4 (id=970):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r1, 0xa14033f720e14801, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c1}, 0x8800)

3m40.711072209s ago: executing program 33 (id=970):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r1, 0xa14033f720e14801, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c1}, 0x8800)

3m40.669967669s ago: executing program 2 (id=972):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, r1, 0xa14033f720e14801, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c1}, 0x8800)

3m40.40854828s ago: executing program 2 (id=974):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38)

3m40.23943586s ago: executing program 2 (id=975):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

3m40.15478752s ago: executing program 2 (id=976):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, &(0x7f0000000240)=0x2, 0x400000000004, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m39.462659462s ago: executing program 2 (id=977):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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")
r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0xfffffffffffffffe}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_route(0x10, 0x3, 0x0)
sendfile(r1, r0, 0x0, 0x2c62)

3m39.362750962s ago: executing program 34 (id=977):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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")
r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0xfffffffffffffffe}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_route(0x10, 0x3, 0x0)
sendfile(r1, r0, 0x0, 0x2c62)

17.258266152s ago: executing program 5 (id=1765):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x3, 0x8000000003c)
r3 = syz_open_procfs(r1, &(0x7f00000000c0)='attr/current\x00')
read$FUSE(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0)

15.840823045s ago: executing program 5 (id=1766):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000480)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@utf8no}, {@fat=@discard}, {@rodir}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@tz_utc}]}, 0x1, 0x276, &(0x7f0000000a40)="$eJzs3UFqG1cYB/BvLMmW2oW06KoUPNAuujJ2T2BTXCg1FFq0aLtoTS1DsYTBBkGTEMWrnCAnyHmyCblADpCQXbwwmSDPSFbCyEaJbJnk99vo8d77z/vezCCtZvTPN72DvcPj/ZN7z6NeT2JpMzbjNIlWLMXIgyj17GV5PwBwy51mWbzKciulM2pTktWlay0MALg2k7//i64FALgZv//x5y9bOzvbv6VpPaL3sN9OIv/Mx7f247/oRifWoxlnEdlY3v7p553tqKZDrfiuN+i3h8ne30+K42+9iDjPb0QzWuX5jTQ3kR/027X4olh/sxudXx9HM74qz/9Qko/2cnz/7UT9a9GMp//GYXRjr6htlL+/kaY/Zo9e3/1r2DvMJ4N+e2U8r5hdudELAwAAAAAAAAAAAAAAAAAAAADAJ20tHWu9+/6dytn5+Nq08Tw/7f1Ag4n386ynaZol+fyLfDW+rkZ1kXsHAAAAAAAAAAAAAAAAAACA2+L4/zsHu91u52iujdFj/SVD8Waea63OmopKUVo3iZhtrVqRvHpyZcZdNIb1dI6SaszvEiTjnsbk0Grkaw17GnljouejV6/HeWN0dx3sJnFFql52k8yhkZXcfpWpqeX3exrFDkomNy5ZffnLD6o5a04ZSiKiNj6Zlx+nNt9zeFPfQAAAAAAAAAAAAAAAAAAAwMjFQ78lgycLKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFuDi//9naAyK8LQ5WWXYqEbRs+AtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bl4GwAA//95LWni")
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = msgget(0x3, 0x213)
msgsnd(r3, 0x0, 0x4f, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
io_setup(0x7, &(0x7f0000000280))
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0)

14.449920758s ago: executing program 0 (id=1772):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50)
r0 = getpid()
prlimit64(r0, 0xd, &(0x7f00000000c0)={0x9, 0xfff}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0xc02, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000640)=[@acquire], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

13.49715962s ago: executing program 0 (id=1776):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000480)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@utf8no}, {@fat=@discard}, {@rodir}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@tz_utc}]}, 0x1, 0x276, &(0x7f0000000a40)="$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")
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = msgget(0x3, 0x213)
msgsnd(r3, 0x0, 0x4f, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0)

10.840247276s ago: executing program 0 (id=1779):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000005600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x101040, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x61105546, 0x9229, 0x40, 0x8, 0x9}, &(0x7f0000000280)=0x98)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0x0, 0x0}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r8 = open_tree(r7, &(0x7f0000000640)='\x00', 0x81000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffdc, '\x00', 0x0, r8, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
pread64(0xffffffffffffffff, &(0x7f000001a100)=""/102355, 0x18fd3, 0x2000000000000c2a)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @b}})

10.702789386s ago: executing program 3 (id=1782):
socket(0x2b, 0x80801, 0x1)
socket$l2tp(0x2, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0xa, 0x801, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060003000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="16000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0)

10.514117987s ago: executing program 5 (id=1783):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000480)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@utf8no}, {@fat=@discard}, {@rodir}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@tz_utc}]}, 0x1, 0x276, &(0x7f0000000a40)="$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")
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = msgget(0x3, 0x213)
msgsnd(r3, 0x0, 0x4f, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
io_setup(0x7, &(0x7f0000000280))
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0)

9.442310739s ago: executing program 6 (id=1784):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001380)={0x40, 0xa, 0x4, "71109190"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x11, 0xcc, "ac92f738f8147ec735958c208b8502b189b766fe3f2c06cd925b42474344f1c25b0b6cf4dde6c809069b8c6259ba29dce614ff5937a4bc8a8e7b34a6a32cfa7d99eb9e691aba2ec38de399c43d58e8f53d3cbb331a8287119f26bd98b2c36405f4c17551fa8d6b838dcbd2b4838303f7aa05c3bd02b6927b92be67d34248f69fa2fd4cd6f94ef9033e398bad9797651b614722b3d86b5a12a5436a3028ea7774c5f339f881d7cf56dbb62598aafaf0a70132368a5dec5d0948bb0359bf5843731e2f062ae8b36c3b530f1d73"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x0, 0x42, {0x40, "c3ed775c7db26225ac4f7de49b1615aed546c97d5b69baec4abb350d1319e9951ffb9e64a75982e0da55a79256f681f1e0a798e232418a4a0eb9371bb86fee31"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0xe0}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x9}})

9.416426419s ago: executing program 3 (id=1785):
r0 = syz_io_uring_setup(0x40f, 0x0, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x26, 0x0, @fd_index=0x3})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4)
io_uring_enter(r0, 0x47e9, 0xeb13, 0x6, 0x0, 0x0)

8.330745882s ago: executing program 3 (id=1786):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
get_robust_list(r1, &(0x7f0000000440)=0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x3, 0x8000000003c)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0)

7.698417613s ago: executing program 3 (id=1787):
openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3], 0x0, 0x1000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.628806013s ago: executing program 5 (id=1788):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080071000040"])

7.370599394s ago: executing program 0 (id=1789):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000480)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@utf8no}, {@fat=@discard}, {@rodir}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@tz_utc}]}, 0x1, 0x276, &(0x7f0000000a40)="$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")
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = msgget(0x3, 0x213)
msgsnd(r3, 0x0, 0x4f, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0)

7.291777624s ago: executing program 7 (id=1791):
socket(0x2b, 0x80801, 0x1)
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0xa, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060003000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="16000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0)

6.983248955s ago: executing program 7 (id=1792):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r1, 0x0, 0x0, 0x8000c61)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187a42, 0x145)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000580)}], 0x1, 0x870002, 0x1, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x4, 0x0, 0x0, 0x3})

6.770683074s ago: executing program 7 (id=1793):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000480)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@utf8no}, {@fat=@discard}, {@rodir}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@tz_utc}]}, 0x1, 0x276, &(0x7f0000000a40)="$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")
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = msgget(0x3, 0x213)
msgsnd(r3, 0x0, 0x4f, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
io_setup(0x7, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0)

4.490411409s ago: executing program 6 (id=1794):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
get_robust_list(r1, &(0x7f0000000440)=0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_procfs(r1, &(0x7f00000000c0)='attr/current\x00')
read$FUSE(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0)

4.49020604s ago: executing program 0 (id=1795):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
get_robust_list(r1, &(0x7f0000000440)=0x0, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x3, 0x8000000003c)
r3 = syz_open_procfs(r1, &(0x7f00000000c0)='attr/current\x00')
read$FUSE(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0)

4.48999027s ago: executing program 7 (id=1796):
r0 = syz_io_uring_setup(0x40f, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=<r1=>0x0)
syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x26, 0x0, @fd_index=0x3})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4)
io_uring_enter(r0, 0x47e9, 0xeb13, 0x6, 0x0, 0x0)

4.46627956s ago: executing program 3 (id=1797):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000480)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@utf8no}, {@fat=@discard}, {@rodir}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe28}}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@tz_utc}]}, 0x1, 0x276, &(0x7f0000000a40)="$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")
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = msgget(0x3, 0x213)
msgsnd(r3, 0x0, 0x4f, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x24000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
io_setup(0x7, &(0x7f0000000280))
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0)

4.35053612s ago: executing program 7 (id=1798):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = dup2(0xffffffffffffffff, r3)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$eJzslc1qU0EUx39z76RpNIuuXRUsthttcwviG9gH8AEM6bUWb/zoDWhCweimGxfiSxR8CheC7l2ICG7qQkEXFVcVicydM+OEBGKlCoX5Qzgfcz5z55y5Wd4r68DPw90OC1RQNHmvFBpYVlZ3NGfpN6EjwSdt5Zbonwv9KLTsD948sezgVrso8p2yP4NRCmbZFCMsI+kZN9JTkjnLmaFfPx7XKKYaJ8Af9XMijMk2cdRLbUuTXk/HNPVpNuLLfyj+75nFY9wb26llvjfHr8Tnky6sxr/uHbzmR3P2Z3r3zH7OqTapuDcmJuW0McmxvEpkfZVXHyV8rYS3h7sdw1yXLWZ0m/bnRqKyMcLLwOachiGolJGPo6ttCcvAaq97d7XsDy5ud9tb+VZ+O8vWL6+9OisjOnoI20W+poIyzFDj9hJg5rQRnNeAD7/PhwRQQWkGZ0DJzvUh3XJeOR84NiAJfMMYNu4Ln78uupQu17jAPHB/qBYhw/5bS5homhumtQ0UqQgtHdQJRyTMVweXOneKzT0Uyrnto32M1gE1L2QimET5+hXf/p7QJaEbQveFHgh1b5d7k3QV4YtIK0OY40G719upHi/LeV3mddmCz5xIVvcaKldJnYiIiIiIiIiIU4JfAQAA//9E3UGM")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x22)

2.917770113s ago: executing program 6 (id=1799):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.499618544s ago: executing program 3 (id=1800):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x101040, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x61105546, 0x9229, 0x40, 0x8, 0x9}, &(0x7f0000000280)=0x98)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0x0, 0x0}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_tree(r7, &(0x7f0000000640)='\x00', 0x81000)
r8 = syz_open_procfs(0x0, 0x0)
pread64(r8, &(0x7f000001a100)=""/102355, 0x18fd3, 0x2000000000000c2a)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @b}})

2.120045795s ago: executing program 7 (id=1801):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES8=r0, @ANYRES8=r0], 0x6c}}, 0x0)
pipe2$watch_queue(&(0x7f0000001180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x0)
close$fd_v4l2_buffer(r2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

1.562794236s ago: executing program 5 (id=1802):
r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
write$FUSE_OPEN(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendfile(r1, r0, 0x0, 0x2c62)

1.338289996s ago: executing program 0 (id=1803):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r1, 0x0, 0x0, 0x8000c61)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187a42, 0x145)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000580)}], 0x1, 0x870002, 0x1, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x4, 0x0, 0x0, 0x3})

468.568289ms ago: executing program 6 (id=1804):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="d4e666e247641d8d", 0x8}], 0x1}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/74, 0xf}, {&(0x7f0000000580)=""/66, 0x42}], 0x2}, 0x0)

318.757119ms ago: executing program 6 (id=1805):
socket(0x2b, 0x80801, 0x1)
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0xa, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060003000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="16000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0)

129.440809ms ago: executing program 6 (id=1806):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000001380)={0x40, 0xa, 0x4, "71109190"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x11, 0xcc, "ac92f738f8147ec735958c208b8502b189b766fe3f2c06cd925b42474344f1c25b0b6cf4dde6c809069b8c6259ba29dce614ff5937a4bc8a8e7b34a6a32cfa7d99eb9e691aba2ec38de399c43d58e8f53d3cbb331a8287119f26bd98b2c36405f4c17551fa8d6b838dcbd2b4838303f7aa05c3bd02b6927b92be67d34248f69fa2fd4cd6f94ef9033e398bad9797651b614722b3d86b5a12a5436a3028ea7774c5f339f881d7cf56dbb62598aafaf0a70132368a5dec5d0948bb0359bf5843731e2f062ae8b36c3b530f1d73"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x0, 0x42, {0x40, "c3ed775c7db26225ac4f7de49b1615aed546c97d5b69baec4abb350d1319e9951ffb9e64a75982e0da55a79256f681f1e0a798e232418a4a0eb9371bb86fee31"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0xe0}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x9}})

0s ago: executing program 5 (id=1807):
openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3], 0x0, 0x1000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

e to avoid problems!
[  385.349529][ T8604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.360115][ T8604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.375501][ T8604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.388310][ T8604] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.397140][ T8604] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.406271][ T8604] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.415086][ T8604] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.440349][ T8924] erofs: (device loop3): EXPERIMENTAL big pcluster feature in use. Use at your own risk!
[  385.453369][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  385.469821][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  385.484670][ T8924] erofs: (device loop3): erofs_read_inode: bogus i_mode (3) @ nid 36
[  385.505078][ T7710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.626774][ T7710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.650421][ T8931] loop0: detected capacity change from 0 to 256
[  385.702648][ T8931] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  385.775827][ T8931] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  385.810984][ T8931] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  385.851989][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.899968][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.998398][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  386.059555][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  386.208670][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  386.414365][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  386.430469][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  386.525521][ T8689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.582291][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  386.601724][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  386.649024][ T8653] device veth0_vlan entered promiscuous mode
[  386.665926][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  386.669163][ T4795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.699816][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  386.711471][ T4795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.748255][ T7710] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.787290][ T8653] device veth1_vlan entered promiscuous mode
[  386.832840][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  386.842505][ T8962] loop0: detected capacity change from 0 to 256
[  386.849730][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  386.886116][ T7710] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.923978][ T8962] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  386.950288][ T8962] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  386.999939][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  387.010400][ T8962] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  387.035070][ T7710] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.106972][ T8653] device veth0_macvtap entered promiscuous mode
[  387.134479][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  387.159233][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  387.192548][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  387.224506][ T8653] device veth1_macvtap entered promiscuous mode
[  387.282415][ T7710] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.533419][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.615109][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.652751][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.698476][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.718152][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.740402][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.754451][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  387.765294][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  387.793161][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.817342][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  387.842800][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  387.882295][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  387.983903][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.011273][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.042523][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.065081][ T8984] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  388.073264][ T8984] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  388.084579][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.100402][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.129444][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.148844][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.208516][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.229625][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.237158][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  388.249778][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  388.260412][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  388.273407][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  388.274215][ T8998] loop0: detected capacity change from 0 to 16
[  388.322109][ T8653] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.352547][ T8653] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.369099][ T8653] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.386150][ T8653] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.466471][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  388.485113][ T8998] erofs: (device loop0): EXPERIMENTAL big pcluster feature in use. Use at your own risk!
[  388.512173][ T8998] erofs: (device loop0): erofs_read_inode: bogus i_mode (3) @ nid 36
[  388.523776][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  388.608876][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  388.650604][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  388.661202][ T8689] device veth0_vlan entered promiscuous mode
[  388.775901][ T9007] loop5: detected capacity change from 0 to 256
[  388.892104][ T9007] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  388.927808][ T8689] device veth1_vlan entered promiscuous mode
[  389.098696][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.106887][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.158248][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  389.166608][ T4261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.189759][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  389.209168][ T4261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.227190][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  389.254254][ T9011] loop0: detected capacity change from 0 to 2048
[  389.263695][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  389.287218][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  389.305248][ T9011]  loop0: p2 < > p4
[  389.307968][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  389.343635][ T8689] device veth0_macvtap entered promiscuous mode
[  389.380016][ T9011] loop0: p4 size 8192 extends beyond EOD, truncated
[  389.512386][ T8689] device veth1_macvtap entered promiscuous mode
[  389.614447][ T9022] loop5: detected capacity change from 0 to 256
[  389.665258][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.732751][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.778656][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.808240][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.838134][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.878130][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.887988][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.918225][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.948060][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.995273][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.020624][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.051228][ T9022] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  390.067460][ T9025] loop0: detected capacity change from 0 to 256
[  390.091348][ T9022] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  390.106454][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  390.121588][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  390.141952][ T9022] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  390.162725][ T9025] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  390.183874][ T9025] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  390.205611][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  390.370742][ T9025] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  390.410037][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  390.487446][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.541595][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.737408][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.918258][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.078135][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  391.188531][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.212259][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  391.224887][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.235319][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  391.270711][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.274791][ T9055] loop3: detected capacity change from 0 to 256
[  391.295660][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  391.320326][  T710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  391.348549][  T710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  391.454938][ T9057] loop6: detected capacity change from 0 to 2048
[  391.470455][ T8689] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.487640][ T8689] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.522371][ T8689] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.532102][ T8689] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.575298][ T9057]  loop6: p2 < > p4
[  391.591973][ T9057] loop6: p4 size 8192 extends beyond EOD, truncated
[  391.629307][ T9055] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  391.838376][ T3545]  loop6: p2 < > p4
[  392.029458][ T9073] loop0: detected capacity change from 0 to 32768
[  392.170866][ T3545] loop6: p4 size 8192 extends beyond EOD, truncated
[  392.473858][ T9073] XFS (loop0): Mounting V5 Filesystem
[  392.606487][ T9073] XFS (loop0): Ending clean mount
[  392.627214][ T9073] misc userio: Can't change port type on an already running userio instance
[  392.649125][ T9073] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x426 dinode
[  392.660356][ T9073] XFS (loop0): Unmount and run xfs_repair
[  392.666108][ T9073] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  392.673620][ T9073] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  392.682561][ T9073] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  392.691477][ T9073] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[  392.700940][ T9073] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 0a  4.Xh............
[  392.710336][ T9073] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  392.719249][ T9073] 00000050: 00 00 e5 01 00 00 00 00 00 00 00 00 8c bd 1d c9  ................
[  392.728202][ T9073] 00000060: ff ff ff ff 32 9a 48 68 00 00 00 00 00 00 00 08  ....2.Hh........
[  392.737075][ T9073] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  392.747064][   T26] audit: type=1800 audit(1731836919.441:60): pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1043" name="file2" dev="loop0" ino=1063 res=0 errno=0
[  392.775965][ T9073] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x426 dinode
[  392.782807][ T9087] loop5: detected capacity change from 0 to 1764
[  392.786585][ T9073] XFS (loop0): Unmount and run xfs_repair
[  392.798781][ T9073] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  392.807028][ T9073] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  392.816050][ T9073] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  392.825070][ T9073] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[  392.829057][  T710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.834101][ T9073] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 0a  4.Xh............
[  392.851272][ T9073] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  392.860370][ T9073] 00000050: 00 00 e5 01 00 00 00 00 00 00 00 00 8c bd 1d c9  ................
[  392.869330][ T9073] 00000060: ff ff ff ff 32 9a 48 68 00 00 00 00 00 00 00 08  ....2.Hh........
[  392.878269][ T9073] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  392.896719][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  392.900636][  T710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.911327][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  392.920071][  T710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  392.981412][ T4166] XFS (loop0): Unmounting Filesystem
[  393.065519][ T4795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.080736][ T9098] loop3: detected capacity change from 0 to 256
[  393.104765][ T4795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.132893][ T9098] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  393.188550][ T9098] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  393.198290][  T710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  393.244583][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  393.245331][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  393.261748][ T9098] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  393.808537][ T4638] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  393.847098][ T9109] loop5: detected capacity change from 0 to 1764
[  394.088422][ T4638] usb 8-1: Using ep0 maxpacket: 8
[  394.147402][ T9109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer.
[  394.228497][ T4638] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.249138][ T4638] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  394.304355][ T4638] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  394.324512][ T9122] loop3: detected capacity change from 0 to 256
[  394.340053][ T4638] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.391844][ T9122] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  394.409244][ T4638] usb 8-1: config 0 descriptor??
[  394.434688][ T9122] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  394.470713][ T4638] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  394.517932][ T9122] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  394.644451][ T7710] device hsr_slave_0 left promiscuous mode
[  394.691233][ T7710] device hsr_slave_1 left promiscuous mode
[  394.706655][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.745129][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.155113][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  395.282730][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.424371][ T4637] usb 8-1: USB disconnect, device number 2
[  395.438740][ T7710] device bridge_slave_1 left promiscuous mode
[  395.448282][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.518625][ T7710] device bridge_slave_0 left promiscuous mode
[  395.524961][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.670716][ T7710] device hsr_slave_0 left promiscuous mode
[  395.678880][ T7710] device hsr_slave_1 left promiscuous mode
[  395.682740][ T9144] loop6: detected capacity change from 0 to 32768
[  395.715997][ T9150] loop0: detected capacity change from 0 to 1764
[  395.754963][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  395.768373][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.805352][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  395.852930][ T9144] XFS (loop6): Mounting V5 Filesystem
[  395.861604][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.010901][ T9144] XFS (loop6): Ending clean mount
[  396.031063][ T9144] misc userio: Can't change port type on an already running userio instance
[  396.057635][ T9144] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x426 dinode
[  396.069162][ T9144] XFS (loop6): Unmount and run xfs_repair
[  396.074917][ T9144] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  396.083265][ T9144] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  396.092321][ T9144] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  396.101317][ T9144] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[  396.110281][ T9144] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 0a  4.Xh............
[  396.119203][ T9144] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  396.128301][ T9144] 00000050: 00 00 e5 01 00 00 00 00 00 00 00 00 8c bd 1d c9  ................
[  396.137210][ T9144] 00000060: ff ff ff ff 32 9a 48 68 00 00 00 00 00 00 00 08  ....2.Hh........
[  396.146233][ T9144] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  396.157818][ T9144] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x426 dinode
[  396.168631][ T9144] XFS (loop6): Unmount and run xfs_repair
[  396.174376][ T9144] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  396.178913][   T26] audit: type=1800 audit(1731836922.851:61): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1057" name="file2" dev="loop6" ino=1063 res=0 errno=0
[  396.182442][ T9144] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  396.203298][ T7710] device bridge_slave_1 left promiscuous mode
[  396.211842][ T9144] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  396.211875][ T9144] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[  396.235885][ T9144] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 0a  4.Xh............
[  396.244858][ T9144] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  396.249128][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.253767][ T9144] 00000050: 00 00 e5 01 00 00 00 00 00 00 00 00 8c bd 1d c9  ................
[  396.269898][ T9144] 00000060: ff ff ff ff 32 9a 48 68 00 00 00 00 00 00 00 08  ....2.Hh........
[  396.278832][ T9144] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  396.307226][ T7710] device bridge_slave_0 left promiscuous mode
[  396.318508][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.336880][ T9180] loop0: detected capacity change from 0 to 256
[  396.367389][ T8653] XFS (loop6): Unmounting Filesystem
[  396.374829][ T7710] device veth0_macvtap left promiscuous mode
[  396.392988][ T7710] device veth1_vlan left promiscuous mode
[  396.417940][ T7710] device veth0_vlan left promiscuous mode
[  396.516968][ T9180] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  396.532146][ T7710] device veth0_macvtap left promiscuous mode
[  396.545600][ T9186] loop7: detected capacity change from 0 to 256
[  396.553889][ T7710] device veth1_vlan left promiscuous mode
[  396.578202][ T9180] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  396.588746][ T7710] device veth0_vlan left promiscuous mode
[  396.635208][ T9180] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  396.866518][ T9186] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  397.122425][ T9186] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  397.272557][ T9186] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  397.360354][ T9190] loop3: detected capacity change from 0 to 2048
[  397.362767][ T9192] loop5: detected capacity change from 0 to 256
[  397.439469][ T9190]  loop3: p2 < > p4
[  397.450123][ T9190] loop3: p4 size 8192 extends beyond EOD, truncated
[  397.458173][ T9192] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  397.490893][ T9192] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  397.535551][ T9192] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  397.592822][ T3545]  loop3: p2 < > p4
[  397.611455][ T3545] loop3: p4 size 8192 extends beyond EOD, truncated
[  398.054821][ T9199] loop6: detected capacity change from 0 to 1764
[  398.196239][ T9199] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer.
[  398.232953][ T9204] loop5: detected capacity change from 0 to 1764
[  398.828383][ T4637] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  398.972208][ T7710] team0 (unregistering): Port device team_slave_1 removed
[  399.018696][ T7710] team0 (unregistering): Port device team_slave_0 removed
[  399.019674][ T9220] loop7: detected capacity change from 0 to 2048
[  399.035270][ T7710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.056331][ T7710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.098483][ T4637] usb 7-1: Using ep0 maxpacket: 8
[  399.110670][ T9220]  loop7: p2 < > p4
[  399.125613][ T9220] loop7: p4 size 8192 extends beyond EOD, truncated
[  399.238607][ T4637] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  399.250688][ T7710] bond0 (unregistering): Released all slaves
[  399.257107][ T4637] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  399.282329][ T4637] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  399.298338][ T4637] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.309568][ T4637] usb 7-1: config 0 descriptor??
[  399.361864][ T4637] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  399.489473][ T7710] team0 (unregistering): Port device team_slave_1 removed
[  399.508374][ T7710] team0 (unregistering): Port device team_slave_0 removed
[  399.522834][ T7710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.537458][ T7710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.661596][ T4637] usb 7-1: USB disconnect, device number 2
[  399.677369][ T7710] bond0 (unregistering): Released all slaves
[  399.926229][ T9235] loop0: detected capacity change from 0 to 256
[  400.045689][ T9233] loop3: detected capacity change from 0 to 2048
[  400.067020][ T9237] loop5: detected capacity change from 0 to 1764
[  400.079625][ T9235] exfat: Bad value for 'umask'
[  400.112870][ T9233]  loop3: p2 < > p4
[  400.152402][ T9233] loop3: p4 size 8192 extends beyond EOD, truncated
[  401.221645][ T9254] loop6: detected capacity change from 0 to 256
[  401.233245][ T9251] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1087'.
[  401.280468][ T9254] exfat: Bad value for 'umask'
[  401.990657][ T9271] loop0: detected capacity change from 0 to 8192
[  403.039864][ T9298] loop3: detected capacity change from 0 to 256
[  403.092640][ T9298] exfat: Bad value for 'umask'
[  403.866269][ T9305] loop7: detected capacity change from 0 to 1764
[  403.900817][ T4388] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  404.638172][ T4388] usb 7-1: Using ep0 maxpacket: 8
[  404.784735][ T4388] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  405.166468][ T9325] loop0: detected capacity change from 0 to 8192
[  405.246460][ T4388] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  405.264903][ T4388] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  405.276366][ T4388] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.728062][ T4388] usb 7-1: config 0 descriptor??
[  405.748328][ T4388] usb 7-1: can't set config #0, error -71
[  405.765420][ T4388] usb 7-1: USB disconnect, device number 3
[  405.827299][ T9332] loop7: detected capacity change from 0 to 256
[  405.902756][ T9332] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  405.945577][ T9332] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  405.977171][ T9343] loop6: detected capacity change from 0 to 256
[  406.023825][ T9346] loop3: detected capacity change from 0 to 256
[  406.038699][ T9332] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  406.104912][ T9346] exfat: Bad value for 'umask'
[  406.109930][ T9343] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  406.158170][ T9343] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  406.906734][ T9343] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  407.341159][ T9357] loop3: detected capacity change from 0 to 256
[  407.409949][ T9357] exfat: Bad value for 'umask'
[  407.441576][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  407.452458][ T4184] CPU: 0 PID: 4184 Comm: kworker/u5:8 Not tainted 5.15.172-syzkaller #0
[  407.460823][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  407.470993][ T4184] Workqueue: hci0 hci_rx_work
[  407.475709][ T4184] Call Trace:
[  407.479009][ T4184]  <TASK>
[  407.481952][ T4184]  dump_stack_lvl+0x1e3/0x2d0
[  407.486667][ T4184]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  407.492325][ T4184]  ? panic+0x860/0x860
[  407.496428][ T4184]  ? sysfs_create_dir_ns+0x282/0x390
[  407.501755][ T4184]  sysfs_create_dir_ns+0x2c6/0x390
[  407.506893][ T4184]  ? sysfs_warn_dup+0xa0/0xa0
[  407.511596][ T4184]  ? do_raw_spin_unlock+0x137/0x8b0
[  407.516818][ T4184]  kobject_add_internal+0x6e0/0xe00
[  407.522044][ T4184]  kobject_add+0x14e/0x210
[  407.526467][ T4184]  ? device_add+0x3c2/0xfd0
[  407.530978][ T4184]  ? kobject_init+0x1d0/0x1d0
[  407.535663][ T4184]  ? __raw_spin_lock_init+0x41/0x100
[  407.540951][ T4184]  ? get_device_parent+0x128/0x400
[  407.546062][ T4184]  device_add+0x476/0xfd0
[  407.550395][ T4184]  hci_conn_add_sysfs+0xe4/0x1f0
[  407.555343][ T4184]  le_conn_complete_evt+0xc15/0x1500
[  407.560636][ T4184]  ? cs_le_create_conn+0x5f0/0x5f0
[  407.565762][ T4184]  hci_le_meta_evt+0x28c/0x3f50
[  407.570638][ T4184]  ? __lock_acquire+0x1ff0/0x1ff0
[  407.575751][ T4184]  ? __mutex_lock_common+0x444/0x25a0
[  407.581138][ T4184]  ? hci_remote_host_features_evt+0x280/0x280
[  407.587204][ T4184]  ? __mutex_unlock_slowpath+0x218/0x750
[  407.592833][ T4184]  ? hci_event_packet+0x3b4/0x1550
[  407.597947][ T4184]  ? mutex_unlock+0x10/0x10
[  407.602449][ T4184]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  407.608433][ T4184]  ? print_irqtrace_events+0x210/0x210
[  407.613896][ T4184]  hci_event_packet+0xc41/0x1550
[  407.618843][ T4184]  ? rcu_lock_release+0x20/0x20
[  407.623704][ T4184]  ? hci_send_to_monitor+0x99/0x4d0
[  407.628901][ T4184]  hci_rx_work+0x232/0x990
[  407.633324][ T4184]  process_one_work+0x8a1/0x10c0
[  407.638276][ T4184]  ? worker_detach_from_pool+0x260/0x260
[  407.643938][ T4184]  ? _raw_spin_lock_irqsave+0x120/0x120
[  407.649486][ T4184]  ? kthread_data+0x4e/0xc0
[  407.653990][ T4184]  ? wq_worker_running+0x97/0x170
[  407.659023][ T4184]  worker_thread+0xaca/0x1280
[  407.664047][ T4184]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  407.669959][ T4184]  kthread+0x3f6/0x4f0
[  407.674025][ T4184]  ? rcu_lock_release+0x20/0x20
[  407.678876][ T4184]  ? kthread_blkcg+0xd0/0xd0
[  407.683471][ T4184]  ret_from_fork+0x1f/0x30
[  407.687898][ T4184]  </TASK>
[  407.696050][ T4184] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  407.736236][ T4184] Bluetooth: hci0: failed to register connection device
[  407.825469][ T9364] loop0: detected capacity change from 0 to 2048
[  408.615581][ T9371] loop7: detected capacity change from 0 to 8192
[  408.699344][ T9364]  loop0: p2 < > p4
[  408.745984][ T9364] loop0: p4 size 8192 extends beyond EOD, truncated
[  409.679978][ T9391] loop5: detected capacity change from 0 to 2048
[  409.728277][ T4637] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  409.767520][ T9391]  loop5: p2 < > p4
[  409.998417][ T4637] usb 8-1: Using ep0 maxpacket: 8
[  410.170185][ T4637] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  410.382672][ T4637] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  410.410976][ T9391] loop5: p4 size 8192 extends beyond EOD, truncated
[  410.471534][ T4637] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  410.537001][ T4637] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.590876][ T9410] loop0: detected capacity change from 0 to 1764
[  410.759728][ T4637] usb 8-1: config 0 descriptor??
[  410.800962][ T4637] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  411.245160][ T9419] loop3: detected capacity change from 0 to 8192
[  411.771146][ T4393] usb 8-1: USB disconnect, device number 3
[  412.486662][ T9446] loop5: detected capacity change from 0 to 2048
[  412.501318][ T9449] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1140'.
[  412.516565][ T9441] kvm: pic: single mode not supported
[  412.516587][ T9441] kvm: pic: level sensitive irq not supported
[  412.542525][ T9441] kvm: pic: non byte read
[  412.566991][ T9446]  loop5: p2 < > p4
[  412.572100][ T9446] loop5: p4 size 8192 extends beyond EOD, truncated
[  412.616924][ T9441] kvm: pic: non byte read
[  412.629212][ T9441] kvm: pic: non byte read
[  412.798210][ T3545]  loop5: p2 < > p4
[  412.857145][ T3545] loop5: p4 size 8192 extends beyond EOD, truncated
[  413.722872][ T9469] loop6: detected capacity change from 0 to 1764
[  413.921049][ T4393] Bluetooth: hci0: command 0x0406 tx timeout
[  414.402277][ T9483] loop0: detected capacity change from 0 to 8192
[  414.824525][ T4638] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  415.259803][ T4638] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  415.298129][ T4393] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  415.325539][ T4638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.417088][ T4638] usb 4-1: config 0 descriptor??
[  415.469430][ T4638] cp210x 4-1:0.0: cp210x converter detected
[  415.512115][ T9498] loop6: detected capacity change from 0 to 2048
[  415.538255][ T4393] usb 6-1: Using ep0 maxpacket: 8
[  415.566211][ T9494] kvm: pic: level sensitive irq not supported
[  415.566304][ T9494] kvm: pic: non byte read
[  415.643384][ T9498]  loop6: p2 < > p4
[  415.658454][ T4393] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  415.673203][ T9498] loop6: p4 size 8192 extends beyond EOD, truncated
[  415.689834][ T4393] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  415.820892][ T3545]  loop6: p2 < > p4
[  415.834751][ T3545] loop6: p4 size 8192 extends beyond EOD, truncated
[  415.898334][ T4638] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  415.938303][ T4638] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  415.982240][ T4638] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  416.045842][ T4638] usb 4-1: cp210x converter now attached to ttyUSB0
[  416.124717][ T4393] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  416.134041][ T4393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.152781][ T4638] usb 4-1: USB disconnect, device number 10
[  416.156922][ T4393] usb 6-1: config 0 descriptor??
[  416.201741][ T4393] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  416.203906][ T4638] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  416.276166][ T4638] cp210x 4-1:0.0: device disconnected
[  416.550670][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  417.322746][ T4638] usb 6-1: USB disconnect, device number 2
[  417.377283][ T9541] loop0: detected capacity change from 0 to 1764
[  417.394553][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  417.804043][ T9546] loop3: detected capacity change from 0 to 256
[  417.970703][ T9546] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  418.063398][ T9546] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  418.120781][ T9546] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  418.189028][ T9546] UDF-fs: Scanning with blocksize 512 failed
[  418.231126][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  418.241609][ T4184] CPU: 1 PID: 4184 Comm: kworker/u5:8 Not tainted 5.15.172-syzkaller #0
[  418.249969][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  418.260044][ T4184] Workqueue: hci1 hci_rx_work
[  418.264755][ T4184] Call Trace:
[  418.268045][ T4184]  <TASK>
[  418.270997][ T4184]  dump_stack_lvl+0x1e3/0x2d0
[  418.271137][ T9546] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  418.275694][ T4184]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  418.291081][ T4184]  ? panic+0x860/0x860
[  418.295316][ T4184]  ? sysfs_create_dir_ns+0x282/0x390
[  418.300632][ T4184]  sysfs_create_dir_ns+0x2c6/0x390
[  418.305790][ T4184]  ? sysfs_warn_dup+0xa0/0xa0
[  418.310521][ T4184]  ? do_raw_spin_unlock+0x137/0x8b0
[  418.315750][ T4184]  kobject_add_internal+0x6e0/0xe00
[  418.320977][ T4184]  kobject_add+0x14e/0x210
[  418.325498][ T4184]  ? device_add+0x3c2/0xfd0
[  418.330016][ T4184]  ? kobject_init+0x1d0/0x1d0
[  418.334713][ T4184]  ? __raw_spin_lock_init+0x41/0x100
[  418.340002][ T4184]  ? get_device_parent+0x128/0x400
[  418.345125][ T4184]  device_add+0x476/0xfd0
[  418.349464][ T4184]  hci_conn_add_sysfs+0xe4/0x1f0
[  418.354405][ T4184]  le_conn_complete_evt+0xc15/0x1500
[  418.359706][ T4184]  ? cs_le_create_conn+0x5f0/0x5f0
[  418.364849][ T4184]  hci_le_meta_evt+0x28c/0x3f50
[  418.369713][ T4184]  ? __lock_acquire+0x1ff0/0x1ff0
[  418.374740][ T4184]  ? __mutex_lock_common+0x444/0x25a0
[  418.380117][ T4184]  ? hci_remote_host_features_evt+0x280/0x280
[  418.386187][ T4184]  ? __mutex_unlock_slowpath+0x218/0x750
[  418.391816][ T4184]  ? hci_event_packet+0x3b4/0x1550
[  418.396938][ T4184]  ? mutex_unlock+0x10/0x10
[  418.401442][ T4184]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  418.407423][ T4184]  ? print_irqtrace_events+0x210/0x210
[  418.412885][ T4184]  hci_event_packet+0xc41/0x1550
[  418.417835][ T4184]  ? rcu_lock_release+0x20/0x20
[  418.422697][ T4184]  ? hci_send_to_monitor+0x99/0x4d0
[  418.427895][ T4184]  hci_rx_work+0x232/0x990
[  418.432333][ T4184]  process_one_work+0x8a1/0x10c0
[  418.437369][ T4184]  ? worker_detach_from_pool+0x260/0x260
[  418.443002][ T4184]  ? _raw_spin_lock_irqsave+0x120/0x120
[  418.448552][ T4184]  ? kthread_data+0x4e/0xc0
[  418.453051][ T4184]  ? wq_worker_running+0x97/0x170
[  418.458164][ T4184]  worker_thread+0xaca/0x1280
[  418.462846][ T4184]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  418.468756][ T4184]  kthread+0x3f6/0x4f0
[  418.472825][ T4184]  ? rcu_lock_release+0x20/0x20
[  418.477672][ T4184]  ? kthread_blkcg+0xd0/0xd0
[  418.482257][ T4184]  ret_from_fork+0x1f/0x30
[  418.486683][ T4184]  </TASK>
[  418.498413][ T4184] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  418.513095][ T4184] Bluetooth: hci1: failed to register connection device
[  418.538759][ T9546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.974626][ T9571] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1170'.
[  420.092861][ T9588] loop0: detected capacity change from 0 to 8192
[  420.651512][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  420.682957][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  420.848204][ T5091] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  420.883691][ T9560] udevd[9560]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  420.892245][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  421.035774][ T9620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1185'.
[  421.108141][ T5091] usb 7-1: Using ep0 maxpacket: 8
[  421.228325][ T5091] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  421.248806][ T5091] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  421.413834][ T9626] loop0: detected capacity change from 0 to 2048
[  421.444714][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  421.455924][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  421.467950][ T5091] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  421.478432][ T5091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.501387][ T5091] usb 7-1: config 0 descriptor??
[  421.541805][ T5091] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  421.780039][ T9560]  loop0: p2 < > p4
[  421.845304][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  422.078069][ T9560] loop0: p4 size 8192 extends beyond EOD, truncated
[  422.330048][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  422.379755][ T4388] usb 7-1: USB disconnect, device number 4
[  422.498297][ T9626]  loop0: p2 < > p4
[  422.525816][ T9626] loop0: p4 size 8192 extends beyond EOD, truncated
[  422.583419][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  422.656497][ T9560] udevd[9560]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  422.794181][ T9560] udevd[9560]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  423.352454][ T9652] loop7: detected capacity change from 0 to 8192
[  423.533268][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  424.067413][ T9675] loop5: detected capacity change from 0 to 2048
[  424.206811][ T9675]  loop5: p2 < > p4
[  424.211946][ T9675] loop5: p4 size 8192 extends beyond EOD, truncated
[  424.243826][ T9686] loop6: detected capacity change from 0 to 256
[  424.333217][ T9686] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  424.359761][ T9686] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  424.384832][ T9686] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  424.855770][ T9689] loop7: detected capacity change from 0 to 8192
[  424.976182][ T3545]  loop5: p2 < > p4
[  425.044176][ T3545] loop5: p4 size 8192 extends beyond EOD, truncated
[  426.064208][ T9659] loop0: detected capacity change from 0 to 32768
[  426.138430][ T4637] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  426.158315][ T4638] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  426.251335][ T9659] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1192 (9659)
[  426.388266][ T4637] usb 8-1: Using ep0 maxpacket: 32
[  426.408197][ T4638] usb 6-1: Using ep0 maxpacket: 8
[  426.518646][ T4637] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  426.538740][ T4638] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.563943][ T4637] usb 8-1: config 0 has no interface number 0
[  426.612277][ T9659] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  426.626511][ T4638] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  426.653359][ T9659] BTRFS info (device loop0): using free space tree
[  426.668700][ T9659] BTRFS info (device loop0): has skinny extents
[  426.695814][ T4638] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  426.741906][ T9741] loop6: detected capacity change from 0 to 16
[  426.756515][ T4638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.775050][ T9741] erofs: (device loop6): EXPERIMENTAL big pcluster feature in use. Use at your own risk!
[  426.814953][ T9741] erofs: (device loop6): erofs_read_inode: bogus i_mode (3) @ nid 36
[  426.840617][ T9659] BTRFS error (device loop0): open_ctree failed
[  426.852031][ T4638] usb 6-1: config 0 descriptor??
[  426.858511][ T4637] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  426.879396][ T4637] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.915279][ T4637] usb 8-1: Product: syz
[  426.934839][ T4637] usb 8-1: Manufacturer: syz
[  426.955630][ T4637] usb 8-1: SerialNumber: syz
[  426.972207][ T4638] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  427.025175][ T4637] usb 8-1: config 0 descriptor??
[  427.109532][ T4637] smsc95xx v2.0.0
[  427.248293][ T4636] usb 6-1: USB disconnect, device number 3
[  427.548273][ T4637] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  427.569476][ T4637] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  427.678310][ T4520] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  427.763786][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  427.791679][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  427.828627][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  427.861488][ T9560] udevd[9560]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  427.874758][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  427.935321][ T9776] loop5: detected capacity change from 0 to 256
[  428.023288][ T9776] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  428.038145][ T9776] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  428.051942][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  428.098656][ T4520] usb 4-1: Using ep0 maxpacket: 32
[  428.238766][ T4520] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  428.252829][ T9776] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  428.325627][ T4520] usb 4-1: config 0 has no interface number 0
[  428.619579][ T4520] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  428.828742][ T4637] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  428.848123][ T4520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.859146][ T4637] smsc95xx: probe of 8-1:0.67 failed with error -71
[  428.867748][ T4520] usb 4-1: Product: syz
[  428.882489][ T4637] usb 8-1: USB disconnect, device number 4
[  428.888578][ T4520] usb 4-1: Manufacturer: syz
[  428.895172][ T4520] usb 4-1: SerialNumber: syz
[  428.996050][ T4520] usb 4-1: config 0 descriptor??
[  429.007640][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  429.023098][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  429.572150][ T9785] loop0: detected capacity change from 0 to 8192
[  429.968083][ T4520] smsc95xx v2.0.0
[  430.228303][ T4520] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  430.239971][ T4520] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  430.348933][ T9807] loop0: detected capacity change from 0 to 2048
[  430.396383][ T3545]  loop0: p2 < > p4
[  430.411835][ T3545] loop0: p4 size 8192 extends beyond EOD, truncated
[  430.435326][ T9807]  loop0: p2 < > p4
[  430.442664][ T9807] loop0: p4 size 8192 extends beyond EOD, truncated
[  430.505406][ T9815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1226'.
[  430.534564][ T3545]  loop0: p2 < > p4
[  430.543962][ T3545] loop0: p4 size 8192 extends beyond EOD, truncated
[  430.763601][ T9559] udevd[9559]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  430.784356][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  430.868298][ T4636] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  430.993283][ T4520] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71
[  431.038175][ T4520] smsc95xx: probe of 4-1:0.67 failed with error -71
[  431.049709][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1230'.
[  431.447704][ T4636] usb 6-1: Using ep0 maxpacket: 8
[  431.469219][ T4520] usb 4-1: USB disconnect, device number 11
[  432.203887][ T9847] loop0: detected capacity change from 0 to 8192
[  432.419514][ T4636] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  432.641845][ T4636] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  432.856643][ T4636] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  432.907806][ T4636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.922735][ T9852] fuse: Bad value for 'fd'
[  432.930800][ T4636] usb 6-1: config 0 descriptor??
[  432.970605][ T4636] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  433.108239][ T5085] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  433.289250][ T9865] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1239'.
[  433.349730][ T4636] usb 6-1: USB disconnect, device number 4
[  433.368445][ T5085] usb 7-1: Using ep0 maxpacket: 32
[  433.488397][ T5085] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  433.525551][ T5085] usb 7-1: config 0 has no interface number 0
[  433.688471][ T5085] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  433.705714][ T5085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.734158][ T5085] usb 7-1: Product: syz
[  433.739362][ T5085] usb 7-1: Manufacturer: syz
[  433.744295][ T5085] usb 7-1: SerialNumber: syz
[  433.775845][ T5085] usb 7-1: config 0 descriptor??
[  433.822966][ T5085] smsc95xx v2.0.0
[  434.258293][ T5085] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  434.273506][ T5085] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  435.174317][ T9933] loop7: detected capacity change from 0 to 8192
[  436.986666][ T9936] loop5: detected capacity change from 0 to 8192
[  437.138260][ T5085] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71
[  437.182507][ T5085] smsc95xx: probe of 7-1:0.67 failed with error -71
[  437.207964][ T5085] usb 7-1: USB disconnect, device number 5
[  437.578412][ T9958] loop7: detected capacity change from 0 to 2048
[  437.655217][ T9963] loop5: detected capacity change from 0 to 2048
[  437.747148][ T3545]  loop7: p2 < > p4
[  437.765798][ T9963]  loop5: p2 < > p4
[  437.770130][ T3545] loop7: p4 size 8192 extends beyond EOD, truncated
[  437.780726][ T9963] loop5: p4 size 8192 extends beyond EOD, truncated
[  437.843904][ T9958]  loop7: p2 < > p4
[  437.853557][ T9958] loop7: p4 size 8192 extends beyond EOD, truncated
[  438.673129][ T4637] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  438.881060][ T9990] loop5: detected capacity change from 0 to 1024
[  440.230770][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.235553][ T4637] usb 4-1: Using ep0 maxpacket: 8
[  440.237639][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  441.678127][ T4637] usb 4-1: unable to read config index 0 descriptor/all
[  441.685311][ T4637] usb 4-1: can't read configurations, error -71
[  443.447299][ T4638] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  445.280216][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  445.297465][ T9560] udevd[9560]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  445.530335][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  446.344926][T10053] loop0: detected capacity change from 0 to 8192
[  446.723667][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  447.448697][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  447.497033][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  448.044932][T10068] loop7: detected capacity change from 0 to 8192
[  451.765137][T10083] loop6: detected capacity change from 0 to 1024
[  451.825679][T10088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  451.862866][T10088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  451.887839][T10083] EXT4-fs (loop6): Ignoring removed bh option
[  451.896336][T10083] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  451.904359][T10088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  451.977414][T10083] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,errors=remount-ro,norecovery,debug_want_extra_isize=0x0000000000000080,bh,mblk_io_submit,usrquota,noauto_da_alloc,. Quota mode: writeback.
[  455.858072][ T4636] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  456.635507][T10157] loop6: detected capacity change from 0 to 8192
[  456.643801][ T4636] usb 1-1: Using ep0 maxpacket: 32
[  456.841185][ T4636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.048282][ T4636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.078177][ T4636] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  457.106920][ T4636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.158132][ T4636] usb 1-1: config 0 descriptor??
[  457.269269][ T4636] hub 1-1:0.0: USB hub found
[  458.374734][ T4636] hub 1-1:0.0: 1 port detected
[  459.318398][ T4636] hub 1-1:0.0: activate --> -90
[  459.519234][ T4638] usb 1-1: USB disconnect, device number 10
[  459.528358][ T4636] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  462.472946][T10217] loop0: detected capacity change from 0 to 8192
[  462.973584][T10225] loop5: detected capacity change from 0 to 256
[  462.985272][T10226] loop6: detected capacity change from 0 to 256
[  463.082996][T10225] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  463.101872][T10226] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  463.134671][T10225] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  463.202051][T10226] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  463.228976][T10225] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  463.264088][T10226] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  466.904029][T10275] loop7: detected capacity change from 0 to 8192
[  468.790705][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  468.801081][ T4184] CPU: 1 PID: 4184 Comm: kworker/u5:8 Not tainted 5.15.172-syzkaller #0
[  468.809437][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  468.819514][ T4184] Workqueue: hci3 hci_rx_work
[  468.824215][ T4184] Call Trace:
[  468.827502][ T4184]  <TASK>
[  468.830444][ T4184]  dump_stack_lvl+0x1e3/0x2d0
[  468.835146][ T4184]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  468.840793][ T4184]  ? panic+0x860/0x860
[  468.844886][ T4184]  ? sysfs_create_dir_ns+0x282/0x390
[  468.850197][ T4184]  sysfs_create_dir_ns+0x2c6/0x390
[  468.855329][ T4184]  ? sysfs_warn_dup+0xa0/0xa0
[  468.860025][ T4184]  ? do_raw_spin_unlock+0x137/0x8b0
[  468.865245][ T4184]  kobject_add_internal+0x6e0/0xe00
[  468.870551][ T4184]  kobject_add+0x14e/0x210
[  468.874985][ T4184]  ? device_add+0x3c2/0xfd0
[  468.879505][ T4184]  ? kobject_init+0x1d0/0x1d0
[  468.884195][ T4184]  ? __raw_spin_lock_init+0x41/0x100
[  468.889515][ T4184]  ? get_device_parent+0x128/0x400
[  468.894646][ T4184]  device_add+0x476/0xfd0
[  468.898996][ T4184]  hci_conn_add_sysfs+0xe4/0x1f0
[  468.903957][ T4184]  le_conn_complete_evt+0xc15/0x1500
[  468.909268][ T4184]  ? cs_le_create_conn+0x5f0/0x5f0
[  468.914397][ T4184]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  468.920392][ T4184]  ? print_irqtrace_events+0x210/0x210
[  468.925868][ T4184]  hci_le_meta_evt+0x28c/0x3f50
[  468.930738][ T4184]  ? lockdep_hardirqs_on+0x94/0x130
[  468.935965][ T4184]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  468.941628][ T4184]  ? __mutex_unlock_slowpath+0x218/0x750
[  468.947287][ T4184]  ? __mutex_unlock_slowpath+0x716/0x750
[  468.952954][ T4184]  ? hci_remote_host_features_evt+0x280/0x280
[  468.959034][ T4184]  ? hci_event_packet+0x3b4/0x1550
[  468.964160][ T4184]  ? mutex_unlock+0x10/0x10
[  468.968666][ T4184]  ? mark_lock+0x98/0x340
[  468.973004][ T4184]  hci_event_packet+0xc41/0x1550
[  468.977963][ T4184]  ? rcu_lock_release+0x20/0x20
[  468.982824][ T4184]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  468.988483][ T4184]  ? hci_send_to_monitor+0x99/0x4d0
[  468.993687][ T4184]  hci_rx_work+0x232/0x990
[  468.998113][ T4184]  process_one_work+0x8a1/0x10c0
[  469.003149][ T4184]  ? worker_detach_from_pool+0x260/0x260
[  469.008788][ T4184]  ? _raw_spin_lock_irqsave+0x120/0x120
[  469.014331][ T4184]  ? kthread_data+0x4e/0xc0
[  469.018831][ T4184]  ? wq_worker_running+0x97/0x170
[  469.023854][ T4184]  worker_thread+0xaca/0x1280
[  469.028530][ T4184]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  469.034440][ T4184]  kthread+0x3f6/0x4f0
[  469.038507][ T4184]  ? rcu_lock_release+0x20/0x20
[  469.043367][ T4184]  ? kthread_blkcg+0xd0/0xd0
[  469.047987][ T4184]  ret_from_fork+0x1f/0x30
[  469.052437][ T4184]  </TASK>
[  469.063871][ T4184] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  469.077600][ T4184] Bluetooth: hci3: failed to register connection device
[  470.225645][T10319] loop6: detected capacity change from 0 to 32768
[  470.419310][T10319] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1338 (10319)
[  470.461342][T10319] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  470.485714][T10346] loop5: detected capacity change from 0 to 512
[  470.503390][T10319] BTRFS info (device loop6): using free space tree
[  470.524435][T10319] BTRFS info (device loop6): has skinny extents
[  470.555334][ T4181] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  470.565224][ T4181] CPU: 0 PID: 4181 Comm: kworker/u5:5 Not tainted 5.15.172-syzkaller #0
[  470.573597][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  470.583862][ T4181] Workqueue: hci0 hci_rx_work
[  470.588570][ T4181] Call Trace:
[  470.591868][ T4181]  <TASK>
[  470.594813][ T4181]  dump_stack_lvl+0x1e3/0x2d0
[  470.599516][ T4181]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  470.605175][ T4181]  ? panic+0x860/0x860
[  470.609273][ T4181]  ? sysfs_create_dir_ns+0x282/0x390
[  470.614603][ T4181]  sysfs_create_dir_ns+0x2c6/0x390
[  470.619826][ T4181]  ? sysfs_warn_dup+0xa0/0xa0
[  470.624526][ T4181]  ? do_raw_spin_unlock+0x137/0x8b0
[  470.629751][ T4181]  kobject_add_internal+0x6e0/0xe00
[  470.634979][ T4181]  kobject_add+0x14e/0x210
[  470.639415][ T4181]  ? device_add+0x3c2/0xfd0
[  470.643931][ T4181]  ? kobject_init+0x1d0/0x1d0
[  470.648626][ T4181]  ? __raw_spin_lock_init+0x41/0x100
[  470.654074][ T4181]  ? get_device_parent+0x128/0x400
[  470.659216][ T4181]  device_add+0x476/0xfd0
[  470.663580][ T4181]  hci_conn_add_sysfs+0xe4/0x1f0
[  470.668545][ T4181]  le_conn_complete_evt+0xc15/0x1500
[  470.673871][ T4181]  ? cs_le_create_conn+0x5f0/0x5f0
[  470.679016][ T4181]  hci_le_meta_evt+0x28c/0x3f50
[  470.683879][ T4181]  ? __lock_acquire+0x1ff0/0x1ff0
[  470.688909][ T4181]  ? __mutex_lock_common+0x444/0x25a0
[  470.694292][ T4181]  ? hci_remote_host_features_evt+0x280/0x280
[  470.700378][ T4181]  ? __mutex_unlock_slowpath+0x218/0x750
[  470.706015][ T4181]  ? hci_event_packet+0x3b4/0x1550
[  470.711135][ T4181]  ? mutex_unlock+0x10/0x10
[  470.715641][ T4181]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  470.721625][ T4181]  ? print_irqtrace_events+0x210/0x210
[  470.727088][ T4181]  hci_event_packet+0xc41/0x1550
[  470.732037][ T4181]  ? rcu_lock_release+0x20/0x20
[  470.736901][ T4181]  ? hci_send_to_monitor+0x99/0x4d0
[  470.742098][ T4181]  hci_rx_work+0x232/0x990
[  470.746527][ T4181]  process_one_work+0x8a1/0x10c0
[  470.751477][ T4181]  ? worker_detach_from_pool+0x260/0x260
[  470.757114][ T4181]  ? _raw_spin_lock_irqsave+0x120/0x120
[  470.762662][ T4181]  ? kthread_data+0x4e/0xc0
[  470.767165][ T4181]  ? wq_worker_running+0x97/0x170
[  470.772193][ T4181]  worker_thread+0xaca/0x1280
[  470.777030][ T4181]  kthread+0x3f6/0x4f0
[  470.781100][ T4181]  ? rcu_lock_release+0x20/0x20
[  470.785950][ T4181]  ? kthread_blkcg+0xd0/0xd0
[  470.790540][ T4181]  ret_from_fork+0x1f/0x30
[  470.794968][ T4181]  </TASK>
[  470.799968][ T4181] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  470.813364][ T4181] Bluetooth: hci0: failed to register connection device
[  470.832798][T10359] loop7: detected capacity change from 0 to 256
[  470.984109][T10359] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  471.030975][T10359] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  471.286819][T10359] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  471.547499][T10359] UDF-fs: Scanning with blocksize 512 failed
[  471.559623][T10346] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback.
[  471.614740][T10359] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  471.676850][T10346] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  471.750150][T10319] BTRFS info (device loop6): enabling ssd optimizations
[  471.762366][T10359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  471.824621][   T26] audit: type=1800 audit(1731836998.511:62): pid=10346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1343" name="file1" dev="loop5" ino=15 res=0 errno=0
[  471.930239][   T26] audit: type=1800 audit(1731836998.541:63): pid=10346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1343" name="file2" dev="loop5" ino=16 res=0 errno=0
[  474.651648][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  474.661324][ T4184] CPU: 0 PID: 4184 Comm: kworker/u5:8 Not tainted 5.15.172-syzkaller #0
[  474.669675][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  474.679756][ T4184] Workqueue: hci0 hci_rx_work
[  474.684466][ T4184] Call Trace:
[  474.687796][ T4184]  <TASK>
[  474.690746][ T4184]  dump_stack_lvl+0x1e3/0x2d0
[  474.695453][ T4184]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  474.701120][ T4184]  ? panic+0x860/0x860
[  474.705247][ T4184]  ? sysfs_create_dir_ns+0x282/0x390
[  474.710546][ T4184]  sysfs_create_dir_ns+0x2c6/0x390
[  474.715751][ T4184]  ? sysfs_warn_dup+0xa0/0xa0
[  474.720434][ T4184]  ? do_raw_spin_unlock+0x137/0x8b0
[  474.725639][ T4184]  kobject_add_internal+0x6e0/0xe00
[  474.730845][ T4184]  kobject_add+0x14e/0x210
[  474.735260][ T4184]  ? device_add+0x3c2/0xfd0
[  474.739762][ T4184]  ? kobject_init+0x1d0/0x1d0
[  474.744442][ T4184]  ? __raw_spin_lock_init+0x41/0x100
[  474.749729][ T4184]  ? get_device_parent+0x128/0x400
[  474.754842][ T4184]  device_add+0x476/0xfd0
[  474.759182][ T4184]  hci_conn_add_sysfs+0xe4/0x1f0
[  474.764129][ T4184]  le_conn_complete_evt+0xc15/0x1500
[  474.769438][ T4184]  ? cs_le_create_conn+0x5f0/0x5f0
[  474.774568][ T4184]  hci_le_meta_evt+0x28c/0x3f50
[  474.779424][ T4184]  ? __lock_acquire+0x1ff0/0x1ff0
[  474.784451][ T4184]  ? __mutex_lock_common+0x444/0x25a0
[  474.789853][ T4184]  ? hci_remote_host_features_evt+0x280/0x280
[  474.795929][ T4184]  ? __mutex_unlock_slowpath+0x218/0x750
[  474.801577][ T4184]  ? hci_event_packet+0x3b4/0x1550
[  474.806695][ T4184]  ? mutex_unlock+0x10/0x10
[  474.811200][ T4184]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  474.817181][ T4184]  ? print_irqtrace_events+0x210/0x210
[  474.822660][ T4184]  hci_event_packet+0xc41/0x1550
[  474.827610][ T4184]  ? rcu_lock_release+0x20/0x20
[  474.832471][ T4184]  ? hci_send_to_monitor+0x99/0x4d0
[  474.838108][ T4184]  hci_rx_work+0x232/0x990
[  474.842537][ T4184]  process_one_work+0x8a1/0x10c0
[  474.847493][ T4184]  ? worker_detach_from_pool+0x260/0x260
[  474.853130][ T4184]  ? _raw_spin_lock_irqsave+0x120/0x120
[  474.858678][ T4184]  ? kthread_data+0x4e/0xc0
[  474.863188][ T4184]  ? wq_worker_running+0x97/0x170
[  474.868331][ T4184]  worker_thread+0xaca/0x1280
[  474.873030][ T4184]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  474.878988][ T4184]  kthread+0x3f6/0x4f0
[  474.883068][ T4184]  ? rcu_lock_release+0x20/0x20
[  474.887923][ T4184]  ? kthread_blkcg+0xd0/0xd0
[  474.892517][ T4184]  ret_from_fork+0x1f/0x30
[  474.896968][ T4184]  </TASK>
[  474.902334][ T4184] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  474.915672][ T4184] Bluetooth: hci0: failed to register connection device
[  474.922959][ T4184] Bluetooth: hci0: link tx timeout
[  474.930153][ T4184] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa
[  477.196338][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  477.205972][ T4184] CPU: 1 PID: 4184 Comm: kworker/u5:8 Not tainted 5.15.172-syzkaller #0
[  477.214424][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  477.224516][ T4184] Workqueue: hci3 hci_rx_work
[  477.229235][ T4184] Call Trace:
[  477.232528][ T4184]  <TASK>
[  477.235665][ T4184]  dump_stack_lvl+0x1e3/0x2d0
[  477.240465][ T4184]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  477.246222][ T4184]  ? panic+0x860/0x860
[  477.250340][ T4184]  ? sysfs_create_dir_ns+0x282/0x390
[  477.255666][ T4184]  sysfs_create_dir_ns+0x2c6/0x390
[  477.260811][ T4184]  ? sysfs_warn_dup+0xa0/0xa0
[  477.265531][ T4184]  ? do_raw_spin_unlock+0x137/0x8b0
[  477.270774][ T4184]  kobject_add_internal+0x6e0/0xe00
[  477.275998][ T4184]  kobject_add+0x14e/0x210
[  477.280425][ T4184]  ? device_add+0x3c2/0xfd0
[  477.284937][ T4184]  ? kobject_init+0x1d0/0x1d0
[  477.289632][ T4184]  ? __raw_spin_lock_init+0x41/0x100
[  477.294940][ T4184]  ? get_device_parent+0x128/0x400
[  477.300243][ T4184]  device_add+0x476/0xfd0
[  477.304590][ T4184]  hci_conn_add_sysfs+0xe4/0x1f0
[  477.309533][ T4184]  le_conn_complete_evt+0xc15/0x1500
[  477.314834][ T4184]  ? cs_le_create_conn+0x5f0/0x5f0
[  477.319958][ T4184]  hci_le_meta_evt+0x28c/0x3f50
[  477.324813][ T4184]  ? __lock_acquire+0x1ff0/0x1ff0
[  477.330010][ T4184]  ? __mutex_lock_common+0x444/0x25a0
[  477.335391][ T4184]  ? hci_remote_host_features_evt+0x280/0x280
[  477.341466][ T4184]  ? __mutex_unlock_slowpath+0x218/0x750
[  477.347093][ T4184]  ? hci_event_packet+0x3b4/0x1550
[  477.352212][ T4184]  ? mutex_unlock+0x10/0x10
[  477.356804][ T4184]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  477.362801][ T4184]  ? print_irqtrace_events+0x210/0x210
[  477.368278][ T4184]  hci_event_packet+0xc41/0x1550
[  477.373225][ T4184]  ? rcu_lock_release+0x20/0x20
[  477.378088][ T4184]  ? hci_send_to_monitor+0x99/0x4d0
[  477.383301][ T4184]  hci_rx_work+0x232/0x990
[  477.387725][ T4184]  process_one_work+0x8a1/0x10c0
[  477.392681][ T4184]  ? worker_detach_from_pool+0x260/0x260
[  477.398318][ T4184]  ? _raw_spin_lock_irqsave+0x120/0x120
[  477.404041][ T4184]  ? kthread_data+0x4e/0xc0
[  477.408543][ T4184]  ? wq_worker_running+0x97/0x170
[  477.413566][ T4184]  worker_thread+0xaca/0x1280
[  477.418243][ T4184]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  477.424243][ T4184]  kthread+0x3f6/0x4f0
[  477.428311][ T4184]  ? rcu_lock_release+0x20/0x20
[  477.433167][ T4184]  ? kthread_blkcg+0xd0/0xd0
[  477.437760][ T4184]  ret_from_fork+0x1f/0x30
[  477.442194][ T4184]  </TASK>
[  477.453675][ T4184] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  477.475954][ T4184] Bluetooth: hci3: failed to register connection device
[  477.888410][ T4517] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  479.218606][ T4181] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  479.230452][ T4181] CPU: 0 PID: 4181 Comm: kworker/u5:5 Not tainted 5.15.172-syzkaller #0
[  479.238816][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  479.248901][ T4181] Workqueue: hci2 hci_rx_work
[  479.253600][ T4181] Call Trace:
[  479.256896][ T4181]  <TASK>
[  479.259838][ T4181]  dump_stack_lvl+0x1e3/0x2d0
[  479.264565][ T4181]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  479.270214][ T4181]  ? panic+0x860/0x860
[  479.274304][ T4181]  ? sysfs_create_dir_ns+0x282/0x390
[  479.279613][ T4181]  sysfs_create_dir_ns+0x2c6/0x390
[  479.284760][ T4181]  ? sysfs_warn_dup+0xa0/0xa0
[  479.289468][ T4181]  ? do_raw_spin_unlock+0x137/0x8b0
[  479.294707][ T4181]  kobject_add_internal+0x6e0/0xe00
[  479.299942][ T4181]  kobject_add+0x14e/0x210
[  479.304387][ T4181]  ? device_add+0x3c2/0xfd0
[  479.308916][ T4181]  ? kobject_init+0x1d0/0x1d0
[  479.313618][ T4181]  ? __raw_spin_lock_init+0x41/0x100
[  479.318923][ T4181]  ? get_device_parent+0x128/0x400
[  479.324048][ T4181]  device_add+0x476/0xfd0
[  479.328408][ T4181]  hci_conn_add_sysfs+0xe4/0x1f0
[  479.333371][ T4181]  le_conn_complete_evt+0xc15/0x1500
[  479.338694][ T4181]  ? cs_le_create_conn+0x5f0/0x5f0
[  479.343854][ T4181]  hci_le_meta_evt+0x28c/0x3f50
[  479.348734][ T4181]  ? __lock_acquire+0x1ff0/0x1ff0
[  479.353786][ T4181]  ? __mutex_lock_common+0x444/0x25a0
[  479.359196][ T4181]  ? hci_remote_host_features_evt+0x280/0x280
[  479.365289][ T4181]  ? __mutex_unlock_slowpath+0x218/0x750
[  479.370944][ T4181]  ? hci_event_packet+0x3b4/0x1550
[  479.376082][ T4181]  ? mutex_unlock+0x10/0x10
[  479.380614][ T4181]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  479.386619][ T4181]  ? print_irqtrace_events+0x210/0x210
[  479.392107][ T4181]  hci_event_packet+0xc41/0x1550
[  479.397077][ T4181]  ? rcu_lock_release+0x20/0x20
[  479.401956][ T4181]  ? hci_send_to_monitor+0x99/0x4d0
[  479.407170][ T4181]  hci_rx_work+0x232/0x990
[  479.411614][ T4181]  process_one_work+0x8a1/0x10c0
[  479.416603][ T4181]  ? worker_detach_from_pool+0x260/0x260
[  479.422266][ T4181]  ? _raw_spin_lock_irqsave+0x120/0x120
[  479.427837][ T4181]  ? kthread_data+0x4e/0xc0
[  479.432342][ T4181]  ? wq_worker_running+0x97/0x170
[  479.437372][ T4181]  worker_thread+0xaca/0x1280
[  479.442080][ T4181]  kthread+0x3f6/0x4f0
[  479.446151][ T4181]  ? rcu_lock_release+0x20/0x20
[  479.450998][ T4181]  ? kthread_blkcg+0xd0/0xd0
[  479.455594][ T4181]  ret_from_fork+0x1f/0x30
[  479.460023][ T4181]  </TASK>
[  479.468760][ T4517] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  479.477302][ T4181] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  479.490622][ T4181] Bluetooth: hci2: failed to register connection device
[  479.491958][ T4517] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  479.785686][ T4517] usb 1-1: config 220 has no interface number 2
[  479.830262][ T4517] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  479.958015][ T4517] usb 1-1: config 220 interface 0 has no altsetting 0
[  480.008236][ T4517] usb 1-1: config 220 interface 76 has no altsetting 0
[  480.015149][ T4517] usb 1-1: config 220 interface 1 has no altsetting 0
[  480.278405][ T4517] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  480.300742][ T4517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.347812][ T4517] usb 1-1: Product: syz
[  480.371163][ T4517] usb 1-1: Manufacturer: syz
[  480.396131][ T4517] usb 1-1: SerialNumber: syz
[  481.768311][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  481.858923][ T4517] usb 1-1: selecting invalid altsetting 0
[  481.867928][ T4517] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  481.875603][ T4184] CPU: 1 PID: 4184 Comm: kworker/u5:8 Not tainted 5.15.172-syzkaller #0
[  481.883959][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  481.894034][ T4184] Workqueue: hci4 hci_rx_work
[  481.898742][ T4184] Call Trace:
[  481.902032][ T4184]  <TASK>
[  481.904980][ T4184]  dump_stack_lvl+0x1e3/0x2d0
[  481.909690][ T4184]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  481.915350][ T4184]  ? panic+0x860/0x860
[  481.919463][ T4184]  ? sysfs_create_dir_ns+0x282/0x390
[  481.924781][ T4184]  sysfs_create_dir_ns+0x2c6/0x390
[  481.929925][ T4184]  ? sysfs_warn_dup+0xa0/0xa0
[  481.934631][ T4184]  ? do_raw_spin_unlock+0x137/0x8b0
[  481.939871][ T4184]  kobject_add_internal+0x6e0/0xe00
[  481.945133][ T4184]  kobject_add+0x14e/0x210
[  481.949576][ T4184]  ? device_add+0x3c2/0xfd0
[  481.954105][ T4184]  ? kobject_init+0x1d0/0x1d0
[  481.958821][ T4184]  ? __raw_spin_lock_init+0x41/0x100
[  481.964133][ T4184]  ? get_device_parent+0x128/0x400
[  481.969361][ T4184]  device_add+0x476/0xfd0
[  481.973728][ T4184]  hci_conn_add_sysfs+0xe4/0x1f0
[  481.978682][ T4184]  le_conn_complete_evt+0xc15/0x1500
[  481.983990][ T4184]  ? cs_le_create_conn+0x5f0/0x5f0
[  481.989124][ T4184]  hci_le_meta_evt+0x28c/0x3f50
[  481.994009][ T4184]  ? __lock_acquire+0x1ff0/0x1ff0
[  481.999057][ T4184]  ? __mutex_lock_common+0x444/0x25a0
[  482.004440][ T4184]  ? release_firmware_map_entry+0x190/0x190
[  482.010351][ T4184]  ? hci_remote_host_features_evt+0x280/0x280
[  482.016425][ T4184]  ? __mutex_unlock_slowpath+0x218/0x750
[  482.022059][ T4184]  ? hci_event_packet+0x3b4/0x1550
[  482.027178][ T4184]  ? mutex_unlock+0x10/0x10
[  482.031685][ T4184]  ? preempt_schedule+0xd9/0xe0
[  482.036534][ T4184]  ? schedule_preempt_disabled+0x20/0x20
[  482.042162][ T4184]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  482.047794][ T4184]  ? lockdep_hardirqs_on+0x94/0x130
[  482.052991][ T4184]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  482.058633][ T4184]  hci_event_packet+0xc41/0x1550
[  482.063583][ T4184]  ? rcu_lock_release+0x20/0x20
[  482.068445][ T4184]  ? hci_send_to_monitor+0x99/0x4d0
[  482.073643][ T4184]  hci_rx_work+0x232/0x990
[  482.078068][ T4184]  process_one_work+0x8a1/0x10c0
[  482.083172][ T4184]  ? worker_detach_from_pool+0x260/0x260
[  482.088825][ T4184]  ? _raw_spin_lock_irqsave+0x120/0x120
[  482.094377][ T4184]  ? kthread_data+0x4e/0xc0
[  482.098977][ T4184]  ? wq_worker_running+0x97/0x170
[  482.104016][ T4184]  worker_thread+0xaca/0x1280
[  482.108701][ T4184]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  482.114792][ T4184]  kthread+0x3f6/0x4f0
[  482.118886][ T4184]  ? rcu_lock_release+0x20/0x20
[  482.123753][ T4184]  ? kthread_blkcg+0xd0/0xd0
[  482.128346][ T4184]  ret_from_fork+0x1f/0x30
[  482.132783][ T4184]  </TASK>
[  482.142848][ T4184] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  482.150937][ T4517] usb 1-1: No valid video chain found.
[  482.158802][ T4184] Bluetooth: hci4: failed to register connection device
[  482.269619][ T4517] usb 1-1: selecting invalid altsetting 0
[  482.283215][ T4517] usbtest: probe of 1-1:220.1 failed with error -22
[  482.374877][ T4517] usb 1-1: USB disconnect, device number 11
[  482.594134][T10600] loop0: detected capacity change from 0 to 512
[  482.888183][ T4636] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  482.959886][T10600] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback.
[  483.008254][T10600] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  483.338936][ T4636] usb 8-1: config 220 has an invalid interface number: 76 but max is 2
[  483.424423][ T4636] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  483.498072][   T26] audit: type=1800 audit(1731837010.171:64): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1406" name="file1" dev="loop0" ino=15 res=0 errno=0
[  483.617446][ T4636] usb 8-1: config 220 has no interface number 2
[  483.672094][   T26] audit: type=1800 audit(1731837010.301:65): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1406" name="file2" dev="loop0" ino=16 res=0 errno=0
[  483.700092][ T4636] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  483.805212][ T4636] usb 8-1: config 220 interface 0 has no altsetting 0
[  483.838275][ T4636] usb 8-1: config 220 interface 76 has no altsetting 0
[  483.886056][ T4636] usb 8-1: config 220 interface 1 has no altsetting 0
[  484.019087][T10622] loop6: detected capacity change from 0 to 2048
[  485.292465][ T3545]  loop6: p2 < > p4
[  485.318475][ T3545] loop6: p4 size 8192 extends beyond EOD, truncated
[  485.355873][T10622]  loop6: p2 < > p4
[  485.364345][T10622] loop6: p4 size 8192 extends beyond EOD, truncated
[  485.587627][ T3545]  loop6: p2 < > p4
[  485.608910][ T4636] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  485.620021][ T3545] loop6: p4 size 8192 extends beyond EOD, truncated
[  485.658635][ T4636] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.666758][ T4636] usb 8-1: Product: syz
[  485.689631][ T4636] usb 8-1: Manufacturer: syz
[  485.738371][ T4636] usb 8-1: can't set config #220, error -71
[  485.750735][ T4636] usb 8-1: USB disconnect, device number 5
[  487.243715][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  488.638766][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  488.966597][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  488.977659][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  489.444909][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  489.593726][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  490.202036][T10695] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1429'.
[  490.214947][ T4184] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  490.232365][ T4184] CPU: 0 PID: 4184 Comm: kworker/u5:8 Not tainted 5.15.172-syzkaller #0
[  490.240745][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  490.250912][ T4184] Workqueue: hci1 hci_rx_work
[  490.255719][ T4184] Call Trace:
[  490.259006][ T4184]  <TASK>
[  490.261944][ T4184]  dump_stack_lvl+0x1e3/0x2d0
[  490.266642][ T4184]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  490.272328][ T4184]  ? panic+0x860/0x860
[  490.276426][ T4184]  ? sysfs_create_dir_ns+0x282/0x390
[  490.281746][ T4184]  sysfs_create_dir_ns+0x2c6/0x390
[  490.286884][ T4184]  ? sysfs_warn_dup+0xa0/0xa0
[  490.291589][ T4184]  ? do_raw_spin_unlock+0x137/0x8b0
[  490.296822][ T4184]  kobject_add_internal+0x6e0/0xe00
[  490.302042][ T4184]  kobject_add+0x14e/0x210
[  490.306474][ T4184]  ? device_add+0x3c2/0xfd0
[  490.310983][ T4184]  ? kobject_init+0x1d0/0x1d0
[  490.315662][ T4184]  ? __raw_spin_lock_init+0x41/0x100
[  490.320975][ T4184]  ? get_device_parent+0x128/0x400
[  490.326092][ T4184]  device_add+0x476/0xfd0
[  490.330431][ T4184]  hci_conn_add_sysfs+0xe4/0x1f0
[  490.335371][ T4184]  le_conn_complete_evt+0xc15/0x1500
[  490.340664][ T4184]  ? cs_le_create_conn+0x5f0/0x5f0
[  490.345795][ T4184]  hci_le_meta_evt+0x28c/0x3f50
[  490.350647][ T4184]  ? __lock_acquire+0x1ff0/0x1ff0
[  490.355676][ T4184]  ? __mutex_lock_common+0x444/0x25a0
[  490.361060][ T4184]  ? hci_remote_host_features_evt+0x280/0x280
[  490.367128][ T4184]  ? __mutex_unlock_slowpath+0x218/0x750
[  490.372756][ T4184]  ? hci_event_packet+0x3b4/0x1550
[  490.377871][ T4184]  ? mutex_unlock+0x10/0x10
[  490.382377][ T4184]  ? mark_lock+0x98/0x340
[  490.386712][ T4184]  hci_event_packet+0xc41/0x1550
[  490.391656][ T4184]  ? rcu_lock_release+0x20/0x20
[  490.396601][ T4184]  ? lockdep_hardirqs_on+0x94/0x130
[  490.401807][ T4184]  ? hci_rx_work+0x11a/0x990
[  490.406401][ T4184]  hci_rx_work+0x232/0x990
[  490.410827][ T4184]  process_one_work+0x8a1/0x10c0
[  490.415770][ T4184]  ? print_irqtrace_events+0x210/0x210
[  490.421241][ T4184]  ? worker_detach_from_pool+0x260/0x260
[  490.426875][ T4184]  ? _raw_spin_lock_irqsave+0x120/0x120
[  490.432419][ T4184]  ? kthread_data+0x4e/0xc0
[  490.436919][ T4184]  ? wq_worker_running+0x97/0x170
[  490.441943][ T4184]  worker_thread+0xaca/0x1280
[  490.446621][ T4184]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  490.452531][ T4184]  kthread+0x3f6/0x4f0
[  490.456599][ T4184]  ? rcu_lock_release+0x20/0x20
[  490.461447][ T4184]  ? kthread_blkcg+0xd0/0xd0
[  490.466056][ T4184]  ret_from_fork+0x1f/0x30
[  490.470486][ T4184]  </TASK>
[  490.475054][ T4184] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  490.488340][ T4184] Bluetooth: hci1: failed to register connection device
[  490.978127][ T5091] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  491.228053][ T5091] usb 1-1: Using ep0 maxpacket: 32
[  491.348388][ T5091] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  491.364041][ T5091] usb 1-1: config 0 has no interface number 0
[  491.548402][ T5091] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  491.564983][ T5091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.590277][ T5091] usb 1-1: Product: syz
[  491.607220][ T5091] usb 1-1: Manufacturer: syz
[  491.624195][ T5091] usb 1-1: SerialNumber: syz
[  491.644803][ T5091] usb 1-1: config 0 descriptor??
[  491.677351][T10698] loop6: detected capacity change from 0 to 40427
[  491.689259][ T5091] smsc95xx v2.0.0
[  491.943213][T10698] F2FS-fs (loop6): invalid crc value
[  492.467426][T10698] F2FS-fs (loop6): Found nat_bits in checkpoint
[  492.872755][ T5091] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  492.883733][ T5091] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  492.957452][T10698] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0
[  493.018143][ T5091] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  493.048150][T10698] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  493.096045][ T5091] smsc95xx: probe of 1-1:0.67 failed with error -32
[  493.218084][ T5091] Bluetooth: hci1: command 0x0406 tx timeout
[  494.447601][ T8653] attempt to access beyond end of device
[  494.447601][ T8653] loop6: rw=2049, want=45104, limit=40427
[  495.276564][ T4244] usb 1-1: USB disconnect, device number 12
[  497.936522][ T5091] Bluetooth: hci1: command 0x0406 tx timeout
[  499.965755][ T4244] Bluetooth: hci2: command 0x0406 tx timeout
[  499.976836][ T4244] Bluetooth: hci3: command 0x0406 tx timeout
[  500.273735][T10833] loop5: detected capacity change from 0 to 2048
[  500.386662][T10833]  loop5: p2 < > p4
[  500.408616][T10833] loop5: p4 size 8192 extends beyond EOD, truncated
[  500.750905][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  501.651388][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  501.744766][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.759567][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  503.308513][T10865] loop5: detected capacity change from 0 to 2048
[  503.413075][T10865]  loop5: p2 < > p4
[  503.418411][T10865] loop5: p4 size 8192 extends beyond EOD, truncated
[  504.404317][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  507.080389][T10895] loop5: detected capacity change from 0 to 40427
[  507.118371][T10895] F2FS-fs (loop5): invalid crc value
[  507.169938][T10895] F2FS-fs (loop5): Found nat_bits in checkpoint
[  507.340159][T10895] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  507.374499][T10895] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  508.319778][ T8604] attempt to access beyond end of device
[  508.319778][ T8604] loop5: rw=2049, want=45104, limit=40427
[  510.218381][ T5091] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  510.508123][ T5091] usb 4-1: Using ep0 maxpacket: 32
[  510.628624][ T5091] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  510.636941][ T5091] usb 4-1: config 0 has no interface number 0
[  510.828360][ T5091] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  510.899011][ T5091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.800993][ T5091] usb 4-1: Product: syz
[  511.805223][ T5091] usb 4-1: Manufacturer: syz
[  511.810650][ T5091] usb 4-1: SerialNumber: syz
[  511.825669][ T5091] usb 4-1: config 0 descriptor??
[  511.869550][ T5091] smsc95xx v2.0.0
[  512.113347][T10999] loop6: detected capacity change from 0 to 256
[  512.308360][ T5091] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  512.374225][T10966] loop0: detected capacity change from 0 to 40427
[  512.375219][ T5091] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  512.624422][T10966] F2FS-fs (loop0): invalid crc value
[  512.761060][T10966] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12)
[  513.196475][ T5091] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  513.207434][ T5091] smsc95xx: probe of 4-1:0.67 failed with error -32
[  513.857023][ T4636] usb 4-1: USB disconnect, device number 14
[  516.139119][ T4393] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  517.338389][ T4393] usb 1-1: config 0 has no interfaces?
[  517.418430][ T4393] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  517.459436][ T4393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  517.467505][ T4393] usb 1-1: SerialNumber: syz
[  517.510089][ T4393] usb 1-1: config 0 descriptor??
[  518.622958][ T4638] usb 1-1: USB disconnect, device number 13
[  519.418145][T11126] loop5: detected capacity change from 0 to 2048
[  519.469135][T11126]  loop5: p2 < > p4
[  519.494339][T11126] loop5: p4 size 8192 extends beyond EOD, truncated
[  519.538856][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'.
[  519.618248][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'.
[  519.668050][T11131] netlink: 'syz.0.1518': attribute type 1 has an invalid length.
[  519.776920][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  519.777171][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  520.185160][T11143] loop5: detected capacity change from 0 to 8192
[  520.748086][ T4263] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  521.298195][ T4263] usb 8-1: Using ep0 maxpacket: 8
[  521.419286][ T4263] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  521.460009][ T4263] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  521.513892][ T4263] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  521.558139][ T4263] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.598940][ T4263] usb 8-1: config 0 descriptor??
[  521.640502][ T4263] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  521.963326][T11178] loop6: detected capacity change from 0 to 2048
[  522.104312][ T5091] usb 8-1: USB disconnect, device number 6
[  522.121608][T11186] loop0: detected capacity change from 0 to 256
[  522.344171][T11178]  loop6: p2 < > p4
[  522.368117][ T4638] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  522.439280][T11178] loop6: p4 size 8192 extends beyond EOD, truncated
[  523.307071][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1532'.
[  523.451213][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1532'.
[  523.488673][T11198] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1532'.
[  523.507154][T11207] loop0: detected capacity change from 0 to 256
[  523.531472][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  523.569931][ T4638] usb 6-1: config 0 has no interfaces?
[  523.639804][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  523.658083][ T4638] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  523.667197][ T4638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  523.758410][ T4638] usb 6-1: SerialNumber: syz
[  523.999437][ T4638] usb 6-1: config 0 descriptor??
[  524.011246][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  525.070367][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  525.321232][ T4638] usb 6-1: can't set config #0, error -71
[  525.329574][ T4638] usb 6-1: USB disconnect, device number 5
[  525.515586][T11235] loop6: detected capacity change from 0 to 2048
[  525.562568][ T3545]  loop6: p2 < > p4
[  525.567734][ T3545] loop6: p4 size 8192 extends beyond EOD, truncated
[  525.599050][T11235]  loop6: p2 < > p4
[  525.608428][T11235] loop6: p4 size 8192 extends beyond EOD, truncated
[  525.613365][T11241] loop0: detected capacity change from 0 to 256
[  525.633872][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1546'.
[  525.643345][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1546'.
[  525.669674][T11243] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1546'.
[  525.828111][ T4638] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  525.900050][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1547'.
[  525.919377][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1547'.
[  525.929596][T11246] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1547'.
[  526.740153][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  526.772138][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  526.778319][ T4638] usb 6-1: Using ep0 maxpacket: 8
[  526.981608][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  526.996363][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  527.006572][ T4638] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  527.038203][ T4638] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  527.093614][ T4638] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  527.103315][ T4637] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  527.132390][ T4638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.194335][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'.
[  527.211201][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'.
[  527.251394][T11269] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1558'.
[  527.322605][ T4638] usb 6-1: config 0 descriptor??
[  527.361343][ T4638] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  527.818650][ T4637] usb 8-1: config 0 has no interfaces?
[  527.921303][ T4637] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  528.257441][ T4637] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  528.269168][ T5091] usb 6-1: USB disconnect, device number 6
[  528.293484][ T4637] usb 8-1: SerialNumber: syz
[  528.332000][ T4637] usb 8-1: config 0 descriptor??
[  528.528062][ T4263] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  528.683984][ T4637] usb 8-1: USB disconnect, device number 7
[  528.778242][ T4263] usb 4-1: Using ep0 maxpacket: 32
[  528.899148][ T4263] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  528.912686][ T4263] usb 4-1: config 0 has no interface number 0
[  528.925630][T11295] loop6: detected capacity change from 0 to 256
[  529.009949][T11297] loop5: detected capacity change from 0 to 2048
[  529.110186][ T4263] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  529.128217][T11297]  loop5: p2 < > p4
[  529.133494][T11297] loop5: p4 size 8192 extends beyond EOD, truncated
[  529.166230][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.203365][ T4263] usb 4-1: Product: syz
[  529.207820][ T4263] usb 4-1: Manufacturer: syz
[  529.903798][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1572'.
[  529.997905][ T4263] usb 4-1: SerialNumber: syz
[  530.017879][ T4263] usb 4-1: config 0 descriptor??
[  530.041940][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  530.055075][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  530.069065][ T4263] smsc95xx v2.0.0
[  530.318280][ T5091] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  530.508583][ T4263] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  530.550120][ T4263] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  530.568161][ T5091] usb 1-1: Using ep0 maxpacket: 8
[  530.568702][T11325] loop5: detected capacity change from 0 to 256
[  530.688407][ T5091] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  530.704416][ T5091] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  530.753917][ T5091] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  530.793683][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.818727][ T4263] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  530.853791][ T4263] smsc95xx: probe of 4-1:0.67 failed with error -61
[  530.864300][ T5091] usb 1-1: config 0 descriptor??
[  531.138811][ T4637] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  531.721117][ T5091] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  531.751857][ T4638] usb 1-1: USB disconnect, device number 14
[  531.760181][ T4637] usb 8-1: config 0 has no interfaces?
[  531.838570][ T4637] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  531.862092][ T4637] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  531.880099][T11345] __nla_validate_parse: 5 callbacks suppressed
[  531.880117][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1588'.
[  531.922846][ T4637] usb 8-1: SerialNumber: syz
[  531.945098][ T4637] usb 8-1: config 0 descriptor??
[  531.959351][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'.
[  531.984442][T11345] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1588'.
[  532.171981][T11355] loop0: detected capacity change from 0 to 2048
[  532.207993][ T4637] usb 8-1: USB disconnect, device number 8
[  532.223102][T11355]  loop0: p2 < > p4
[  532.234889][T11355] loop0: p4 size 8192 extends beyond EOD, truncated
[  532.294577][ T3545]  loop0: p2 < > p4
[  532.301368][ T3545] loop0: p4 size 8192 extends beyond EOD, truncated
[  532.397224][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  532.410741][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  532.445777][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  532.459784][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  532.478045][ T5091] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  532.619848][ T4637] usb 4-1: USB disconnect, device number 15
[  532.738137][ T5091] usb 6-1: Using ep0 maxpacket: 32
[  532.862863][ T5091] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  532.881466][ T5091] usb 6-1: config 0 has no interface number 0
[  532.893312][T11382] loop0: detected capacity change from 0 to 2048
[  532.983856][T11382]  loop0: p2 < > p4
[  532.990414][T11382] loop0: p4 size 8192 extends beyond EOD, truncated
[  533.009256][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'.
[  533.020451][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'.
[  533.042462][T11388] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1608'.
[  533.078123][ T5091] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  533.102097][ T5091] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.127313][ T5091] usb 6-1: Product: syz
[  533.140817][ T5091] usb 6-1: Manufacturer: syz
[  533.156767][ T5091] usb 6-1: SerialNumber: syz
[  533.197270][ T5091] usb 6-1: config 0 descriptor??
[  533.260986][ T5091] smsc95xx v2.0.0
[  533.273505][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  533.287941][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  533.448276][ T4636] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  533.462349][ T4181] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0'
[  533.471796][ T4181] CPU: 0 PID: 4181 Comm: kworker/u5:5 Not tainted 5.15.172-syzkaller #0
[  533.480160][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  533.490232][ T4181] Workqueue: hci4 hci_rx_work
[  533.494953][ T4181] Call Trace:
[  533.498265][ T4181]  <TASK>
[  533.501209][ T4181]  dump_stack_lvl+0x1e3/0x2d0
[  533.505897][ T4181]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  533.511533][ T4181]  ? panic+0x860/0x860
[  533.515612][ T4181]  ? sysfs_create_dir_ns+0x282/0x390
[  533.520900][ T4181]  sysfs_create_dir_ns+0x2c6/0x390
[  533.526014][ T4181]  ? sysfs_warn_dup+0xa0/0xa0
[  533.530689][ T4181]  ? do_raw_spin_unlock+0x137/0x8b0
[  533.535896][ T4181]  kobject_add_internal+0x6e0/0xe00
[  533.541104][ T4181]  kobject_add+0x14e/0x210
[  533.545529][ T4181]  ? device_add+0x3c2/0xfd0
[  533.550053][ T4181]  ? kobject_init+0x1d0/0x1d0
[  533.554743][ T4181]  ? __raw_spin_lock_init+0x41/0x100
[  533.560037][ T4181]  ? get_device_parent+0x128/0x400
[  533.565164][ T4181]  device_add+0x476/0xfd0
[  533.569503][ T4181]  hci_conn_add_sysfs+0xe4/0x1f0
[  533.574456][ T4181]  le_conn_complete_evt+0xc15/0x1500
[  533.579758][ T4181]  ? cs_le_create_conn+0x5f0/0x5f0
[  533.584888][ T4181]  hci_le_meta_evt+0x28c/0x3f50
[  533.589761][ T4181]  ? __lock_acquire+0x1ff0/0x1ff0
[  533.594797][ T4181]  ? __mutex_lock_common+0x444/0x25a0
[  533.600175][ T4181]  ? hci_remote_host_features_evt+0x280/0x280
[  533.606247][ T4181]  ? __mutex_unlock_slowpath+0x218/0x750
[  533.611871][ T4181]  ? hci_event_packet+0x3b4/0x1550
[  533.616985][ T4181]  ? mutex_unlock+0x10/0x10
[  533.621485][ T4181]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  533.627465][ T4181]  ? print_irqtrace_events+0x210/0x210
[  533.632929][ T4181]  hci_event_packet+0xc41/0x1550
[  533.637872][ T4181]  ? rcu_lock_release+0x20/0x20
[  533.642739][ T4181]  ? hci_send_to_monitor+0x99/0x4d0
[  533.647949][ T4181]  hci_rx_work+0x232/0x990
[  533.652384][ T4181]  process_one_work+0x8a1/0x10c0
[  533.657353][ T4181]  ? worker_detach_from_pool+0x260/0x260
[  533.663001][ T4181]  ? _raw_spin_lock_irqsave+0x120/0x120
[  533.668568][ T4181]  ? kthread_data+0x4e/0xc0
[  533.673080][ T4181]  ? wq_worker_running+0x97/0x170
[  533.678203][ T4181]  worker_thread+0xaca/0x1280
[  533.682911][ T4181]  kthread+0x3f6/0x4f0
[  533.686983][ T4181]  ? rcu_lock_release+0x20/0x20
[  533.691838][ T4181]  ? kthread_blkcg+0xd0/0xd0
[  533.696445][ T4181]  ret_from_fork+0x1f/0x30
[  533.700875][ T4181]  </TASK>
[  533.705082][ T4244] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  533.713854][ T4181] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  533.726965][ T4181] Bluetooth: hci4: failed to register connection device
[  533.958155][ T4636] usb 8-1: Using ep0 maxpacket: 32
[  533.958364][ T5091] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  534.018413][ T5091] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  534.086974][T11415] loop0: detected capacity change from 0 to 2048
[  534.088204][ T4636] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  534.098348][ T4244] usb 7-1: config 0 has no interfaces?
[  534.102166][ T4636] usb 8-1: config 0 has no interface number 0
[  534.200318][ T4244] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  534.221439][T11415]  loop0: p2 < > p4
[  534.222226][ T4244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  534.236244][T11415] loop0: p4 size 8192 extends beyond EOD, truncated
[  534.268195][ T4244] usb 7-1: SerialNumber: syz
[  534.303925][ T4244] usb 7-1: config 0 descriptor??
[  534.318187][ T5091] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  534.318368][ T4636] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  534.338163][ T5091] smsc95xx: probe of 6-1:0.67 failed with error -32
[  534.345812][ T4636] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.358286][ T4636] usb 8-1: Product: syz
[  534.362728][ T4636] usb 8-1: Manufacturer: syz
[  534.373987][ T4636] usb 8-1: SerialNumber: syz
[  534.418810][ T4636] usb 8-1: config 0 descriptor??
[  534.494282][ T4636] smsc95xx v2.0.0
[  534.504304][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  534.509796][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  534.572796][ T5091] usb 7-1: USB disconnect, device number 6
[  534.613870][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1624'.
[  534.663783][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'.
[  534.676555][T11423] netlink: 'syz.3.1624': attribute type 1 has an invalid length.
[  534.685096][T11423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1624'.
[  534.928227][ T4181] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0'
[  534.937911][ T4181] CPU: 1 PID: 4181 Comm: kworker/u5:5 Not tainted 5.15.172-syzkaller #0
[  534.946470][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  534.956717][ T4181] Workqueue: hci4 hci_rx_work
[  534.961428][ T4181] Call Trace:
[  534.964732][ T4181]  <TASK>
[  534.967679][ T4181]  dump_stack_lvl+0x1e3/0x2d0
[  534.972385][ T4181]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  534.978056][ T4181]  ? panic+0x860/0x860
[  534.978134][ T4244] Bluetooth: hci4: command 0x2016 tx timeout
[  534.982150][ T4181]  ? sysfs_create_dir_ns+0x282/0x390
[  534.982184][ T4181]  sysfs_create_dir_ns+0x2c6/0x390
[  534.982212][ T4181]  ? sysfs_warn_dup+0xa0/0xa0
[  534.982238][ T4181]  ? do_raw_spin_unlock+0x137/0x8b0
[  535.008507][ T4181]  kobject_add_internal+0x6e0/0xe00
[  535.013829][ T4181]  kobject_add+0x14e/0x210
[  535.018271][ T4181]  ? device_add+0x3c2/0xfd0
[  535.022800][ T4181]  ? kobject_init+0x1d0/0x1d0
[  535.027498][ T4181]  ? __raw_spin_lock_init+0x41/0x100
[  535.032826][ T4181]  ? get_device_parent+0x128/0x400
[  535.037957][ T4181]  device_add+0x476/0xfd0
[  535.042510][ T4181]  hci_conn_add_sysfs+0xe4/0x1f0
[  535.047465][ T4181]  le_conn_complete_evt+0xc15/0x1500
[  535.052766][ T4181]  ? cs_le_create_conn+0x5f0/0x5f0
[  535.057892][ T4181]  hci_le_meta_evt+0x28c/0x3f50
[  535.062749][ T4181]  ? __lock_acquire+0x1ff0/0x1ff0
[  535.067776][ T4181]  ? __mutex_lock_common+0x444/0x25a0
[  535.073160][ T4181]  ? hci_remote_host_features_evt+0x280/0x280
[  535.079238][ T4181]  ? __mutex_unlock_slowpath+0x218/0x750
[  535.084870][ T4181]  ? hci_event_packet+0x3b4/0x1550
[  535.089994][ T4181]  ? mutex_unlock+0x10/0x10
[  535.094516][ T4181]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  535.100502][ T4181]  ? print_irqtrace_events+0x210/0x210
[  535.105975][ T4181]  hci_event_packet+0xc41/0x1550
[  535.110933][ T4181]  ? rcu_lock_release+0x20/0x20
[  535.115816][ T4181]  ? hci_send_to_monitor+0x99/0x4d0
[  535.121014][ T4181]  hci_rx_work+0x232/0x990
[  535.125439][ T4181]  process_one_work+0x8a1/0x10c0
[  535.130432][ T4181]  ? worker_detach_from_pool+0x260/0x260
[  535.136070][ T4181]  ? _raw_spin_lock_irqsave+0x120/0x120
[  535.141620][ T4181]  ? kthread_data+0x4e/0xc0
[  535.146128][ T4181]  ? wq_worker_running+0x97/0x170
[  535.151157][ T4181]  worker_thread+0xaca/0x1280
[  535.155859][ T4181]  kthread+0x3f6/0x4f0
[  535.159925][ T4181]  ? rcu_lock_release+0x20/0x20
[  535.164789][ T4181]  ? kthread_blkcg+0xd0/0xd0
[  535.169394][ T4181]  ret_from_fork+0x1f/0x30
[  535.173823][ T4181]  </TASK>
[  535.197317][ T4636] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  535.208559][ T4181] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  535.222082][ T4181] Bluetooth: hci4: failed to register connection device
[  535.229365][ T4636] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  536.088599][ T4636] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  536.100668][ T4636] smsc95xx: probe of 8-1:0.67 failed with error -61
[  536.105268][T11443] loop6: detected capacity change from 0 to 2048
[  536.211685][T11443]  loop6: p2 < > p4
[  536.245472][T11443] loop6: p4 size 8192 extends beyond EOD, truncated
[  536.490227][ T4382] usb 6-1: USB disconnect, device number 7
[  536.939003][T11475] loop6: detected capacity change from 0 to 512
[  537.057401][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  537.160652][T11475] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback.
[  537.405021][T11475] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  537.452080][T11480] loop0: detected capacity change from 0 to 2048
[  537.750018][ T4393] usb 8-1: USB disconnect, device number 9
[  537.760803][   T26] audit: type=1800 audit(1731837064.451:66): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1646" name="file1" dev="loop6" ino=15 res=0 errno=0
[  537.778367][ T4636] Bluetooth: hci4: command 0x2016 tx timeout
[  537.804544][ T3545]  loop0: p2 < > p4
[  537.809617][ T3545] loop0: p4 size 8192 extends beyond EOD, truncated
[  537.817830][   T26] audit: type=1800 audit(1731837064.481:67): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1646" name="file2" dev="loop6" ino=16 res=0 errno=0
[  537.846749][T11480]  loop0: p2 < > p4
[  537.870039][T11480] loop0: p4 size 8192 extends beyond EOD, truncated
[  538.127345][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  538.148132][ T4636] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  538.418164][ T4636] usb 4-1: Using ep0 maxpacket: 32
[  538.569150][ T4636] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  538.577275][ T4636] usb 4-1: config 0 has no interface number 0
[  538.621942][T11516] loop6: detected capacity change from 0 to 512
[  538.694379][T11516] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback.
[  538.748531][T11516] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  538.808380][ T4636] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  538.822874][ T4636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.833558][ T4636] usb 4-1: Product: syz
[  538.838491][ T4636] usb 4-1: Manufacturer: syz
[  538.851790][ T4636] usb 4-1: SerialNumber: syz
[  538.867564][ T4636] usb 4-1: config 0 descriptor??
[  538.878028][ T4382] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  538.889498][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  538.895031][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  538.911040][   T26] audit: type=1800 audit(1731837065.601:68): pid=11516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1661" name="file1" dev="loop6" ino=15 res=0 errno=0
[  538.959305][ T4636] smsc95xx v2.0.0
[  539.005075][ T9560] udevd[9560]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  539.046671][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  539.148195][ T4382] usb 6-1: Using ep0 maxpacket: 8
[  539.290310][ T4382] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  539.333681][ T4382] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  543.012768][ T4638] Bluetooth: hci4: command 0x2016 tx timeout
[  543.058582][ T4636] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  543.062933][ T4382] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  543.072365][ T4636] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  543.108813][ T4636] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  543.131803][ T4382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.138180][ T4636] smsc95xx: probe of 4-1:0.67 failed with error -71
[  543.205537][ T4636] usb 4-1: USB disconnect, device number 16
[  543.266179][ T4382] usb 6-1: config 0 descriptor??
[  543.391939][ T4382] usb 6-1: can't set config #0, error -71
[  543.445682][ T4382] usb 6-1: USB disconnect, device number 8
[  544.388082][ T4382] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  544.730008][ T4382] usb 7-1: Using ep0 maxpacket: 8
[  544.993126][ T4382] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.011211][ T4382] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  545.034503][ T4382] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  546.115118][ T4638] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  546.161766][ T4382] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.189489][ T4382] usb 7-1: config 0 descriptor??
[  546.448224][ T4638] usb 8-1: Using ep0 maxpacket: 32
[  546.484022][ T4382] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  546.638351][ T4638] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  546.646477][ T4638] usb 8-1: config 0 has no interface number 0
[  546.690304][ T4520] usb 7-1: USB disconnect, device number 7
[  547.712961][ T4638] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  547.725610][ T4638] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.739006][ T4638] usb 8-1: Product: syz
[  547.743710][ T4638] usb 8-1: Manufacturer: syz
[  547.748778][ T4638] usb 8-1: SerialNumber: syz
[  547.755374][ T4638] usb 8-1: config 0 descriptor??
[  547.769410][T11598] loop6: detected capacity change from 0 to 512
[  547.778689][ T4638] usb 8-1: can't set config #0, error -71
[  547.802603][ T4638] usb 8-1: USB disconnect, device number 10
[  547.868390][ T4637] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  547.877684][T11598] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback.
[  547.878987][T11600] loop0: detected capacity change from 0 to 2048
[  547.904289][T11598] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  547.975743][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'.
[  547.985955][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1694'.
[  547.990483][ T4185]  loop0: p2 < > p4
[  547.994924][T11609] netlink: 'syz.3.1694': attribute type 1 has an invalid length.
[  548.008414][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'.
[  548.025921][ T4185] loop0: p4 size 8192 extends beyond EOD, truncated
[  548.032779][   T26] audit: type=1800 audit(1731837074.711:69): pid=11598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1689" name="file1" dev="loop6" ino=15 res=0 errno=0
[  548.128708][T11600]  loop0: p2 < > p4
[  548.143090][T11600] loop0: p4 size 8192 extends beyond EOD, truncated
[  548.335624][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  548.354162][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  548.464981][ T4637] usb 6-1: config 0 has no interfaces?
[  548.493814][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  548.509715][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  551.338229][ T4637] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  551.374128][ T4637] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  551.421638][ T4637] usb 6-1: config 0 descriptor??
[  551.446462][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  551.456637][ T4637] usb 6-1: can't set config #0, error -71
[  551.470228][ T4637] usb 6-1: USB disconnect, device number 9
[  552.742989][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'.
[  552.811139][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'.
[  552.820437][T11641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1702'.
[  552.894342][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'.
[  553.191412][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'.
[  553.376617][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1704'.
[  553.867549][T11660] loop6: detected capacity change from 0 to 2048
[  553.953487][T11660]  loop6: p2 < > p4
[  553.972669][T11660] loop6: p4 size 8192 extends beyond EOD, truncated
[  554.238337][ T4636] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  554.524389][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1713'.
[  554.583339][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1713'.
[  554.625074][T11670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1713'.
[  554.660418][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'.
[  554.687677][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'.
[  554.731014][T11678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1714'.
[  554.767657][ T4636] usb 8-1: config 0 has no interfaces?
[  554.848469][ T4636] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  554.877229][ T4636] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  555.665194][ T4636] usb 8-1: SerialNumber: syz
[  555.941926][ T4636] usb 8-1: config 0 descriptor??
[  557.796808][ T4637] usb 8-1: USB disconnect, device number 11
[  558.111301][ T3545]  loop6: p2 < > p4
[  558.116630][ T3545] loop6: p4 size 8192 extends beyond EOD, truncated
[  558.255416][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1725'.
[  558.308172][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1725'.
[  558.361085][T11706] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1725'.
[  560.355761][T11736] fuse: Unknown parameter 'group_id00000000000000000000'
[  561.993920][T11753] loop5: detected capacity change from 0 to 256
[  563.237557][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  563.243934][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  567.266357][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'.
[  567.766413][T11782] loop5: detected capacity change from 0 to 256
[  567.818828][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'.
[  567.868072][T11777] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1748'.
[  568.157632][T11784] loop0: detected capacity change from 0 to 256
[  568.603873][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1745'.
[  570.089379][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1745'.
[  570.295094][T11786] nbd: socks must be embedded in a SOCK_ITEM attr
[  570.339176][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1747'.
[  571.050826][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1747'.
[  571.060093][T11795] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1747'.
[  571.349999][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  571.389909][T11809] loop5: detected capacity change from 0 to 256
[  571.708544][ T4520] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  572.848255][ T4520] usb 8-1: config 0 has no interfaces?
[  572.900973][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  572.958315][ T4520] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  572.985580][ T4520] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  573.047289][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  573.077614][ T4520] usb 8-1: SerialNumber: syz
[  573.088775][ T4520] usb 8-1: config 0 descriptor??
[  573.129228][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  573.331778][ T4263] usb 8-1: USB disconnect, device number 12
[  573.346894][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1758'.
[  573.529314][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1758'.
[  573.538316][T11822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1758'.
[  573.740626][T11799] loop6: detected capacity change from 0 to 40427
[  573.817441][T11799] F2FS-fs (loop6): invalid crc value
[  573.868387][ T4393] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  573.899400][T11799] F2FS-fs (loop6): Found nat_bits in checkpoint
[  574.091919][T11799] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0
[  574.108053][ T4393] usb 4-1: Using ep0 maxpacket: 32
[  574.228249][ T4393] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  574.255948][ T4393] usb 4-1: config 0 has no interface number 0
[  575.988533][ T4393] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  576.045765][ T4393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.328567][ T4393] usb 4-1: Product: syz
[  576.332791][ T4393] usb 4-1: Manufacturer: syz
[  576.337404][ T4393] usb 4-1: SerialNumber: syz
[  577.677853][T11866] loop6: detected capacity change from 0 to 256
[  577.758992][ T4393] usb 4-1: config 0 descriptor??
[  577.778299][ T4393] usb 4-1: can't set config #0, error -71
[  577.804805][ T4393] usb 4-1: USB disconnect, device number 17
[  578.938121][ T4393] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  578.978598][T11872] loop5: detected capacity change from 0 to 256
[  578.986509][T11870] loop0: detected capacity change from 0 to 256
[  579.059601][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1777'.
[  580.486382][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1777'.
[  580.604445][T11874] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1777'.
[  580.658079][ T4185] block nbd0: NBD_DISCONNECT
[  580.766443][T11886] loop6: detected capacity change from 0 to 256
[  580.798082][ T4393] usb 4-1: device descriptor read/all, error -71
[  581.111327][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1782'.
[  581.952651][T11897] loop5: detected capacity change from 0 to 256
[  581.988832][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'.
[  581.997811][T11893] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1782'.
[  583.248106][ T4520] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  583.958112][ T4520] usb 7-1: Using ep0 maxpacket: 32
[  584.078667][ T4520] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  584.087689][ T4520] usb 7-1: config 0 has no interface number 0
[  584.248552][ T4637] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  584.290827][ T4520] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  584.315322][ T4520] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.341627][ T4520] usb 7-1: Product: syz
[  584.356212][ T4520] usb 7-1: Manufacturer: syz
[  584.362388][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1791'.
[  584.377976][ T4520] usb 7-1: SerialNumber: syz
[  584.392191][T11914] loop0: detected capacity change from 0 to 256
[  584.410797][ T4520] usb 7-1: config 0 descriptor??
[  584.477194][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1791'.
[  584.486590][ T4637] usb 4-1: device descriptor read/64, error -71
[  584.494036][ T4520] smsc95xx v2.0.0
[  584.513404][T11916] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1791'.
[  584.828256][ T4637] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  587.056789][ T4520] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  587.073638][ T4520] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  587.078213][ T4244] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  587.098105][ T4520] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  587.119948][ T4520] smsc95xx: probe of 7-1:0.67 failed with error -71
[  587.344707][ T4520] usb 7-1: USB disconnect, device number 8
[  590.198111][ T4244] usb 6-1: device descriptor read/all, error -71
[  591.317330][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1805'.
[  591.373507][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1805'.
[  591.383115][T11961] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1805'.
[  591.393032][T11819] block nbd0: NBD_DISCONNECT
[  591.595574][T11966] loop0: detected capacity change from 0 to 512
[  591.788157][ T4263] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  591.809795][T11966] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback.
[  591.830480][T11966] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  591.868220][ T4637] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  591.887101][   T26] audit: type=1800 audit(1731837118.571:70): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1803" name="file1" dev="loop0" ino=15 res=0 errno=0
[  591.887805][T11966] ------------[ cut here ]------------
[  591.913080][T11966] WARNING: CPU: 1 PID: 11966 at kernel/locking/lockdep.c:896 look_up_lock_class+0xa0/0x120
[  591.923179][T11966] Modules linked in:
[  591.927082][T11966] CPU: 1 PID: 11966 Comm: syz.0.1803 Not tainted 5.15.172-syzkaller #0
[  591.927997][   T26] audit: type=1800 audit(1731837118.571:71): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1803" name="file2" dev="loop0" ino=16 res=0 errno=0
[  591.935323][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  591.935343][T11966] RIP: 0010:look_up_lock_class+0xa0/0x120
[  591.971580][T11966] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 3f 2d 90 49 39 06 74 2a <0f> 0b eb 26 e8 87 c1 d1 f9 48 c7 c7 80 4b 8b 8a 89 de e8 69 cf fe
[  591.991213][T11966] RSP: 0018:ffffc9000158f510 EFLAGS: 00010006
[  591.997302][T11966] RAX: ffffffff902d3fc0 RBX: ffffffff9014ddc0 RCX: ffff88805c781dc0
[  592.005301][T11966] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff88806212e628
[  592.013305][T11966] RBP: ffffc9000158f610 R08: 0000000000000001 R09: 0000000000000000
[  592.021299][T11966] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  592.028131][ T4263] usb 7-1: Using ep0 maxpacket: 32
[  592.029286][T11966] R13: 1ffff920002b1eb0 R14: ffff88806212e628 R15: ffffffff96992c81
[  592.042358][T11966] FS:  00007fe5b556d6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  592.051307][T11966] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  592.057911][T11966] CR2: 0000000000000000 CR3: 0000000062db6000 CR4: 00000000003506e0
[  592.065914][T11966] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  592.074032][T11966] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  592.082024][T11966] Call Trace:
[  592.085313][T11966]  <TASK>
[  592.088261][T11966]  ? __warn+0x15b/0x300
[  592.092438][T11966]  ? look_up_lock_class+0xa0/0x120
[  592.097567][T11966]  ? report_bug+0x1b7/0x2e0
[  592.102098][T11966]  ? handle_bug+0x3d/0x70
[  592.106540][T11966]  ? exc_invalid_op+0x16/0x40
[  592.111240][T11966]  ? asm_exc_invalid_op+0x16/0x20
[  592.116303][T11966]  ? look_up_lock_class+0xa0/0x120
[  592.121452][T11966]  register_lock_class+0x100/0x9a0
[  592.126580][T11966]  ? reacquire_held_locks+0x660/0x660
[  592.131971][T11966]  ? is_dynamic_key+0x1f0/0x1f0
[  592.136836][T11966]  ? mark_lock+0x98/0x340
[  592.141190][T11966]  __lock_acquire+0xd7/0x1ff0
[  592.145894][T11966]  lock_acquire+0x1db/0x4f0
[  592.150413][T11966]  ? ext4_move_extents+0x3a1/0xe50
[  592.155551][T11966]  ? read_lock_is_recursive+0x10/0x10
[  592.160940][T11966]  ? __might_sleep+0xc0/0xc0
[  592.165547][T11966]  ? rwsem_write_trylock+0x166/0x210
[  592.170855][T11966]  ? inode_owner_or_capable+0x210/0x210
[  592.176421][T11966]  ? clear_nonspinnable+0x60/0x60
[  592.181472][T11966]  down_write_nested+0x3b/0x60
[  592.186256][T11966]  ? ext4_move_extents+0x3a1/0xe50
[  592.191403][T11966]  ext4_move_extents+0x3a1/0xe50
[  592.196369][T11966]  ? rcu_read_lock_any_held+0xb3/0x160
[  592.201848][T11966]  ? ext4_double_up_write_data_sem+0x30/0x30
[  592.207849][T11966]  ? __fget_files+0x413/0x480
[  592.212554][T11966]  ext4_ioctl+0x2fcb/0x5b80
[  592.217083][T11966]  ? do_vfs_ioctl+0x1b66/0x2b70
[  592.221955][T11966]  ? ext4_fileattr_set+0x1750/0x1750
[  592.227257][T11966]  ? __x64_compat_sys_ioctl+0x80/0x80
[  592.232660][T11966]  ? __lock_acquire+0x1ff0/0x1ff0
[  592.237709][T11966]  ? slab_free_freelist_hook+0xdd/0x160
[  592.243283][T11966]  ? tomoyo_path_number_perm+0x648/0x810
[  592.248944][T11966]  ? kfree+0xf1/0x270
[  592.252950][T11966]  ? tomoyo_path_number_perm+0x6ab/0x810
[  592.258606][T11966]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  592.264108][T11966]  ? __fget_files+0x413/0x480
[  592.268807][T11966]  ? bpf_lsm_file_ioctl+0x5/0x10
[  592.273766][T11966]  ? security_file_ioctl+0x7d/0xa0
[  592.278893][T11966]  ? ext4_fileattr_set+0x1750/0x1750
[  592.284198][T11966]  __se_sys_ioctl+0xf1/0x160
[  592.288815][T11966]  do_syscall_64+0x3b/0xb0
[  592.293261][T11966]  ? clear_bhb_loop+0x15/0x70
[  592.298050][T11966]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  592.303973][T11966] RIP: 0033:0x7fe5b70f5719
[  592.308413][T11966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.328041][T11966] RSP: 002b:00007fe5b556d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  592.336483][T11966] RAX: ffffffffffffffda RBX: 00007fe5b72acf80 RCX: 00007fe5b70f5719
[  592.344478][T11966] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 0000000000000005
[  592.352473][T11966] RBP: 00007fe5b716875e R08: 0000000000000000 R09: 0000000000000000
[  592.360476][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.368467][T11966] R13: 0000000000000000 R14: 00007fe5b72acf80 R15: 00007ffd75541ed8
[  592.376470][T11966]  </TASK>
[  592.379530][T11966] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  592.386815][T11966] CPU: 1 PID: 11966 Comm: syz.0.1803 Not tainted 5.15.172-syzkaller #0
[  592.395070][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  592.405139][T11966] Call Trace:
[  592.408430][T11966]  <TASK>
[  592.411368][T11966]  dump_stack_lvl+0x1e3/0x2d0
[  592.416062][T11966]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  592.421714][T11966]  ? panic+0x860/0x860
[  592.425805][T11966]  ? look_up_lock_class+0x50/0x120
[  592.430934][T11966]  ? look_up_lock_class+0x50/0x120
[  592.436064][T11966]  panic+0x318/0x860
[  592.439978][T11966]  ? __warn+0x16a/0x300
[  592.444152][T11966]  ? fb_is_primary_device+0xd0/0xd0
[  592.449380][T11966]  ? look_up_lock_class+0xa0/0x120
[  592.454515][T11966]  __warn+0x2b2/0x300
[  592.458521][T11966]  ? look_up_lock_class+0xa0/0x120
[  592.463653][T11966]  report_bug+0x1b7/0x2e0
[  592.468003][T11966]  handle_bug+0x3d/0x70
[  592.472174][T11966]  exc_invalid_op+0x16/0x40
[  592.476696][T11966]  asm_exc_invalid_op+0x16/0x20
[  592.481564][T11966] RIP: 0010:look_up_lock_class+0xa0/0x120
[  592.487309][T11966] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 3f 2d 90 49 39 06 74 2a <0f> 0b eb 26 e8 87 c1 d1 f9 48 c7 c7 80 4b 8b 8a 89 de e8 69 cf fe
[  592.506935][T11966] RSP: 0018:ffffc9000158f510 EFLAGS: 00010006
[  592.513026][T11966] RAX: ffffffff902d3fc0 RBX: ffffffff9014ddc0 RCX: ffff88805c781dc0
[  592.521018][T11966] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff88806212e628
[  592.529015][T11966] RBP: ffffc9000158f610 R08: 0000000000000001 R09: 0000000000000000
[  592.537003][T11966] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  592.544989][T11966] R13: 1ffff920002b1eb0 R14: ffff88806212e628 R15: ffffffff96992c81
[  592.552993][T11966]  register_lock_class+0x100/0x9a0
[  592.558130][T11966]  ? reacquire_held_locks+0x660/0x660
[  592.563526][T11966]  ? is_dynamic_key+0x1f0/0x1f0
[  592.568398][T11966]  ? mark_lock+0x98/0x340
[  592.572746][T11966]  __lock_acquire+0xd7/0x1ff0
[  592.577446][T11966]  lock_acquire+0x1db/0x4f0
[  592.581976][T11966]  ? ext4_move_extents+0x3a1/0xe50
[  592.587108][T11966]  ? read_lock_is_recursive+0x10/0x10
[  592.592500][T11966]  ? __might_sleep+0xc0/0xc0
[  592.597101][T11966]  ? rwsem_write_trylock+0x166/0x210
[  592.602404][T11966]  ? inode_owner_or_capable+0x210/0x210
[  592.607964][T11966]  ? clear_nonspinnable+0x60/0x60
[  592.613004][T11966]  down_write_nested+0x3b/0x60
[  592.617799][T11966]  ? ext4_move_extents+0x3a1/0xe50
[  592.622926][T11966]  ext4_move_extents+0x3a1/0xe50
[  592.627886][T11966]  ? rcu_read_lock_any_held+0xb3/0x160
[  592.633359][T11966]  ? ext4_double_up_write_data_sem+0x30/0x30
[  592.639355][T11966]  ? __fget_files+0x413/0x480
[  592.644051][T11966]  ext4_ioctl+0x2fcb/0x5b80
[  592.648570][T11966]  ? do_vfs_ioctl+0x1b66/0x2b70
[  592.653434][T11966]  ? ext4_fileattr_set+0x1750/0x1750
[  592.658738][T11966]  ? __x64_compat_sys_ioctl+0x80/0x80
[  592.664128][T11966]  ? __lock_acquire+0x1ff0/0x1ff0
[  592.669162][T11966]  ? slab_free_freelist_hook+0xdd/0x160
[  592.674728][T11966]  ? tomoyo_path_number_perm+0x648/0x810
[  592.680380][T11966]  ? kfree+0xf1/0x270
[  592.684379][T11966]  ? tomoyo_path_number_perm+0x6ab/0x810
[  592.690036][T11966]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  592.695544][T11966]  ? __fget_files+0x413/0x480
[  592.700242][T11966]  ? bpf_lsm_file_ioctl+0x5/0x10
[  592.705198][T11966]  ? security_file_ioctl+0x7d/0xa0
[  592.710323][T11966]  ? ext4_fileattr_set+0x1750/0x1750
[  592.715625][T11966]  __se_sys_ioctl+0xf1/0x160
[  592.720232][T11966]  do_syscall_64+0x3b/0xb0
[  592.724665][T11966]  ? clear_bhb_loop+0x15/0x70
[  592.729371][T11966]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  592.735292][T11966] RIP: 0033:0x7fe5b70f5719
[  592.739718][T11966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.759335][T11966] RSP: 002b:00007fe5b556d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  592.767774][T11966] RAX: ffffffffffffffda RBX: 00007fe5b72acf80 RCX: 00007fe5b70f5719
[  592.775759][T11966] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 0000000000000005
[  592.783742][T11966] RBP: 00007fe5b716875e R08: 0000000000000000 R09: 0000000000000000
[  592.791727][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.799717][T11966] R13: 0000000000000000 R14: 00007fe5b72acf80 R15: 00007ffd75541ed8
[  592.807708][T11966]  </TASK>
[  592.811064][T11966] Kernel Offset: disabled
[  592.815395][T11966] Rebooting in 86400 seconds..